Wireless Access

last person joined: 17 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Enforce DHCP Monitoring

This thread has been viewed 3 times

  • 1.  Enforce DHCP Monitoring

    Posted May 28, 2014 11:26 AM

    We will be rolling out enforce DHCP for all AAA profiles, but I have questions about monitoring.  It seems that 2 log messages are associated with packets being dropped because IP was not obtained through DHCP:

     

    May 28 10:11:05 authmgr[3524]: <522026> <INFO> |authmgr| MAC="MAC" IP="IP" User miss: ingress=0x1001c, VLAN=598 flags=0x40

     

    May 27 15:04:44 authmgr[3524]: <522141> <DBUG> |authmgr| "MAC" IP "IP": drop pkt as ip not assigned through dhcp.

     

    Where "MAC" and "IP" are placeholders for legitimate values.

     

    In order to produce the debug mssg I have to enable “logging level debugging user process authmgr” which includes many additional mssgs not require in our environment.  Both logs create a line for each dropped packet - excessive for our needs.

     

    Is there a way to monitor or flag clients which are in violation of the enforce DHCP policy without creating thousands of log mssgs?  Is there a suppressible trigger in AirWave?

     

    Thanks,

     

    Tony



  • 2.  RE: Enforce DHCP Monitoring

    Posted May 29, 2014 11:18 AM
    have you tried
    logging level debugging user process dhcpd

    and

    logging level debugging network subcat dhcp

    maybe these can help.


  • 3.  RE: Enforce DHCP Monitoring

    Posted May 30, 2014 10:23 AM

    I did try both logging levels suggested, but I did not notice any related log messages.  I am not running DHCP on the controller.