Wireless Access

Hi,

 

I am trying to create a new AAA Profile that I can assign a role to that will restrict certain traffic but when I try to add the role to the AAA Profile I get the error: Error: Role 'Role' is Unknown.  The role is most certainly not unknown as the controller says, it's just being stubborn and not adding it to the aaa profile.  It doesn't matter if I do this on the CLI or the GUI, and in fact in the GUI the role I want is listed in the drop down just like all the other roles that are configured. 

 

This is an existing controller that has been in service for a very long time, and it has many other roles on it for various purposes.  It is licensed for PEFNG and has ample available licenses.

 

Does anyone have any insight as to why my controller is being so disagreeable?

 

Thanks!

What's controller role ?
Master , standby , local?

Can you see the role listed if you run the show rights command ?



Sent from Outlook for iPhone

Hi Victor,

 

The controller role is Master and it has a number of locals under it. It is also a license server.

 

I can indeed see the role in "show rights". 

Can you try creating another role and then adding it to that aaa profile ?

Or can you try adding another role to the aaa profile ?

The other thing you can try is to recreate the aaa profile and then try adding the role again.

Make sure to do a write mem / save configuration (not required to assign a role but just in case)

Sent from Outlook for iPhone

I have tried creatng another role and adding it. Same problem. I am however able to add other roles that existed prior to me attempting this new action.  Older roles seem to work fine.  I have also tried creating a different AAA profile and I get the same error when adding my new role.

 

I have also done a wr mem at every step and it had no effect.

Hi, 

 

 

Did you restore the flash anytime on this controller? Check the output of, 

#show profile-errors 

#show rights 

#show license 

 

Thanks, 

Rajaguru Vincent 

Hi Vincent,

 

Nope, the flash hasn't been restored ever as far as I know. 

 

Show profile-errors only has one item related to a VLAN and is known.

show rights does list the role in question

show license tells me I have many PEFNG liceses installed, and show license server-table tells me I have a couple hundred PEFNG licenses available.

If that doesn't work I suggest you open an Aruba TAC case

Sent from Outlook for iPhone

That is a good reason to open a TAC case as said above. 

 

Thanks, 

Rajaguru Vincent