Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Establish Internetconnection for Meridian Usage with Web Proxy

This thread has been viewed 0 times
  • 1.  Establish Internetconnection for Meridian Usage with Web Proxy

    Posted Mar 02, 2018 07:47 AM

    Hi,

     

    We want to test the Meridian Asset Tag features.

    For that the Aruba Controller needs connection to the Meridian Portal over wss (web socket).

    We don't have direct access to the Internet. We have to use the companies proxy.

    We tried to configure the Web Proxy settings under Configuration-->IP-->IP Routes & DNS but it seems that no connection will be established.

     

    Is it possible way for Internet connection or is there something we missed?

     



  • 2.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    MVP EXPERT
    Posted Mar 02, 2018 08:37 AM

    Hey, you should be able to do this the same way you are doing it now, via the Web Proxy settings. Is the WLC able to reach the Web Proxy? Do you see the traffic arriving at the Web Proxy? If you are using a Server name, make sure your DNS is working and you can resolve the server name to the IP address.

     

    (host)(config) #web-proxy server arubaproxy.com port 8080 

     



  • 3.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    Posted Mar 02, 2018 09:42 AM

    We use the IP of the proxy. So no need for DNS.

    We made a pcap on our overlying firewall and see no traffic from the controller to the proxy.

    Unfortunately we have no access on the proxy.

     

    Is there a chance to check what is happening on the controller site?

    Can we check if the controller tries to do anything?



  • 4.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    MVP EXPERT
    Posted Mar 02, 2018 09:48 AM

    You might be able to see some information in the datapath session table:

     

    #show datapath session | include [IP OF PROXY]

    If the traffic to the proxy has a Y flag, this will indicate the 3-way handshake isn't occurring.



  • 5.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    Posted Mar 02, 2018 10:03 AM

    I got a lot of F, C, A Flags



  • 6.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    MVP EXPERT
    Posted Mar 02, 2018 10:10 AM

    See if you can check the proxy for any errors there next.



  • 7.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    Posted Mar 07, 2018 04:48 AM

    Unfortunately I have no access to the Proxy.



  • 8.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    MVP EXPERT
    Posted Mar 07, 2018 05:00 AM

    Then at the moment all we can do is guess :) If the Proxy is blocking the traffic we will never know. 



  • 9.  RE: Establish Internetconnection for Meridian Usage with Web Proxy

    Posted Apr 30, 2018 01:46 AM

    Hi,

    I just got the information from Aruba Support, that Meridian traffic over proxy is slated for AOS 8.4 in July.

    As we are only allowed to use companies proxy maybe there is a workaround:

    Does anyone know if it's possible to configure a static route on the wifi controller that sends Meridian traffic to a raspberry acting as gateway that then redirect traffic to our company proxy via iptables?

    I found some promising examples but they all redirect traffic using iptables without authentication to the proxy. Our proxy requires autehtication.