Wireless Access

Reply
Occasional Contributor I
Posts: 6
Registered: ‎08-21-2013

IAP-105 VLAN issue

Having issues with a guest WiFi network on a second VLAN (150), this started after a firmware update and I cannot figure this out; I'm thinking there is a bug.  We have 5 IAP-105 devices plugged into 2 HP switches.  Both switches are trunked allowing all vlans, APs are plugged into trunked ports as well.  Our router is a juniper SRX, with a guest VLAN #150.

 

SRX Gateway: 192.168.10.1  (this is the DHCP server)

Switch#1 vlan interface: 192.168.10.5

Switch#2 vlan interface: 192.168.10.6

 

Client joins and obtains 192.168.10.120

 

Both switches can ping each other, as well as the gateway.  Gateway can ping switches.  The switches can also ping a wireless client joined to the guest network, as well as the guest ping the switches.

 

Here is where things get wierd.  The client obtains a DHCP address from the gateway, but can not ping it or make external DNS queries.  The gateway can't ping the client either.  If I hardwire a laptop into the switch on vlan 150 I can ping the gateway as well as the switches and browse the internet.  It's odd.

 

Previous version: 6.1.3.0-3.0.0

Current version: 6.2.1.0-3.3.0.2

 

Any ideas would be great!  Thanks in advance.

Guru Elite
Posts: 20,811
Registered: ‎03-29-2007

Re: IAP-105 VLAN issue

Do you have your guest users in a role that is blocking that type of traffic?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 6
Registered: ‎08-21-2013

Re: IAP-105 VLAN issue

[ Edited ]

Not that I see.  It's another "Employee" network type set to unrestricted.  I have tried resetting to factory defaults to clear the problem, but no luck.  This started after the firmware upgrade which is wierd, I have no way of rolling back to the old version unless I can find the image somewhere.

 

Sorry, I am new to the Aruba gear.

Occasional Contributor I
Posts: 6
Registered: ‎08-21-2013

Re: IAP-105 VLAN issue

With a laptop connected wirelessly, I am able to ping the SRX gateway and browse the internet if I manually add a static ARP entry for the juniper on the laptop.

 

Once I remove the ARP entry, communication stops.

Search Airheads
Showing results for 
Search instead for 
Did you mean: