Wireless Access

Reply
Occasional Contributor II

IAP103 - No Internet for clients connected to guest SSID

Good day,

as the title says, last week I installed a IAP103 to a customer (upgraded to the latest firmware 6.5.3.1), and configured two SSIDs: the one with DHCP managed by the network works fine, despite the guest SSID with IP assigned by virtual controller doesn't allow Internet to be accessed.

Clients connect correctly, the IP is assigned (172.31.99.x) but on different smartphones the saeìme message "no Internet" appears.

I tried both with no restrictions and also allowing only dhcp and dns services, but it's still the same.

I tried adding another guest network, with no success.

Any suggestion?

Thanks in advance.

 

Alain

Guru Elite

Re: IAP103 - No Internet for clients connected to guest SSID

Network traffic for guests that are on a Virtual Controller assigned VLAN would be natted out of the ip address of the Master Virtual Controller.  If the ip address of that master controller does not have permission on your external firewall to go to the internet, your guests will not have any connectivity..



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: IAP103 - No Internet for clients connected to guest SSID

I already allowed the only ap to access the internet.

Alain Pasquali - SISTEC S.r.l

________________________________

Hai bisogno di assistenza tecnica?

Registrati ed accedi al portale helpdesk.sistec.net oppure invia una mail a helpdesk@sistec.net
Per l'assistenza remota, utilizza Teamviewer scaricandolo dal seguente indirizzo: https://get.teamviewer.com/rw6pa5h

________________________________

--
Questo messaggio e' stato analizzato da Libra ESVA ed e' risultato non infetto.
This message was scanned by Libra ESVA and is believed to be clean.
Per informazioni: http://helpdesk.sistec.net
Guru Elite

Re: IAP103 - No Internet for clients connected to guest SSID

You should do a trace on your firewall to see if you see traffic from that IAP.  If you have configured a Virtual IP address, that would be the address the traffic is coming from..



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: IAP103 - No Internet for clients connected to guest SSID

Thank you, I'm going to try in a few minutes.

Alain Pasquali - SISTEC S.r.l

________________________________

Hai bisogno di assistenza tecnica?

Registrati ed accedi al portale helpdesk.sistec.net oppure invia una mail a helpdesk@sistec.net
Per l'assistenza remota, utilizza Teamviewer scaricandolo dal seguente indirizzo: https://get.teamviewer.com/rw6pa5h

________________________________

--
Questo messaggio e' stato analizzato da Libra ESVA ed e' risultato non infetto.
This message was scanned by Libra ESVA and is believed to be clean.
Per informazioni: http://helpdesk.sistec.net
Occasional Contributor II

Re: IAP103 - No Internet for clients connected to guest SSID

Hi,

yesterday I wasn’t able to do the trace on the firewall, but I can tell you that only guest network (with addresses assigned by the virtual controller) aren’t able to access the Internet.

It seems that the firewall (router, is an old Funkwerk R3000) doesn’t let the guest network pass, even if it arrives “natted” by the virtual controller.

Any suggestion?

Thanks

Occasional Contributor II

Re: IAP103 - No Internet for clients connected to guest SSID

Hi,

I just collected a trace of the firewall's traffic with a client connected to the guest network, and looking at it with Wireshark I wasn't able to find anything related to the virtual controller's IP.

 

Guru Elite

Re: IAP103 - No Internet for clients connected to guest SSID


pasky wrote:

Good day,

as the title says, last week I installed a IAP103 to a customer (upgraded to the latest firmware 6.5.3.1), and configured two SSIDs: the one with DHCP managed by the network works fine, despite the guest SSID with IP assigned by virtual controller doesn't allow Internet to be accessed.

Clients connect correctly, the IP is assigned (172.31.99.x) but on different smartphones the saeìme message "no Internet" appears.

I tried both with no restrictions and also allowing only dhcp and dns services, but it's still the same.

I tried adding another guest network, with no success.

Any suggestion?

Thanks in advance.

 

Alain


Is this only a single IAP or multiple IAPs?  Can you share the SSID configuration for the guest SSID?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: IAP103 - No Internet for clients connected to guest SSID

There is only one IAP installed in the environment.

The guest SSID network is configured with:

- no start page

- WPA2-PSK

- Virtual Controller-managed DHCP

Access rules are configured as follows:

1) DNS, DHCP access granted to any destination

2) traffic to LAN denied

3) traffic to any granted

 

Guru Elite

Re: IAP103 - No Internet for clients connected to guest SSID

I see in your first post that you also tried it with no restrictions.  When you try that, can you ping anywhere outside of the IAP?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: