Wireless Access

last person joined: 5 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Intermittent Guest Connectivity Issue

This thread has been viewed 2 times

  • 1.  Intermittent Guest Connectivity Issue

    Posted May 01, 2012 03:14 PM

    Users have been experiencing issues with maintaining connectivity when using the guest network.  They are directed to the captive portal and authenticate fine.  Once the user authenticates they browse the web and can ping internet IP's without issue.  Suddenly after working fine for 20-40 minutes they can't access the internet or ping any internet IP's.  When this occurs they are still connected to the SSID and all appears normal.  I experienced something similar on our corporate SSID and resolved it by removing the layer 3 IP on the controller for the VLAN because it already had a layer 3 ip used as a gateway on an upstream switch.  I cannot do the same for guest because it requires L3 for cp redirect to work.  I am not sure that is even the issue.  Has anyone had any similar experiences?

     

    Thanks



  • 2.  RE: Intermittent Guest Connectivity Issue

    Posted May 01, 2012 03:44 PM

    I have not seen that in my guest network.  What role do you see those users in after that 20-30 minutes and they stop working properly?  Is it the authenticated role, the non-authenticated role, or something else?



  • 3.  RE: Intermittent Guest Connectivity Issue

    Posted May 01, 2012 06:03 PM

    The appear to be in the same role as when they were functioning.  I am lookig at my config and see that this VAP does have broadcast-filter all and broadcast-filter arp applied.  I notice my other VAP's do not.  I do not recall what these commands were used for, any input on what the filters accomplish?

     

     

     

    wlan virtual-ap "SDX-GUEST-vap-profile"
    aaa-profile "SDX-GUEST-aaa-profile"
    ssid-profile "SDX-GUEST-ssid-profile"
    vlan 404
    broadcast-filter all
    broadcast-filter arp



  • 4.  RE: Intermittent Guest Connectivity Issue

    Posted May 01, 2012 08:06 PM
    • drop-broadcast all drops all broadcast / multicast traffic on a VAP except for DHCP broadcasts.
    • drop-broadcast arp converts the ARP request to unicast ARP request (on that VAP) if the target IP/mac are part of user table and station table.

    I don't see these Knobs causing the issue your encountering.

     

    Regards,

    Sathya



  • 5.  RE: Intermittent Guest Connectivity Issue

    Posted May 02, 2012 11:35 AM

    It appears it may be related to inactivity leading to authentication timeout.  The issue is it is not graceful.  The user still appears in the user-table in the authenticated role however they need to disconnect from the SSID and open a web browser again to be directed to the CP for authentication.  This appears only to happen after the laptop is left idle.  It seems like the controller should change the user role accordingly.  Can anyone weigh in on how their guest network handles this?

     

    Thanks