Wireless Access

Reply
Contributor II
Posts: 58
Registered: ‎05-12-2009

Intermittent Guest Connectivity Issue

Users have been experiencing issues with maintaining connectivity when using the guest network.  They are directed to the captive portal and authenticate fine.  Once the user authenticates they browse the web and can ping internet IP's without issue.  Suddenly after working fine for 20-40 minutes they can't access the internet or ping any internet IP's.  When this occurs they are still connected to the SSID and all appears normal.  I experienced something similar on our corporate SSID and resolved it by removing the layer 3 IP on the controller for the VLAN because it already had a layer 3 ip used as a gateway on an upstream switch.  I cannot do the same for guest because it requires L3 for cp redirect to work.  I am not sure that is even the issue.  Has anyone had any similar experiences?

 

Thanks

Aruba Employee
Posts: 509
Registered: ‎07-03-2008

Re: Intermittent Guest Connectivity Issue

I have not seen that in my guest network.  What role do you see those users in after that 20-30 minutes and they stop working properly?  Is it the authenticated role, the non-authenticated role, or something else?

Contributor II
Posts: 58
Registered: ‎05-12-2009

Re: Intermittent Guest Connectivity Issue

The appear to be in the same role as when they were functioning.  I am lookig at my config and see that this VAP does have broadcast-filter all and broadcast-filter arp applied.  I notice my other VAP's do not.  I do not recall what these commands were used for, any input on what the filters accomplish?

 

 

 

wlan virtual-ap "SDX-GUEST-vap-profile"
aaa-profile "SDX-GUEST-aaa-profile"
ssid-profile "SDX-GUEST-ssid-profile"
vlan 404
broadcast-filter all
broadcast-filter arp

Aruba Employee
Posts: 117
Registered: ‎09-21-2010

Re: Intermittent Guest Connectivity Issue

  • drop-broadcast all drops all broadcast / multicast traffic on a VAP except for DHCP broadcasts.
  • drop-broadcast arp converts the ARP request to unicast ARP request (on that VAP) if the target IP/mac are part of user table and station table.

I don't see these Knobs causing the issue your encountering.

 

Regards,

Sathya

Contributor II
Posts: 58
Registered: ‎05-12-2009

Re: Intermittent Guest Connectivity Issue

It appears it may be related to inactivity leading to authentication timeout.  The issue is it is not graceful.  The user still appears in the user-table in the authenticated role however they need to disconnect from the SSID and open a web browser again to be directed to the CP for authentication.  This appears only to happen after the laptop is left idle.  It seems like the controller should change the user role accordingly.  Can anyone weigh in on how their guest network handles this?

 

Thanks

Search Airheads
Showing results for 
Search instead for 
Did you mean: