Wireless Access

Reply
Occasional Contributor II

Motorola MC9200 in different Wifi environments

Hi everybody,

 

We are just in a migration process where we switch from Juniper to Aruba. We are not able to switch all APs at the same time so we have to make it step by step....

So we have Juniper APs and Aruba APs in one buliding.

Unfortunately we have some problems when Motorola MC9200 Clients move between these different infrastructures.

 

Vlan is bound to the SSID on both systems.

Vlans are the same.

 

Scenario 1:

1. Motorola Client connects with Juniper AP

2. Motorola Client moves from Juniper AP to Aruba AP -->Client connects but no IP-Adresss

 

Scenario 2:

1. Reboot Motorola Client and connecting with Aruba AP -->no problem

2. After initial connection with Aruba AP, Motorola Client moves to Juniper AP -->no problem

3. Motorola Client moves again from Juniper AP to Aruba AP -->Client connects but no IP-Adresss

 

At the moment we have no idea whats going on?

 

Do you have any ideas?

Frequent Contributor I

Re: Motorola MC9200 in different Wifi environments

1. Do you have "Enforce DHCP" defined in the triple AAA profile for that SSID? 2. Do you know what driver version the MC9200 scanner is running? We were in a similar situation couple years ago and the original factory driver was highly unstable - didn't like moving between Meru to Aruba - even while staying on an Aruba - the adapter would eventually crash to point it couldn't be seen without a reboot. We updated the driver and that solved several issues including support for SHA-2 certificates.


#AirheadsMobile
Occasional Contributor II

Re: Motorola MC9200 in different Wifi environments

No, we didn't activat the DHCP enforce option because we also have clients which use static ip's.

 

The driver of the Wifi Adapter is:

Driver: X_2.03.0.0.17

Firmware: X_2.03.0.0.17

 

 

Guru Elite

Re: Motorola MC9200 in different Wifi environments

RR86,

 

I would try enabling "FDB Update on Assoc" in the Virtual AP profile on the Aruba Controller , which updates the wired bridge table when a client associates.  It is possible that the client does not do a gratuitous ARP when it roams between infrastructures.  http://www.arubanetworks.com/techdocs/ArubaOS_65x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/1CommandList/wlan_virtual_ap.htm?Highlight=FDB Update on Assoc

 

I have no idea if this will even work, but it might be worth a try...

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Motorola MC9200 in different Wifi environments

Just tried it. Unfortunately same problem...

 

Frequent Contributor I

Re: Motorola MC9200 in different Wifi environments

RR86 wrote:

No, we didn't activat the DHCP enforce option because we also have clients which use static ip's.

 

The driver of the Wifi Adapter is:

Driver: X_2.03.0.0.17

Firmware: X_2.03.0.0.17

 

 


Ah, it was the MC9090 and MC75A scanners that I worked on. They were several driver versions behind on the Fusion Driver when they came to us. Looks like there is an update available - X_2.03.0.0.018R (Release notes mention a couple roaming fixes) - https://www.zebra.com/us/en/support-downloads/software/utilities/fusion.html - You might have some luck with their tech support. When we switched to SHA-2 and wanted to validate certificates - I gathered a packet capture, shared with support, and then had me run a "Jedi" diagnostic tool. Shortly after they provided a driver version (40R) that supported SHA-2.

 

You mention it would "Connect" just with no IP-Address. Wasn't sure if meant from the client side perspective or controller. I was just curious if when the Motorola 9200 roams between Juniper and Aruba - does it complete the full authentication/hand-shake process and enter into the Aruba User-Table?

 

Occasional Contributor II

Re: Motorola MC9200 in different Wifi environments

Hi,
Thanks for driver information!
I will check if we can upgrade.

From the Client side it looks like it is connected.
I think it is also in the user table but I'll check it tomorrow.
Occasional Contributor II

Re: Motorola MC9200 in different Wifi environments

Just made a packet trace with: packet-capture datapath mac [MAC] decrypted

 

Last entry is a successful certificate exchange (we use eap-tls). See attached file...

 

Occasional Contributor II

Re: Motorola MC9200 in different Wifi environments

It seems that there is no DHCP ACK...

 

show log network all | include [MAC]

shows no DHCP ACK...

 

ep 22 12:46:13 :202541:  <4060> <DBUG> |dhcpdwrap| |dhcp| Received DHCP packet from Datpath, Flags 0x42, Opcode 0x5a, Vlan 2216, Ingress pc0, Egress vlan 2216, SMAC 40:83:de:b2:0d:64
Sep 22 12:46:13 :202534:  <4060> <DBUG> |dhcpdwrap| |dhcp| Datapath vlan2216: DISCOVER 40:83:de:b2:0d:64 Transaction ID:0xa3cdcffd Options 3d:014083deb20d64 37:0103060f2c2e2f4243
Sep 22 12:46:15 :202541:  <4060> <DBUG> |dhcpdwrap| |dhcp| Received DHCP packet from Datpath, Flags 0x42, Opcode 0x5a, Vlan 2216, Ingress pc0, Egress vlan 2216, SMAC 40:83:de:b2:0d:64
Sep 22 12:46:15 :202536:  <4060> <DBUG> |dhcpdwrap| |dhcp| Datapath vlan216: REQUEST 40:83:de:b2:0d:64 Transaction ID:0xa3cdcffd reqIP=192.168.5.10 Options 3d:014083deb20d64 37:0103060f2c2e2f4243

 

Frequent Contributor I

Re: Motorola MC9200 in different Wifi environments


RR86 wrote:

It seems that there is no DHCP ACK...

 

show log network all | include [MAC]

shows no DHCP ACK...

 

ep 22 12:46:13 :202541:  <4060> <DBUG> |dhcpdwrap| |dhcp| Received DHCP packet from Datpath, Flags 0x42, Opcode 0x5a, Vlan 2216, Ingress pc0, Egress vlan 2216, SMAC 40:83:de:b2:0d:64
Sep 22 12:46:13 :202534:  <4060> <DBUG> |dhcpdwrap| |dhcp| Datapath vlan2216: DISCOVER 40:83:de:b2:0d:64 Transaction ID:0xa3cdcffd Options 3d:014083deb20d64 37:0103060f2c2e2f4243
Sep 22 12:46:15 :202541:  <4060> <DBUG> |dhcpdwrap| |dhcp| Received DHCP packet from Datpath, Flags 0x42, Opcode 0x5a, Vlan 2216, Ingress pc0, Egress vlan 2216, SMAC 40:83:de:b2:0d:64
Sep 22 12:46:15 :202536:  <4060> <DBUG> |dhcpdwrap| |dhcp| Datapath vlan216: REQUEST 40:83:de:b2:0d:64 Transaction ID:0xa3cdcffd reqIP=192.168.5.10 Options 3d:014083deb20d64 37:0103060f2c2e2f4243

 

Something I noticed in the Request - "vlan216" but the other dhcp activity shows "vlan2216". Not sure if that was normal for your environment/configuration/etc and my experience with DHCP is limited on server-side. Just an observation I noticed.

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: