Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Upgrade after advisory problems 802.1x

This thread has been viewed 0 times

  • 1.  Upgrade after advisory problems 802.1x

    Posted Nov 23, 2013 09:17 PM

    Hi I have upgraded 2 x 6000 controllers to 5.0.4.13 after the certificate advisory. All ok apart from one user role uing 802.1x with temination on the controller. XP and win 7 laptops not authenticating, tried unchecking use server certificate and some work most dont. Any ideas ?? All other devices, tabs/mobiles work fine.

     

    Thanks



  • 2.  RE: Upgrade after advisory problems 802.1x

    EMPLOYEE
    Posted Nov 23, 2013 09:23 PM
    If you delete the wireless profile from the client, is it able to connect
    after entering credentials again?


  • 3.  RE: Upgrade after advisory problems 802.1x

    Posted Nov 23, 2013 09:31 PM

    Hi, not in most cases, I have used my laptop (win 7), not on their domain, and a user from the company can log in and authenticate no problem. However this is with use server cert unchecked, I dont know if it is an issue with the self signed cert or a user profile problem. 

     

    The 802.1x profile in question is using local termination, if I uncheck this and save it and then go back it is checked again.

     

    Thanks



  • 4.  RE: Upgrade after advisory problems 802.1x

    Posted Nov 23, 2013 11:21 PM

    Hello did you check that it really changed the certificate?

    In some controllers this didnt work.. for example on A200 it didnt work... on 5.0.4.14 was the fix...

     

    Check please if it changed the certificate sucessuflly

     

    You can read how you check that here
    http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Support-Advisory-ArubaOS-Default-Certificate-Expiration-11-21/td-p/116511

     

    And also you can read that the 5.0.4.13 didnt fix on for example a A200

     

    Cheers

    Carlos



  • 5.  RE: Upgrade after advisory problems 802.1x

    Posted Nov 24, 2013 02:04 AM

    Can you please enable the user-debug and paste show auttrace-buf mac <mac address of the client> output.

     

    To enable user-debug

    ------------------------------

    logging level debugging user-debug <mac address of the client>



  • 6.  RE: Upgrade after advisory problems 802.1x

    Posted Nov 30, 2013 11:35 PM

    hi stunshot, 

     

    is it M3 in the chassis?

     

    By the way, did the issue get resolved. 



  • 7.  RE: Upgrade after advisory problems 802.1x

    Posted Nov 30, 2013 11:44 PM
    Spoiler
     

     

    @Cappalli, 

     

    is it happening on the windows7 stations because the CA that issued the certificate has changed?

     

    if the CA thats issuing the certificate is the same, that is iff its my trusted internal CA issues the certificates. So, the each time the certificate expire, i can keep renewing the certificate. and that would be transparent for the clients, correct?