Wireless Access

Reply
Frequent Contributor II

ap's status is "denied" ?

Has anyone ever come across an ap in the ap database that says denied?

 

#show ap database

AP Database
-----------
Name               Group    AP Type  IP Address     Status  Flags  Switch IP
----               -----    -------  ----------     ------  -----  ---------
00:0b:86:cf:d1:15  default  105      10.20.100.208  Denied         10.20.0.180
00:0b:86:cf:d1:17  default  105      10.20.100.210  Denied         10.20.0.180

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 2=Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Total APs:2


David Dipert
Aruba Employee

Re: ap's status is "denied" ?

I am going to guess that has something to do with CPS (Control Plane Security). Do you have CPS enabled?

Thanks,

Zach Jennings
Frequent Contributor II

Re: ap's status is "denied" ?

Out of the box controller.

All that was done is:

initial config (ip, mask, gw)

licenses installed.
Code upgraded to 6.1.2.5

 

So no I don't have CPS unless it was turned on by default. 

 

David Dipert
Aruba Employee

Re: ap's status is "denied" ?

Pretty sure it is enabled by default.

Thanks,

Zach Jennings
Aruba Employee

Re: ap's status is "denied" ?

If the controller had 6.x code on it from the factory then CPSec IS on by DEFAULT


Harold
Frequent Contributor II

Re: ap's status is "denied" ?

I have fixed the issue.
Cleared the ap from the database. Rebooted the ap.

Up acts normal now.

 

Ok so in 6.1 CPS is on.

Nope no denied here:

 

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 2=Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Would be helpful if DEV is going to use a flag to give us an idea what it does.

David Dipert
Occasional Contributor I

Re: ap's status is "denied" ?

Agreed.

Guru Elite

Re: ap's status is "denied" ?


ddipert wrote:

I have fixed the issue.
Cleared the ap from the database. Rebooted the ap.

Up acts normal now.

 

Ok so in 6.1 CPS is on.

Nope no denied here:

 

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 2=Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Would be helpful if DEV is going to use a flag to give us an idea what it does.


You get much more than a flag.  You get a big denied when an AP is denied:

 

(host) #show ap database

AP Database
-----------
Name               Group    AP Type  IP Address     Status     Flags  Switch IP
----               -----    -------  ----------     ------     -----  ---------
00:0b:86:66:97:46  default  RAP-5WN  192.168.1.248  Down              192.168.1.3
00:24:6c:c2:97:1b  default  105      192.168.1.240  Down              192.168.1.3
00:24:6c:cb:30:89  default  105      192.168.1.238  Down              192.168.1.3
00:24:6c:cb:30:94  default  105      192.168.1.239  Down              192.168.1.3
00:24:6c:cb:30:ba  default  105      192.168.1.245  Down              192.168.1.3
AP105              default  105      192.168.1.251  Down       M      192.168.1.3
AP135              default  135      192.168.1.251  Up 10m:8s  2      192.168.1.3
d8:c7:c8:c1:66:ab  default  105      192.168.1.242  Down              192.168.1.3
GOC-SHP1-AP125     default  125      192.168.1.243  Denied            192.168.1.3

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Total APs:9

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Aruba Employee

Re: ap's status is "denied" ?

Hi,

 

 Denied is not a Flag, it is Status like up or down or upgrading.

Vinod Kumaar AVM ACMX, ACDX
Principal Network Engineer
Customer Advocacy | Aruba Networks Inc.

Did something you read in the Community solve a problem for you? If so, click "Accept as Solution" in the bottom right hand corner of the post.

Re: ap's status is "denied" ?

I had same problem, I disabled CPSec and My APs came back up

Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: