Wireless Access

Reply
Occasional Contributor I
Posts: 9
Registered: ‎04-03-2012

new Kindle Fire and Nintendo 3Ds

I am authing both of these devices via user derivation rules.  Both devices will connect for a couple minutes and then traffic will no longer pass between the device and AP.  The controller still sees the device as associated and authenticated.  Below is what I'm using for the dhcp-option for the user rules. 

 

37012103060f1c333a3b - Kindle Fire

370103060f1c21 - Nintendo 3DS

 

Any ideas or known fixes?

Guru Elite
Posts: 21,487
Registered: ‎03-29-2007

Re: new Kindle Fire and Nintendo 3Ds

Is the device ending up in the derived role?

 

What traffic is allowed in the derived role?

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 9
Registered: ‎04-03-2012

Re: new Kindle Fire and Nintendo 3Ds

Yes it ends up in the guest role as it should.  Below is the ACL applied to this role.  We have hundreds of other devices authed using derivation rules that map to this role without issue.  Thanks  We are running 6.1.3.4.

 

 

IPv4useranyudp 68deny  Low
IPv4userDNS-Serverssvc-dnspermit  High
IPv4userhost 149.76.2.2udp 443permit  

High

Pv4userhost 149.76.2.2tcp 443permit  Low
IPv4anyUPnPanydeny  Low
IPv4user149.76.8.0 255.255.254.0DMZpermit  Low
IPv4user149.76.0.0 255.255.0.0anydeny  Low
IPv4userprivate-netsanydeny  Low
IPv4anyanyanypermit  Low
Guru Elite
Posts: 21,487
Registered: ‎03-29-2007

Re: new Kindle Fire and Nintendo 3Ds

[ Edited ]

Let's turn on logging:

 

config t
logging level debug user-debug <mac address of device>

 

 

 

After awhile:

 

show log user-debug 50

 

 

That will show what you are doing



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 9
Registered: ‎04-03-2012

Re: new Kindle Fire and Nintendo 3Ds

Thanks, the student will be back tomorrow afternoon with his new Kindle Fire and I'll try this then.

Guru Elite
Posts: 21,487
Registered: ‎03-29-2007

Re: new Kindle Fire and Nintendo 3Ds


theflakes wrote:

Thanks, the student will be back tomorrow afternoon with his new Kindle Fire and I'll try this then.


Okay.  Please let us know.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 9
Registered: ‎04-03-2012

Re: new Kindle Fire and Nintendo 3Ds

Found the problem I think.  I had 802.11k enabled.  Disabling it fixed the issue with the 3DSs.  Unfortunately the student with the Kindle Fire never stopped back down.

Guru Elite
Posts: 21,487
Registered: ‎03-29-2007

Re: new Kindle Fire and Nintendo 3Ds

theflakes,

 

Thanks for that solution!

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 9
Registered: ‎04-03-2012

Re: new Kindle Fire and Nintendo 3Ds

802.11k wasn't the problem.

 

"Advertise 802.11d and 802.11h Capabilities"

 

The above ended up being the real culprit on the 802.11g radio profile.  Disabled it and the connection on the problem device has been steady.  I have not tested re-enabling 802.11k as that can cause problems with other clients that don't support it.  Therefore I'd just rather keep it off.

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: