two ip address in customer device

[Colin Wang]

hi experts ,

one device in customers enviroment is special, it must bridge its wireless network card and its cable network card to connect with server in network.  when this device connect to aruba ap ,it could get ip address ,from network ,it could ping device wireless ip address successfully but it can not ping bridge ip address of device .

If the device connect to other household ap such as tp-link ,both ip address could be ping ,and it work well , my question is what special confiugration  in aruba controller block to ping the second ip address in the end device.

Thanks.

[Colin Wang]

is this relate to this command in show running

firewall deny-inter-user-bridging

[bjulin]

An enforce DHCP setting would prevent this.  ACLs in the user role could too.  First check whether you can ARP the bridged address to bisect the problem.

[Victor Fabian]

One thing you could do is change the validuseracl to only allow the segments you want to and deny the rest

[jgoff · Accepted solution]

hi Colin

turn off broadcast filter all and broadcast filter arp in the vap profile.

regards

-jeff

[Colin Wang]

Thanks ,problems solved after turn those option off.