Hi, yeah I totally understand that you can't give me a simple answer with the information i provided.
Thank you for all the advices.
It can be any device which get this problem. Both new, old, computer, phone, terminals etc.
We have done some of these but definitely good advices here.
First, we ran 2 separate controllers on 6.4.x.x. Then SE did transfer some profiles manually to the new controller. We did check differences and all-in-all, most were pretty standard.
Then we setup a new controller to 8.3.0.6 with one controller. There it mostly worked as before except 2.4Ghz got much much slower than before.
We did upgrade to 8.5.0.4 right before we enabled the cluster function due to get the RAPs to work in the cluster and then we added the second controller. After this we have had these problems.
After that we have upgraded to 8.5.0.11 due to some bug fixing.
We are as well planning to upgrade to 8.6.0.13 but I want to see if we can come up to what the problem is before we upgrade.
Yeah we have couple of config backups.
We had an example today of a client which experienced problems. He could connect to a WPA2-PSK SSID without problem, but the second WPA2-PSK SSID on the same AP he could connect, he got an IP-address but no internet. His colleagues it worked fine for.
He went in to the right Role: Authenticated. And session table register legit connections. But even if theres sessions there the client have no access to these destinations. A day later it worked.
But yeah, i'll see what TAC come up to. they've got all the user-debug logs from an example and they will do debugging as well when we get a new example where one of our customers can spare us some time.
------------------------------
G AB
------------------------------
Original Message:
Sent: Oct 08, 2021 03:25 AM
From: Jochem Knoben
Subject: Client Connectivity loss(long-term problem)
All good and valid propoals for troubleshooting.
I would just like to add for your particular case - as you mentioned it all started with the change to make use of the cluster-feature:
hope you do have a backup of the configuration from BEFORE; so it might be helpful to compare the configuration from BEFORE CLUSTERING and NOW.
RM-profiles; features (like k,v,r), etc.would be s.th. to start with
Did your SE "transfer" the old configuration one to one to the new setup ?
You did not mention what firmware version was used before the clustering; did you switch to a different version as well ?
------------------------------
Jochem Knoben
Original Message:
Sent: Oct 07, 2021 12:53 PM
From: marcel koedijk
Subject: Client Connectivity loss(long-term problem)
Same as Collin mentioned there are many ways why clients loose a connection and work with TAC support is the best way to get it solved soon as possible. Please escalate the issue TAC or get help form your local Aruba Partner.
When troubleshooting start with collect as much as details possible, no loose ends, use only facts, and work in small steps. In the world of WiFi there are a lot of factors responsible for the connection, some area's:
1. The client
2. The access points
3. The "air"
4. The configuration
5. The supporting network infrastructure
6. Good designs of all above :)
Start focus on clients. On which radio, which channel, which ssid is it connected, which SNR strength, how often does it reconnect, others in the same room on exact the same timestamp, etc. What about the client drivers, are the up-to-date or not (80% of all issues), end so on. Does the issue happens on one type of client devices with same operation system and Wi-Fi chipset. Step by step, collect ANYTHING.
On windows run as administrator on the CLI "netsh wlan show wlanreport" can give you great information about the client connection and authentication.
Also take a close look at sniffing 802.11 frames from the air with wireshark, you need some expertise on this but coud be an important move to dive into.
Check all login in the wlan controllers "show ap debug" for example or "show syslog all", you could also set some debug levels for interesting parts. Also look for "DFS RADAR" events "show airmatch all-events" with a mobility master in place.
Be sure have have a good RF design in place with a reportage of it.
Be sure your netwerk have no latency etc., check your network monitor tooling.
Place some Aruba User Experience Insight sensors to monitor the WiFi user experience with backlogging of 30days.
Update your controller firmware to the latest conservative release 8.6.0.13, noted that 8.5.x.x. will go end of support by end of this year.
Replace old fasion AP's like the AP-105. Better get same type of AP's in the same area for optimal roaming.
And so on and so on; The small story here.... Hire somebody that have extended knowledge in troubleshooting, Aruba and or CWNA or Ekahau certified, and put time into troubleshoot any bit and byte.
Hope i can give you some usefull tips, but understand the answer is hard to get from the community because it's to complex for handle on the forum.
------------------------------
Marcel Koedijk | MVP Guru 2021 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opionions are my own
Original Message:
Sent: Oct 07, 2021 11:06 AM
From: Colin Joseph
Subject: Client Connectivity loss(long-term problem)
Did you ask your SE to escalate the issue(s) with TAC? There is not enough information to know what could be happening from your post.
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
Original Message:
Sent: Oct 07, 2021 10:01 AM
From: G AB
Subject: Client Connectivity loss(long-term problem)
Hi all!
We experience client disconnects and other strange phenomenons.
We run ArubaOS 8.5.0.11 in a L2-connected cluster with one MM and two MDs(7220).
We have around 850 access points in this environment. Mostly AP-305. Couple of AP-315, AP-105, AP-205, AP-204.
Around 3000-4000 clients.
We have couple of hundreds VLANs which we separate on the firewalls outside of the aruba system.
We run clients on different SSID:s and mostly in tunnel mode. Couple of RAPs in with SSID in bridge mode.
DHCP on the firewalls outside of Aruba environment.
We have many customers in this system, varying between 5 clients to 500 clients per SSID.
We actually have a few problems. The biggest is that clients get disconnected. And it seems to be a problem at all places, all SSID:s but different days and time.
Another problem which i think maybe has something to do with it is that some clients which connect to the SSID gets an IP-address from the DHCP-server. However
no internet traffic is working. I've checked logs and arp-tables. These clients do not get installed in the arp table of the firewalls and hence it says no internet connection on the client. This was not an issue before we configured the cluster,
with the help of SE.
Most of the clients works fine but it's different clients all the time which get problems.
Just this lunch we had one customer who had big problems with this which are running all pay terminals via WIFI. And a school have problems everyday.
I've been in contact with Aruba Tech support couple of times. We have been ordered to ugrade to newer versions and have done that. That did not help at any time. One time we got the tips of disable openflow, we did that and it seemed to help at first but it
didn't. This last time i got in contact with TAC i wont even get any answers for days and they are not interpret my problems correctly. So having a hard time here with many customers complaining for a long period of time and it's not good for our business.
Thought i would give it a shot here as well.
Thank you in advance!
------------------------------
G AB
------------------------------