The benefit of tunnel mode is that each access point can just sit on an access port, so you don' t have to configure 600 physical switchports. You would only have to manage the trunk between the controller and the layer 3 switch that it is connected to. An access point can have an ip address, on any vlan as long as it can find the controller, and the users connected to those access points, can roam to any access point, because traffic is tunneled back to a single point; the controller.
Having tunnel model makes adding access points as simple a plugging them in, vs. having to configure each port that an access point is connected to.
EDIT: In addition, there are features available on tunnel mode that are not available on bridge mode.
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------
Original Message:
Sent: Jan 28, 2022 06:15 PM
From: Diego Joubert
Subject: Clients can't connect to SSID
It has the VLAN trunked because when I reboot the AP it function normally. I might try tunnel mode and convince the manager. What benefits I get from tunnel mode rather than bridge?
------------------------------
Diego Joubert
Original Message:
Sent: Jan 28, 2022 06:08 PM
From: Colin Joseph
Subject: Clients can't connect to SSID
You should double check that the access point the user is connected to has the VLANs trunked to it. Large Scale Bridged mode is much more difficult to deploy and troubleshoot and is not recommended.
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
Original Message:
Sent: Jan 28, 2022 06:05 PM
From: Diego Joubert
Subject: Clients can't connect to SSID
No I haven't but must use bridge by requirement. You think it might be an IP problem from the DHCP server and the switch or what? version bug?
------------------------------
Diego Joubert
Original Message:
Sent: Jan 28, 2022 05:56 PM
From: Colin Joseph
Subject: Clients can't connect to SSID
Have you tried them with tunnel?
------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
Original Message:
Sent: Jan 28, 2022 05:49 PM
From: Diego Joubert
Subject: Clients can't connect to SSID
We have open and wpa2 personal. Both of them failed and with differents VLANs. All SSIDs are bridge. They can associate but no IP assignment. Don't know if existing clients get affected or only new clients trying to connect. Haven't done a packet capture because it happens randomly.
------------------------------
Diego Joubert
Original Message:
Sent: Jan 28, 2022 05:26 PM
From: Cody Ensanian
Subject: Clients can't connect to SSID
More details needed to point you in right direction.
What type of SSIDs? Open? 802.1x?
If 802.1x what are you seeing in the logs there?
Can clients associate/authenticate, but cant pass traffic? Or they cant even associate/authenticate?
Once an AP is detected exhibiting the issue, does it happen for ALL the clients attaching to that one AP?
Done any packet captures to dig in deeper?
------------------------------
Cody Ensanian
Original Message:
Sent: Jan 28, 2022 04:30 PM
From: Diego Joubert
Subject: Clients can't connect to SSID
Hi everyone,
I'm currently having problems with a Wireless Network. Randomly clients can't connect to the SSIDs and the problem is only resolve restarting the APs. We have around 600 APs and is only happening (from what I've seen) with the exterior ones (AP-365). I disabled 802.11k, high efficiency in all SSIDs and DFS channels. Max clients per SSID is the default one 64 clients and the average connected clients are 30-40.
Can someone help me please. Can't find anything relevant and its hard to troubleshoot because it happens randomly. The APs aren't getting disconnected from the controller.
Using 7220 mobility controller (Standalone) with 8.8.0.1. version.
------------------------------
Diego Joubert
------------------------------