Wireless Access

 View Only
last person joined: 11 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

GRE Tunnel between InstantAP and Mobility Controller

This thread has been viewed 19 times
  • 1.  GRE Tunnel between InstantAP and Mobility Controller

    Posted Oct 14, 2021 11:04 AM
    Hello 
    I want to know how to configure the GRE tunnel on the mobility controller to connect with IAP.
    I cannot find documentation  on how to setup the GRE tunnel on the controller side.

    On IAP (VC)  side , I configure 
      Plus>Vpn>Protocole : "Aruba GRE" and <IP_Mobility_Controller> as Principal Host.




    At the moment, , the log on the Mobility-Ctrl says:

    "Oct 14 16:32:29 authmgr[6105]: <522275> <6105> <WARN> |authmgr| User Authentication failed. username=20:4c:03:0d:d9:30 userip=10.35.124.166 usermac=20:4c:03:0d:d9:30 authmethod=VPN servername=Internal serverip=10.35.125.33 apname=N/A bssid=00:00:00:00:00:00
    Oct 14 16:32:29 localdb[6190]: <133006> <6190> <ERRS> |localdb| User 20:4c:03:0d:d9:30 Failed Authentication (Processing USER_QUERY on DBType(13))
    Oct 14 16:32:29 localdb[6190]: <133121> <6190> <WARN> |localdb| make_response: Sending USERDB_REJ-msg to 127.0.0.1:8214 with msgtype:23 id:62 reqtype:6 dbtype:13"

    The  mac-add is the Mac-address of my IAP.
    I tried allreaddy to add  the Mac in the AP whitelist., .
    Also I tried to add a user with the command:
    " (MC-VA-01) [mynode] #local-userdb add username 20:4c:03:0d:d9:30 password 20:4c:03:0d:d9:30"


    For info:
    I Use IAP 205H vers 6.4.4.8
    And Mob ctrl ( Virtual : 8.3.0.3


    Michel




    ------------------------------
    Michel Misonne
    ------------------------------


  • 2.  RE: GRE Tunnel between InstantAP and Mobility Controller

    EMPLOYEE
    Posted Oct 14, 2021 07:10 PM
    This is what you need:  https://asp.arubanetworks.com/downloads/documents/RmlsZTo3MmJlYjFjMi1hMGZmLTExZWEtYmViYy1lM2Y1ZmIxZDAyNjc%3D

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 3.  RE: GRE Tunnel between InstantAP and Mobility Controller

    Posted Oct 15, 2021 12:16 PM
    Hello
    Thanks for your document.
    I follow the procedure  completely. But I still have the pb. 

    The VPN (type ARUBA IPSec)   on the IAP  is still Down.
    and on the MC-VA  I have this error : User 20:4c:03:0d:d9:30 Failed Authentication (Processing USER_QUERY on DBType(13))

    I upgrade my IAP205H to the latest version 6.5.4.21.
    I use an mobility controller  MC-VA 8.3.0.3

    Is there a compatibility matrix  for IAP and MC-VA  ?


    Michel



    ------------------------------
    Michel Misonne
    ------------------------------



  • 4.  RE: GRE Tunnel between InstantAP and Mobility Controller

    MVP GURU
    Posted Oct 18, 2021 04:13 AM
    do you have allow this mac ?

    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------