Can you check with the 'show users' command on the controller if you see your client there, possibly in a logon role?
That may happen if the interface is trusted, but the VLAN is not. Then still the client IP may end up in untrusted role, where logon is the default and does not allow access to the controller, but does allow icmp.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jan 06, 2022 04:22 AM
From: Jules Bvt
Subject: WebGUI/SSH issue with Mobility Conductors
Hello !
I have configured a cluster with two HW-MM-5K and four controllers (7220 and 7240).
Yesterday, I decided to switch VRRP master on Mobility Conductors and since then I can't join them with SSH/HTTPS from remote network.
Second member was reachable but I rebooted it thinking it could be a VRRP issue. Now, it is unreachable too.
ICMP is still OK and SSHd service is still up because I can reach them from other controllers on the same network.
Do you have ever seen same issue with remote access ?
We have verified the whole architecture, routing protocols are OK and there are not any firewall equipements between PC with SSH client and Mobility-conductor : SSH access is possible only on the same network.
Can be that there is a problem with a change done before the reboot but I don't remember of anything new big.
I read issues with "trusted" state on interfaces so I verified it. I verified firewall-cp state too. Nothing to report !
Do you know some verifications to do ?
Thanks for your help.
------------------------------
Jules Bvt
------------------------------