Wireless Access

 View Only
  • 1.  Android devices on 8.10.0.7 on-prem controllers

    Posted Aug 16, 2023 07:57 AM

    We have an issue with only Android phones losing connection and showing a "Sign in to the network" pop-up. We do not have the captive portal turned on. It is a simple Guest network for our residents. No password is required either. It is starting to be quite an annoyance, and I can't seem to find anything online. AirWave does not show any issues either. I am 10 ft from a 505 with an almost perfect signal.  Any ideas?

    Thank you for any suggestions,



    ------------------------------
    Damian Nita
    ------------------------------


  • 2.  RE: Android devices on 8.10.0.7 on-prem controllers

    Posted Aug 17, 2023 04:17 AM

    There is very likely some traffic dropped in the role that makes the client to prompt... if you click on the 'sign in', do you see a specific page?

    Starting point would be to check which role the guest user is in when they show that 'sign in' message, and with 'show rights <role>' you can see what policies are applied.

    With 'show datapath session' you can see ( filter with: | inc <ip of client>) what traffic is permitted, dropped, redirected, etc.

    Not that there are DHCP options as well to redirect clients to a captive portal; check that these options are not configured on any of your DHCP server. Recently had a case where such an option was configured on one of the DHCP servers, resulting in very inpredictable results dependong on which DHCP server was selected to get an IP address.

    If you are not experienced with controller troubleshooting, it may be better to get your Aruba partner or Aruba TAC involved as the data you get out can be a bit technical.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Android devices on 8.10.0.7 on-prem controllers

    Posted Aug 17, 2023 11:11 AM

    Hi Herman.

     

    Thanks for your reply.

     

    No, there is no page. Click, and the prompt goes away. We do not have the captive portal turned on either, so that is the puzzling piece.

    Our User role is:

    SVWC-Guest             124  Up: No Limit,Dn: No Limit  global-sacl/,apprf-svwc-guest-sacl/,SVWC-Guest/,ra-guard/,Allow-GatewayPing/,AllowCellCarriers/,DenyQUIC/,DenyDoT/,Deny-Serving-DHCP/,dhcp-acl/,AllowCaptionCall/,AllowClearCaptions/,Allow-Facebook/,AllowThirdEye/,Deny-RFC1918/,Deny-APIPA/,AllowAll-v4/

     

    Our DHCP is on a  2019 VM server. No options are configured other than the standard.

     

    I have a case with TAC, but as usual, level one is clueless. It is only an issue with Andorid phones, as laptops or iPhones are working as expected. It's been happening for a while, and I thought it was only my S20 phone, but lately I've been hearing from multiple Android users. Another very strange issue is that if I do "show datapath session table the phone" works as it should without loosing the connection.

     

     

    Damian Nita

    Associate Network Administrator, A+, N+, CIOS

     

    Text  Description automatically generated 

    Shenandoah Valley Westminster-Canterbury

    300 Westminster-Canterbury Drive

    Winchester, VA  22603