Wireless Access

 View Only
last person joined: 14 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.

AP303 : connection not stable with old hardware

This thread has been viewed 1 times
  • 1.  AP303 : connection not stable with old hardware

    Posted 7 hours ago

    Hi,

    i changed some old Cisco controller AP with AP303 and now some hardware that were ok are disconnecting (they are connected using "telnet"). These are some Windows CE Motorola MT2090 using 802.11G.

    Are there some parameters i can optimize ?

    Thanks for you help

    Here is the config

    version 8.12.0.0-8.12.0
    virtual-controller-country FR
    virtual-controller-key blabla
    name Cluster
    virtual-controller-ip 192.168.x.y
    terminal-access
    ntp-server 194.2.0.28
    clock timezone Paris 01 00
    clock summer-time CEST recurring last sunday march 02:00 last sunday october 03:00
    rf-band all

    allow-new-aps

    allowed-ap mac
    allowed-ap mac
    allowed-ap mac
    allowed-ap mac
    allowed-ap mac
    allowed-ap mac

    arm
     wide-bands none
     min-tx-power 9
     max-tx-power 127
     band-steering-mode prefer-higher-band
     air-time-fairness-mode default-access
     channel-quality-aware-arm-disable
     client-aware
     free-channel-index 40
     scanning
     client-match

    rf dot11g-radio-profile
     max-distance 0
     max-tx-power 9
     min-tx-power 6
     disable-arm-wids-functions off
     free-channel-index 40

    rf dot11a-radio-profile
     max-distance 0
     max-tx-power 18
     min-tx-power 12
     disable-arm-wids-functions off

    mbssid-group-profile _MBSSID1_


    syslog-level warn ap-debug 
    syslog-level warn network 
    syslog-level warn security 
    syslog-level warn system 
    syslog-level warn user 
    syslog-level warn user-debug 
    syslog-level warn wireless 

    extended-ssid
    web-server
     ssl-protocol tlsv1_2


    hash-mgmt-password
    hash-mgmt-user admin password hash blabla


    wlan access-rule default_wired_port_profile
     index 0
     rule any any match any any any permit

    wlan access-rule wired-SetMeUp
     index 2
     rule masterip 0.0.0.0 match tcp 80 80 permit
     rule masterip 0.0.0.0 match tcp 4343 4343 permit
     rule any any match udp 67 68 permit
     rule any any match udp 53 53 permit

    wlan access-rule SERI_data
     index 3
     rule any any match any any any permit

    wlan access-rule SERI_data-5G
     index 4
     rule any any match any any any permit

    inbound-firewall
     rule any any any any match 17 67 68 permit
     rule any any any any match 17 546 546 permit
     rule any any any any match 1 any any permit
     rule any any any any match 58 any any permit
     rule any any apip 0.0.0.0 match 6 22 22 permit
     rule any any any any match any any any permit
     rule any any any any match any any any deny

    wlan ssid-profile SERI_data
     enable
     index 1
     type employee
     essid SERI_data
     wpa-passphrase blabla
     opmode wpa-psk-tkip,wpa2-psk-aes
     max-authentication-failures 0
     rf-band 2.4
     captive-portal disable
     dtim-period 1
     broadcast-filter arp
     dmo-channel-utilization-threshold 90
     local-probe-req-thresh 0
     max-clients-threshold 64
     max-retries 3
     temporal-diversity
     high-throughput-disable
     very-high-throughput-disable
     high-efficiency-disable

    wlan ssid-profile SERI_data-5G
     enable
     index 2
     type employee
     essid SERI_data-5G
     wpa-passphrase blabla
     opmode wpa2-psk-aes
     max-authentication-failures 0
     rf-band 5.0
     captive-portal disable
     dtim-period 1
     broadcast-filter arp
     dmo-channel-utilization-threshold 90
     local-probe-req-thresh 0
     max-clients-threshold 64

    auth-survivability cache-time-out 24


    wlan external-captive-portal
     server localhost
     port 80
     url "/"
     auth-text "Authenticated"
     auto-whitelist-disable
     https


    blacklist-time 3600
    auth-failure-blacklist-time 3600

    ids
     wireless-containment none

    wired-port-profile wired-SetMeUp
     switchport-mode access
     allowed-vlan all
     native-vlan guest
     no shutdown
     access-rule-name wired-SetMeUp
     speed auto
     duplex auto
     no poe
     type guest
     captive-portal disable
     no dot1x

    wired-port-profile default_wired_port_profile
     switchport-mode trunk
     allowed-vlan all
     native-vlan 1
     shutdown
     access-rule-name default_wired_port_profile
     speed auto
     duplex full
     no poe
     type employee
     captive-portal disable
     no dot1x


    enet0-port-profile default_wired_port_profile

    uplink
     preemption
     enforce none
     failover-internet-pkt-lost-cnt 10
     failover-internet-pkt-send-freq 30
     failover-vpn-timeout 180

    airgroup
     disable

    airgroupservice airplay
     disable

    airgroupservice airprint
     disable