Cloud Managed Networks

Hi all. We want to migrate a branch offices scenarios with local controllers to Aruba Central. The traffic of access points has to cross a symantec proxy sg. We have tested the connection and it does not work because the proxy sg sends to the access point an authentication request. Access points have been configurated with the proxy settings with a trusted user. In the traffic capture we have seen that access points send "wss" connection and we think auth username and pass are not sent. We have noticed another http or https connections works pefectly.

We have excluded of authenticacion *.arubanetworks.com domain in the proxy and it works fine.

Any suggestion?

Thanks a lot.

Hi,

Similar problem here. We noticed he first connection is sent to device.arubanetworks.com, then to device-eu.central.arubanetworks.com (this will probably change by location, I'm in Euope), and the next requests go to AWS addresses - IP addresses, not FQDNs.

This might be your problem - you may want to disable authentication for those addressess as well as *.arubanetworks.com. The addresses I've seen so far:

52.57.173.160

198.74.54.240

18.196.96.131

I'm in the process of trying several authentication methods in ProxySG but so far everything fails.

ArubaOS versions 8.3.0.0 and 8.5.0.3

ProxySG version 6.7.4.5

Authentication methods tested: Auto, Origin, Origin-IP, Origin-Cookie, Origin-Cookie-Redirect, Proxy, Proxy-IP, Form-IP, SG 2.0

Anyone with some insights?

Mike

edit: corrected "device-eu.arubanetworks.com" to "device-eu.central.arubanetworks.com", added auth methods tested