Wireless Access

 View Only
last person joined: 11 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Configure and Verify WIP

This thread has been viewed 10 times
  • 1.  Configure and Verify WIP

    Posted Jul 23, 2024 07:57 AM

    While i try to configure WIP on Aruba controller i am getting below error on ArubaOS (MODEL: Aruba7210), Version 8.10.0.12 LSR. 

    "Exception raised while processing request"

    I also need to know how to check and verify WIP policy is on Controller.

    Find below Steps to configure WIP policy

    Configuration-> Task-> Define Wireless Intrusion Protection (WIP) policy.

    For error message check attach screen shots. 



  • 2.  RE: Configure and Verify WIP

    Posted Jul 23, 2024 10:44 AM

    Do you have the RFProtect license installed and activated for all of your APs?

    Did you find/follow the documentation on Wireless Intrusion Prevention?

    If you check the controller and MCR logs (show log all 200), there probably is more information about why the configuration was not accepted (exception raised). Did you have a look in there already?



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Configure and Verify WIP

    Posted Jul 24, 2024 05:18 AM
      |   view attached

    Hi Herman 

    Thanks for responding. RFProtect  license are installed and activated on Controller. I have gone through the link first before posting.

    When I configure WIP policy in Medium with default parameters, WIP policy is accepted. 

    When I configure WIP policy and select HIGH and choosing parameters based on customer need, I am getting below error "

    "Exception raised while processing request"

    ===================================================================

    Service Type
    RF Protect: 100
    Access Points: 2
    Next Generation Policy Enforcement Firewall Module: 2
    RF Protect: 2
    Access Points: 100
    Next Generation Policy Enforcement Firewall Module: 100

    ===============================================================================================================

    Find below show log output.

    (7210-01) [mynode] #show log all 200 | include exception
    Jul  3 17:00:35 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_exists_subtree, TYPE: <type 'exceptions.AttributeError'>:::EXCEP::: 'NoneType' object has no attribute 'is_valid_cmd_sub_cmd_data'
    Jul  3 17:05:42 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_exists_subtree, TYPE: <type 'exceptions.AttributeError'>:::EXCEP::: 'NoneType' object has no attribute 'is_valid_cmd_sub_cmd_data'
    Jul  3 17:15:34 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_exists_subtree, TYPE: <type 'exceptions.AttributeError'>:::EXCEP::: 'NoneType' object has no attribute 'is_valid_cmd_sub_cmd_data'
    Jul  3 17:39:56 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_exists_subtree, TYPE: <type 'exceptions.AttributeError'>:::EXCEP::: 'NoneType' object has no attribute 'is_valid_cmd_sub_cmd_data'
    Jun  5 10:33:16 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_get_first_key_val, TYPE: <type 'exceptions.IndexError'>:::EXCEP::: list index out of range Exception raised while getting first key for cmd: netdst sub_cmd: netdst__name
    Jun  5 10:33:42 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_get_first_key_val, TYPE: <type 'exceptions.IndexError'>:::EXCEP::: list index out of range Exception raised while getting first key for cmd: netdst sub_cmd: netdst__name
    Jun  5 10:33:43 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_get_first_key_val, TYPE: <type 'exceptions.IndexError'>:::EXCEP::: list index out of range Exception raised while getting first key for cmd: netdst sub_cmd: netdst__name
    Jun 26 13:51:22 2024  profmgr[8935]: <334200> <ERROR> |profmgr| Exception in ds_get_first_key_val, TYPE: <type 'exceptions.IndexError'>:::EXCEP::: list index out of range Exception raised while getting first key for cmd: netdst sub_cmd: netdst__name




  • 4.  RE: Configure and Verify WIP

    Posted Jul 24, 2024 08:48 AM

    That looks like a software defect, based on those log lines. I see the same error when I use the 'Task (wizard) to setup the WIDS to 'High', so please open a TAC case on this.

    As a workaround, you can under (your Configuration Group) Configuration -> System -> Profiles -> IDS, look up your IDS profile and change there the detections and protections that you need.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------