You are right, it should be "
rule any any match 17 4500 4500 permit" which will be using UDP and not TCP
Again if you are just allowing everything under your user-role then you don't need to do anything.
But in case you have access policies then this is how you do it from Web UI
This translates into the CLI command
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------
Original Message:
Sent: Dec 02, 2022 09:21 PM
From: Shieva Eccles
Subject: IAP-335 Wifi Calling Issue
@ariyap
The reference link seems to be incomplete for Instant OS 8.10
The command structure cannot be applied as per the document.
I believe that the correct syntax is below:
wlan access-rule WIFICALLING
rule any any match tcp 4500 4500 permit
Please let me know your thoughts.
Original Message:
Sent: Dec 02, 2022 06:40 PM
From: Ariya Parsamanesh
Subject: IAP-335 Wifi Calling Issue
generally WiFi calling creates a IPSEC over UDP to the service provider.
So in your firewall you need to allow udp/4500 traffic
WiFi calling is enabled on Instant APs, all you need to do is if you are using user-role access policies, then you need to allow udp/4500
Here is the reference on Instant AP side of things
https://www.arubanetworks.com/techdocs/Instant_810_WebHelp/Content/instant-ug/voice-and-video/wifi-calling.htm
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
Original Message:
Sent: Dec 02, 2022 05:11 AM
From: Ian Goodall
Subject: IAP-335 Wifi Calling Issue
Single IAP-335 running 8.10.0.5
New install with everything working fine except for Wifi Calling.
Client device is a iPhone Xs.
Call establishes fine and voice quality on the client device is clear. However, the 3rd party reports very poor voice quality and breaking up. It's consistent with all callers.
If anyone can point me in the right direction with troubleshooting that would be great!