Security

 View Only
last person joined: 19 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

RADIUS Client did not complete EAP transaction

This thread has been viewed 28 times
  • 1.  RADIUS Client did not complete EAP transaction

    Posted Nov 07, 2022 03:39 PM
    Firmware Version Aruba Central: 8.10.0.3_84941 
    ClearPass Policy Manager 6.9.5.131053

    We are starting to see these Timeouts more frequently in Clearpass. It is not completely stopping users from connecting, it just interupts their connection for what seems like a random amount of time. 

     

    I saw a previous thread about this where the users were constantly receiving this Alert, but since mine doesn't seem to be happening all the time I am wondering if I have a setting somewhere that I'm missing. It would be helpful if someone could point me in the right direction to at least troubleshooting the issue. 





    2022-11-04 18:26:24,906 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: Starting Service Categorization - 218:277:7aa0934c063b
    2022-11-04 18:26:24,909 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99975 h=223 r=R0000c343-01-63654b40] INFO Core.ServiceReqHandler - Service classification result = mbvb_staff_Wireless_802.1x_service
    2022-11-04 18:26:24,910 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - Service Categorization time = 4 ms
    2022-11-04 18:26:24,910 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: The request has been categorized into service "mbvb_-_staff_Wireless_802.1x_service"
    2022-11-04 18:26:24,910 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_ldap: searching for user frankie@it.nl in AD:dc01.mbvb.local
    2022-11-04 18:26:24,911 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_ldap: found user frankie@it.nl in AD:dc01.mbvb.local
    2022-11-04 18:26:24,911 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - LDAP/AD User lookup time = 1 ms
    2022-11-04 18:26:24,911 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_eap_peap: Initiate
    2022-11-04 18:26:24,911 [Th 41 Req 204057 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 218:88:7aa0934c063b:AOoAQQCuAPYZHQMA9Sr4beYSEcP9AM8hWE67gw==
    2022-11-04 18:26:24,946 [Th 40 Req 204058 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "mbvb_staff_Wireless_802.1x_service" - 219:478:7aa0934c063b
    2022-11-04 18:26:24,946 [Th 40 Req 204058 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - TLS_accept:error in SSLv3 read finished A
    2022-11-04 18:26:24,946 [Th 40 Req 204058 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - TLS_accept:error in SSLv3 read finished A
    2022-11-04 18:26:24,946 [Th 40 Req 204058 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 219:232:7aa0934c063b:AJcAlABoACYaHQMAqEVbx9lGjZM0K/PTtyRZzQ==
    2022-11-04 18:26:24,987 [Th 39 Req 204059 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "mbvb_staff_Wireless_802.1x_service" - 220:346:7aa0934c063b
    2022-11-04 18:26:24,987 [Th 39 Req 204059 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_eap_peap: Session established.
    2022-11-04 18:26:24,987 [Th 39 Req 204059 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 220:122:7aa0934c063b:ADgA+wBbAAMbHQMAEOsLnHsVjmTlsFDz2WE6EQ==
    2022-11-04 18:26:25,008 [Th 42 Req 204060 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "mbvb_staff_Wireless_802.1x_service" - 221:354:7aa0934c063b
    2022-11-04 18:26:25,008 [Th 42 Req 204060 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_eap_mschapv2: Issuing Challenge
    2022-11-04 18:26:25,008 [Th 42 Req 204060 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 221:172:7aa0934c063b:ABUAMwC4AK0cHQMAfFvifr1LLZW8IUlRGs+rsA==
    2022-11-04 18:26:25,063 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "mbvb_-_staff_Wireless_802.1x_service" - 222:408:7aa0934c063b
    2022-11-04 18:26:25,064 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_service: The request was categorized into service "mbvb_-_staff_Wireless_802.1x_service" - 29:0:7aa0934c063b
    2022-11-04 18:26:25,064 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_eap_mschapv2: Received MSCHAPv2 Response from client
    2022-11-04 18:26:25,064 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_mschap: MSCHAPv2 username used for challenge computation frankie@it.nl
    2022-11-04 18:26:25,064 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_mschap: Using domain MBVB from objectSid attribute
    2022-11-04 18:26:25,064 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_mschap: authenticating user frankie.denheijer, domain MBVB
    2022-11-04 18:26:25,072 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_mschap: user frankie.denheijer authentication failed
    2022-11-04 18:26:25,072 [Th 37 Req 204061 SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - rlm_mschap: AD status:Logon failure (0xc000006d)
    2022-11-04 18:26:25,072 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - MS-Chap User Authentication time = 8 ms
    2022-11-04 18:26:25,072 [Th 37 Req 204061 SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
    2022-11-04 18:26:25,072 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_eap_mschapv2: Sending MSCHAPv2 Failure
    2022-11-04 18:26:25,072 [Th 37 Req 204061 SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - reqst_update_state: Access-Challenge 222:198:7aa0934c063b:AL0AGQD4AL4dHQMAQdTzZf/0mpLJlpxeJmFuxg==
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - reqst_clean_list: Deleting request sessid - R0000c343-01-63654b40, state - AL0AGQD4AL4dHQMAQdTzZf/0mpLJlpxeJmFuxg=
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - reqst_clean_list: Packet 218:277:88:7aa0934c063b recv 1667582784.906070 - resp 1667582784.911764
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - reqst_clean_list: Packet 219:478:232:7aa0934c063b recv 1667582784.946150 - resp 1667582784.946889
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - reqst_clean_list: Packet 220:346:122:7aa0934c063b recv 1667582784.987264 - resp 1667582784.987742
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - reqst_clean_list: Packet 221:354:172:7aa0934c063b recv 1667582785.8172 - resp 1667582785.8846
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] ERROR RadiusServer.Radius - reqst_clean_list: Packet 222:408:198:7aa0934c063b recv 1667582785.63763 - resp 1667582785.72948
    2022-11-04 18:27:15,820 [main SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_policy: Starting Policy Evaluation.
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO Common.EndpointTable - Returning NULL (EndpointPtr) for macAddr 7aa0934c063b
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO Common.TagDefinitionCacheTable - No InstanceTagDefCacheMap found for instance id = 3006 entity id = 29
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO Common.TagDefinitionCacheTable - Building the TagDefMapTable for NAD instance=3006
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO Common.TagDefinitionCacheTable - Built 0 tag(s) for NAD instanceId=3006|entityId=29
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO TAT.TagAttrHolderBuilder - No tags built for instanceId=3006|entity=Device
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO TAT.AluTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL AuthLocalUser)
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO TAT.GuTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL GuestUser)
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO TAT.EndpointTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL Endpoint)
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 r=psauto-1666380715-99979 h=239 r=R0000c343-01-63654b40] INFO TAT.OnboardTagAttrHolderBuilder - buildAttrHolder: Tags cannot be built for instanceId=0 (NULL Onboard Device User)
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - *** PE_TASK_SCHEDULE_RADIUS Started ***
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskAuthSourceRestriction **
    2022-11-04 18:27:15,823 [RequestHandler-1-0x7fa33abf5700 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskRoleMapping **
    2022-11-04 18:27:15,824 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskAuthSourceRestriction **
    2022-11-04 18:27:15,825 [RequestHandler-1-0x7fa33abf5700 h=937327 c=R0000c343-01-63654b40] INFO Core.PETaskRoleMapping - Roles: Corporate_Employee Role
    2022-11-04 18:27:15,826 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskRoleMapping **
    2022-11-04 18:27:15,826 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskPolicyResult **
    2022-11-04 18:27:15,826 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskPolicyResult **
    2022-11-04 18:27:15,826 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskEnforcement **
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 h=937330 c=R0000c343-01-63654b40] INFO Core.PETaskEnforcement - EnfProfiles: bvb_Corporate_Employee_Wireless_Profile
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskEnforcement **
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskRadiusEnfProfileBuilder **
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskRadiusCoAEnfProfileBuilder **
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskAppEnfProfileBuilder **
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskAgentEnfProfileBuilder **
    2022-11-04 18:27:15,827 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskPostAuthEnfProfileBuilder **
    2022-11-04 18:27:15,828 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskGenericEnfProfileBuilder **
    2022-11-04 18:27:15,828 [RequestHandler-1-0x7fa33abf5700 h=937336 c=R0000c343-01-63654b40] INFO Core.PETaskGenericEnfProfileBuilder - getApplicableProfiles: No App enforcement (Generic) profiles applicable for this device
    2022-11-04 18:27:15,828 [RequestHandler-1-0x7fa33abf5700 h=937331 c=R0000c343-01-63654b40] INFO Core.PETaskRadiusEnfProfileBuilder - EnfProfileAction=ACCEPT
    2022-11-04 18:27:15,828 [RequestHandler-1-0x7fa33abf5700 h=937331 c=R0000c343-01-63654b40] INFO Core.PETaskRadiusEnfProfileBuilder - Radius enfProfiles used: bvb_Corporate_Employee_Wireless_Profile
    2022-11-04 18:27:15,828 [RequestHandler-1-0x7fa33abf5700 h=937331 c=R0000c343-01-63654b40] INFO Core.EnfProfileComputer - getFinalSessionTimeout: sessionTimeout = 43200
    2022-11-04 18:27:15,829 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskGenericEnfProfileBuilder **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskAgentEnfProfileBuilder **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskAppEnfProfileBuilder **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskCliEnforcement **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 h=937337 c=R0000c343-01-63654b40] INFO Core.PETaskCliEnforcement - startHandler: No commands for CLI enforcement
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskRadiusEnfProfileBuilder **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937335 c=R0000c343-01-63654b40] WARN Core.PETaskPostAuthEnfProfileBuilder - handleHttpResponseEv: Fetching Radius attributes from battery failed, errMsg=
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937335 c=R0000c343-01-63654b40] INFO Core.PETaskPostAuthEnfProfileBuilder - getApplicableProfiles: No Post auth enforcement profiles applicable for this device
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937332 c=R0000c343-01-63654b40] WARN Core.PETaskRadiusCoAEnfProfileBuilder - handleHttpResponseEv: Fetching Radius attributes from battery failed, errMsg=
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskCliEnforcement **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskPostAuthEnfProfileBuilder **
    2022-11-04 18:27:15,831 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskRadiusCoAEnfProfileBuilder **
    2022-11-04 18:27:15,832 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskAuthStatusInfo **
    2022-11-04 18:27:15,832 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskOutputPolicyRes **
    2022-11-04 18:27:15,832 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Starting PETaskSessionLog **
    2022-11-04 18:27:15,835 [RequestHandler-1-0x7fa33abf5700 h=937339 c=R0000c343-01-63654b40] INFO Core.XpipPolicyResHandler - populateResponseTlv: PETaskPostureOutput does not exist. Skip sending posture VAFs
    2022-11-04 18:27:15,835 [RequestHandler-1-0x7fa33abf5700 h=937339 c=R0000c343-01-63654b40] INFO Core.PolicyResCollector - getSohr: Failed to generate Sohr
    2022-11-04 18:27:15,835 [RequestHandler-1-0x7fa33abf5700 h=937338 c=R0000c343-01-63654b40] INFO Core.PolicyResCollector - getSohr: Failed to generate Sohr
    2022-11-04 18:27:15,836 [main SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - Policy Evaluation time = 16 ms
    2022-11-04 18:27:15,836 [main SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_policy: Received Accept Enforcement Profile
    2022-11-04 18:27:15,836 [main SessId R0000c343-01-63654b40] INFO RadiusServer.Radius - rlm_policy: Policy Server reply does not contain Posture-Validation-Response
    2022-11-04 18:27:15,836 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskSessionLog **
    2022-11-04 18:27:15,836 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskOutputPolicyRes **
    2022-11-04 18:27:15,836 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - ** Completed PETaskAuthStatusInfo **
    2022-11-04 18:27:15,836 [RequestHandler-1-0x7fa33abf5700 r=R0000c343-01-63654b40 h=937325 c=R0000c343-01-63654b40] INFO Core.PETaskScheduler - *** PE_TASK_SCHEDULE_RADIUS Completed ***


  • 2.  RE: RADIUS Client did not complete EAP transaction

    EMPLOYEE
    Posted Nov 09, 2022 10:38 AM
    Based on 'rlm_mschap: FAILED: MS-CHAP2-Response is incorrect', I would think there is something wrong with your domain controllers or the ClearPass join to the domain.

    Please be advised that PEAP-MSCHAPv2 should be avoided because it uses broken cryptography, and even Microsoft deprecates its use.

    If you really want to continue with MSCHAPv2, and can't find any issue in your domain controller or the ClearPass domain joins, please work with Aruba TAC Support as this is unlikely to be solved without having a detailed look into your deployment.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------