Reply
Highlighted
Occasional Contributor II

Re: RAP backup SSID & APIPA

Here is the tested configuration: base from KB Article

Vlan 500

ip access-list session Hotel
any any svc-dhcp permit
any any any route src-nat

user-role HotelRole
access-list session Hotel

aaa profile "AAA_Hotel"
initial-role "HotelRole"

wlan ssid-profile "BackupSSID"
essid "hotel"
wpa-passphrase hotelbackup

ap system-profile "hotelsystem"
lms-ip x.x.x.x
bkup-lms-ip
lms-preemption
rap-dhcp-server-Vlan 500
rap-dhcp-lease 1

wlan virtual-ap "VAP_Hotel"
aaa-profile "AAA_Hotel"
ssid-profile "BackupSSID"
Vlan 500
forward-mode bridge
no mobile-ip
dynamic-mcast-optimization
rap-operation backup

wlan virtual-ap "VAPprofile"
aaa-profile "employee_profile"
ssid-profile "CorpSSID"
vlan 100
no mobile-ip

ap wired-ap-profile "Wired_Hotel"
wired-ap-enable
switchport access vlan 100

ap wired-port-profile "Port_Hotel"
wired-ap-profile "Wired_Hotel"
rap-backup
aaa-profile "employee_profile"

ap-group "HotelGroup"
virtual-ap "VAP_Hotel"
virtual-ap "VAPprofile"
enet1-port-profile "Port_Hotel"
ap-system-profile "hotelsystem"

If the RAP see the controller the RAP is working fine CorpSSID is working fine. once you connect a simulated hotel using GIS-R6 from Guest Internet to simulate the hotel the RAP wont provide any ip address anymore. therefore if you try to associate to the Backup SSID it will tell you cannot connect. If you plug your notebook to the physical Enet1 you will get the self assign address 169.x.x.x

Do we have a permanent fix or working solution on the hotel type of access?

thanks
Highlighted
Guru Elite

Re: RAP backup SSID & APIPA


Here is the tested configuration: base from KB Article

Vlan 500

ip access-list session Hotel
any any svc-dhcp permit
any any any route src-nat

user-role HotelRole
access-list session Hotel

aaa profile "AAA_Hotel"
initial-role "HotelRole"

wlan ssid-profile "BackupSSID"
essid "hotel"
wpa-passphrase hotelbackup

ap system-profile "hotelsystem"
lms-ip x.x.x.x
bkup-lms-ip
lms-preemption
rap-dhcp-server-Vlan 500
rap-dhcp-lease 1

wlan virtual-ap "VAP_Hotel"
aaa-profile "AAA_Hotel"
ssid-profile "BackupSSID"
Vlan 500
forward-mode bridge
no mobile-ip
dynamic-mcast-optimization
rap-operation backup

wlan virtual-ap "VAPprofile"
aaa-profile "employee_profile"
ssid-profile "CorpSSID"
vlan 100
no mobile-ip

ap wired-ap-profile "Wired_Hotel"
wired-ap-enable
switchport access vlan 100

ap wired-port-profile "Port_Hotel"
wired-ap-profile "Wired_Hotel"
rap-backup
aaa-profile "employee_profile"

ap-group "HotelGroup"
virtual-ap "VAP_Hotel"
virtual-ap "VAPprofile"
enet1-port-profile "Port_Hotel"
ap-system-profile "hotelsystem"

If the RAP see the controller the RAP is working fine CorpSSID is working fine. once you connect a simulated hotel using GIS-R6 from Guest Internet to simulate the hotel the RAP wont provide any ip address anymore. therefore if you try to associate to the Backup SSID it will tell you cannot connect. If you plug your notebook to the physical Enet1 you will get the self assign address 169.x.x.x

Do we have a permanent fix or working solution on the hotel type of access?

thanks




Please open a case so that they can dive into the particulars of your deployment. The feature indeed works. Support needs to find out why it does not work for you.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: