ArubaOS and Controllers

Occasional Contributor I

ArubaOS 6.1.x: Dual stack guest users

After upgrading from via to I have noticed that there is a problem with dual stack guest clients.

First everything works fine, guests can login and work. After a while (minutes or hours) some guest users get the following error message in their browser:
Web authentication is disabled. Please contact the administrator for assistance.

The workaround is to reset the client WLAN adapter.

The problem is that the controller adds both IP addresses from dual stack clients. In our guest network there is no IPv6 router, so the clients send their link-local addresses. After time out of the IPv6 entry the error message occurs.
This behavior can also be triggered with: aaa ipv6 user delete mac xxxxxxxx

Question: Is it possible to prevent learning IPv6 addresses in the guest network?

IPv6 should still be enabled in our intranet, so disabling IPv6 globally is not an option.

I've already added following access-list to the guest-logon user with no success:
ip access-list session IPv6-denyall
ipv6 any any any deny

Thanks in Advance
Guru Elite

Re: ArubaOS 6.1.x: Dual stack guest users

Please open a TAC case about this so that it can get replicated and we can find a solution for you, if possible.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
New Contributor

Re: ArubaOS 6.1.x: Dual stack guest users

For what it's worth, we're encountering the exact same problem after upgrading to We'll submit our own case, but I wanted to stress that this problem is not isolated.

Dual-stack clients are having their lesser-used IPv6 addresses (local *or* global) aged out, which also impacts the user's IPv4 session. Users experience this as wireless instability. Disabling IPv6 on the client appears to solve this issue, but we require access to IPv6 in our environment.

#show user-table f0:b4:79:1e:eb:9a captiveportal guest 00:00:07
fe80::f2b4:79ff:fe1e:eb9a f0:b4:79:1e:eb:9a captiveportal guest 00:00:07

5 minutes later:
MAC=f0:b4:79:1e:eb:9a IP=fe80::f2b4:79ff:fe1e:eb9a User entry deleted: reason=idle timeout
Search Airheads
Showing results for 
Search instead for 
Did you mean: