User Limit for Per-AP Radio Profiles

MVP Expert
MVP Expert
Requirement:

How to configure User limit for Per-AP radio profiles for per SSID?


 

 



Solution:

This feature is supported from Aruba Instant 6.5.0.0 - 4.3.0.0 version.

Starting from this specific version, the maximum clients configuration can be set individually for an SSID radio profile, using the IAP CLI.

Earlier version of Instant we had this option limited to configuring the max-clients globally for both 'a' and 'g' radio profile. From this version, this feature is enhanced to configure maximum number of users per radio/per SSID basis.



Configuration:

18:64:72:cd:76:96# show network

Networks
--------
Profile Name  ESSID  Clients  Type      Band  Authentication Method  Key Management  IP Assignment  Status   Zone  Coding   Active
------------  -----  -------  ----      ----  ---------------------  --------------  -------------  ------   ----  ------   ------
test          test   0        employee  all   None                   WPA2-AES        Default VLAN   Enabled  -     Default  Yes
test2         test2  0        employee  all   None                   None            Default VLAN   Enabled  -     Default  Yes

18:64:72:cd:76:96# a-max-clients ?
<ssid_profile>     SSID profile name

18:64:72:cd:76:96# a-max-clients test ?
<max>     max-clients

18:64:72:cd:76:96# a-max-clients test2 10
18:64:72:cd:76:96# g-max-clients test2 20
18:64:72:cd:76:96# a-max-clients test 50
18:64:72:cd:76:96# g-max-clients test 30
18:64:72:cd:76:96# commit apply
committing configuration...
configuration committed.

Note: No option to configure this parameter from WebUI. 

 



Verification

From CLI:

 

18:64:72:cd:76:96# show a-max-clients test
a-max-clients: 50
18:64:72:cd:76:96# show a-max-clients test2
a-max-clients: 10
18:64:72:cd:76:96# show g-max-clients test2
g-max-clients: 20
18:64:72:cd:76:96# show g-max-clients test
g-max-clients: 30
 

Difference in implementation of this feature between IAP types:


a.       In IAP 205, once max user limit is reached,
           i.      New client trying to associate will receive an assoc response with status code “AP is resource constrained-Max Clients Associated”


9c:1c:12:c7:ea:d6# show ap debug mgmt-frames
 
Traced 802.11 Management Frames
-------------------------------
Timestamp        stype       SA                 DA                 BSS                signal  Misc
---------        -----       --                 --                 ---                ------  ----
Jul  5 14:25:21  assoc-resp  9c:1c:12:fe:ad:70  c8:6f:1d:2d:00:7f  9c:1c:12:fe:ad:70  15      AP is resource constrained-Max Clients Associated
Jul  5 14:25:21  assoc-req   c8:6f:1d:2d:00:7f  9c:1c:12:fe:ad:70  9c:1c:12:fe:ad:70  0       -
Jul  5 14:25:21  auth        9c:1c:12:fe:ad:70  c8:6f:1d:2d:00:7f  9c:1c:12:fe:ad:70  15      Success (seq num 0)
Jul  5 14:25:21  auth        c8:6f:1d:2d:00:7f  9c:1c:12:fe:ad:70  9c:1c:12:fe:ad:70  0       -
Jul  5 14:24:30  assoc-resp  9c:1c:12:fe:ad:70  80:86:f2:80:fc:a5  9c:1c:12:fe:ad:70  15      Success
Jul  5 14:24:30  assoc-req   80:86:f2:80:fc:a5  9c:1c:12:fe:ad:70  9c:1c:12:fe:ad:70  0       -
Jul  5 14:24:30  auth        9c:1c:12:fe:ad:70  80:86:f2:80:fc:a5  9c:1c:12:fe:ad:70  15      Success (seq num 0)
Jul  5 14:24:30  auth        80:86:f2:80:fc:a5  9c:1c:12:fe:ad:70  9c:1c:12:fe:ad:70  0       -
 


b.      But in IAP 325, once max user limit is reached, 
         i.      New client trying to associate will receive an assoc response with with status code Success along with AID.
         ii.      IAP then sends a Deauth with reason code “Deauthenticated because sending STA is leaving (or has left) IBSS or ESS (0x0003)” (which is not the behavior with 205)

 


Master# show ap debug mgmt-frames
 
Traced 802.11 Management Frames
-------------------------------
Timestamp        stype         SA                 DA                 BSS                signal  Misc
---------        -----         --                 --                 ---                ------  ----
Jul  5 13:10:14  deauth        ac:a3:1e:54:6f:d1  00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  15      AP is resource constrained (seq num 1028)
Jul  5 13:10:14  reassoc-resp  ac:a3:1e:54:6f:d1  00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  15      Success
Jul  5 13:10:14  reassoc-req   00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  ac:a3:1e:54:6f:d1  52      -
Jul  5 13:10:14  auth          ac:a3:1e:54:6f:d1  00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  15      Success (seq num 2056)
Jul  5 13:10:14  auth          00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  ac:a3:1e:54:6f:d1  0       -
Jul  5 13:10:07  deauth        ac:a3:1e:54:6f:d1  00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  15      AP is resource constrained (seq num 1028)
Jul  5 13:10:07  assoc-resp    ac:a3:1e:54:6f:d1  00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  15      Success
Jul  5 13:10:07  assoc-req     00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  ac:a3:1e:54:6f:d1  53      -
Jul  5 13:10:07  auth          ac:a3:1e:54:6f:d1  00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  15      Success (seq num 2056)
Jul  5 13:10:07  auth          00:0f:08:c6:5a:4d  ac:a3:1e:54:6f:d1  ac:a3:1e:54:6f:d1  0       -
 
Version history
Revision #:
2 of 2
Last update:
‎03-31-2019 11:17 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: