Controllerless Networks

last person joined: 15 hours ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

This thread has been viewed 0 times

  • 1.  10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 30, 2017 05:56 AM

    Hello,

        I hav ethe most strangest of strange issues with an IAP enviorment that i have setup. The aruba cluster have around 59 iap's connected to it. The setup is done as following

    VLAN=Network assigned, Default

    Security=WPA Personal

    Access=Network based

     

    The users get the DHCP directly from the firewall via the access points.

    My problem is sometimes randomly out of the blue users starts getting redirected to instant.arubanetworks.com login page. What ever webpage they open its the same page that they get. This only happens for 10% of users 10% of the time of the regular work hours. So its very random. Can someone please assist?

    below is the config of the aruba's instant controller

     

     

     

    9c:1c:12:c9:65:ea# show all

     

    Swarm Active Laser Beam Sources

    -------------------------------

    bssid  channel  rssi  ap name  lms ip  master ip  inactive time  reported by  

    -----  -------  ----  -------  ------  ---------  -------------  -----------  

    9c:1c:12:c9:65:ea# show configuration

    version 6.2.1.0-3.4.0

    virtual-controller-country ZA

    virtual-controller-key 13d621b501dd965236fdb179b08b2ec6c8c6e3a5ddbdcc3eba

    name Instant-C9:66:74

    virtual-controller-ip 192.168.21.48

    virtual-controller-vlan 1 255.255.252.0 192.168.23.254

    terminal-access

    clock timezone none 00 00

    rf-band all

     

    allow-new-aps

    allowed-ap 9c:1c:12:c9:66:74

    allowed-ap 9c:1c:12:c9:65:ea

    allowed-ap 9c:1c:12:c9:66:26

    allowed-ap 9c:1c:12:c9:66:0f

    allowed-ap 9c:1c:12:c9:66:2c

    allowed-ap 9c:1c:12:c9:96:ab

    allowed-ap 9c:1c:12:c9:66:77

    allowed-ap 9c:1c:12:c9:65:f1

    allowed-ap 9c:1c:12:c9:66:7a

    allowed-ap 9c:1c:12:c9:66:7e

    allowed-ap 9c:1c:12:c9:65:b9

    allowed-ap 9c:1c:12:c9:66:8b

    allowed-ap 9c:1c:12:c9:65:c8

    allowed-ap 9c:1c:12:c9:66:4d

    allowed-ap 9c:1c:12:c9:66:8a

    allowed-ap 9c:1c:12:c9:66:37

    allowed-ap 9c:1c:12:c9:66:30

    allowed-ap 9c:1c:12:c9:66:22

    allowed-ap 9c:1c:12:c9:66:1d

    allowed-ap 9c:1c:12:c9:66:99

    allowed-ap 9c:1c:12:c9:66:ad

    allowed-ap 9c:1c:12:c9:66:32

    allowed-ap 9c:1c:12:c9:66:29

    allowed-ap 9c:1c:12:c8:fa:f4

    allowed-ap 9c:1c:12:c9:66:07

    allowed-ap 9c:1c:12:c9:66:8f

    allowed-ap 9c:1c:12:c9:64:f1

    allowed-ap 9c:1c:12:c9:65:b5

    allowed-ap 9c:1c:12:c9:66:9e

    allowed-ap 9c:1c:12:c9:65:b2

    allowed-ap 9c:1c:12:c9:66:9b

    allowed-ap 9c:1c:12:c9:65:73

    allowed-ap 9c:1c:12:c9:66:71

    allowed-ap 9c:1c:12:c9:66:97

    allowed-ap 9c:1c:12:c9:65:c0

    allowed-ap 9c:1c:12:c9:65:e8

    allowed-ap 9c:1c:12:c9:64:56

    allowed-ap 9c:1c:12:c9:65:c6

    allowed-ap 9c:1c:12:c9:65:7f

    allowed-ap 9c:1c:12:c9:66:86

    allowed-ap 9c:1c:12:c9:65:c7

    allowed-ap 9c:1c:12:c9:66:b1

    allowed-ap 9c:1c:12:c9:63:ea

    allowed-ap 9c:1c:12:c9:66:0a

    allowed-ap 9c:1c:12:c9:66:a0

    allowed-ap 9c:1c:12:c9:66:5c

    allowed-ap 9c:1c:12:c9:66:9d

    allowed-ap 9c:1c:12:c9:66:94

    allowed-ap 9c:1c:12:c9:66:19

    allowed-ap 9c:1c:12:c9:66:96

    allowed-ap 9c:1c:12:c9:66:00

    allowed-ap 9c:1c:12:c9:65:f9

    allowed-ap 9c:1c:12:c9:66:01

    allowed-ap 9c:1c:12:c9:66:7b

    allowed-ap 9c:1c:12:c9:66:84

    allowed-ap 9c:1c:12:c9:66:0e

    allowed-ap 9c:1c:12:c9:66:2a

    allowed-ap 9c:1c:12:c9:66:73

     

     

     

    arm

     wide-bands 5ghz

     min-tx-power 18

     max-tx-power 127

     band-steering-mode prefer-5ghz

     air-time-fairness-mode fair-access

     client-aware

     scanning

     

    syslog-level warn ap-debug 

    syslog-level warn network 

    syslog-level warn security 

    syslog-level warn system 

    syslog-level warn user 

    syslog-level warn user-debug 

    syslog-level warn wireless 

     

     

     

     

     

     

    mgmt-user admin 207282e4985dd2125d520259388ae18a1d8b07ac86e01b97

     

    wlan access-rule default_wired_port_profile

     rule any any match any any any permit

     

    wlan access-rule wired-instant

     rule 192.168.21.48 255.255.255.255 match tcp 80 80 permit

     rule 192.168.21.48 255.255.255.255 match tcp 4343 4343 permit

     rule any any match udp 67 68 permit

     rule any any match udp 53 53 permit

     

    wlan access-rule STUDENTWIFI

     rule any any match any any any permit

     

    wlan ssid-profile STUDENTWIFI

     enable

     index 1

     type employee

     essid STUDENTWIFI

     wpa-passphrase bed2f7c49ca4d2abeddcbbc6ab98cf8cae49d0a712903929

     opmode wpa2-psk-aes

     max-authentication-failures 0

     auth-server InternalServer

     rf-band all

     captive-portal disable

     dtim-period 1

     inactivity-timeout 1000

     broadcast-filter none

     dmo-channel-utilization-threshold 90

     local-probe-req-thresh 0

     max-clients-threshold 64

     

    auth-survivability cache-time-out 24

     

     

     

    wlan external-captive-portal

     server localhost

     port 80

     url "/"

     auth-text "Authenticated"

     auto-whitelist-disable

     

     

    blacklist-time 3600

    auth-failure-blacklist-time 3600

     

    ids classification

     

    ids

     wireless-containment none

     

     

    wired-port-profile wired-instant

     switchport-mode access

     allowed-vlan all

     native-vlan guest

     no shutdown

     access-rule-name wired-instant

     speed auto

     duplex auto

     no poe

     type guest

     captive-portal disable

     no dot1x

     

    wired-port-profile default_wired_port_profile

     switchport-mode trunk

     allowed-vlan all

     native-vlan 1

     shutdown

     access-rule-name default_wired_port_profile

     speed auto

     duplex full

     no poe

     type employee

     captive-portal disable

     no dot1x

     

     

    enet0-port-profile default_wired_port_profile

     

    uplink

     preemption

     enforce none

     failover-internet-pkt-lost-cnt 10

     failover-internet-pkt-send-freq 30

     failover-vpn-timeout 180

     

     

    airgroup

     disable

     

    airgroupservice airplay

     disable

     description AirPlay

     

    airgroupservice airprint

     disable

     description AirPrint

     



  • 2.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time
    Best Answer

    EMPLOYEE
    Posted Mar 30, 2017 06:20 AM

    I would start by upgrading the software on your Instant Cluster here:  http://support.arubanetworks.com/LifetimeWarrantySoftware/tabid/121/DMXModule/661/Default.aspx?EntryId=20388

     

    It seems that you have an old version of software.



  • 3.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 30, 2017 06:24 AM

    Thanks joseph for the reply. When i check on the check for update it is already up to date. Should i manually download the firmware and do it?



  • 4.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    EMPLOYEE
    Posted Mar 30, 2017 06:27 AM

    What version of Instant are you running?



  • 5.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 30, 2017 06:32 AM

    when i run this command on the controller this is the output. is this the version number?

     

     

    9c:1c:12:c9:65:ea# show configuration

    version 6.2.1.0-3.4.0

     

     

     

     



  • 6.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    EMPLOYEE
    Posted Mar 30, 2017 06:36 AM

    That looks old.  I would look at the link to upgrade to the latest GA software.



  • 7.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 30, 2017 06:55 AM

    I am downloading the latest version of the firmware now. Is there a chance that the network would crash? I havent done a manual update before. Is there a way i can revert back to the old firmware if something goes wrong.



  • 8.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 30, 2017 07:03 AM

    I forgot to ask something. The enviroment is a mixed enviorment with 65 IAP 105 and 1 IAP 175. So do i download the firmware for the IAP 175 or the firmware for IAP 105 to do the upgrade? Or is there a specific firmware for the virtual controller?



  • 9.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    EMPLOYEE
    Posted Mar 30, 2017 07:10 AM

    The version of GA code here:  http://support.arubanetworks.com/LifetimeWarrantySoftware/tabid/121/DMXModule/661/EntryId/24665/Default.aspx indicates which firmware should be used for what models.  The IAP-105 and IAP-175 both use "Orion".  I would look at the "Upgrading and IAP" documentation before proceeding:  http://www.arubanetworks.com/techdocs/Instant_423_WebHelp/InstantWebHelp.htm#UG_files/IAP_maintenance/Firmware_Image_Server_in.htm?Highlight=upgrade

     



  • 10.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 31, 2017 02:33 AM

    Hello,

       after the upgrade things were working fine. Today the whole network is off. It is giving out the instant wifi and the other ssid of the network and people cannot connect to the ap. The 11/A/N light is off and the 11/B/G/N is on. I have tried resetting the access point which shows instant ssid but it does not let me log into the AP. Please help urgently. 



  • 11.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    MVP EXPERT
    Posted Mar 31, 2017 04:03 AM

    Hey, the fact that you are seeing the "instant" SSID suggests the AP's are running the factory configuration (there is no configuration present).  Have you tried logging in with admin/admin as the username and password?

     

    *if* all the AP's have lost their configuration, I would suggest powering them all down except for one. Restore your back up to this single AP then power the rest of the AP's up. The AP's with the factory configuration will locate the AP which you restored your backup too (as it will have elected itself to the Master IAP) and then configure themselves automatically.

     

     



  • 12.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Mar 31, 2017 05:53 AM

    Thanks. I found a AP which was lying powered off for sometime. Turned all the other AP's down powered this AP on and this became the master and all the other AP's joined this cluster. But when the AP's came on it took the firmware of that old AP. For now im going to leave it as it is and see where i get with this. Do you know why this would have happened and what i can do to stop this from doing this again?



  • 13.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    EMPLOYEE
    Posted Mar 31, 2017 08:10 AM

    That AP could have a preferred master setting.  You need to disable that setting...http://www.arubanetworks.com/techdocs/Instant_423_WebHelp/InstantWebHelp.htm#UG_files/CustomizeIAPParams/Master_Election_Protocol.htm?Highlight=preferred

     

    You can boot that AP on a separate network and change that.



  • 14.  RE: 10% of users get redirected to instant.arubanetworks.com when trying to browse at any given time

    Posted Apr 07, 2017 03:18 AM

    Almost a week into this issue it seems that everything is back to normal again. No users are getting the captive portal anymore. It seems what did fix the issue was upgrading to the new firmware. I would like to thank everyone that assisted me in this.