Controllerless Networks

Hi team,

I have configured ARUBA instant AP 228 and setup 3 SSIDs. The instant SSID is gone once I have configured the corporate SSIDs which is an expected behaviour. However none of the configured SSID is broadcasting. I have removed the checkmark as well from disable when uplink is not available but that doen't make any difference. 

The AP has been connected through a POE switch and all 6 antennas are connected to AP.

Would you please advise what may be causing it?

Your switch is 802.3at and supports LLDP? Is the LED on the 288 green or red? I assume green since you infer you can reach the GUI. What country is this as well?

The switch is not at switch. I am not sure of support for LLDP. Is it required?

The light on AP is green.

Country is New Zealand.

You may then need to get an 802.3at power injector or an 802.3at with with LLDP to properly power the 228. It requires 802.3at for full functionality. The only way to know FOR SURE is to connect to the AP's console port and capture all the serial output from powerup until it's 'up' but not working.

Sure I can capture that. However I am bit lost to how to use miniusb as serial? I tried to connect to AP and to my laptop but putty won't support serial connection on USB? Any guidance will be appreciated.

Sir,

Please download the USB console driver here and install it:  https://support.arubanetworks.com/ToolsResources/tabid/76/DMXModule/514/EntryId/7511/Default.aspx

After that, plug in the USB into your computer and then to the AP.  It will be recognized as a com port in Device Manager.  Use a terminal program like putty to connect via serial to that com port with 9600, No flow control.

Awesome. I will be at client end next week and I will get back to you with more and complete information. I will check if switch is an "at" switch and will try to grab boot output.

Thanks for helping.

One more quick questions so that I have complete information when I go to our client. I can see in the spec notes the following:

• Worst-case power consumption from the AP: 23W
• Power sources sold separately
• Power over Ethernet (PoE+): 802.3at-compliant

My question is that what is the power conmsuption in normal scenario for AP 228 to power on all antennas and for proper functioning?

That's highly dependent on radio power, client load, etc. The max is provided assuming the AP is under 100% load. 

Thanks Jerrod. Got it.

I have extracted MAC addresses from their on premesis controller for the SSID based on MAC based authentication. What is the best way to import it to IAP 228? I can't figure out on the GUI under security under users that where to import.

What are you trying to do again? MAC whitelist of clients? Any specific requirement or reason? MAC filtering is not very secure.

We have a customer who has handheld devices and we have a request to setup open SSID with no WPA2 authentication and with MAC based authenticaiton. So yes in a sense we are doing MAC address whitelisting.

I got the mac address list from the setup at their head office on Aruba mobility controller 3200 and this is what I have done to import the users in IAP. May be it is helpful for others who are searching for same:

on IAP, on CLI, I ran following commands:

configure

config#:

user 002376ac6485 002376ac6485 radius
user 002368ce62ee 002368ce62ee radius
user e0b9a50a7378 e0b9a50a7378 radius
user 742f68632af9 742f68632af9 radius
user e0469a334c30 e0469a334c30 radius
user 742f68c02ed1 742f68c02ed1 radius

Having Radius keyword will add user under employee role. replace it with keyword "portal" to import user as guest.

Am I right Jerrod?

I am not sure, looks right, but to be honest it's not anything I have ever actually tried. Let usk now if it doesn't work.

I will be at customer site on Friday to do the setup. I will update you.

Hi Team.

I need urgent help.

I have configured IAP 228 and IAP 275. Configuration is all good and all new APs are working fine.Clients are able to connect.

However on site there were 3 old 105 IAPs which are not connecting to the new APs. I have factory reset all three but still no success. The lights on 105 are red for enet, 11A/N and 11B/G/N. Only power is green. I can see on console that it can detect the new master AP which is one of AP 228 but not getting the config.

I am trying to upgrade OS on 105 through upgrade-image command but no success. It does nothing.

Please advise.

Following is the config: 

24:de:c6:cd:5e:16# show run
virtual-controller-key 0b39281f01ca01308eda639426365df343da25e189a044c830
name instant-CD:5E:16
clock timezone none 00 00
rf-band all

arm
wide-bands 5ghz
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access

syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless

auth-survivability cache-time-out 24

wlan external-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"

blacklist-time 3600
auth-failure-blacklist-time 3600

ids
wireless-containment none

uplink
preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180

airgroup
disable

airgroupservice airplay
disable
description AirPlay

airgroupservice airprint
disable
description AirPrint

24:de:c6:cd:5e:16#

What version of Instant is the working cluster on?

I have updated 105 to ArubaInstant_Orion_6.4.2.6-4.1.3.1_55246

But issue still persis.

The 105 must be running  6.4.3.1-4.2.0.0_51112 as well.  You will need to upgrade it on a separate network.

Please let me know if you need that software for the 105.

I have just donwloaded the one which you sent. I am now going to upload it.

Awesome Colin! You are the man. All up now. Doing the last AP 105 and I will be done. Thanks a bunch for helping me.

Why the Instant OS is not available under support portal? I downloaded the one yesterday to be on safe side but still had a hard time here. I thought so the OS must be same on the devices.