Controllerless Networks

Hi,

I've got a small network of 3 Aruba IAP-105s (firmware 6.1.3.1-3.0.0.1_33617), serving two SSIDs on two VLANs -- using the untagged VLAN for management traffic.

It seems that recently (possibly with a recent firmware upgrade) IPV6 router solicitation messages -- and it seems any IPv6 multicast traffic -- coming from wireless clients are not making it to the wired network. Clients on the wired network seem to do all right. 

I've got mutlicast "optimization" and broadcast filtering disabled on these SSIDs -- but I've tested with "optimization" on and still don't see the expected traffic.

Are there any known limitations with the newer firmware versions, multicast, and IPv6 that I'm missing here? Swear this was working fine a couple of months ago!

-rob

Can you please tell me what the last 'working' image you had on the IAPs for this to work?

thanks,

Shashi

This was certainly working when I was running the the 6.1.2.3-2.0.0.0 series code.

If its any help, I've got mostly OSX & FreeBSD on the network, and a NetGear GS724TP switch. I only became aware of this situation when I couldn't access any of my AirPlay devices that were wireless-connected -- Apple would like to use IPv6 multicast for discovery if the client has an active IPv6 stack. (the temporary solution has been to completely disable the ipv6 stack on the client to force it to use ipv4)

If you have a URL for the previous (6.1.2.3-2.0.0.0) firmware, I could try to downgrade the wireless firmware and verify the previous functionality.

Thanks!

Do you have an account on the Aruba support site? All images are posted there including Instant 2.0.

Drop me a note if you encounter any issues.

I am checking with my engineering team to see if there could be anything that could break this - but we may not have tested for this use case internally.

thanks,

Shashi

ssastry@arubanetworks.com

I did a quick test using IAP image version 6.1.3.1-3.0.0.1_33617 and did a packet capture. I see both ipv6 and ipv4 queries and responses with an iPad and apple tv. 

So, this is working even with the latest Instant code.

thanks,

Shashi

Thanks for testing. I may a factory reset on my switch and IAPs to see if some bad setting snuck in somewhere. Will follow up and let you know the results.

It seems that downgrading to 6.1.2.3-2.0.0.4_32946 does actually fix this problem. Since I don't need any 6.1.3.1 features right now, this isn't a big deal.

To be more specific, the traffic that isn't making it onto the wireless network (or between wireless hosts) in 6.1.3.1 is the IPv6 multicast traffic (ethernet 33:33:xx:xx:xx:xx).

Redacted configuration:

version 6.1.2.0-2.0.0
virtual-controller-country US
virtual-controller-key XXX
name nofocus
virtual-controller-ip 192.168.4.6
syslog-server 192.168.4.1
terminal-access
ntp-server 192.168.4.1
clock timezone Pacific-Time -08 00
rf-band all

allow-new-aps
allowed-ap XXX
allowed-ap YYY
allowed-ap ZZZ

arm
wide-bands 5ghz
a-channels 36+,44+,149+,157+
g-channels 1,6,11
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
scanning


syslog-level warn ap-debug 
syslog-level warn network 
syslog-level warn security 
syslog-level warn system 
syslog-level warn user 
syslog-level warn user-debug 
syslog-level warn wireless 

mgmt-user admin XXX

wlan ssid-profile FreePublicWifi
index 0
type employee
essid FreePublicWifi
wpa-passphrase XXX
opmode wpa2-psk-aes
vlan 103
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none

wlan ssid-profile CostlyPublicWifi
index 1
type employee
essid CostlyPublicWifi
opmode opensystem
vlan 102
rf-band 2.4
captive-portal disable
dtim-period 1
inactivity-timeout 1000
broadcast-filter none

enet-vlan guest

wlan access-rule default_dev_rule
index 0
rule any any match any any any deny

wlan access-rule FreePublicWifi
index 1
rule any any match any any any permit

wlan access-rule CostlyPublicWifi
index 2
rule any any match any any any permit

wlan external-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"

ids classification

ids
wireless-containment none

Can you please send me a topology diagram with some idea of you IP addresses?

client -> IAP -> switch/router -> IAP -> client <something like this?>

and what is failing.

thanks,

Shashi (ssastry@arubanetworks.com)

Thanks robertbanz for posting your note.  I too was having issues with 6.1.3.1 when reattaching Windows 7 computers to my homegroup.  Had to hardwire the laptops to rejoin the group.  I was then able to print over WiFi.

I just down graded the Instant to 6.1.2.3 and was able to rejoin my homegroup successfully.

Thanks.

I can report that IPv6 still does not work in 6.1.3.4-3.1.0.0_35320.

Is IPv6 on Instant tested by Aruba before each software release? It is late 2012 and IPv6 should, IMHO, be considered a critical feature that can not be ignored for several versions. And I know that Aruba has been aware of this problem for several months now.

It would be great if we can get an offical response from Aruba on this.

---

@jschlyter wrote:

I can report that IPv6 still does not work in 6.1.3.4-3.1.0.0_35320.

 

Is IPv6 on Instant tested by Aruba before each software release? It is late 2012 and IPv6 should, IMHO, be considered a critical feature that can not be ignored for several versions. And I know that Aruba has been aware of this problem for several months now.

 

It would be great if we can get an offical response from Aruba on this.

 

---

jschlyter,

Have you reported an issue?  What IPv6 feature is not working?

Yes, I have reported this issue to my local Support Engineer. 

IPv6 multicast does not work; hence not much works at all. This also impacts Apple Airplay, which uses IPv6 link-local.

    jakob

Passthrough of IPv6 traffic from clients will be supported in the next release of the Instant software. i.e 3.2

Michael

Any ETA for 3.2?

    jakob