Controllerless Networks

Occasional Contributor II

Can't ping IAPs from LAN over IPSec Tunnel



I have created an IPSEC VPN tunnel between my IAP cluster and the Aruba Mobility Controller. I can see that an inner IP address has been assigned to the IAP VC by the IAP pool I have configured on the Mobility Controller.


#show iap table

Trusted Branch Validation: Disabled
IAP Branch Table
Name            VC MAC Address     Status  Inner IP       Assigned Subnet  Assigned Vlan
----            --------------     ------  --------       ---------------  -------------
Aruba-LAB-WLC1  f0:5c:19:c1:0e:b0  UP


I have added a static route on the core switch (All SVIs live off the core) to say with next hop to the Mobility Controller. The core switch is connected to the Mobility Controller. The Mobility Controller's default gateway is pointing to the core switch. Unfortunately, when I ping the IP from either the core switch or a host on LAN subnet, I'm getting ping timeouts.


I've also tried creating a VLAN and it's L3 interface on the Mobility Controller with IP address picked from a spare IP in the IAP pool but didn't make any difference apart from being able to ping to the L3 interface on the LAN.


Not sure where the problem is as it looks as though the routing is OK. The objective is to confirm connectivity from the LAN to the IAPs first before I can configure Airwave communicate with them.


Your assistance is  much appreciated.

Search Airheads
Showing results for 
Search instead for 
Did you mean: