Controllerless Networks

last person joined: yesterday 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

IAP Guest issue

This thread has been viewed 3 times

  • 1.  IAP Guest issue

    Posted May 27, 2020 05:50 AM

    Hello Everyone, 

     

    One of our customers has IAPs connected to Aruba Central. 

    Guest VLAN is configured with the following details: 

    Authentication: Cloud Captive Portal

    Client IP assignment: Instant AP assigned

    Client VLAN assignment: Internal VLAN

    They have 5 APs type of 305 and one AP 205. The firmware on the APs is: 6.5.4.15_73677

    Our problem is that on AP205 the guest users are unable to connect to the internet however, I can see that the user is able to authenticate on the captive portal and have an IP address.  

     

    Could you please advise what can be the issue here? 

     

    Thanks in advance!

     



  • 2.  RE: IAP Guest issue

    MVP EXPERT
    Posted May 27, 2020 06:46 AM

    Do the clients have a valid and working DNS server?

    Is the upstream/return routing correct to the IAP?

    Can the IAP reach the internet?

     

    *EDIT* Does the IAP have a valid and working DNS server too?



  • 3.  RE: IAP Guest issue

    Posted May 28, 2020 05:10 AM

    Hello,

     

    Do the clients have a valid and working DNS server?

    - yes, the clients have a google DNS IP address as configured

    Is the upstream/return routing correct to the IAP?

    - should be correct since I could ping 8.8.8.8 from the IAP

    Can the IAP reach the internet?

    - I could ping 8.8.8.8 from the IAP- so should be able to reach the Internet

     

    Thanks!

     



  • 4.  RE: IAP Guest issue

    Posted May 29, 2020 04:51 AM

    From the client can you ping the gateway? if you can, then can you ping 8.8.8.8 from the client? 



  • 5.  RE: IAP Guest issue

    Posted Jun 03, 2020 02:03 AM

    No, the client cannot ping either the default gateway or DNS IP. 

    What can cause this? 

     

    Thanks!



  • 6.  RE: IAP Guest issue

    EMPLOYEE
    Posted Jun 04, 2020 05:48 PM

    From the IAP cli, use the command 'show clients' to locate your guest use and determine the user's role. Is this the expected role for authenticated guest users? User the command 'show access-rule "role"' to see what restrictions are being applied to the user.