Controllerless Networks

I have an Instant AP-275 and i'm new to Instant.  I cant get the "Outdoor" SSID to broadcast. The config is below, Thanks in advance!

 

ac:a3:1e:c0:5f:2a# show run
version 6.4.0.0-4.1.0
virtual-controller-country US
virtual-controller-key fbae5e0901a27461ca6b12122b5dd9499bf2a5c330300143ee
name instant-C0:5F:2A
terminal-access
telnet-server
clock timezone none 00 00
rf-band all

allow-new-aps
allowed-ap ac:a3:1e:c0:5f:2a

 

arm
wide-bands 5ghz
80mhz-support
min-tx-power 18
max-tx-power 127
band-steering-mode prefer-5ghz
air-time-fairness-mode fair-access
client-aware
scanning

ip dhcp pool
subnet 10.1.62.0
subnet-mask 255.255.255.0
dns-server 10.1.20.10
domain-name tecu.local

syslog-level warn ap-debug
syslog-level warn network
syslog-level warn security
syslog-level warn system
syslog-level warn user
syslog-level warn user-debug
syslog-level warn wireless

extended-ssid

 

mgmt-user admin 5a950dab7bcf4ea1d72a4c9ce7bdaeba

wlan access-rule default_wired_port_profile
index 0
rule any any match any any any permit

wlan access-rule wired-instant
index 1
rule masterip 0.0.0.0 match tcp 80 80 permit
rule masterip 0.0.0.0 match tcp 4343 4343 permit
rule any any match udp 67 68 permit
rule any any match udp 53 53 permit

wlan access-rule Outdoor
index 2
rule any any match any any any permit

wlan ssid-profile Outdoor
enable
index 0
type employee
essid Outdoor
wpa-passphrase c5aacf473d9e6d68c3374dd425d1be1d6fb6848437be14b4
opmode wpa2-psk-aes
max-authentication-failures 0
vlan guest
auth-server InternalServer
rf-band all
captive-portal disable
dtim-period 1
inactivity-timeout 10000
broadcast-filter arp
dmo-channel-utilization-threshold 90
local-probe-req-thresh 0
max-clients-threshold 64

auth-survivability cache-time-out 24

 

wlan external-captive-portal
server localhost
port 80
url "/"
auth-text "Authenticated"
auto-whitelist-disable
https

blacklist-time 3600
auth-failure-blacklist-time 3600

ids
wireless-containment none

ip dhcp 62
server-type Distributed,L2
server-vlan 62
ip-range 10.1.62.220 10.1.62.239
subnet-mask 255.255.255.0
lease-time 60000
default-router 10.1.62.1
dns-server 10.1.20.10
domain-name tecu.local
client-count 4

wired-port-profile wired-instant
switchport-mode access
allowed-vlan all
native-vlan guest
no shutdown
access-rule-name wired-instant
speed auto
duplex auto
no poe
type guest
captive-portal disable
no dot1x

wired-port-profile default_wired_port_profile
switchport-mode trunk
allowed-vlan all
native-vlan 1
shutdown
access-rule-name default_wired_port_profile
speed auto
duplex full
no poe
type employee
captive-portal disable
no dot1x

enet0-port-profile default_wired_port_profile

uplink
preemption
enforce none
failover-internet-pkt-lost-cnt 10
failover-internet-pkt-send-freq 30
failover-vpn-timeout 180

airgroup
disable

airgroupservice airplay
disable
description AirPlay

airgroupservice airprint
disable
description AirPrint

 

#3600

What is the output of "show log wireless 50" and "show log system 50"?

Thanks for the quick response!

 

Here is the show log system 50:

ac:a3:1e:c0:5f:2a# show log system 50

Jan 1 00:00:59 syslog: <341005> <ERRS> |AP ac:a3:1e:c0:5f:2a: | terminal access is enabled but dropbear is not running, starting
Jan 1 00:00:59 syslog: <341005> <ERRS> |AP ac:a3:1e:c0:5f:2a: | telnetd is missing, restarting
Jan 1 00:01:02 nanny[2400]: <303022> <WARN> |AP ac:a3:1e:c0:5f:2a: | Reboot Reason: AP rebooted Thu Jan 1 00:06:04 UTC 1970; Critical process /aruba/bin/sapd [pid 6143
Jan 1 00:01:21 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Extended ssid enabled
Jan 1 00:01:21 cli[2476]: <341207> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| AP support up to 16 SSID.
Jan 1 00:01:21 cli[2476]: <341172> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Find enet0 name eth0.
Jan 1 00:01:21 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| cli starting, clearing any dpimgr
Jan 1 00:01:21 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| cli_choose_eth_uplink:eth current uplink set to DHCP
Jan 1 00:01:21 cli[2476]: <341169> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Add uplink Ethernet 0.
Jan 1 00:01:21 cli[2476]: <341167> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Uplink eth0 type Ethernet, state INIT->LOAD.
Jan 1 00:01:21 cli[2476]: <341169> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Add uplink Wifi-sta 6.
Jan 1 00:01:21 cli[2476]: <341169> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Add uplink 3G/4G 7.
Jan 1 00:01:21 cli[2476]: <341167> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Uplink type Dummy, state INIT->LOAD.
Jan 1 00:01:21 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| receive sapd hello for process recovery
Jan 1 00:01:22 cli[2476]: <341174> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| No current uplink, pick the highest one - Ethernet eth0.
Jan 1 00:01:22 cli[2476]: <341263> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| enable uplink eth0.
Jan 1 00:01:22 cli[2476]: <341167> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Uplink eth0 type Ethernet, state LOAD->PROBE.
Jan 1 00:01:22 cli[2476]: <341265> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| enable ethernet uplink eth0.
Jan 1 00:01:22 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| the ethernet uplink inuse in first time, get ip address.
Jan 1 00:01:22 cli[2476]: <341167> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Uplink eth0 type Ethernet, state PROBE->UP.
Jan 1 00:01:22 cli[2476]: <341185> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Retrieving ip address from br0, ip 10.1.62.252, mask 255.255.255.0.
Jan 1 00:01:22 cli[2476]: <341274> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Update election ip from br0, election ip 10.1.62.252/255.255.255.0.
Jan 1 00:01:22 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| build_my_ip_address: old ip and new ip same; skipping
Jan 1 00:01:22 cli[2476]: <341006> <CRIT> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Sending uplink_up msg to sapd
Jan 1 00:01:22 cli[2476]: <341006> <CRIT> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| trap uplink info.
Jan 1 00:01:22 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| last uplink is null, it's the first uplink, ignore this trap.
Jan 1 00:01:22 cli[2476]: <341173> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Current uplink set to Ethernet, state UP.
Jan 1 00:01:22 cli[2476]: <341135> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Master Changed - new 127.0.0.1 old 0.0.0.0 current swarm state 0.
Jan 1 00:01:23 cli[2476]: <341135> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Master Changed - new 127.0.0.1 old 0.0.0.0 current swarm state 1.
Jan 1 00:01:26 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Swarm State Change from Found to Image-ok
Jan 1 00:01:32 cli[2476]: <341194> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Loading configuration, func swarm_timer_handler, line 7509.
Jan 1 00:01:34 cli[2476]: <341205> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Applying enet config : port eth1.

Jan 1 00:01:38 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Swarm State Change from Image-ok to Complete
Jan 1 00:01:40 cli[2476]: <341273> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Config file length is 2864, allowed length is 61440.
Jan 1 00:01:41 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Backup primary config on flash
Jan 1 00:01:44 cli[2476]: <341233> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Saveing AP config, reason config changed.
Jan 1 00:01:58 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| receive sapd hello for process recovery
Jan 1 00:01:58 cli[2476]: <341004> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Swarm State Changed from Complete to Image-ok
Jan 1 00:01:59 cli[2476]: <341194> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Loading configuration, func swarm_timer_handler, line 7509.
Jan 1 00:02:00 cli[2476]: <341205> <WARN> |AP ac:a3:1e:c0:5f:2a@10.1.62.252 cli| Applying enet config : port eth1.

 

 

 

and the show log wireless 50 reports nothing

ac:a3:1e:c0:5f:2a# show log wireless 50

ac:a3:1e:c0:5f:2a# show log wireless 50

ac:a3:1e:c0:5f:2a# show log wireless 25

ac:a3:1e:c0:5f:2a#

 

 

Let's try "show ap bss-table"

ac:a3:1e:c0:5f:2a# show ap bss-table

Aruba AP BSS Table
------------------
bss  ess  port  ip  phy  type  ch/EIRP/max-EIRP  cur-cl  ap name  in-t(s)  tot-t
---  ---  ----  --  ---  ----  ----------------  ------  -------  -------  -----

Channel followed by "*" indicates channel selected due to unsupported configured channel.
"Spectrum" followed by "^" indicates Local Spectrum Override in effect.

Num APs:0
Num Associations:0
ac:a3:1e:c0:5f:2a#

Yes it has an address of 10.1.62.252, I can telnet to it and get to the Web GUI.

Thanks for the help guys.

 

 

Lremmers,

 

It does not seem your WLAN is being broadcast.  When you configured it, was the VLAN network assigned or Virtual Controller assigned?

Pretty sure network assigned.  I programmed the IP in apboot mode.

Then when i configured the "Outdoor" ssid i put the vlan to 62.  On our cisco switches 10.1.62.1 is the 62 vlan. I'm not sure if that helps.  I also have it running on an Aruba Midspan POE injector.

 

---

@lremmers wrote:

Pretty sure network assigned.  I programmed the IP in apboot mode.

Then when i configured the "Outdoor" ssid i put the vlan to 62.  On our cisco switches 10.1.62.1 is the 62 vlan. I'm not sure if that helps.  I also have it running on an Aruba Midspan POE injector.

 

---

In the configuration, you are using the instant controller to provide DHCP.  In that case, you need to have your VLAN be "Virtual Controller" assigned.  Please see the link here:  http://www.arubanetworks.com/techdocs/Instant_41_WebHelp/InstantWebHelp.htm#UG_files/WLAN_SSID_conf/ConfiguringVLANSettings.htm

Ok i just checked and it seems to be Virtual Controller assigned.

 

THis might help.

ac:a3:1e:c0:5f:2a# ping device.arubanetworks.com
Press 'q' to abort.
ping: device.arubanetworks.com: Unknown host
ac:a3:1e:c0:5f:2a#

 

 

Not being able to ping the internet just means you probably misconfigured your environment variables. I would clear out your ssid and recreate it with virtual assigned. Ideally, you would want it to be on a dhcp subnet so you would not be dealing with error prone environment variables. If instant is providing dhcp it must be virtual controller assigned and it is natted out of the IAP, not trunked to your network. Start with a simple scenario first.

Should my uplink vlan be 0 or 62 on the access point?

 

Hi there,

 

If you want lets setup a remote session and I can take a look and try to get it working for you.

I'm in the Estern time zone and if you want between 7AM and 3PM we can take a look at the AP.

 

Good day.

That would be great! Hows 8am central time tommorow?

 Constantin had the solution.  I had the port on the cisco switch as trunk and needed to be mode access. Thanks man. Appreciate everyone's help

Is the network cable plugged into e0 or e1 ? 

It should be connected to e0 , the first port

 

Yes Sir it is, Its plugged into Enet 0. 

Does your IAP has an IP address ?