Wireless Access

Hello,

 

first let me say sorry for my broken english.

 

We use 29 AP205 and 3 AP225 plus an ArubaController 7030 at our school. I've attached a picture with further information about the controller.

 

If I stand in the teachers room everything is fine. Fast internet, good internal connections (AP225).

In other rooms (AP205) I can connect to the Accesspoint, get an IP from the Controller (DHCP), can ping the ArubaController and the "pfsense"-Box with the captiveportal running, but there is no internet connection. The connected device tries to open the "pfsense"-captive portal but got stuck very quickly - no captiveportal, no internet ... nothing. (We tried ArubaCaptive portal first, but it didn't support everything we need - same issue with Aruba-Captiveportal) If I go back to the teachers room, there is a handover between AP205 and AP225 and *ding* there is a captiveportal, internet, ...

 

Both AP205 and AP225 are provisioned by the ArubaController with the same settings.

 

Thank you!

 

Tino 

What is the ip address of the controller on the Guest VLAN?

 

You should remove the screenshot that has your controller serial number from your post.

Hello Colin,

 

there is a SSID "Teacher" (192.50.0.0/24) and a SSID "Students" (172.18.0.0/23). The Controller IP ist 192.50.0.1/24 (teacher) resp. 172.50.0.1/23 (students). The Controller IP itself (for example to connect to the dashboard) is 172.16.0.254/24. The APs are in the same net (172.16.0.0/24)

 

It doesn't matter if I try to connect to "Teacher" or "Students". No internet connection in both nets ober AP205.

 

I hope this is the right information.

 

Thank you.

Tino

You should issue the commands:

Config t
IP cp-redirect-address 172.50.0.1

You need to do that, otherwise the controller will attempt to redirect users to the 172.16.x.x address for the captive portal.

Hello Colin,

 

one question: If I connect to the network the browser tries to open the captive portal on the pfsense box. (192.50.0.2 resp. 172.50.0.2) But the device don't get a connection to the portal. (On AP205 only) We do not use Aruba Captive Portal.

 

Should I also do the commands with this information?

The default router configured in dhcp is 192.50.0.2 / 172.50.0.2. This is the pfSense with the captive portal running.

Even for captive portals that are not on the controller, the controller must be reachable.  That means the Captive Portal VLAN on the controller needs to have an ip address and the ip address needs to be in the ip cp-redirect-address command.  If not, users will try to hit the controller's management VLAN, which in your case might not be routable to the controller.

Just to be sure: The SSID "Teacher" (192.50.0.0/24 with cp 192.50.0.2/24) exists at the AP205 AND AP 225. The same for the SSID "Students" (172.50.0.0/24 with cp 172.50.0.2/24).

 

No internet connection on AP205 at Teacher or Student SSID. Go to the AP225 you have wonderful access to the internet via SSID Teacher or Student.

 

So i have to use:

Config t
IP cp-redirect-address 172.50.0.2

and

 

Config t
IP cp-redirect-address 192.50.0.2

I assumed .2 because thats the captive portal interface.

 

Sorry for dumb questions but don't want to break something...

 

Thanks for your help.

 

 

Let me get this straight:

 

- Both SSIDs are Captive Portal

- Both SSIDs work on the AP-225

- None of the SSIDs work on the AP-205

 

Are the AP225s and 205s in the same ap-group?

- Both SSIDs are Captive Portal  -- Yes!

- Both SSIDs work on the AP-225 -- Yes!

- None of the SSIDs work on the AP-205 -- Yes!

 

The AP225s and 205s are in the same ap-group.

 

 

You should open a TAC case.  It is not apparent why it is not working.  TAC will need to look at your logs.tar to determine the issue.

Hello,

 

thanks for your advice. I opened a TAC and had a great support with an aruba engineer.

After 3 hours we found the problem - Aruba OS 6.4.4.9 . The problem does not occur under OS 6.4.3.4

 

Thanks for the great help and support.