Wireless Access

Reply
Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Thank you. Not an option, but thank you for trying.

Doing a side by side comparison of one that works against this one that isn't. Same code version. Does order matter? Finding several segments that are the same, but in a different order.

 

3400 working properly with vlans:

ip access-list session v6-icmp-acl
ipv6 any any svc-v6-icmp permit
!
ip access-list session control
user any udp 68 deny
any any svc-icmp permit
any any svc-dns permit
any any svc-papi permit
any any svc-sec-papi permit
any any svc-cfgm-tcp permit
any any svc-adp permit
any any svc-tftp permit
any any svc-dhcp permit
any any svc-natt permit
!
ip access-list session allow-diskservices
any any svc-netbios-dgm permit
any any svc-netbios-ssn permit
any any svc-microsoft-ds permit
any any svc-netbios-ns permit
!

 

3400 not getting desired IPs on vlans:

ip access-list session allow-diskservices
any any svc-netbios-dgm permit
any any svc-netbios-ssn permit
any any svc-microsoft-ds permit
any any svc-netbios-ns permit
!
ip access-list session control
user any udp 68 deny
any any svc-icmp permit
any any svc-dns permit
any any svc-papi permit
any any svc-sec-papi permit
any any svc-cfgm-tcp permit
any any svc-adp permit
any any svc-tftp permit
any any svc-dhcp permit
any any svc-natt permit
!
ip access-list session v6-icmp-acl
ipv6 any any svc-v6-icmp permit
!

 

 

Guru Elite

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

rmiddleton,

 

Without a live client to debug, it will be difficult to understand where your problem is.

 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Pretty sure it is user Role authentication. Seeing some differences in code, but not used the CLI enough to be sure what I am seeing. Checking back & forth to GUI. 

Example:
Not Working:
user-role guest
 vlan 1
 access-list session http-acl
...
user-role authenticated
 vlan 1
 access-list session allowall
 access-list session v6-allowall
....
 
Working:
user-role guest
 access-list session http-acl
...
user-role authenticated
 access-list session allowall
 access-list session v6-allowall
...

 

Trusted Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

you keep ignoring certain questions.

 

this document explain how IPs are assigned:

http://www.arubanetworks.com/techdocs/ArubaOS_63_Web_Help/Content/ArubaFrameStyles/Network_Parameters/About_VLAN_Assignments.htm

 

go through it and go through clients that fail, somewhere you should understand the cause. like cjospeh said, look at actual clients. just some basic config comparision might help, but isn't certain.

Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Not an option:

 

(DM-Controller) #show aaa ?
accounting Show accounting configuration
authentication Authentication methods
authentication-server Authentication Servers
bandwidth-contracts Show bandwidth contracts
derivation-rules Show role/vlan derivation rules
device-id-cache Device ID Cache
dns-query-interval DNS query interval
fqdn-server-names Auth Server FQDN names
main-profile Show summary of all AAA profiles
password-policy Password policy for locally configured management
users
profile Show an AAA Profile
pubcookie-authenticat.. Show Pubcookie authentication Configuration
radius-attributes Show RADIUS attributes
rfc-3576-server RFC 3576 server
server-group Show a Server Group
state Show internal state of authentication module
tacacs-accounting Show TACACS accounting configuration
timers Show timers
web Show web server configuration
xml-api External XML API server

 

 

Highlighted
Super Contributor II

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Hi!

 

Your issue is probably that you are defining the VLAN in the user role, that will override the VLAN configured in the virtual AP profile.

 

If you are putting your users in the role "authenticated" please navigate to that user role and either make the "Role VLAN ID" unassigned or correct. Keep in mind that this change will affect all users ending up in this role.

 

Good luck,

Christoffer Jacobsson | Aranya AB
Aruba Partner Ambassador
Aruba: ACMX #537 ACCP ACDP | CWNP: CWNE #306

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

As far i understand you getting an ip address from the incorrect vlan.

 

I know its silly but who knows... i already saw it happening before.

 

can you do in the computer you are getting the wrong ip address ipconfig /all and see who is the dhcp server which is giving you the ip? is the correct dhcp server?

 

I saw it  in  a client happing that someone connected somethign that was giving dhcp ip address in the same vlan of the wifi.  Of cousre is was the other device and that was the problem.   he was confused and was thinking he was getting ips from the other vlan because for concidence the device a small wifi router was giving him ip addresses in the same network of the other vlan...

 

Anyways is never hurt to check :)

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

No idea how that got set, but YEAH!!! and THANK YOU!!!

Thanks to all for the leads, but this was, at least to this point, the stumbling block. May be more issues, but this allows me to advance to the next step(s).

 

Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

9 of 10 3400's took the changes fine, add the vlans, assign them in Virtual AP, watch the DHCP system populate the clients. This one kept getting them from vlan1 and didn't change. Not a client issue because NO clients changed. Knew it had to be the controller, just couldn't figure out why. Authentication precedence and a role set that I didn't know was.

While I have to wait until after school to test, pretty confident that is the issue.

Thank you.

 

Contributor I

Re: Clients get IP from incorrect DHCP range. Aruba 3400 v6.1.3.7

Not meaning to ignore anything, maybe I missed reading something...

What am I missing on the debug statement / syntax? 

I can get the MAC now, but not debug the client detail.

 

(DM-Controller) #show user-table essid MSDPT

Users
-----
IP MAC Name Role Age(d:h:m) Auth VPN link AP name Roaming Essid/Bssid/Phy Profile Forward mode Type
---------- ------------ ------ ---- ---------- ---- -------- ------- ------- --------------- ------- ------------ ----
10.44.92.91 30:3a:64:6c:0a:b1 guest 00:00:00 AP-DM-315-p71 Wireless MSDPT/d8:c7:c8:f7:60:29/a MSDPT-aaa_prof tunnel Win 7

 

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: