Wireless Access

Hi,

in my setup I'm using 2 accesspoints:
ArubaOS (MODEL: 303), Version 8.3.0.6

One of them is the master.

I have one SSID with enterprise authentification. It seems that the master doesn't send the configuration to the second accesspoint. Because in the area of the master ap I can connect to this SSID and in the area from the other ap i can't connect. 

How can I check if the configuration is correct on the second ap? Is there an error log or something which I should check?

Thanks and regards!

Are these Aruba Instant or attached to a physical controller? If these are Instant AP, have they joined the same cluster? Run the below on the 2nd AP to confirm what is being broadcast.

 

#show ap essid
#show aps

---

@Craig Syme wrote:

Are these Aruba Instant or attached to a physical controller? If these are Instant AP, have they joined the same cluster? Run the below on the 2nd AP to confirm what is being broadcast.

 

#show ap essid
#show aps

---

They are instant - there's no physical controller. How can I check if they are in the right cluster?

 

From my prefered master (AP2) i get the following:

AP2# show ap essid
             ^
% Parse error
AP2# show aps

2 Access Points
---------------
Name  IP Address      Mode    Spectrum  Clients  Type         IPv6 Address  Mesh                                                                             Role  Zone  Serial #    radio0 Channel  radio0 Power (dB)  radio0 Utilization (                                                                            %)  radio0 Noise Floor (dBm)  radio1 Channel  radio1 Power (dB)  radio1 Utilizat                                                                            ion (%)  radio1 Noise Floor (dBm)  Need Antenna Config  From Port  Config Id  Co                                                                            nfig Csum  Ext SSID Active  Age         Link Local IP Address
----  ----------      ----    --------  -------  ----         ------------  ----                                                                            -----  ----  --------    --------------  -----------------  --------------------                                                                            --  ------------------------  --------------  -----------------  ---------------                                                                            -------  ------------------------  -------------------  ---------  ---------  --                                                                            ---------  ---------------  ---         ---------------------
AP2   172.29.163.49*  access  disable   0        303(indoor)  --            N/A                                                                                    -     CNG2K9T4G7  52E             22                 12(good)                                                                                            -92(good)                 1               19                 9(good)                                                                                             -95(good)                 No                   none       1          90                                                                            46         enable           1h:38m:31s  --
AP1   172.29.163.48   access  disable   0        303(indoor)  --            N/A                                                                                    -     CNG2K9T4GN  52E             22                 13(good)                                                                                            -92(good)                 6               19                 20(good)                                                                                            -96(good)                 No                   none       1          90                                                                            46         enable           1h:37m:15s  --

And from AP1:

 

AP1# show aps

0 Access Point
--------------
Name  IP Address  Mode  Spectrum  Clients  Type  IPv6 Address  Mesh Role  Zone  Serial #  radio0 Channel  radio0 Power (dB)  radio0 Utilization (%)  radio0 Noise Floor (dBm)  radio1 Channel  radio1 Power (dB)  radio1 Utilization (%)  radio1 Noise Floor (dBm)  Need Antenna Config  From Port  Config Id  Config Csum  Ext SSID Active  Age  Link Local IP Address
----  ----------  ----  --------  -------  ----  ------------  ---------  ----  --------  --------------  -----------------  ----------------------  ------------------------  --------------  -----------------  ----------------------  ------------------------  -------------------  ---------  ---------  -----------  ---------------  ---  ---------------------
AP1#

 

 

Thats good, they are both in the same cluster. Are you able to run the following command on each IAP and confirm if they are broadcasting the SSID's?

 

#show ap bss-table

And the following to see if there is any uncommitted configuration.

 

show uncommitted-config

Also why are these both configured with the same 5Ghz (52E) channel?

AP1# show ap bss-table

Aruba AP BSS Table
------------------
bss                ess                port  ip             phy    type  ch/EIRP/max-EIRP  cur-cl  ap name  in-t(s)  tot-t       flags
---                ---                ----  --             ---    ----  ----------------  ------  -------  -------  -----       -----
80:8d:b7:1d:14:50  Gerstner-Zentrale  ?/?   172.29.163.48  a-VHT  ap    52E/22.6/22.6     0       AP1      0        1h:59m:38s
80:8d:b7:1d:14:40  Gerstner-Zentrale  ?/?   172.29.163.48  g-HT   ap    6/19.8/19.8       0       AP1      0        1h:59m:38s

Channel followed by "*" indicates channel selected due to unsupported configured channel.
"Spectrum" followed by "^" indicates Local Spectrum Override in effect.

Num APs:2
Num Associations:0

Flags:       K = 802.11K Enabled; W = 802.11W Enabled;

AP2# show ap bss-table

Aruba AP BSS Table
------------------
bss                ess                port  ip             phy    type  ch/EIRP/max-EIRP  cur-cl  ap name  in-t(s)  tot-t       flags
---                ---                ----  --             ---    ----  ----------------  ------  -------  -------  -----       -----
80:8d:b7:1d:4b:50  Gerstner-Zentrale  ?/?   172.29.163.49  a-VHT  ap    52E/22.6/22.6     0       AP2      0        1h:59m:50s
80:8d:b7:1d:4b:40  Gerstner-Zentrale  ?/?   172.29.163.49  g-HT   ap    1/19.7/19.7       0       AP2      0        1h:59m:49s

Channel followed by "*" indicates channel selected due to unsupported configured channel.
"Spectrum" followed by "^" indicates Local Spectrum Override in effect.

Num APs:2
Num Associations:0

Flags:       K = 802.11K Enabled; W = 802.11W Enabled;

 

 

show uncommitted-config is on both APs empty

 

I don't know why they are on the same channel. I thought they manage the channels by themselfes...

The output shows they are broadcasting 1 SSID on each of the APs. So both APs have the same configuration. It is likely to be another issue either with the authentication or VLANs. 

Have you added the IAP as a NAS client on your NPS or enabled Dynamic RADIUS Proxy on the IAP?

Are the VLANs correct on the secondary switch port where AP2 is connected?

Yes, they broadcast the same SSID. This is what I want :) 

The problem is, that users can only connect on AP2. When they try to connect on AP1 they get an error which says something like "not able to connect to the network". We tried it with iPhones, Android, Windows 10 and Mac OS.

What does the reject on your authentication server say? Is the NAS Client IP/VLANs correct?

Thanks a lot. 

I only added AP2 to our NAS. After adding AP1 it's working.

 

One more question: Should I change something with the channels? 

No worries, you can always used Dynamic RADIUS Proxy which hides all RADIUS
requests behind the single VC IP and not the individual AP IP Addresses.

ARM should adjust the channels. How far apart are the APs, if they cannot
hear each other then this maybe the reason why 52E is selected on both.

OK. Thanks a lot! :)