Wireless Access

Hello,

 

I'm trying to run an application based on Data Dastribution Service in my network. Currently a destination can't connect to the multicast group and receive any messages. BCMC (Broadcast-Multicast) Optimization and Drop broadcast are disabled on controller. Do you have any ideas what to check?

 

PS: If I switch to a low cost D-Link or any other the application works.

 

PSS: I'm running 3600 controller with 6.3.1.3 os and AP-105 access points.

 

 

#3600

 

Are you running ip igmp proxy or snooping on that VLAN ?

I've tried to check only IGMP, then IGMP Snooping, and finally IGMP proxy. Nothing changed. Also "show ip igmp" is empty. 

What is the role for your users on that wireless network?  What is being allowed?

Currently I've disabled any authentication on the lab network. User roles in default state. Should I change something in that area?

When you say default state, what role does the wireless user get?

 

"Monitoring>Controller>Clients" page shows User Role "logon".

The logon role will be blocking your multicast traffic.  You need to change the initial role in the aaa profile to "authenticated".

Changed to authenticated. Still nothing. Do you have any other ideas?

 

Update:  Now controller shows a group:

 

(Aruba3600-US) #show ip igmp group

IGMP Group Table
----------------
Group Members
----- -------
239.255.0.1 1

Total Groups: 1

Is the host sending the traffic on the same vlan as the clients or a different VLAN? You might want to open a TAC case in parallel...

It's the same VLAN 1 interface.

Here is the statistics:

Name Value

received-total 366 received-queries 0 received-v1-reports 0 received-v2-reports 133 received-leaves 49 received-unknown-types 184 len-errors 0 checksum-errors 0 not-vlan-dr 0 transmitted-queries 11 forwarded 9 non-conforming-igmp 0

If it is in the same vlan and the firewall policy on the client role is not blocking anything. IGMP should not be involved

Curernt policy is: 

authenticated

ra-guard/,allowall/,v6-allowall/

On the commandline, you should be able to type "show datapath session table <ip address of multicast device>" to see any traffic that is seen by the controller.

172.16.0.247 is my source and 246 is destination:

 

(Aruba3600-US) #show datapath session table 172.16.0.247

 

 

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- --------- --------- -----
172.16.0.247 172.16.0.255 17 138 138 0/0 0 24 1 tunnel 12 8 1 229 FTC
172.16.0.255 172.16.0.247 17 138 138 0/0 0 24 1 tunnel 12 8 0 0 FY
172.16.0.247 239.255.0.1 17 50954 7400 0/0 0 24 1 tunnel 12 19 0 0 FTC

 

(Aruba3600-US) #show datapath session table 172.16.0.246

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags

-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- --------- --------- -----
172.16.0.246 172.16.0.247 17 52600 7410 0/0 0 24 0 tunnel 12 2 0 0 FTC
172.16.0.247 172.16.0.246 17 7410 52600 0/0 0 24 0 tunnel 12 2 0 0 FY
172.16.0.246 239.255.0.1 17 52601 7400 0/0 0 24 0 tunnel 12 2 2 1568 FTC

---

@gegMopo3 wrote:

172.16.0.247 is my source and 246 is destination:

 

(Aruba3600-US) #show datapath session table 172.16.0.247

 

 

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- --------- --------- -----
172.16.0.247 172.16.0.255 17 138 138 0/0 0 24 1 tunnel 12 8 1 229 FTC
172.16.0.255 172.16.0.247 17 138 138 0/0 0 24 1 tunnel 12 8 0 0 FY
172.16.0.247 239.255.0.1 17 50954 7400 0/0 0 24 1 tunnel 12 19 0 0 FTC

 

(Aruba3600-US) #show datapath session table 172.16.0.246

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags

-------------- -------------- ---- ----- ----- ---- ---- --- --- ----------- ---- --------- --------- -----
172.16.0.246 172.16.0.247 17 52600 7410 0/0 0 24 0 tunnel 12 2 0 0 FTC
172.16.0.247 172.16.0.246 17 7410 52600 0/0 0 24 0 tunnel 12 2 0 0 FY
172.16.0.246 239.255.0.1 17 52601 7400 0/0 0 24 0 tunnel 12 2 2 1568 FTC

---

Type "show wlan virtual-ap" to find your virtual AP, then type "show vlan virtual-ap <name of virtual ap>" so we can see the properties of it.

 

Here is it:

 

(Aruba3600-US) #show wlan virtual-ap

Virtual AP profile List
-----------------------
Name References Profile Status
---- ---------- --------------
default 1

Total:1

(Aruba3600-US) #show wlan virtual-ap default

Virtual AP profile "default"
----------------------------
Parameter Value
--------- -----
AAA Profile default
802.11K Profile default
Hotspot 2.0 Profile default
SSID Profile default
Virtual AP enable Enabled
VLAN 1
Forward mode tunnel
Allowed band g
Band Steering Disabled
Steering Mode prefer-5ghz
Dynamic Multicast Optimization (DMO) Disabled
Dynamic Multicast Optimization (DMO) Threshold 6
Drop Broadcast and Multicast Disabled
Convert Broadcast ARP requests to unicast Disabled
Authentication Failure Blacklist Time 3600 sec
Blacklist Time 3600 sec
Deny inter user traffic Disabled
Deny time range N/A
DoS Prevention Disabled
HA Discovery on-association Enabled
Mobile IP Enabled
Preserve Client VLAN Disabled
QinQ Outer VLAN 0
Remote-AP Operation standard
Station Blacklisting Enabled
Strict Compliance Disabled
VLAN Mobility Disabled
FDB Update on Assoc Disabled
WMM Traffic Management Profile N/A

What is the result of "show aaa profile default"?

I've changed initial role from logon to authenticated:

 

(Aruba3600-US) #show aaa profile default

AAA Profile "default"
---------------------
Parameter Value
--------- -----
Initial role authenticated
MAC Authentication Profile N/A
MAC Authentication Default Role guest
MAC Authentication Server Group default
802.1X Authentication Profile N/A
802.1X Authentication Default Role guest
802.1X Authentication Server Group N/A
L2 Authentication Fail Through Disabled
User idle timeout N/A
RADIUS Accounting Server Group N/A
RADIUS Interim Accounting Disabled
XML API server N/A
RFC 3576 server N/A
User derivation rules N/A
Wired to Wireless Roaming Enabled
SIP authentication role N/A
Device Type Classification Enabled
Enforce DHCP Disabled

If all the ports on the controller are on VLAN 1, you can plug a laptop into another port on the controller to see if you see the multicast traffic.

It works!!! Currently I have a laptop (source) connected to controller via RJ45 and a laptop (destination) connected to AP via WiFi. 

 

The next step is to define why WiFi to WiFi has 50% transmissions loss.

50% transmission loss?  Is that application optimized for wireless or is it supposed to be running on wired?

Forwarded my findings to dev team. I will update the topic tomorrow with the latest results. Thanks.