Wireless Access

Hi!  I'm new to Aruba or should I say system admin itself.

I inherited a 3200XM controller and few AP-135s at work that I want to deploy to another office.

I want to access the web gui but I do not know what IP the controller is set to?  I have the access to console but it's locked out of privilege commands and I do not have the enable password.  Previous system admins have left the company.

I plugged my laptop to the eth0 of the controller and try IP scanning 10.10.x.x but still failed to find the IP.  

Would appreciate any suggestion.

Thank you!

Reset the password via the console: 

If you have forgotten or lost your Aruba Controllers Password it can be reset following the bellow steps.

1. Connect to the cotroller via Console cable
2. Login using "password" as the user name and use "forgetme!" as the password.
3. Type "enable" to enter the enable mode
4. Type "conf term" to enter configuration mode
5. In configuration mode, enter ‘mgmt-user admin root’ and reset the password
6. Re-login using the new admin password you just set.
7. Enter "enable" and then "conf term" to enter configuration mode
8. Type ‘enable secret’ reset the enable mode password.
9. Lastly perform a "write mem" to save your new passwords and make it persistent

You can the use the following to obtain the client IP.

(Aruba7030) #show controller-ip

Switch IP Address: 192.168.1.99

Switch IP is configured to be Vlan Interface: 1

Switch IPv6 address is not configured.

Thank you Craig!

I do have access to console but it's locked out of privilege commands which renders the console pretty much useless.  

:(

If it was set to vlan1, would I still be able to access it in a non-vlan environment (such home network)? 

You would however you'd need to make sure it is in the right IP range. Is this a production controller?

The console password reset worked!!!  Thank you Craig!!!

The output for the show command is:

Switch IP Address: 10.10.50.2

Switch IP is from Loopback interface

Switch IPv6 address is not configured.

So I connected controller's eth0 to my laptop. 

Setting my laptop as 10.10.50.100 and still unable to access the web gui.

Make sure you have the subnet mask correct. There may also be ACL's applied
to a VLAN/interface as well. Use the below commands to verify which port + which VLANs are assigned.

show vlan status
show port status

Can you ping the .2 address?

Vlan Status
-----------
VlanId IPAddress Adminstate Operstate PortCount Nat Inside Mode Ports AAA Profile
------ --------- ---------- --------- --------- ---------- ---- ----- -----------
1 unassigned/unassigned Disabled Down 4 Disabled Regular GE1/0-3 Pc0-7 N/A
40 10.10.40.2/255.255.252.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
50 10.10.50.3/255.255.255.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
60 10.10.60.2/255.255.255.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
80 10.10.80.2/255.255.252.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
100 10.10.100.3/255.255.252.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
101 10.10.104.3/255.255.252.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
102 10.10.108.3/255.255.252.0 Enabled Down 4 Disabled Regular GE1/0-3 Pc0 N/A
3000 N/A N/A N/A 4 Disabled Regular GE1/0-3 Pc0 N/A

#show port status

Port Status
-----------
Slot-Port PortType adminstate operstate poe Trusted SpanningTree PortMode
--------- -------- ---------- --------- --- ------- ------------ --------
1/0 GE Enabled Up Enabled Yes Disabled Trunk
1/1 GE Enabled Down Enabled Yes Disabled Trunk
1/2 GE Enabled Down Enabled Yes Disabled Trunk
1/3 GE Enabled Down Enabled Yes Disabled Trunk

Port 0 is enabled

Vlan Status
-----------
VlanId  IPAddress                  Adminstate  Operstate  PortCount  Nat Inside  Mode     Ports           AAA Profile
------  ---------                  ----------  ---------  ---------  ----------  ----     -----           -----------
1       unassigned/unassigned      Disabled    Down       4          Disabled    Regular  GE1/0-3 Pc0-7   N/A
40      10.10.40.2/255.255.252.0   Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
50      10.10.50.3/255.255.255.0   Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
60      10.10.60.2/255.255.255.0   Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
80      10.10.80.2/255.255.252.0   Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
100     10.10.100.3/255.255.252.0  Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
101     10.10.104.3/255.255.252.0  Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
102     10.10.108.3/255.255.252.0  Enabled     Down       4          Disabled    Regular  GE1/0-3 Pc0     N/A
3000    N/A                        N/A         N/A        4          Disabled    Regular  GE1/0-3 Pc0     N/A

Port Status
-----------
Slot-Port  PortType  adminstate  operstate  poe      Trusted  SpanningTree  PortMode
---------  --------  ----------  ---------  ---      -------  ------------  --------
1/0        GE        Enabled     Up         Enabled  Yes      Disabled      Trunk
1/1        GE        Enabled     Down       Enabled  Yes      Disabled      Trunk
1/2        GE        Enabled     Down       Enabled  Yes      Disabled      Trunk
1/3        GE        Enabled     Down       Enabled  Yes      Disabled      Trunk

Port 0 is enabled.

No response from the .2 address.

 #show web-server

Web Server Configuration
------------------------
Parameter                                      Value
---------                                      -----
Cipher Suite Strength                          high
SSL/TLS Protocol Config                        sslv3 tlsv1
Switch Certificate                             default
Captive Portal Certificate                     default
Management user's WebUI access method          username/password
User session timeout <30-3600> (seconds)       900
Maximum supported concurrent clients <25-320>  25
Enable WebUI access on HTTPS port (443)        false
Web Lync Listen Protocol/Port Config           N/A

I do not have the "show web-server statistics" command. lol

show version
Aruba Operating System Software.
ArubaOS (MODEL: Aruba3200-US), Version 6.3.1.6

Have you tried connecting to 10.10.50.3? Also see if you can SSH to the WLC. The default certificate was revoked, so depending on the browser being used the GUI may not be display at all. Don't forget your port 0 is still a trunk port. 

I looked everywhere for the last 2 hours.  I do not know how to enable vlan 1.  I tried to ssh to .2 IP but no response.

Going to try again tomorrow.  

Thanks again Craig!

vlan 1 enabled

port 1/0 set to access mode

still cant connect to web gui

Vlan Status
-----------
VlanId  IPAddress                  Adminstate  Operstate  PortCount  Nat Inside  Mode     Ports           AAA Profile
------  ---------                  ----------  ---------  ---------  ----------  ----     -----           -----------
1       unassigned/unassigned      Enabled     Up         4          Disabled    Regular  GE1/0-3 Pc0-7   N/A
40      10.10.40.2/255.255.252.0   Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
50      10.10.50.3/255.255.255.0   Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
60      10.10.60.2/255.255.255.0   Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
80      10.10.80.2/255.255.252.0   Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
100     10.10.100.3/255.255.252.0  Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
101     10.10.104.3/255.255.252.0  Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
102     10.10.108.3/255.255.252.0  Enabled     Down       3          Disabled    Regular  GE1/1-3 Pc0     N/A
3000    N/A                        N/A         N/A        3          Disabled    Regular  GE1/1-3 Pc0     N/A

Port Status
-----------
Slot-Port  PortType  adminstate  operstate  poe      Trusted  SpanningTree  PortMode
---------  --------  ----------  ---------  ---      -------  ------------  --------
1/0        GE        Enabled     Up         Enabled  Yes      Forwarding    Access
1/1        GE        Enabled     Down       Enabled  Yes      Disabled      Trunk
1/2        GE        Enabled     Down       Enabled  Yes      Disabled      Trunk
1/3        GE        Enabled     Down       Enabled  Yes      Disabled      Trunk

Vlan 1 does not have an ip address.  Vlan 50 does.  Is the controller on the network and functioning, or do you just want to re-do it?

It's controller that I'm trying to repurpose for a new office.

Controller IP is set to 10.10.50.2.

I'm trying to connect to the controller directly from my laptop on port 0 via a ethernet cable.  The laptop ethernet is set to static IP on the same 10.10.50.x subnet.