Wireless Access

Hello,

wow, finally we have now upgraded from 3.1.x.x and 3.2.x.x to 5 on our Alcatel-Lucent OAW-4324 Controllers (Aruba 2400?).

The Controllers are connected directly to a Juniper SSG Firewall (e.g. SSG 140). Since the upgrade to 5.0.4.8 the uplink port on the firewall goes down every 2-3 minutes for about 10 seconds, than comes up again. On the second partition we have 3.4.5.1 running. After Booting into this partition the problem disappears.

In short this problem exists only after booting into partition with 5.0.x.x. On WLAN Controller the logs don't show link up down event. But on Firewall the interface really goes down.

Running here 2 controllers in this scenario with the same issue. Another OAW-4324, uplink connected to an Alcatel-Lucent AOS Switch, doesn't have this problem!

What could be the problem, where to start Troubleshooting?

I think this problem isn't related to Juniper SSG since this problem doesn't exist after booting to older firmware 3.4.5.1?!

Thanks in advance,

Tobias Hachmer 

How do you have those interfaces configured , just a trunk / static port-channels / LACP ?

What AOS 5 code are you running ?

You could run some  debugging commands on the controller to see what's happening :

(controller) (config) #logging level debugging network

(controller) (config) #logging level debugging system

Then do

(controller)# show log system all or show log network all

And to see if there's any layer1 issues you could check if theres any errors on the interfaces

(controller) #show port stats

Port Statistics

InputErrorBytes OutputErrorBytes CRCErrors

(controller) #show  port link-event

Hello,

thanks for the reply.

here the output:

 #show interface fastethernet 1/22

FE 1/22 is up, line protocol is up
Hardware is FastEthernet, address is 00:0B:86:43:2E:F7 (bia 00:0B:86:43:2E:F7)
Description: fe1/22
Encapsulation ARPA, loopback not set
Configured: Duplex (Full), speed (100 Mbps)
MTU 1500 bytes, BW is 100 Mbit
Last clearing of "show interface" counters 0 day 6 hr 46 min 29 sec
link status last changed 0 day 6 hr 44 min 37 sec
9010 packets input, 681585 bytes
Received 22 broadcasts, 0 runts, 0 giants, 0 throttles
0 input error bytes, 0 CRC, 0 frame
0 multicast, 8988 unicast
21234 packets output, 1485730 bytes
0 output errors bytes, 0 deferred
0 collisions, 0 late collisions, 0 throttles
This port is TRUSTED
POE Status of the port is OFF

#show interface fastethernet 1/22 switchport

Name: FE1/22
Switchport: Enabled
Administrative mode: static access
Operational mode: static access
Administrative Trunking Encapsulation: dot1q
Operational Trunking Encapsulation: dot1q
Access Mode VLAN: 1810 (VLAN1810)
Trunking Native Mode VLAN: 1 (Default)
Trunking Vlans Enabled: NONE
Trunking Vlans Active: NONE

#show image version
----------------------------------
Partition : 0:0 (/dev/hda1)
Software Version : AOS-W 5.0.4.8 (Digitally Signed - Production Build)
Build number : 35054
Label : 35054
Built on : 2012-08-27 12:44:56 PDT
----------------------------------
Partition : 0:1 (/dev/hda2) **Default boot**
Software Version : AOS-W 3.4.5.1 (Digitally Signed - Production Build)
Build number : 31936
Label : 31936

Built on : 2012-01-16 11:24:21 PST

Because of the Link Flapping Problem we switched back to 3.4.5.1 where the problem does not exist.

You may want to open a TAC case or try upgrading to another AOS code.

I couldn't find anything related to this on the 5.0.4.8 or 5.0.4.9 release notes.

Do you have a manual speed/duplex setup or automatic ?

Upgrading to another AOS code is not possible, the latest available is 5.0.4.8 for AOS-W.

I have already tested 5.0.4.5, same issue.

First the interfaces on both sides were at auto/auto. Setting the interfaces fix to 100/full haven't solved it.

I won't obviate that this problem is related to the Juniper SSG Firewall. Maybe there was a change from 3.4.5.1 to 5.x.x.x. that raise this problem?!

Anyone here who has Aruba Controller connected directly to Juniper SSG?

Regards,

Tobias Hachmer