Wireless Access

Hi Experts,

 

Please i need your help yesterday i was able to ping the IP of the controller by connecting to interface of port 2 with my laptop

 

suddenly it is stopped pinging i was unable to ping the controller ip what could be the issue?

 

(OAW-4550) #show ip interface brief

Interface                   IP Address / IP Netmask        Admin   Protocol
vlan 10                  10.200.200.11 / 255.255.248.0     up      up
vlan 1                  192.168.10.100 / 255.0.0.0         up      up
loopback                   unassigned / unassigned        up      up

(OAW-4550) #
(OAW-4550) #
(OAW-4550) #
(OAW-4550) #show vlan

VLAN CONFIGURATION
------------------
VLAN  Description  Ports                       AAA Profile
----  -----------  -----                       -----------
1     Default      GE0/0/3 GE0/0/4-0/5 Pc0-7   N/A
10    VLAN0010     GE0/0/3 GE0/0/4-0/5         N/A

(OAW-4550) #show port stat?
stats                   Show physical port statistics
status                  Show physical port status

(OAW-4550) #show port stat

Port Status
-----------
Slot-Port  PortType  adminstate  operstate  poe  Trusted  SpanningTree  PortMode
---------  --------  ----------  ---------  ---  -------  ------------  --------
0/0/0      GE        Enabled     Down       N/A  Yes      Disabled      Trunk
0/0/1      GE        Enabled     Up         N/A  Yes      Disabled      Trunk
0/0/2      GE        Enabled     Up         N/A  Yes      Disabled      Access
0/0/3      GE        Enabled     Up         N/A  Yes      Forwarding    Trunk
0/0/4      GE        Enabled     Down       N/A  Yes      Disabled      Trunk
0/0/5      GE        Enabled     Down       N/A  Yes      Disabled      Trunk

(OAW-4550) #ping 10.200.200.11
Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 10.200.200.11, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0.043/0.0564/0.091 ms

(OAW-4550) #

 

 

 The problem i was not able to ping the ip by lan cable it was pinging from console?

 

Next thing and i need to connect the alcatel core switch +controller+edgeswitch

 

where all the aps getting ip addresses from the controller dhcp

 

what configuartion to be done in all the 3 switches.? whtether trunk port in all switches or what?

 

please very grateful if somebody help me

Since you are connecting your laptop directly to the switch port, it should be configured as "access"  in the VLAN you want your laptop to be in! Once done, it should be fine.

Can you tell me i was not able to reach the edge switch from the controller and all the Access points are down

 

configuration in the controller with vlan 10 ip add 10.200.200.11

 

core switch with vlan 10 ip add 10.200.200.1

 

edge switch with vlan 50 ip add 10.200.200.8 and all are in same subnet

 

controller+coreswitch+edgeswitch

 

there is a one fiber uplink from controller(0/0/2) to core switch(1/1/13)and also one uplink to edge switch(1/49) from the core switch.

 

Please help me to reslove the issue its a hotel i want to make all the AP up today IP to the access points are given by controller

 

Help required.

 

 

 

Please share your configs for :

- controller(0/0/2)

- core switch(1/1/13)

- edge switch(1/49) & Core Switch port config on other side

Controller:

(OAW-4550) #show vlan

 

VLAN CONFIGURATION

------------------

VLAN Description Ports AAA Profile

---- ----------- ----- -----------

1 VLAN0001 GE0/0/0-0/4 GE0/0/5 Pc0-7 Hotel-Holiday-inn-aaa_prof

(OAW-4550) #show  ip interface brief
Interface                   IP Address / IP Netmask        Admin   Protocol
vlan 1                   10.200.200.11 / 255.255.248.0     up      up  
loopback                    unassigned / unassigned        up      up 

 

Core switch:

> show vlan members port members
vlan port type status
--------+------------+------------+--------------

90 1/1/13 default forwarding ---------------------------------->>>>>>> fiber up-link from controller to core switch
-> show vlan
vlan type admin oper ip mtu name
------+-------+-------+------+------+------+------------------
1 std Ena Ena Dis 1500 VLAN 1
10 std Ena Dis Dis 1500 VLAN 10
90 std Ena Ena Ena 1500 VLAN 90
4094 vcm Ena Ena Dis 1500 VCM IPC

-> show ip interface b
Total 7 interfaces
Flags (D=Directly-bound)

Name IP Address Subnet Mask Status Forward Device Flags
--------------------------------+---------------+---------------+------+-------+---------+------
EMP-CHAS1 192.168.10.1 255.0.0.0 DOWN NO EMP
EMP-CMMA-CHAS1 0.0.0.0 0.0.0.0 DOWN NO EMP
EMP-CMMA-CHAS2 0.0.0.0 0.0.0.0 DOWN NO EMP
Loopback 127.0.0.1 255.255.255.255 UP NO Loopback
dhcp-client 0.0.0.0 0.0.0.0 DOWN NO unbound
int-50 0.0.0.0 0.0.0.0 DOWN NO unbound
vlan-90 10.200.200.1 255.255.248.0 UP YES vlan 90

  

 

Edge switch :

Welcome to the Alcatel-Lucent OmniSwitch 6450
Software Version 6.6.5.63.R02 GA, December 16, 2014.

Copyright(c), 1994-2014 Alcatel-Lucent. All Rights reserved.

OmniSwitch(TM) is a trademark of Alcatel-Lucent registered
in the United States Patent and Trademark Office.


-> show vlan port
vlan port type status
------+-------+---------+-------------
1 1/50 default inactive
1 2/49 default inactive
1 2/50 default inactive
1 3/50 default inactive
1 4/3 default inactive
1 4/4 default inactive
1 4/5 default inactive
1 4/6 default inactive
1 4/7 default inactive
1 4/8 default inactive
1 4/9 default inactive
1 4/10 default inactive
1 4/11 default inactive
1 4/12 default inactive
1 4/13 default inactive
1 4/14 default inactive
1 4/15 default inactive
1 4/16 default inactive
1 4/17 default inactive
1 4/18 default inactive
1 4/19 default inactive
1 4/20 default inactive
1 4/21 default inactive
1 4/22 default inactive
1 4/23 default inactive
1 4/24 default inactive
1 4/25 default inactive
1 4/26 default inactive
1 5/3 default inactive
1 5/4 default inactive
1 5/9 default inactive
1 5/10 default inactive
1 5/11 default inactive
1 5/12 default inactive
1 5/13 default inactive
1 5/14 default inactive
1 5/15 default inactive
1 5/16 default inactive
1 5/17 default inactive
1 5/18 default inactive
1 5/19 default inactive
1 5/20 default inactive
1 5/21 default inactive
1 5/22 default inactive
1 5/23 default inactive
1 5/24 default inactive
1 5/25 default inactive
1 5/26 default inactive
112 1/1 default forwarding
112 1/2 default inactive
112 1/3 default forwarding
112 1/4 default inactive
112 1/5 default forwarding
112 1/6 default inactive
112 1/7 default forwarding
112 1/8 default inactive
112 1/9 default forwarding
112 1/10 default inactive
112 1/11 default forwarding
112 1/12 default inactive
112 1/13 default forwarding
112 1/14 default inactive
112 1/15 default forwarding
112 1/16 default inactive
112 1/17 default forwarding
112 1/18 default inactive
112 1/19 default forwarding
112 1/20 default inactive
112 1/21 default forwarding
112 1/22 default inactive
112 1/23 default forwarding
112 1/24 default inactive
112 1/25 default forwarding
112 1/26 default forwarding
112 1/27 default forwarding
112 1/28 default inactive
112 1/29 default forwarding
112 1/30 default inactive
112 1/31 default forwarding
112 1/32 default inactive
112 1/33 default forwarding
112 1/34 default inactive
112 1/35 default forwarding
112 1/36 default inactive
112 1/37 default forwarding
112 1/38 default inactive
112 1/39 default forwarding
112 1/40 default inactive
112 1/41 default forwarding
112 1/42 default forwarding
112 1/43 default inactive
112 1/44 default forwarding
112 1/45 default forwarding
112 1/46 default inactive
112 1/47 default forwarding
112 1/48 default inactive
112 1/49 default forwarding
112 4/1 default forwarding
112 4/2 default forwarding
1112 3/1 default inactive
1112 3/2 default inactive
1112 3/3 default inactive
1112 3/4 default inactive
1112 3/5 default inactive
1112 3/6 default inactive
1112 3/7 default inactive
1112 3/8 default inactive
1112 3/9 default inactive
1112 3/10 default inactive
1112 3/11 default inactive
1112 3/12 default inactive
1112 3/13 default inactive
1112 3/14 default inactive
1112 3/15 default inactive
1112 3/16 default inactive
1112 3/17 default inactive
1112 3/18 default inactive
1112 3/19 default inactive
1112 3/20 default inactive
1112 3/21 default inactive
1112 3/22 default inactive
1112 3/23 default inactive
1112 3/24 default inactive
1112 3/25 default inactive
1112 3/26 default inactive
1112 3/27 default inactive
1112 3/28 default inactive
1112 3/29 default inactive
1112 3/30 default inactive
1112 3/31 default inactive
1112 3/32 default inactive
1112 3/33 default inactive
1112 3/34 default inactive
1112 3/35 default inactive
1112 3/36 default inactive
1112 3/37 default inactive
1112 3/38 default inactive
1112 3/39 default inactive
1112 3/40 default inactive
1112 3/41 default inactive
1112 3/42 default inactive
1112 3/43 default inactive
1112 3/44 default inactive
1112 3/45 default inactive
1112 3/46 default inactive
1112 3/47 default inactive
1112 3/48 default inactive
1112 3/49 default inactive
1112 5/5 default inactive
1112 5/6 default inactive
1112 5/7 default inactive
1112 5/8 default inactive
2047 2/48 default inactive
2201 2/1 default inactive
2202 2/2 default inactive
2203 2/3 default inactive
2204 2/4 default inactive
2205 2/5 default inactive
2206 2/6 default inactive
2207 2/7 default inactive
2208 2/8 default inactive
2209 2/9 default inactive
2210 2/10 default inactive
2211 2/11 default inactive
2212 2/12 default inactive
2213 2/13 default inactive
2214 2/14 default inactive
2215 2/15 default inactive
2216 2/16 default inactive
2217 2/17 default inactive
2218 2/18 default inactive
2219 2/19 default inactive
2220 2/20 default inactive
2221 2/21 default inactive
2222 2/22 default inactive
2223 2/23 default inactive
2224 2/24 default inactive
2225 2/25 default inactive
2226 2/26 default inactive
2227 2/27 default inactive
2228 2/28 default inactive
2229 2/29 default inactive
2230 2/30 default inactive
2231 2/31 default inactive
2232 2/32 default inactive
2233 2/33 default inactive
2234 2/34 default inactive
2235 2/35 default inactive
2236 2/36 default inactive
2237 2/37 default inactive
2238 2/38 default inactive
2239 2/39 default inactive
2240 2/40 default inactive
2241 2/41 default inactive
2242 2/42 default inactive
2243 2/43 default inactive
2244 2/44 default inactive
2245 2/45 default inactive
2246 2/46 default inactive
2247 2/47 default inactive
2248 5/1 default inactive
2249 5/2 default inactive

-> show vlan
stree mble src
vlan type admin oper 1x1 flat auth ip tag lrn name
-----+-----+------+------+------+------+----+-----+-----+------+----------
1 std on off on on off off off on wireless
112 std on on on on off off off on AP-2NDFLR
1112 std on off on on off off off on IPTV-2NDFLOOR
2047 std on off on on off off off on R-2047 ------- vlan for data ports
2201 std on off on on off off off on R-201
2202 std on off on on off off off on R-202
2203 std on off on on off off off on R-203
2204 std on off on on off off off on R-204
2205 std on off on on off off off on R-205
2206 std on off on on off off off on R-206
2207 std on off on on off off off on R-207
2208 std on off on on off off off on R-208
2209 std on off on on off off off on R-209
2210 std on off on on off off off on R-210
2211 std on off on on off off off on R-211
2212 std on off on on off off off on R-212
2213 std on off on on off off off on R-213
2214 std on off on on off off off on R-214
2215 std on off on on off off off on R-215
2216 std on off on on off off off on R-216
2217 std on off on on off off off on R-217
2218 std on off on on off off off on R-218
2219 std on off on on off off off on R-219
2220 std on off on on off off off on R-220
2221 std on off on on off off off on R-221
2222 std on off on on off off off on R-222
2223 std on off on on off off off on R-223
2224 std on off on on off off off on R-224
2225 std on off on on off off off on R-225
2226 std on off on on off off off on R-226
2227 std on off on on off off off on R-227
2228 std on off on on off off off on R-228
2229 std on off on on off off off on R-229
2230 std on off on on off off off on R-230
2231 std on off on on off off off on R-231
2232 std on off on on off off off on R-232
2233 std on off on on off off off on R-233
2234 std on off on on off off off on R-234
2235 std on off on on off off off on R-235
2236 std on off on on off off off on R-236
2237 std on off on on off off off on R-237
2238 std on off on on off off off on R-238
2239 std on off on on off off off on R-239
2240 std on off on on off off off on R-240
2241 std on off on on off off off on R-241
2242 std on off on on off off off on R-242
2243 std on off on on off off off on R-243
2244 std on off on on off off off on R-244
2245 std on off on on off off off on R-245
2246 std on off on on off off off on R-246
2247 std on off on on off off off on R-247
2248 std on off on on off off off on R-248
2249 std on off on on off off off on R-249 -------vlan for data ports

-> show ip interface
Total 2 interfaces
Name IP Address Subnet Mask Status Forward Device
--------------------------------+---------------+---------------+------+-------+--------
1 0.0.0.0 0.0.0.0 DOWN NO unbound
Loopback 127.0.0.1 255.0.0.0 UP NO Loopback

 

 

Thanks for your support

 

Hi ,
I need to know that in my scenario im having one wlan controller 4550 and there is one uplink from controller to core switch alcatel and one uplink to edge switch from core switch there are 6 floors means six uplinks are going to each floor for one poe edge switch
the client requirement is they need all access points to be separated floor wise say eg 2nd floor vlan 112,3rd floor vlan 113 etc.. And management vlan
But right now I configured for 2nd floor I can able to reach my controler to 2nd floor edge switch and core switch through console .

Also I need to check with my laptop by assigning dhcp in laptop so that It have to get ip from controller so that i can tell them our configuration is perfect.
So how can I configure the all vlan in controller to reach with core switch and edge switch

Please somebody can guide me
If you need configuration I will share

Are you using dedicated management interface on the controller? If not, the uplink on your controller will be a trunk that will carry multiple VLANs.

 

For Access Points perspective, you only need L3 reachability between your controller and Access Points.Your floor VLANs are not required to be present on your controller.

 

Just make sure you access points are able to discover the controller. Through DHCP, DNS or statically, whatever you have configured in your network.

Can you tell me where to add vlans in the controller port 0/0/3 ?? so it will take automatically by Access points through PoE switch

 

see the attached pic for your reference

 

I made trunk port but not sucessful only i can able to reach vlan 112(which is configured as controller uplink vlan) and not vlan 113

 

 

Aruba controller, by default, allows all VLANs on the trunk interface. You can verify this by "show trunk" command that will list the VLANs that are allowed to be passed over trunk link from Aruba controller.

If you can see your VLANs listed in the show trunk output, you need to check stuff on your Alcatel switches.

 

Also make sure native LVAN is matching on both sides.

Hi Jibran,

 

Hope you doing good!

 

Access points are not getting the dhcp lease from the controller but in the same port i can get the ip to my laptop from the contorller when i set to dhcp in laptop what could be the issue.

 

Access points are getting ip from the contorller i can able to see from the console that it getting ip form the master

 

But the ping response is not happening continuosly

 

Laptop connected in switch port 6450 -1/24 also i attached logs for your reference.

 

 

i try to ping the controller ip 10.0.3.5 from the console connected to APIN205 im getting ping 10 secs after that it is coming network unreachable then once agian i was trying to ping it is pinging this is the scenario

 

What could be the issue then how my laptop getting dhcp ip range from the controller.??  Please explain

 

 

 

 Note: when i connect to wifi ssid in laptop it is taking auto configuration ip ???

 

 

 

Hi,

 

I cannot see any issue with the Ping here. Is there any firewall between your Access Point and Controller? We need to make sure PAPI traffic is allowed between the controller and Access Point.

Also, the DHCP scope is configured on the controller or Core switch? Have you added DHCP options 43/60 to send master controller IP Address?

Hi Jibran,

Yes DHCP option is configured in controller

Can you tell im getting the network unreachable to the controller 

from  the access point when i  try to reach the controller IP 10.0.3.5

 

Also where is the option to enable 43/60 in the controller?

What do you meant by PAPI traffic how to enable that as well

 

Note: Attcahed screenshot of AP bootup

Looks like you are getting the Master IP.

 

AP and controller communicate via PAPI (UDP port 8211).

PAPI is used for config download and control channels for ARM and Wireless Intrusion Detection System (WIDS) communication to the master controller. You have to make sure UDP Port 8211 is opened all the way from your Access Point to the Aruba Controller.

 

Also, have you checked your routing? Your Controller (10.0.3.5) & Access Point (10.0.0.22) are on different subnet.

OK, I believe we have found the problem here. Default gateway is not assigned to your Access Point.

10.0.0.22 255.255.254.0
Running ADP...Done. Master is 10.0.3.5

Check DHCP configuration on your controller.  From the config you shared earlier, I am sure you do not have any L3 interface in 10.0.0.x subnet. Your Controller is not acting as DHCP server for the Access Point! 

Hi Jibran ,

 

Thanks for your support

 

After changing the IP address of controller from 10.0.3.5 to 10.0.0.1 the problem got resolved.

I connected my WINDOWS Phone to the wifi but it got IP first time after disconnecting the wifi from the phone later it is taking auto configuration IP  ?

 

HI Jibran,

 

Access points in some specific floors are not getting IP from controller.

 

 

But same configuartion in each floors

2 ,3,4,& 5th floor are getting IP's from the controller

 

But 6th floor AP's are not getting IP

 

 

Here I have attached switch CONFG for the AP's installed in the 4thfloor(getting IP) and 6th floor(Not getting IP)