Wireless Access

last person joined: 21 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Pings to OpenDNS not Desired

This thread has been viewed 0 times

  • 1.  Pings to OpenDNS not Desired

    Posted Apr 16, 2012 12:28 PM

    I've got a dual M3/AOS 6.0 system and my internet firewalls are casting off a number of outbound pings to OpenDNS from the controller IP.  Only my guest profile uses OpenDNS.  The Controller address is the PAT address for the guest users.  The guest policy does not permit ICMP, so it appears to be the controller itself.  Am I correct, and how would I fix?  I will be pointing guest users to a new DNS server in our DMZ in the future obviating the problem, but wanted to understand the behavior anyway.

     

    Jim Arens



  • 2.  RE: Pings to OpenDNS not Desired

    Posted Apr 16, 2012 04:36 PM

    Are you using the default "guest-logon" policy?  It could be clients in the pre-logon role sending ICMP to the DNS server and I think guest-logon allows ICMP.



  • 3.  RE: Pings to OpenDNS not Desired

    Posted Apr 16, 2012 05:27 PM

    I'm with Olin on this one, can you print out your logon and guest policies and post them?

     

    -awl