Wireless Access

Hi All,

 

I've got a customer who is seeing high bandwidth usage with home users with RAPs. They're getting this information from the ISP of the home user. I've been told that the user has barely been using the internet or the RAP for the last week however approximately 1GB is being consumed per day.

 

The customer doesn't have any means to view what type of traffic this is via the ISP or their corporate firewall.

 

I previously logged a ticket with TAC but didn't get far as we couldn't proove it wasn't the home users connecting to their wireless and consuming the bandwidth.

 

This isn't an isolated case though as there are a number of users with RAPs who are seeing a similar bandwidth usage per day.

 

We have enabled BCMC optimisation but things did not improve.

 

Any suggestions?

 

Thanks
James

 

Have you tried implementing any bandwidht contract on the role ?

 

How do you have the RAP configured : Split tunnel / Bridged ?

We've not looked into bandwidth contracts yet and the RAPs are in tunnel mode. The tunnel mode is a requirement as the users traffic needs to be proxied at the customers HQ.

If they are set to tunnel mode, then all of their traffic is being sent back including personal activity. Could personal activity such as streaming and video downloads be the issue or are they only using the connection for work?

Are the wired ports in use on the RAPs or only wireless?   If also wired, on the Wired AP profile for those ports, do you have Broadcast enabled?   

As cappalli mentioned, consider moving to split tunnel so only the corporate traffic is tunneled and reset will be sent to the local n/w and will not be tunnelled both by GRE and IPSEC

It's not possible to change to split-tunnel due to the customers proxy policy.

 

I understand that tunnel mode will generate more traffic but 1GB per day when the user is barely connected to the RAP is excessive.

 

We have tried enabling broadcast / multicast optimisation to no avail.

They have a phone patched into the wired port on some of the RAPs, I'll double check to see if it'sonly the RAPs with the wired port being used are the ones affected and post back.

Thanks
James

Update:

 

The phones are actually wireless and there's nothing patched into the LAN port.

We're going to try to capture the traffic on the uplink port on one of the RAPs to see what we can see....

 

James

I have the same problem with one customer.

 

Aruba must develop a traffic visibility over the WAN/RAP to see what protocol is consumming the bandwith.

Hi Airhead Experts,
Any one can please let me know if we provision AP93 as RAP and forwarded mode is configured as bridge. How much bandwidth would be used for IPSec tunnel(s) between Controller and AP.
Keeping in mind that MAC based authentication is implemented.