Our wireless network has started to behave differently over the past few weeks. When users authenticate, they are always being assigned 169.xx.xx.xx address. This occurs for old users and new users. When performing a "ipconfig /renew," the response from the DHCP server times out and the user maintains the 169 IP address. However, after waiting 10+ minutes, the IP automatically resolves, and the user is finally assigned a proper IP address.
Looking at the main controller GUI and accessing the debug logs, I noticed the following lines I thought were interesting:
May 16 09:47:10 | webui[1652]: USER: shahj has logged in from 141.116.***.**. |
May 16 09:47:44 | authmgr[1805]: PAPI_SendLarge: Can't send buffer to my own port |
May 16 09:50:24 | ntpdc: gethostby*.getanswer: asked for "0.0.0.0.in-addr.arpa IN PTR", got type "A" |
May 16 10:21:02 | localdb[1808]: <133019> <ERRS> |localdb| User 123176****@mil was not found in the database |
May 16 10:21:02 | localdb[1808]: <133006> <ERRS> |localdb| User 123176****@mil Failed Authentication |
May 16 10:28:42 | localdb[1808]: <133019> <ERRS> |localdb| User 123176****@mil was not found in the database |
May 16 10:28:42 | localdb[1808]: <133006> <ERRS> |localdb| User 123176****@mil Failed Authentication |
Looking at the local controller's local events, I noticed:
2012-05-16 | 09:21:06 | User with MAC address 00:**:**:d5:a0:54 and IP address 0.0.0.0 from (BSSID 00:24:6c:d3:0c:50,AP aap125-w0-mh861-1) and/or interface 0/0 has changed: Change type is 3 |
2012-05-16 | 09:36:29 | User with MAC address 00:**:**:d5:a0:54 and IP address 10.200.10.11 was created |
2012-05-16 | 09:36:29 | User with MAC address 00:**:**:d5:a0:54 and IP address 10.200.10.11 from (BSSID 00:24:6c:d3:0c:50,AP aap125-w0-mh861-1) and/or interface 0/0 has changed: Change type is 4 |
2012-05-16 | 09:41:50 | User 169.254.48.145 with MAC address 00:**:**:d5:a0:54 is deleted |
2012-05-16 | 09:41:50 | User with MAC address 00:**:**:d5:a0:54 IP address 169.254.48.145 was deleted |
2012-05-16 | 09:41:50 | User with MAC address 00:**:**:d5:a0:54 and IP address 169.254.48.145 from (BSSID 00:24:6c:d3:0c:50,AP aap125-w0-mh861-1) and/or interface 0/0 has changed: Change type is 2 |
This is a strange issue and it seems to be affecting all of our users. This issue did not occur 3 weeks ago.
For a little background information, we're running Aruba Controller 6000 with ArubaOS 6.1. The network uses WPA2-Enterprise, 802.1x, EAP-TLS with smartcard authentication.
Any information would be appreciated. Thanks!