Wireless Access

last person joined: 21 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Wireless denying access to a website ( stumbleupon )

This thread has been viewed 2 times

  • 1.  Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 09:45 AM

    Hello everyone,

     

    Weird thing happening on my network.   If your on the wireless connection you are unable to access the registration page on stumbleupon.com.   

     

    https://www.stumbleupon.com/signup

     

    "The connection was reset
    The connection to the server was reset while the page was loading."

     

    However once I plugin and get off the wireless network i'm able to access it without issue.

     

    I don't have any firewall rules or anything setup on the controller.  It's just basically serving internet, wide open,  nothing fancy going on. 

     

    Anyone have any ideas as to what might be causing it?

     

     

    AP-105's and Aruba3400-US software version 6.1.2.5

     

    Thanks



  • 2.  RE: Wireless denying access to a website ( stumbleupon )

    EMPLOYEE
    Posted Mar 06, 2012 09:56 AM

    Have you tried a different client type? What is the client type that is running into this issue?



  • 3.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 10:06 AM

    Client type rarely shows up for me.    Right now my computer is listed as --,  it's an iMac running 10.6.8

     

    All of the other computers affected are also macs,  10.6.8.  

     

    Every once and awhile a device will show up as OSX under device type.  But mostly the only devices that are fingerprinted are mobile devices.



  • 4.  RE: Wireless denying access to a website ( stumbleupon )

    EMPLOYEE
    Posted Mar 06, 2012 10:10 AM

    Which browser are you using on the iMac? Have you tried different browsers?



  • 5.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 10:15 AM

    Firefox 10.0.2 and latest updated safari, and google chrome 13.0.782.215

     

    Chromes reported error is:  Error 101 (net::ERR_CONNECTION_RESET): The connection was reset.

     

     



  • 6.  RE: Wireless denying access to a website ( stumbleupon )

    EMPLOYEE
    Posted Mar 06, 2012 10:16 AM
    @bbelew wrote:

    Hello everyone,

     

    Weird thing happening on my network.   If your on the wireless connection you are unable to access the registration page on stumbleupon.com.   

     

    https://www.stumbleupon.com/signup

     

    "The connection was reset
    The connection to the server was reset while the page was loading."

     

    However once I plugin and get off the wireless network i'm able to access it without issue.

     

    I don't have any firewall rules or anything setup on the controller.  It's just basically serving internet, wide open,  nothing fancy going on. 

     

    Anyone have any ideas as to what might be causing it?

     

     

    AP-105's and Aruba3400-US software version 6.1.2.5

     

    Thanks

    Are you possibly connected to the wired and wireless at the same time on the same subnet, when this happens?

     



  • 7.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 10:53 AM
    @cjoseph wrote:
    @bbelew wrote:

    Hello everyone,

     

    Weird thing happening on my network.   If your on the wireless connection you are unable to access the registration page on stumbleupon.com.   

     

    https://www.stumbleupon.com/signup

     

    "The connection was reset
    The connection to the server was reset while the page was loading."

     

    However once I plugin and get off the wireless network i'm able to access it without issue.

     

    I don't have any firewall rules or anything setup on the controller.  It's just basically serving internet, wide open,  nothing fancy going on. 

     

    Anyone have any ideas as to what might be causing it?

     

     

    AP-105's and Aruba3400-US software version 6.1.2.5

     

    Thanks

    Are you possibly connected to the wired and wireless at the same time on the same subnet, when this happens?

     

    When I recreate the problem i'm completely disconnected from the wired network. 

     

    The computers where this was first identified are not wired at all.



  • 8.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 10:53 AM

    On the controller, you can check the sessions for your client IP address and see for the destination if the traffic is being denied.

     

    show datapath session table <Client IP address> from the command line of the controller.

     

     



  • 9.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 11:14 AM
    @bpudugramam wrote:

    On the controller, you can check the sessions for your client IP address and see for the destination if the traffic is being denied.

     

    show datapath session table <Client IP address> from the command line of the controller.

     

     

    I don't see any denys in the list nor do I see the IP of stumbleupon in the list.     Is this list delayed by chance?     I tried hitting the site a few times right before running it and tried running it again a few minutes later.



  • 10.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 01:52 PM

    The list is in real time. You can try pinging public IP addresses (eg 4.2.2.2) and see if you see ICMP sessions for the user in the datapath session table. You can do a nslookup on the IP you are trying to access and try pinging it as well.



  • 11.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 03:27 PM
    @bpudugramam wrote:

    The list is in real time. You can try pinging public IP addresses (eg 4.2.2.2) and see if you see ICMP sessions for the user in the datapath session table. You can do a nslookup on the IP you are trying to access and try pinging it as well.

    All I see is FYI when pinging by IP. 

     

    74.201.117.247  10.0.4.117      1    306   0      0/0     0 96  1   tunnel 203  a    FYI
    74.201.117.247  10.0.4.117      1    307   0      0/0     0 96  1   tunnel 203  9    FYI
    74.201.117.247  10.0.4.117      1    304   0      0/0     0 96  1   tunnel 203  c    FYI
    74.201.117.247  10.0.4.117      1    305   0      0/0     0 96  1   tunnel 203  b    FYI
    74.201.117.247  10.0.4.117      1    310   0      0/0     0 96  1   tunnel 203  6    FYI
    74.201.117.247  10.0.4.117      1    311   0      0/0     0 96  1   tunnel 203  5    FYI
    74.201.117.247  10.0.4.117      1    308   0      0/0     0 96  1   tunnel 203  8    FYI
    74.201.117.247  10.0.4.117      1    309   0      0/0     0 96  1   tunnel 203  7    FYI
    74.201.117.247  10.0.4.117      1    314   0      0/0     0 96  0   tunnel 203  3    FYI
    74.201.117.247  10.0.4.117      1    315   0      0/0     0 96  0   tunnel 203  2    FYI

     

    The site itself loads for me on port 80,  but as soon as I hit a secure link on 443 the page doesn't load.    Only when on wireless though.  No problems over ethernet.

     



  • 12.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 03:37 PM

    What are the ACL's in the user-role your client is falling into. Could be you are allowing svc-http but not svc-https.. Can that be the case? You can do show rights <user-role name> to check what services are allowed vs those being disallowed.



  • 13.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 06, 2012 04:15 PM
    @bpudugramam wrote:

    What are the ACL's in the user-role your client is falling into. Could be you are allowing svc-http but not svc-https.. Can that be the case? You can do show rights <user-role name> to check what services are allowed vs those being disallowed.

    The ACL's are default.  Https traffic works on other sites - this one included.  Just seems to not work on stumble upon. 

     

    (Aruba3400-US) #show rights authenticated

    Derived Role = 'authenticated'
     Up BW:No Limit   Down BW:No Limit  
     L2TP Pool = default-l2tp-pool
     PPTP Pool = default-pptp-pool
     Periodic reauthentication: Disabled
     ACL Number = 50/0
     Max Sessions = 65535


    access-list List
    ----------------
    Position  Name         Location
    --------  ----         --------
    1         allowall     
    2         v6-allowall  

    allowall
    --------
    Priority  Source  Destination  Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
    --------  ------  -----------  -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
    1         any     any          any      permit                           Low                                                           4
    2         any     any          any      permit                           Low                                                           6
    v6-allowall
    -----------
    Priority  Source  Destination  Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
    --------  ------  -----------  -------  ------  ---------  ---  -------  -----  ---  -----  ---------  ------  -------  -------------  ------
    1         any     any          any      permit                           Low                                                           6

    Expired Policies (due to time constraints) = 0




  • 14.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 07, 2012 10:21 AM

    Can you try other https sites like Gmail to see if you can access ?



  • 15.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 07, 2012 02:51 PM
    @vkumaar wrote:

    Can you try other https sites like Gmail to see if you can access ?


    Have no issues accessing other https sites, including this one.  

     



  • 16.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 07, 2012 02:54 PM

    can you capture the traffic using wireshark, when you try access this site and gmail, so that we can find, where it is getting stuck. 



  • 17.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 07, 2012 03:41 PM
    @vkumaar wrote:

    can you capture the traffic using wireshark, when you try access this site and gmail, so that we can find, where it is getting stuck. 

    Wouldn't happen to be able to recommend a mac friendly alternative to wireshark would you?    I can never get wireshark to open, it hangs with x11 and never goes anywhere.

     



  • 18.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 07, 2012 04:37 PM

    Try the following link

     

    http://support.apple.com/kb/HT3994

     

    1. Enable the packet trace

    2. open a browser and try accessing https:// gmail.com

    3. once the page is loaded completely, close the browser.

    4. open a New browser and try accessing the site which is not working.

     

    we can compare the trace and find where the problem is.



  • 19.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 08, 2012 09:21 AM
    @vkumaar wrote:

    Try the following link

     

    http://support.apple.com/kb/HT3994

     

    1. Enable the packet trace

    2. open a browser and try accessing https:// gmail.com

    3. once the page is loaded completely, close the browser.

    4. open a New browser and try accessing the site which is not working.

     

    we can compare the trace and find where the problem is.

    Oddly enough when I went to start the capture the site is loading just fine now.    I'm guessing it was just a temporary issue.  



  • 20.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 08, 2012 10:21 AM

    Did you do any changes in the network or in the wireless controller ? 



  • 21.  RE: Wireless denying access to a website ( stumbleupon )

    Posted Mar 09, 2012 10:26 AM
    @vkumaar wrote:

    Did you do any changes in the network or in the wireless controller ? 

    Nope didn't make any changes.  Odd!