Controllerless Networks

Dear team,

We have customer who has Aruba Instant Cluster with two type of Access Points:
- AP 515 (20 devices)
- AP 303 (10 devices)
- firmware version is 8.9.0.2

Beside this, customer is having Comware based switches (5710, 5130) and ClearPass for security used for putting employees in correct VLAN based on AD group and based on Healthy status of employee device (correct vlan for healthy device and quarantine vlan for unhealthy device). We are using OnBoard agent installed on laptops.

We have following situation:
- Customer try to connect to network
- Authentication start based on machine certificate
- ClearPass check if device/employee is in AD group
- After checking belonging to correct AD group, OnBoard Agent and CPM are exchanging the information if device is healthy or not
- Upon receiving previous information device is authorized to be part of production VLAN or quarantine VLAN
- If device is healthy, it gets IP address from some of the production VLANs

So complete employee network is 90% based on WiFi.

After device gets the correct IP address, we got into problem that network on the device is not working. We can not ping the device, and the device also can not ping nothing. Internet is nor working. But if employee with laptop start walking  and move itself for example 10 to 20 meters, everything works fine.

What can cause this strange situation? 

It is not happing to the all laptops/employees but it is completely random? It doesn't depend on type of AP, type and version of Windows OS on laptops. floor of the building ext.




------------------------------
Djordje Nedeljkovic
------------------------------

Hi man, 
I had a problem near that sometimes, the most part of a network was good, but one kind of tablet wasn't working, my problem has been resolved by disabled 802.11k on SSID, I guess you can try to do this and to see the result.

------------------------------
Alexandre Biehl de S�
------------------------------

Original Message:
Sent: Jun 01, 2022 11:10 AM
From: Djordje Nedeljkovic
Subject: Device gets the correct IP, but network is not working, ping not possible

Dear team,

We have customer who has Aruba Instant Cluster with two type of Access Points:
- AP 515 (20 devices)
- AP 303 (10 devices)
- firmware version is 8.9.0.2

Beside this, customer is having Comware based switches (5710, 5130) and ClearPass for security used for putting employees in correct VLAN based on AD group and based on Healthy status of employee device (correct vlan for healthy device and quarantine vlan for unhealthy device). We are using OnBoard agent installed on laptops.

We have following situation:
- Customer try to connect to network
- Authentication start based on machine certificate
- ClearPass check if device/employee is in AD group
- After checking belonging to correct AD group, OnBoard Agent and CPM are exchanging the information if device is healthy or not
- Upon receiving previous information device is authorized to be part of production VLAN or quarantine VLAN
- If device is healthy, it gets IP address from some of the production VLANs

So complete employee network is 90% based on WiFi.

After device gets the correct IP address, we got into problem that network on the device is not working. We can not ping the device, and the device also can not ping nothing. Internet is nor working. But if employee with laptop start walking  and move itself for example 10 to 20 meters, everything works fine.

What can cause this strange situation? 

It is not happing to the all laptops/employees but it is completely random? It doesn't depend on type of AP, type and version of Windows OS on laptops. floor of the building ext.




------------------------------
Djordje Nedeljkovic
------------------------------

Hi Alexandre,

Thank you for the suggestion. I will try and let you know! Thanks!

------------------------------
Djordje Nedeljkovic
------------------------------

Original Message:
Sent: Jun 01, 2022 08:00 PM
From: Alexandre Biehl de S�
Subject: Device gets the correct IP, but network is not working, ping not possible

Hi man, 
I had a problem near that sometimes, the most part of a network was good, but one kind of tablet wasn't working, my problem has been resolved by disabled 802.11k on SSID, I guess you can try to do this and to see the result.

------------------------------
Alexandre Biehl de S�

Original Message:
Sent: Jun 01, 2022 11:10 AM
From: Djordje Nedeljkovic
Subject: Device gets the correct IP, but network is not working, ping not possible

Dear team,

We have customer who has Aruba Instant Cluster with two type of Access Points:
- AP 515 (20 devices)
- AP 303 (10 devices)
- firmware version is 8.9.0.2

Beside this, customer is having Comware based switches (5710, 5130) and ClearPass for security used for putting employees in correct VLAN based on AD group and based on Healthy status of employee device (correct vlan for healthy device and quarantine vlan for unhealthy device). We are using OnBoard agent installed on laptops.

We have following situation:
- Customer try to connect to network
- Authentication start based on machine certificate
- ClearPass check if device/employee is in AD group
- After checking belonging to correct AD group, OnBoard Agent and CPM are exchanging the information if device is healthy or not
- Upon receiving previous information device is authorized to be part of production VLAN or quarantine VLAN
- If device is healthy, it gets IP address from some of the production VLANs

So complete employee network is 90% based on WiFi.

After device gets the correct IP address, we got into problem that network on the device is not working. We can not ping the device, and the device also can not ping nothing. Internet is nor working. But if employee with laptop start walking  and move itself for example 10 to 20 meters, everything works fine.

What can cause this strange situation? 

It is not happing to the all laptops/employees but it is completely random? It doesn't depend on type of AP, type and version of Windows OS on laptops. floor of the building ext.




------------------------------
Djordje Nedeljkovic
------------------------------

Hi Alexandre,

802.11k is disabled, but problem still continues. We are trying to find another solution.

BR,
Djordje

------------------------------
Djordje Nedeljkovic
------------------------------

Original Message:
Sent: Jun 01, 2022 08:00 PM
From: Alexandre Biehl de S�
Subject: Device gets the correct IP, but network is not working, ping not possible

Hi man, 
I had a problem near that sometimes, the most part of a network was good, but one kind of tablet wasn't working, my problem has been resolved by disabled 802.11k on SSID, I guess you can try to do this and to see the result.

------------------------------
Alexandre Biehl de S�

Original Message:
Sent: Jun 01, 2022 11:10 AM
From: Djordje Nedeljkovic
Subject: Device gets the correct IP, but network is not working, ping not possible

Dear team,

We have customer who has Aruba Instant Cluster with two type of Access Points:
- AP 515 (20 devices)
- AP 303 (10 devices)
- firmware version is 8.9.0.2

Beside this, customer is having Comware based switches (5710, 5130) and ClearPass for security used for putting employees in correct VLAN based on AD group and based on Healthy status of employee device (correct vlan for healthy device and quarantine vlan for unhealthy device). We are using OnBoard agent installed on laptops.

We have following situation:
- Customer try to connect to network
- Authentication start based on machine certificate
- ClearPass check if device/employee is in AD group
- After checking belonging to correct AD group, OnBoard Agent and CPM are exchanging the information if device is healthy or not
- Upon receiving previous information device is authorized to be part of production VLAN or quarantine VLAN
- If device is healthy, it gets IP address from some of the production VLANs

So complete employee network is 90% based on WiFi.

After device gets the correct IP address, we got into problem that network on the device is not working. We can not ping the device, and the device also can not ping nothing. Internet is nor working. But if employee with laptop start walking  and move itself for example 10 to 20 meters, everything works fine.

What can cause this strange situation? 

It is not happing to the all laptops/employees but it is completely random? It doesn't depend on type of AP, type and version of Windows OS on laptops. floor of the building ext.




------------------------------
Djordje Nedeljkovic
------------------------------

It seams IAP  you connected not have all VLANs configured on uplink port (switch side).

------------------------------
Asela Abhayapala
------------------------------

Original Message:
Sent: Jun 01, 2022 11:10 AM
From: Djordje Nedeljkovic
Subject: Device gets the correct IP, but network is not working, ping not possible

Dear team,

We have customer who has Aruba Instant Cluster with two type of Access Points:
- AP 515 (20 devices)
- AP 303 (10 devices)
- firmware version is 8.9.0.2

Beside this, customer is having Comware based switches (5710, 5130) and ClearPass for security used for putting employees in correct VLAN based on AD group and based on Healthy status of employee device (correct vlan for healthy device and quarantine vlan for unhealthy device). We are using OnBoard agent installed on laptops.

We have following situation:
- Customer try to connect to network
- Authentication start based on machine certificate
- ClearPass check if device/employee is in AD group
- After checking belonging to correct AD group, OnBoard Agent and CPM are exchanging the information if device is healthy or not
- Upon receiving previous information device is authorized to be part of production VLAN or quarantine VLAN
- If device is healthy, it gets IP address from some of the production VLANs

So complete employee network is 90% based on WiFi.

After device gets the correct IP address, we got into problem that network on the device is not working. We can not ping the device, and the device also can not ping nothing. Internet is nor working. But if employee with laptop start walking  and move itself for example 10 to 20 meters, everything works fine.

What can cause this strange situation? 

It is not happing to the all laptops/employees but it is completely random? It doesn't depend on type of AP, type and version of Windows OS on laptops. floor of the building ext.




------------------------------
Djordje Nedeljkovic
------------------------------

Hi Asela,

All switches have the same configuration, and all needed VLAN are configured. It is happing on almost all VLANs, but not to all employees. We can have employees sitting near each other, both in the same VLAN, and for one employee it is working, and for another one not. Bothe of them got IP address from desired VLAN.

BR,
Djordje

------------------------------
Djordje Nedeljkovic
------------------------------

Original Message:
Sent: Jun 02, 2022 02:10 AM
From: Asela Abhayapala
Subject: Device gets the correct IP, but network is not working, ping not possible

It seams IAP  you connected not have all VLANs configured on uplink port (switch side).

------------------------------
Asela Abhayapala

Original Message:
Sent: Jun 01, 2022 11:10 AM
From: Djordje Nedeljkovic
Subject: Device gets the correct IP, but network is not working, ping not possible

Dear team,

We have customer who has Aruba Instant Cluster with two type of Access Points:
- AP 515 (20 devices)
- AP 303 (10 devices)
- firmware version is 8.9.0.2

Beside this, customer is having Comware based switches (5710, 5130) and ClearPass for security used for putting employees in correct VLAN based on AD group and based on Healthy status of employee device (correct vlan for healthy device and quarantine vlan for unhealthy device). We are using OnBoard agent installed on laptops.

We have following situation:
- Customer try to connect to network
- Authentication start based on machine certificate
- ClearPass check if device/employee is in AD group
- After checking belonging to correct AD group, OnBoard Agent and CPM are exchanging the information if device is healthy or not
- Upon receiving previous information device is authorized to be part of production VLAN or quarantine VLAN
- If device is healthy, it gets IP address from some of the production VLANs

So complete employee network is 90% based on WiFi.

After device gets the correct IP address, we got into problem that network on the device is not working. We can not ping the device, and the device also can not ping nothing. Internet is nor working. But if employee with laptop start walking  and move itself for example 10 to 20 meters, everything works fine.

What can cause this strange situation? 

It is not happing to the all laptops/employees but it is completely random? It doesn't depend on type of AP, type and version of Windows OS on laptops. floor of the building ext.




------------------------------
Djordje Nedeljkovic
------------------------------