Wireless Access

 View Only
last person joined: 16 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Trouble using AP-635 as RAP - Anybody else using one as a RAP?

This thread has been viewed 23 times
  • 1.  Trouble using AP-635 as RAP - Anybody else using one as a RAP?

    Posted Nov 03, 2022 11:32 AM

    Hello All,

    We are experiencing some issues using an AP-635 as a RAP. We are using a VPNC to terminate the connection. We successfully have the AP-635 connected and broadcasting SSIDs. But as soon as we attempt to connect to an 802.1x SSID, devices are unable to connect.

    Using the same configs, we are able to use an AP-535 as a RAP and connect to an 802.1x-enabled SSID, so we know the authentication piece works with the 535s. It seems the 635s are not forwarding the radius requests.

    We have an open TAC-case, but are still waiting for a resolution. Has anybody else used AP-635s as RAPs and connected using an 802.1x SSID? We are running 8.9.0.1.

    Thanks,

    Nate



  • 2.  RE: Trouble using AP-635 as RAP - Anybody else using one as a RAP?

    EMPLOYEE
    Posted Nov 08, 2022 10:14 AM
    Nate,

    Is that in controller RAP mode? Or in IAP-VPN? Or in AOS10?

    What type of device is your VPNC?

    Do you have a resolution already from TAC?

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Trouble using AP-635 as RAP - Anybody else using one as a RAP?

    Posted Nov 09, 2022 07:47 AM

    Hello Herman,

    Thanks for the reply! The controller is in RAP mode directly connected to the conductor. We are currently running 8.9.0.1, but we are planning to upgrade to 8.10.0.4 in the near future to see if that resolves this issue.

    It is an Aruba 7008 controller.

    We are on hold with TAC, they reported the issue to the development team. We are hoping the upgrade will fix it.

    Thanks,

    Nate




  • 4.  RE: Trouble using AP-635 as RAP - Anybody else using one as a RAP?

    Posted Nov 21, 2022 09:03 AM
    Update to 8.10.0.4 did not resolve the issue. We tested deploying a WPA2-Personal network with mac auth. We see the Access-Request from the controllers to the NPS as well as an Access-Accept with the appropriate role assignment. But then nothing happens. From the user-end the response "Password is incorrect, could not connect", is received.

    The 535 works with the WPA2-Personal network and the client is then provided the proper role. 

    Aruba Dev team is investigating the issue.

    Thanks,
    Nate