Advertisement

Aruba Instant AP
Troubleshooting Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the aruba and is the answer not in the manual?

Questions and answers

Summary of Contents for Hewlett Packard Enterprise aruba

  • Page 1 Aruba Instant AP Troubleshooting Guide...
  • Page 2 Hewlett Packard Enterprise Company. To obtain such source code, send a check or money order in the amount of US $10.00 to:...
  • Page 3: Table Of Contents

    Instant APs Managed by Aruba Central AP Fails to Connect to Aruba Central AP Fails to Receive Configurations from Aruba Central AP Fails to Download Software Image from Aruba Central Instant APs Managed by AirWave AP Fails to Connect to AirWave...
  • Page 4: Revision History

    Revision History The following table lists the revisions of this document. Table 1: Revision History Revision Change Description Revision 01 Initial release. Revision History |...
  • Page 5: Preface

    The Aruba Instant AP Troubleshooting Guide contains information on how to troubleshoot common errors encountered in Aruba Instant APs. This guide contains information on the symptom of the issue, procedures to identify the cause, and steps to resolve them. The errors described in this guide are largely configuration issues that can be resolved with basic troubleshooting.
  • Page 6: Terminology Change

    Such content is not representative of our HPE culture and moving forward, Aruba will replace racially insensitive terms and instead use the following new language:...
  • Page 7: Contacting Support

    Support Site https://asp.arubanetworks.com/ Airheads Social Forums and Knowledge community.arubanetworks.com Base North American Telephone 1-800-943-4526 (Toll Free) 1-408-754-1200 International Telephone arubanetworks.com/support-services/contact-support/ Software Licensing Site lms.arubanetworks.com End-of-life Information arubanetworks.com/support-services/end-of-life/ Security Incident Response Team Site: arubanetworks.com/support-services/security-bulletins/ Email: aruba-sirt@hpe.com Aruba Instant AP | Troubleshooting Guide...
  • Page 8: Ap Provisioning

    DOWN 0 Wifi-sta INIT 6 3G/4G INIT 7 Internet failover :disable Max allowed test packet loss Secs between test packets VPN failover timeout (secs) :180 Internet check timeout (secs) ICMP pkt sent ICMP pkt lost Aruba Instant AP | Troubleshooting Guide...
  • Page 9: Ap Fails To Receive Provisioning Rule From Dhcp Server

    Continuous pkt lost VPN down time AP1X type:NONE Certification type:NONE Validate server:NONE Check the Status of Activate Connection Run the show activate status command to view the status of Activate connection. The output of this command will display the reason for failure, if the AP fails to connect to Activate. The following are possible states of the Activate connection: Activate Status Inference...
  • Page 10 VC DNS :0.0.0.0 IP Mode :v4-only Cluster-Security DTLS:disable Content Filtering :disable Terminal Access :enable Telnet Server :disable Activate Disable :disable Organization Disable ciphers Airwave Server Airwave Backup Server: Airwave Prov Backup Number of VC transition Aruba Instant AP | Troubleshooting Guide...
  • Page 11: The Setmeup Ssid For Ap Provisioning Is Not Broadcasted

    Airwave Shared Key Airwave Config Via :DHCP Airwave :Not Set Up Aruba Central Server Aruba Central :Not Set Up Managed Via :Local The SetMeUp SSID for AP Provisioning is Not Broadcasted During the initial boot of a factory default AP, a SetMeUp SSID is broadcasted by the AP on the 2.4 GHz band.
  • Page 12: Member Ap Fails To Provision In An Instant Cluster

    AP and remain unprovisioned. The following procedure describes how to troubleshoot issues, if the member AP fails to join the cluster: Check if Auto Join is Enabled on the Conductor AP Check if the Instant Cluster is DTLS Enabled Aruba Instant AP | Troubleshooting Guide...
  • Page 13 Check if the Member AP Received an IP address Check if the Member AP and Conductor AP are in Different Sub Networks Check if the Member AP is Supported in the Instant Cluster Check if Auto Join is Enabled on the Conductor AP Either one of the following conditions has to be met for the new AP to join the cluster: Auto join mode must be enabled on the cluster.
  • Page 14 :0.0.0.0 VC IPv6 Address IP Mode :v4-only Conductor IP Address :10.16.21.2 IP Address :10.19.29.8 IPv6 Address SLAAC IP Address Link Local IP Address:-- Check if the Member AP is Supported in the Instant Cluster Aruba Instant AP | Troubleshooting Guide...
  • Page 15 The conductor AP will reject the association request of the member AP if its configuration is not supported by the cluster. A member AP will be deemed incompatible by the cluster if there is a image class mismatch, regulatory domain mismatch, or OEM mismatch between the member AP and the conductor AP. Run the show swarm state command in the CLI of the member AP to view the swarm details.
  • Page 16 Type of Cause Log Event Mismatch NOTE: In the event of a regulatory domain mismatch or OEM mismatch, the member AP cannot be provisioned in a cluster. Aruba Instant AP | Troubleshooting Guide...
  • Page 17: Instant Aps Managed By Aruba Central

    Check if the AP is Connected to Central Run the show ap debug cloud-server | include Aruba command in the CLI of the AP to view details of Aruba Central server. Check the Aruba Central Status to identify the state of Central connection. The status is displayed as Login_done for successful connections.
  • Page 18 State Type Log Message ---- ----- ---- ----------- Thu Apr 23 10:40:57 2020 Central Debug Init Domain list Thu Apr 23 10:40:58 2020 UAP ADP Warning ADP info: Get the provision rule from Instant APs Managed by Aruba Central |...
  • Page 19: Ap Fails To Receive Configurations From Aruba Central

    Program Domain for Aruba central server internal.central.arubanetworks.com Thu Apr 23 10:41:29 2020 Activate Completed Received instruction from Activate Server to connect to Aruba Central server at internal.central.arubanetworks.com Thu Apr 23 10:42:03 2020 Activate In progress Attempting provisioning via Activate server: device.arubanetworks.com...
  • Page 20 :2020-04-24 00:23:20 Last connect trigger :login down, retry Cloud Last connect fail status ------------------------- Last fail server :internal.central.arubanetworks.com Last fail time :2020-04-23 22:44:38 Last fail reason :tcp connect error Cloud Last login down status Instant APs Managed by Aruba Central |...
  • Page 21 Run the debug-cloud-server <server URL> websocket command with 0.0.0.0 as the URL to remove the websocket connection and repeat the command with the Central server URL to reconnect it to Central. The Central server URL can be found in the output of show ap debug cloud-server command. Aruba Instant AP | Troubleshooting Guide...
  • Page 22: Ap Fails To Download Software Image From Aruba Central

    (Instant AP)#debug-cloud-server <Central server URL> websocket AP Fails to Download Software Image from Aruba Central Software upgrade in Aruba Central is facilitated through an external software download domain — https://d2vxf1j0rhr3p0.cloudfront.net. Traffic to the download domain must be allowed in the network firewall for the AP to download software images.
  • Page 23: Instant Aps Managed By Airwave

    The AP is connected to AirWave but is not authenticated. Login-done The AP is successfully connected to AirWave. Not Connected The AP failed to establish a TCP connection with the AirWave server. Ensure that the AP is Added to a Device Group Aruba Instant AP | Troubleshooting Guide...
  • Page 24: Ap Fails To Receive Configurations From Airwave

    Check the Authentication Settings for Instant APs in AirWave Ensure that AirWave is configured with the appropriate authentication method. The authentication settings of AirWave are available in the AMP Setup > General page under Aruba Instant Options. AP Fails to Receive Configurations From AirWave...
  • Page 25: Ap Fails To Download Software Image From Airwave

    -------- ------ ---------- ------------ Instant AP 192.168.1.101 Hercules downloading http://https://10.65.20.131/flash/ArubaInstant_Pegasus_6_4_3_1_4_2_0_0_50105_0.bin none Auto reboot :enable Use external URL :enable The show log upgrade command can also be used to view the status of software download. Aruba Instant AP | Troubleshooting Guide...
  • Page 26: Ap Fails To Download Certificates From Airwave

    (Instant AP) # show cert all Current Server Certificate: Version :2 Serial Number :ECD686866B183D17 Issuer :/C=CN/ST=Beijing/O=Aruba Networks/O=an HP company/OU=Aruba Instant/CN=Feng Ding Subject :/C=CN/ST=Beijing/O=Aruba Networks/O=an HP company/OU=Aruba Instant (Server)/CN=www.fding.com Issued On :Jun 12 07:04:18 2018 GMT Expires On :Jun 9 07:04:18 2028 GMT...
  • Page 27 Default CP Server Certificate: Version :2 Serial Number :3D Issuer :/CN=Aruba345-CNFDK5143Q/ST=California/O=Aruba Networks/OU=Instant/C=US Subject :/CN=securelogin.arubanetworks.com/L=Sunnyvale/ST=California/O=Aruba Networks/OU=Instant/C=US Issued On :Nov 20 08:29:52 2019 GMT Expires On :Nov 17 08:29:55 2029 GMT RSA Key size :2048 bits Signed Using :RSA-SHA256 Aruba Instant AP | Troubleshooting Guide...
  • Page 28: Wireless Client Connections

    Use the following table as reference when configuring transmission rates for the network:  IEEE Standard of the Supported Bands Supported Transmit Rates Client 2.4 GHz 1 to 2 Mbps Legacy 802.11 5 GHz Up to 54 Mbps 802.11a Aruba Instant AP | Troubleshooting Guide...
  • Page 29 Run the show ap bss-table command to view the AP BSS table. Ensure that the SSID is broadcasted as expected without any radio resets. The tot-t column in the Aruba AP BSS Table logs the total up-time of the SSID. Errors in the SSID broadcast can be inferred from the total up-time data.
  • Page 30: Wireless Client Unable To Get An Ip Address

    (Instant AP)#debug pkt match <MAC address> type dhcp (Instant AP)#debug pkt dump Wireless Client Unable to Pass Traffic The following procedure describes how to troubleshoot issues, if the client is unable to pass traffic in the network: Aruba Instant AP | Troubleshooting Guide...
  • Page 31: Wireless Client Fails 802.1X Authentication

    Check the Role Assigned to Client Check if Client Can Reach the Gateway IP Check the Firewall Rules of the User Role Check the Role Assigned to Client Run the show clients command to view clients connected to the AP and verify if the client has inherited the desired role.
  • Page 32: Wireless Client Fails Mac Authentication

    ECP redirect mode — the AP redirects the client to the captive portal server for authentication. Run the show external-captive-portal command in the CLI to view the captive portal mode of the SSID. (Instant AP0# show external-captive-portal External Captive Portal ----------------------- Aruba Instant AP | Troubleshooting Guide...
  • Page 33: Wireless Client Fails Captive Portal Authentication

    Captive Portal ECP Mode Expected Header Response ECP tinyproxy mode Status Code: 200 OK Location in Header Response — Aruba AP captive portal URL (securelogin.arubanetworks.com) ECP redirect mode Status Code: 302 OK Location in Header Response — Captive portal server URL If the client browser fails to resolve DNS, open command prompt on the client PC and run nslookup to check the status of DNS server.
  • Page 34 Run the show ap debug auth-trace-buff<MAC address> command to view the authentication process logs between the client and the AP. Use the MAC address of the client to filter packets specific to a client. Any error in the authentication process will be displayed in the output. Aruba Instant AP | Troubleshooting Guide...
  • Page 35: Arm

    2.4 GHz / 5 GHz Up to 600 Mbps 802.11ac 5 GHz Up to 866.7 Mbps (Wave 1) Up to 1.73 Gbps (Wave 2) 802.11ax 2.4 GHz / 5 GHz Up to 2.4 Gbps Aruba Instant AP | Troubleshooting Guide...
  • Page 36: Ap Does Not Operate On Certain Channels

    The SSID configurations of a network can be modified by selecting the network and clicking on edit in the Configuration > Networks page of the Instant WebUI. Alternatively, the SSID configuration can be modified through the CLI using the wlan ssid-profile <profile name>...
  • Page 37: Ap Changes Radio Channel Frequently

    ----------- Time of Change Old Channel New Channel Old Power New Power Reason Result -------------- ----------- ----------- --------- --------- ------ ------ 2020-04-29 01:50:33 100E 132E Configured 2020-04-29 01:44:00 100E Configured 2020-04-29 01:38:41 116E Configured Aruba Instant AP | Troubleshooting Guide...
  • Page 38 2020-04-29 01:36:16 116E 116E Configured Interface :wifi1 ARM History --------- Time of Change Old Channel New Channel Old Power New Power Reason Result -------------- ----------- ----------- --------- --------- ------ ------ 2020-05-17 18:49:57 Configured 2020-05-17 18:43:35 Configured 2020-05-17 18:16:22 Configured 2020-05-17 18:08:18 Configured 2020-05-17 18:00:42 Configured...
  • Page 39 36-48 52-64 100-112 116-128 132-144 149-161 802.11a 160MHz (indoor) 36-64 100-128 802.11a 160MHz (outdoor) 36-64 100-128 802.11a (DFS) 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 Aruba Instant AP | Troubleshooting Guide...
  • Page 40: Mesh Networks

    In mesh networks, the AP with the Ethernet uplink connection will function as the mesh portal AP and there can be only one mesh portal in a mesh cluster. If two APs in a mesh network have Ethernet uplink, both the Aruba Instant AP | Troubleshooting Guide...
  • Page 41 APs will assume the role of mesh portal and the mesh link will be broken. Therefore, ensure that only the mesh portal AP has an Ethernet uplink connection. Check the RF Environment of the Mesh APs APs in a mesh cluster must have overlapping RF environments to establish mesh links. Run the show ap mesh neighbor command to view the list of neighboring mesh APs.

Table of Contents