Controllerless Networks

 View Only

  • 1.  IAP-325 GUI unreachable via Wi-Fi side (but Wi-Fi Internet access works)

    Posted Oct 12, 2024 07:01 PM
    Edited by Kevin Rice Oct 12, 2024 07:03 PM

    I find this very odd. I'm a bit stumped.

    I have a pair of IAP-325 (v8.10.0.14) installed in a fire station for non-business use:

    INTERNET --> ROUTER --> SWITCH --> IAP-325 (x2)

    1. I cannot access the GUI or even ping the APs when connected via Wi-Fi, but can do both from the wired side (either remotely or from the router).
    2. Similarly, I cannot ping the SWITCH from the Wi-Fi side, but can ping the switch from the router and the Internet.
    3. From the same Wi-Fi connection, I can ping and access the router GUI and the entire Internet. Just not the APs and switch.

    How could I possibly be able to ping and access the router (and entire Internet) via Wi-Fi, but not the switch or APs? At the same time, everything works fine from the wired side! Everything has been rebooted.

    Any ideas?



  • 2.  RE: IAP-325 GUI unreachable via Wi-Fi side (but Wi-Fi Internet access works)

    Posted Oct 16, 2024 06:18 AM

    I think it's expected that you can access only the AP that you are connected to. If that is the VC, you should be able to access the WebUI as well.

    I'm not sure if that can be changed, as it probably has to do with a separation of the datapath and control path within the AP infrastructure.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: IAP-325 GUI unreachable via Wi-Fi side (but Wi-Fi Internet access works)

    Posted Oct 31, 2024 12:00 AM

    I can't comment on the ping for the switch not working, but I did run into a similar issue where I couldn't access the GUI when I was connected to the wifi it was broadcasting.

    Check the Access Rules for the role you're connecting, Configuration > Security > Roles. If it's just a typical access rule, you likely have an 'Allow any to all destinations' rule. You would think that it would mean you're unrestricted. However, I had to put in a rule, 'Allow app https to AP IP all' in order to gain access to the GUI while connected to the wifi.

    Not sure why a rule has to be explicitly created to allow it when 'Any to All' is already allowed. I don't know if that's a bug or intended to work that way.




Related Content