RE: ArubaOS 8.5.0.9 Clients not getting an address

2021-07-08 Thread Enfield, Chuck
Sorry, we had the issue on 8.6 code.  We skipped 8.5 code.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Enfield, Chuck
Sent: Thursday, July 8, 2021 1:21 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.9 Clients not getting an address

We have not experienced this exact problem, but we've seen weird forwarding 
behaviors from AP-205's after power events.  Not all of our APs are on UPS yet, 
twice after severe thunderstorms some AP-205's stopped forwarding user traffic 
(DHCP still works, but once the client is in the user table the AP won't 
forward its traffic.)  Rebooting the AP fixes the problem.  We suspect that 
power instability is putting the APs in a weird state.  We haven't been on 
8.5.0.9 that long and have not seen the issue on that code yet, but we had it 
on two previous 8.5 releases.

This probably isn't what you have, but I figured I'd mention it in case any of 
the details line up.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jerry Bucklaew
Sent: Thursday, July 8, 2021 1:02 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ArubaOS 8.5.0.9 Clients not getting an address

To ALL:


  We are experiencing and issue on our aruba os 8.5.0.9 code and I am 
wondering if anyone else has seen it.  Starting this week we have had 
complaints of users not getting an ip address.   It seems to be isolated to two 
buildings for the most part.On the dhcp server we see the discover and 
offer, but never a request.   On the controller packet capture we see the same 
thing, discover and offer but no request.  On a client side packet capture we 
see discover but no offer.  It seems to be ap related and a reboot of the ap 
seems to fix it, sometimes we have to reboot many ap's as a bunch in the same 
area have the issue.   For those with netinsight the insight, "no dhcp request 
after offer" seems to catch it.
For now it is only affect about 50 people out of 5k so a small number.  But 
it also seems to be affecting about 50 Ap's out of 6k, so again a small number. 
 But we really have not confirmed that it is the ap.   We have confirmed that a 
client on the same ap will continually have the problem no matter how many 
times we reboot him or de-auth him.  We have confirmed that many times if we 
get him to go to a different ap/location it does seem to clear up.


So again, just wondering if we are the only ones or if someone else has seen 
this.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Ccae104%40PSU.EDU%7Cab56b234a1dd4a3eb95308d94234c990%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637613616769191457%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=2h69ldzS1VjDlQMlGE6pjF%2B6rl5GSGgJEgAZonugRik%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Ccae104%40PSU.EDU%7Cab56b234a1dd4a3eb95308d94234c990%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637613616769201448%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=VKkWXhbfJBxvZXMPlDg%2FoCKBVGsBXAjFCqWWevtJiHo%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


RE: ArubaOS 8.5.0.9 Clients not getting an address

2021-07-08 Thread Michael Holden
If you’re using a LACP link between the controller/MD and the uplink switch 
double check that LACP signaling is correct.
We’ve seen this with at least one switch vendor where the LAG showed up, but 
traffic was intermittent.


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jerry Bucklaew
Sent: Thursday, July 8, 2021 1:02 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ArubaOS 8.5.0.9 Clients not getting an address

To ALL:


  We are experiencing and issue on our aruba os 8.5.0.9 code and I am 
wondering if anyone else has seen it.  Starting this week we have had 
complaints of users not getting an ip address.   It seems to be isolated to two 
buildings for the most part.On the dhcp server we see the discover and 
offer, but never a request.   On the controller packet capture we see the same 
thing, discover and offer but no request.  On a client side packet capture we 
see discover but no offer.  It seems to be ap related and a reboot of the ap 
seems to fix it, sometimes we have to reboot many ap’s as a bunch in the same 
area have the issue.   For those with netinsight the insight, “no dhcp request 
after offer” seems to catch it.
For now it is only affect about 50 people out of 5k so a small number.  But 
it also seems to be affecting about 50 Ap’s out of 6k, so again a small number. 
 But we really have not confirmed that it is the ap.   We have confirmed that a 
client on the same ap will continually have the problem no matter how many 
times we reboot him or de-auth him.  We have confirmed that many times if we 
get him to go to a different ap/location it does seem to clear up.


So again, just wondering if we are the only ones or if someone else has seen 
this.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fwww.educause.edu%2fcommunity=E,1,WaoJWcO5EqNldMS-Gsd27sYk8a99EHMRx5jL1a6noD5m5-wej1zl6GZ29Q71acFigP4jl64te9iqNiBRKMH1-1TeNc1MxYs7YW6peYMpOM0CeUNwYdKSMQ,,=1>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


RE: ArubaOS 8.5.0.9 Clients not getting an address

2021-07-08 Thread Johnson, Christopher
I've seen this on RAPs with SSIDs operating in split-tunnel mode and "possibly" 
bridge mode with Android Clients - but I occasionally saw this with 8.3.0.7 and 
8.5.0.9 and 8.5.0.11. Issue was somewhat intermittent and semi-replicable with 
TAC - but ended up having to close the case as troubleshooting wasn't really 
going anywhere and replicating the problem reliably at times was frustrating 
and we only have 1 or 2 RAPs for myself and a couple other network staff 
members.

My theory at the time was there was some "defect/disconnect" between the AP and 
it's "Drop Unknown Multicast/Broadcast Logic" - because although I could see 
"DHCP Offers" via the Datapath of the Controller downstream - I wasn't seeing 
these DHCP Offers via an Air Capture (Open SSID was one of the troubleshooting 
steps we performed) - and in reverse - at times where I saw the "DHCP Request" 
from the Client during an Air Capture - the DHCP Request never hit the Datapath 
of the Controller. But again - this was only on Remote APs operating in 
Split-Tunnel Mode. So not sure if that helps.
Christopher Johnson
Wireless Network Engineer
Office of Technology Solutions | Illinois State University
(309) 438-8444

Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook<https://www.facebook.com/ISUITHelp/> and 
Twitter<https://twitter.com/ISUITHelp>


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jerry Bucklaew
Sent: Thursday, July 08, 2021 12:02 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ArubaOS 8.5.0.9 Clients not getting an address

[This message came from an external source. If suspicious, report to 
ab...@ilstu.edu<mailto:ab...@ilstu.edu>]
To ALL:


  We are experiencing and issue on our aruba os 8.5.0.9 code and I am 
wondering if anyone else has seen it.  Starting this week we have had 
complaints of users not getting an ip address.   It seems to be isolated to two 
buildings for the most part.On the dhcp server we see the discover and 
offer, but never a request.   On the controller packet capture we see the same 
thing, discover and offer but no request.  On a client side packet capture we 
see discover but no offer.  It seems to be ap related and a reboot of the ap 
seems to fix it, sometimes we have to reboot many ap's as a bunch in the same 
area have the issue.   For those with netinsight the insight, "no dhcp request 
after offer" seems to catch it.
For now it is only affect about 50 people out of 5k so a small number.  But 
it also seems to be affecting about 50 Ap's out of 6k, so again a small number. 
 But we really have not confirmed that it is the ap.   We have confirmed that a 
client on the same ap will continually have the problem no matter how many 
times we reboot him or de-auth him.  We have confirmed that many times if we 
get him to go to a different ap/location it does seem to clear up.


So again, just wondering if we are the only ones or if someone else has seen 
this.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7C%7C06582cb341a14b4d24c208d9423216a4%7C085f983a0b694270b71d10695076bafe%7C1%7C0%7C637613605161868119%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=2BgAQwXva%2BZCmyJa1ovqe1rk990MjnZ2CsJdNm0I1zY%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


RE: ArubaOS 8.5.0.9 Clients not getting an address

2021-07-08 Thread Enfield, Chuck
We have not experienced this exact problem, but we've seen weird forwarding 
behaviors from AP-205's after power events.  Not all of our APs are on UPS yet, 
twice after severe thunderstorms some AP-205's stopped forwarding user traffic 
(DHCP still works, but once the client is in the user table the AP won't 
forward its traffic.)  Rebooting the AP fixes the problem.  We suspect that 
power instability is putting the APs in a weird state.  We haven't been on 
8.5.0.9 that long and have not seen the issue on that code yet, but we had it 
on two previous 8.5 releases.

This probably isn't what you have, but I figured I'd mention it in case any of 
the details line up.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jerry Bucklaew
Sent: Thursday, July 8, 2021 1:02 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ArubaOS 8.5.0.9 Clients not getting an address

To ALL:


  We are experiencing and issue on our aruba os 8.5.0.9 code and I am 
wondering if anyone else has seen it.  Starting this week we have had 
complaints of users not getting an ip address.   It seems to be isolated to two 
buildings for the most part.On the dhcp server we see the discover and 
offer, but never a request.   On the controller packet capture we see the same 
thing, discover and offer but no request.  On a client side packet capture we 
see discover but no offer.  It seems to be ap related and a reboot of the ap 
seems to fix it, sometimes we have to reboot many ap's as a bunch in the same 
area have the issue.   For those with netinsight the insight, "no dhcp request 
after offer" seems to catch it.
For now it is only affect about 50 people out of 5k so a small number.  But 
it also seems to be affecting about 50 Ap's out of 6k, so again a small number. 
 But we really have not confirmed that it is the ap.   We have confirmed that a 
client on the same ap will continually have the problem no matter how many 
times we reboot him or de-auth him.  We have confirmed that many times if we 
get him to go to a different ap/location it does seem to clear up.


So again, just wondering if we are the only ones or if someone else has seen 
this.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Ccae104%40PSU.EDU%7Cbfe7ba10f6d64209ab7608d942321695%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637613605162649431%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=wBRcbUpvNcwn8VPvgpVBRe3oA5Ms%2Bl%2FUjRRmZRRwlVE%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


ArubaOS 8.5.0.9 Clients not getting an address

2021-07-08 Thread Jerry Bucklaew
To ALL:


  We are experiencing and issue on our aruba os 8.5.0.9 code and I am 
wondering if anyone else has seen it.  Starting this week we have had 
complaints of users not getting an ip address.   It seems to be isolated to two 
buildings for the most part.On the dhcp server we see the discover and 
offer, but never a request.   On the controller packet capture we see the same 
thing, discover and offer but no request.  On a client side packet capture we 
see discover but no offer.  It seems to be ap related and a reboot of the ap 
seems to fix it, sometimes we have to reboot many ap’s as a bunch in the same 
area have the issue.   For those with netinsight the insight, “no dhcp request 
after offer” seems to catch it.
For now it is only affect about 50 people out of 5k so a small number.  But 
it also seems to be affecting about 50 Ap’s out of 6k, so again a small number. 
 But we really have not confirmed that it is the ap.   We have confirmed that a 
client on the same ap will continually have the problem no matter how many 
times we reboot him or de-auth him.  We have confirmed that many times if we 
get him to go to a different ap/location it does seem to clear up.


So again, just wondering if we are the only ones or if someone else has seen 
this.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community