Wireless Access

Hi Airheads,

We use several WLAN networks in our environment, on some of them need to deny inter-user traffic, on some of them not, so this feature was disabled globally, and enabled on specified virtual ap profiles.

We made a software upgrade on our system in the past week, and now seems that deny inter-user traffic not works. I've tried it on multiple WLANs, clients connected to the same WLAN can ping each other even if "deny inter-user traffic" is turned on under the vap profile. I tried switching it on and back on, it didn't help. This worked properly before the update.

Has anyone encountered a similar problem? The Release Notes was no mention of such a known bug, but if it exists, then I completely exclude the possibility that we ran it for the first time.

There is another standalone Aruba controller with the same type of APs at our other site with the same software version and similar configuration, "deny inter-user traffic" works well on that. (If I enable it under vap, it blocks traffic, if I disable it, traffic works)

Old software: 8.2.2.5
New software: 8.6.0.10
Upgrade path: 8.2.2.5 -> 8.3.0.16 -> 8.5.0.13 -> 8.6.0.10

Our setup: 2 x vMM (master redundancy) + 2 x MC7030 (in cluster) + several AP325s

Thanks!

------------------------------
Attila S
------------------------------

Deny inter user traffic does not work when two users are on two different controllers in a cluster.  This has been fixed in the 8.8 AOS release.


------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------

Original Message:
Sent: Aug 04, 2021 04:51 AM
From: Attila S
Subject: Deny inter-user traffic not working after sw upgrade

Hi Airheads,

We use several WLAN networks in our environment, on some of them need to deny inter-user traffic, on some of them not, so this feature was disabled globally, and enabled on specified virtual ap profiles.

We made a software upgrade on our system in the past week, and now seems that deny inter-user traffic not works. I've tried it on multiple WLANs, clients connected to the same WLAN can ping each other even if "deny inter-user traffic" is turned on under the vap profile. I tried switching it on and back on, it didn't help. This worked properly before the update.

Has anyone encountered a similar problem? The Release Notes was no mention of such a known bug, but if it exists, then I completely exclude the possibility that we ran it for the first time.

There is another standalone Aruba controller with the same type of APs at our other site with the same software version and similar configuration, "deny inter-user traffic" works well on that. (If I enable it under vap, it blocks traffic, if I disable it, traffic works)

Old software: 8.2.2.5
New software: 8.6.0.10
Upgrade path: 8.2.2.5 -> 8.3.0.16 -> 8.5.0.13 -> 8.6.0.10

Our setup: 2 x vMM (master redundancy) + 2 x MC7030 (in cluster) + several AP325s

Thanks!

------------------------------
Attila S
------------------------------

Thank You very much, I checked in AOS 8.8 Release Notes, you have rigth.

------------------------------
Attila S
------------------------------

Original Message:
Sent: Aug 04, 2021 05:47 AM
From: Colin Joseph
Subject: Deny inter-user traffic not working after sw upgrade

Deny inter user traffic does not work when two users are on two different controllers in a cluster.  This has been fixed in the 8.8 AOS release.


------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: Aug 04, 2021 04:51 AM
From: Attila S
Subject: Deny inter-user traffic not working after sw upgrade

Hi Airheads,

We use several WLAN networks in our environment, on some of them need to deny inter-user traffic, on some of them not, so this feature was disabled globally, and enabled on specified virtual ap profiles.

We made a software upgrade on our system in the past week, and now seems that deny inter-user traffic not works. I've tried it on multiple WLANs, clients connected to the same WLAN can ping each other even if "deny inter-user traffic" is turned on under the vap profile. I tried switching it on and back on, it didn't help. This worked properly before the update.

Has anyone encountered a similar problem? The Release Notes was no mention of such a known bug, but if it exists, then I completely exclude the possibility that we ran it for the first time.

There is another standalone Aruba controller with the same type of APs at our other site with the same software version and similar configuration, "deny inter-user traffic" works well on that. (If I enable it under vap, it blocks traffic, if I disable it, traffic works)

Old software: 8.2.2.5
New software: 8.6.0.10
Upgrade path: 8.2.2.5 -> 8.3.0.16 -> 8.5.0.13 -> 8.6.0.10

Our setup: 2 x vMM (master redundancy) + 2 x MC7030 (in cluster) + several AP325s

Thanks!

------------------------------
Attila S
------------------------------