Security

 View Only
Expand all | Collapse all

Mac address filter

This thread has been viewed 19 times
  • 1.  Mac address filter

    Posted 18 days ago

    How  do  i check a port  on a  ARUBA6300 to see if that port is  locked to a  mac address as no device  will work on that port.  I have link  and  connectivity  but  wont  pull  and IP.   Support has  been  slow  and hard  to  understand 



    -------------------------------------------


  • 2.  RE: Mac address filter

    Posted 18 days ago

    Do you have CLI access to the device? what is the port configuration?

    -------------------------------------------



  • 3.  RE: Mac address filter

    Posted 17 days ago

    The command (example for interface 1/1/1):

    show running interface 1/1/1

    should provide all configuration on the port. If there is any security/lockdown, it should be mentioning in the configuration.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 4.  RE: Mac address filter

    Posted 17 days ago
    this is what i get  when  that command on the port i have link and  activity but wont   connect to the network.  I'm thinking of a bad  port to switch  any  thoughts?


    interface 2/1/41
        no shutdown
        no routing
        vlan access 120
        spanning-tree port-type admin-edge
        exit
    --
    Wayne Johnson
    Director Of Technology
    Lowell Catholic 







  • 5.  RE: Mac address filter

    Posted 17 days ago

    It could be an endless number of things. Is VLAN 120 correct? Does a different device work? Bad cable? 

    -------------------------------------------



  • 6.  RE: Mac address filter

    Posted 17 days ago
    120 is  correct  and  no  device works also changed  cables  same just won't pull an  ip and connect to any  device

    --
    Wayne Johnson
    Director Of Technology
    Lowell Catholic 







  • 7.  RE: Mac address filter

    Posted 17 days ago
    Other ports assigned to VLAN 120 on that same switch work correct? Did you try a different device? Does VLAN 120 have DHCP enabled?





  • 8.  RE: Mac address filter

    Posted 17 days ago
    Yes other ports on  vlan  120 work  fine  also  i have  drive  DHCP and  static even   used  the  Static ip of  old  device incase  there was  something  funky and  still   wont pull any connection thru
    --
    Wayne Johnson
    Director Of Technology
    Lowell Catholic 







  • 9.  RE: Mac address filter

    Posted 17 days ago
    Plug a known working device into that same port. What happens?





  • 10.  RE: Mac address filter

    Posted 17 days ago
    Link and activity  but no connection

    --
    Wayne Johnson
    Director Of Technology
    Lowell Catholic 







  • 11.  RE: Mac address filter

    Posted 11 days ago

    If other ports on the same switch, with the same configuration work, just this single one doesn't, and if you have changed cables; you may as a last check swap the cables between your port 2/1/41 and another port, to verify if the previously working device from good to bad port now doesn't work, and the device from bad to good does work. Then you isolated everything to just the port.

    Also, visually inspect the network port if there is any dust or so inside of it; which is quite rare, but could be the case.

    One last thing to check is if the interface 2/1/41 is configured as a VSF (stacking) port; with 'show vsf link' you can see which ports are assigned to VSF. If the interface is a VSF port, it is excluded from normal operations; but someone should have configured the port as VSF.

    If none of the above resolves your problem, I would open a TAC case and after they have validated the same things we have done, an RMA replacement may be initiated for the switch.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 12.  RE: Mac address filter

    Posted 10 days ago
    I have done all that they want me to upgrade from Where even though it's already at the recommended firmware it's only this one port only then will they submit for an RMA replacement


    Wayne Johnson
    Director Of Technology
    Lowell Catholic 








  • 13.  RE: Mac address filter

    Posted 3 days ago

    If this switch is still under warranty/maintenance, I'd expect yes on the RMA if there is a faulty port. Fair question is if you want to go through the process, or instead put a disconnected plug or label on that port; but TAC also could maybe check further what may be going on, in case it's a defect that may hit other ports as well over time.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------