Wireless Access

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy
------------------------------

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

Try doing "write erase all" and trying again...

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------

Original Message:
Sent: May 11, 2021 04:13 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

I just did the write erase all procedure and that resolved the issue.  Thanks, saved me a TAC call!
Original Message:
Sent: May 11, 2021 06:02 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

Try doing "write erase all" and trying again...

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:13 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

Hold on.  Did you do a write erase all, brought the controller up and then installed the pef license?   Try the write erase all   without installing the PEF license

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------

Original Message:
Sent: May 11, 2021 04:13 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

I've never had to install a license upon a write erase/out of box config to access the WebUI (or SSH) before.  I'm trying to reconfigure this to upgrade it from it's current 6.4.x.x code to run on 8.6.09 within my MM environment.

If I could TFTP/SCP the new code to the WLC, even that'd be fine, but for some reason it can only be pinged and can't process any other network serivices like the mentioned file transfer.
Original Message:
Sent: May 11, 2021 08:25 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

Hold on.  Did you do a write erase all, brought the controller up and then installed the pef license?   Try the write erase all   without installing the PEF license

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:13 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

Understood.

You should just do a write erase all, then.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------

Original Message:
Sent: May 12, 2021 08:09 AM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

I've never had to install a license upon a write erase/out of box config to access the WebUI (or SSH) before.  I'm trying to reconfigure this to upgrade it from it's current 6.4.x.x code to run on 8.6.09 within my MM environment.

If I could TFTP/SCP the new code to the WLC, even that'd be fine, but for some reason it can only be pinged and can't process any other network serivices like the mentioned file transfer.
Original Message:
Sent: May 11, 2021 08:25 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

Hold on.  Did you do a write erase all, brought the controller up and then installed the pef license?   Try the write erase all   without installing the PEF license

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:13 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------

Did you try to upgrade the controller firmware through the USB port.
- USB stick format as FAT32
- Put the ArubaOS 8.6.0.9 image in the folder "Arubaimage"
- Use the front USB interface and front display to upgrade

------------------------------
Marcel Koedijk | MVP Guru 2021 | ACMP | ACCP | ACDA | Ekahau ECSE | Not an HPE Employee | Opionions are my own
------------------------------

Original Message:
Sent: May 12, 2021 09:13 AM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

Understood.

You should just do a write erase all, then.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 12, 2021 08:09 AM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

I've never had to install a license upon a write erase/out of box config to access the WebUI (or SSH) before.  I'm trying to reconfigure this to upgrade it from it's current 6.4.x.x code to run on 8.6.09 within my MM environment.

If I could TFTP/SCP the new code to the WLC, even that'd be fine, but for some reason it can only be pinged and can't process any other network serivices like the mentioned file transfer.
Original Message:
Sent: May 11, 2021 08:25 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

Hold on.  Did you do a write erase all, brought the controller up and then installed the pef license?   Try the write erase all   without installing the PEF license

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:13 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Thanks for the quick reply, this is my interface output:

interface gigabitethernet 0/0/4
description "GE0/0/4"
trusted vlan 1-4094
switchport mode trunk
switchport trunk native vlan 77
switchport trunk allowed vlan 77,254

On the network switch side it's the same except it has additional vlans permitted over the trunk (does contain 77,254)


------------------------------
Ian Fritchy

Original Message:
Sent: May 11, 2021 04:11 PM
From: Colin Joseph
Subject: WebUI and SSH refused after Write Erase

That looks like your uplink interface is not trusted.  Use the console to make interfaces and interface vlans trusted.

------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

Original Message:
Sent: May 11, 2021 04:04 PM
From: Ian Fritchy
Subject: WebUI and SSH refused after Write Erase

Hi everyone,
I'm experiencing a pretty strange (in my experience) issue.  I am attempting to stand up a 7210 wireless controller and I'm finding that after performing a write erase/basic reconfig that, while the management IP is pinging, the WLC is timing out initial SSH connections and when attempting to navigate to the Web GUI it's redirecting me to "https://securelogin.arubanetworks.com/auth/cp_disabled.html".  I have not seen this behavior before and I can't figure out what setting I'm apparently missing.

pieces to my config:
mgmt vlan = 254
controller-ip vlan 254
interface vlan 254 has an ip address config
controller is pinging on vlan 254's IP address
(no ip address on vlan 1)

checked the web-server profile and enabled the 443 redirect

I already checked there are no crypto-local pki certs present

I went so far as to go into cpboot and format partition 0:1 and boot into that - still presenting me with the same issues.

I have console access however I can't establish an SCP or TFTP transfer for new code.

Any tips would be appreciated, thanks!

------------------------------
Ian Fritchy
------------------------------