hey man just want to say thank you, this worked like a charm - really appreciate you saving me from additional head banging :)
-------------------------------------------
Original Message:
Sent: Aug 13, 2025 01:07 PM
From: chulcher
Subject: Wired Port Profile Trunk on Microbranch AP
I think that is the most likely cause, but you'd need to upgrade and test to verify. You can check the release notes for AOS 10.5, the change should be noted there.
------------------------------
Carson Hulcher, ACEX#110
Original Message:
Sent: Aug 13, 2025 01:03 PM
From: lyundelson
Subject: Wired Port Profile Trunk on Microbranch AP
Oh is that it? Thank you, do you happen to have a doc that references this?
Original Message:
Sent: Aug 13, 2025 12:34 PM
From: chulcher
Subject: Wired Port Profile Trunk on Microbranch AP
AOS 10.4 doesn't have proper support for VLANs on the wired profile, upgrade to something newer. At this point the recommendation would be 10.7.2.1.
------------------------------
Carson Hulcher, ACEX#110
Original Message:
Sent: Aug 13, 2025 12:29 PM
From: lyundelson
Subject: Wired Port Profile Trunk on Microbranch AP
hi - it is 10.4.1.9_93201 and yes all relevant vlans trunked to the gateway. I dont see the clients when I run that command
Original Message:
Sent: Aug 13, 2025 12:04 PM
From: chulcher
Subject: Wired Port Profile Trunk on Microbranch AP
What version of firmware is running on the AP? Are all of the VLANs configured on the gateway?
What does the output of "show datapath bridge" look like?
------------------------------
Carson Hulcher, ACEX#110
Original Message:
Sent: Aug 13, 2025 11:36 AM
From: lyundelson
Subject: Wired Port Profile Trunk on Microbranch AP
Hi Francisco and thank you for the reply. I want to state that and untagged/native VLAN traffic is being sent correctly through the tunnel, it is only tagged traffic that seems to make it to the AP but never get sent through the tunnel to the gateway. As far as your checks:
1.2.3 =
wired-port-profile PortProfile-SwitchTrunk
switchport-mode trunk
allowed-vlan 32,1001,1108
native-vlan 1108
no shutdown
access-rule-name PortProfile-SwitchTrunk
speed auto
duplex auto
poe
forward-mode l2
type employee
gw-profile PortProfile-SwitchTrunk_#1755089217402_7005#_
gw-auth-server default
captive-portal disable
mac-authentication
no dot1x
radius-accounting
radius-interim-accounting-interval 5
enet3-port-profile PortProfile-SwitchTrunk
4. I am indeed using Aruba Central. The PBR is just an Any Any Any -> Forwards to Cluster and the role is essentially Allow Any to All + the PBR policy.
Original Message:
Sent: Aug 13, 2025 10:53 AM
From: Francisco Pinto
Subject: Wired Port Profile Trunk on Microbranch AP
Hi friend.
Here's what you should check:
1. Port Configuration: Ensure the AP's port is explicitly set to trunk mode.
2. Allowed VLANs: Within the trunk port configuration, you must specifically permit the tagged VLANs you want to carry. The default may not allow all VLANs.
3. Native VLAN: Verify that the native (untagged) VLAN is correctly configured on both the AP and the connected switch.
4. Aruba Central: If you are using Aruba Central, check the Policy-Based Routing (PBR) and user role settings to confirm that the tagged traffic is being correctly routed to the VPNC cluster.
You can ensure that both untagged and tagged traffic are properly tunneled to the gateway.
------------------------------
Francisco Pinto
francisco.pinto@novatec-corp.com
Original Message:
Sent: Aug 13, 2025 09:56 AM
From: lyundelson
Subject: Wired Port Profile Trunk on Microbranch AP
Hi - we are having trouble getting a Wired Port Profile configured as a Trunk carrying tagged traffic working on a Microbranch AP. The Microbranch AP is effectively working in CL2 mode and has a switch connected to one of its ports. The untagged/native traffic is making it through the tunnel all the way through to the gateway and out the switch the gateway is connected to. Tagged traffic doesn't appear to make it to the gateway whatsoever. Is there a special way to configure this? Has anyone had any luck with this setup.
-------------------------------------------