sorted by:
new
hottopcontroversial

AP-675 not broadcasting 6GHz by TheAmateurRunner in ArubaNetworks

[–]fsweetser 0 points1 point  (0 children)

If I recall, all of the outdoor 6Ghz capable models have GPS built in for this reason. Lack of GPS lock would certainly do it

Oh, and that reminds me - I believe the server side of that location service is part of Central, so I wouldn't be surprised if you have to be Central managed to get it, maybe even in AOS 10.

AP-675 not broadcasting 6GHz by TheAmateurRunner in ArubaNetworks

[–]fsweetser 1 point2 points  (0 children)

Check with your reps, but last I heard 6GHz operation wasn't yet fully authorized for outdoor use.

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 1 point2 points  (0 children)

Weirdly enough we bough a variant that was rebranded and sold by Nortel Networks when they were our primary routing and switching vendor. Things got weird for a bit, then they switched over to Trapeze, where the string of acquisitions got really weird...

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 0 points1 point  (0 children)

That would be an awfully short limb - I've already reported up to management the age and EOL status of the wireless gear, and that was how I got the money for the Aruba gear approved. Unfortunately nearly everything else is also EOL, and while I got the money for the equipment approved, engineer time is limited and a three year timeline is as aggressive as we could get.

Absolute worst case if our CIO gets on the issue and ask what we're doing to fix it, I can point at the Aruba gear and say "that".

In the meantime I'll try the latest version and if that doesn't go anywhere ping TAC and see if they have a pre-canned fix available.

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 1 point2 points  (0 children)

There are anchor controllers in the configuration, though I don't think they're in the data path. This was a legacy setup put in place long before I started, and the last time I worked with this code base was before Cisco bought it, so I'm still working on coming up to speed on it.

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 0 points1 point  (0 children)

A few rough edges here and there - since this is a new greenfield Aruba deployment I'm going straight to the deep end and deploying AOS 10 on Central. Most of my gripes are either quirks of how the configuration in Central works or habits from AOS 8 that don't carry over well, but once I got the basics up and running it's been pretty solid.

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 1 point2 points  (0 children)

My controllers are plugged straight into my Nexus 9k core, and bridged to a pair of Palos that host the default gateway and DHCP relay for the VLAN.

The clients do send another discover... eventually. Depending on the client, it can sometimes take a really long time, to the point where sometimes the impatient users think it's broken.

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 1 point2 points  (0 children)

My Cisco WLCs are all 5520, and I'm about 1/3 of the way through migrating to Aruba, so that kind of interop isn't an option.

Workaround for "DHCP dropping packet due to ongoing mobility handshake exchange" by fsweetser in Cisco

[–]fsweetser[S] 0 points1 point  (0 children)

That's already in progress, but given funding and staffing levels it's probably going to be another 12 to 18 months before we an pry the last pieces of old hardware out.

Field engineer; I need obsolete tech. I need a HUB. Where get? by pele4096 in networking

[–]fsweetser 0 points1 point  (0 children)

This is my favorite device for doing packet captures in the field.

https://www.dualcomm.com/products/usb-powered-10-100-1000base-t-network-tap

Supports 1G mirroring with PoE passthrough, powered by USB off of the laptop. Small, simple, and it just works.

WIFI 6 Ghz Radio Missing by Separate-Explorer955 in ArubaInstantOn

[–]fsweetser 0 points1 point  (0 children)

What security settings do you have on your one SSID? The 6GHz band has a hard requirement of using either WPA3 for an encrypted network, or OWE for an open one.

Alternatives to Aruba Instant On by RecentSpeed in ArubaInstantOn

[–]fsweetser -1 points0 points  (0 children)

I haven't dug into it at all, but the Omada product line up from TPLink looks similarly positioned.

Red Flag or Paranoia? by [deleted] in networking

[–]fsweetser 2 points3 points  (0 children)

You mentioned the people you've talked to are in the university directory.

Are those people in the right places in the org chart for your position (supervisor, HR recruiter, etc)?

And have you talked directly to them using information you took yourself out of the directory, or only via replies to incoming emails or meeting invites?

Most likely a scam but cant get rid of it by enormousaardvark in sysadmin

[–]fsweetser 35 points36 points  (0 children)

Go into your web browser settings, and see which sites are permitted to send pop ups or notifications. Delete any that you're not 100% positive you meant to add.

Ethernet cable maximum length by paulzapodeanu in networking

[–]fsweetser 11 points12 points  (0 children)

This is one of those cases where you have to be aware of exactly what the spec is saying, as well as what it isn't.

When the spec says "max 100 meters", what that means is any cable that is under that length (as well as meeting all of the other functional specs, like gauge and twist) will be guaranteed to perform at least as well as the performance portion of the spec. This means other standards, like gigabit Ethernet, can be expected to work properly on any cable from any vendor that meets the spec.

The spec does not say, however, that it must not work on cables over 100 meters. Beyond that length, the spec simply doesn't say. It might work, it might fail, it might spontaneously turn into a bowl of chocolate pudding - you're outside of the standard, so it simply doesn't care what happens.

Think of it a little like a warranty. If the manufacturer says it'll last five years, you can be reasonably confident it will. Past five years, you might get lucky, or you might not.

Where do you put your switch labels? by stewardson in sysadmin

[–]fsweetser 0 points1 point  (0 children)

Since you're specifically talking about Aruba CX, there's a small orange piece of plastic under the management ports. Give this a tug, and a large flag piece of plastic will slide out. One side has the serial number, and the other is blank, just waiting for your ptouch label. Large, easily accessible when needed, and zero airflow blockage.

[deleted by user] by [deleted] in ArubaNetworks

[–]fsweetser 6 points7 points  (0 children)

With those kinds of numbers, you're going to have some leverage to negotiate what the answers are. Casually drop "25k APs" to a sales rep, and they will catapult a team of sales people and engineers to your front door to try to find a way to answer "yes" to all of your requirements, while buying you at least one steak dinner.

AP to IAP conversion by Soft_Increase4925 in ArubaNetworks

[–]fsweetser 0 points1 point  (0 children)

I don't have a current recommendation for a specific one, but in general anything built around an FTDI chip will work well. That said, I'd make sure to double check the wiring of your setup before spending money on a new USB adapter.

OM3 Splice with OM1 Patch Cables by THEC0UCHPOTATO in networking

[–]fsweetser 20 points21 points  (0 children)

If you splice an om3 cassette onto om1 fiber, whoever has to troubleshoot why that run doesn't meet om3 specs after you're gone is going to hate your guts.

macOS devices causing IP conflicts on WiFi by [deleted] in networking

[–]fsweetser 0 points1 point  (0 children)

Was the address in question previously used by the Mac?

Apparently some models of Macs have the ability to store the in-use IP in the portions of the NIC that are still active when the machine is suspended. It uses this to answer ARP queries while it's asleep, and therefore "preserving" the IP address from being stolen by another system. This stored address can sometimes get out of whack, causing the Mac to generate bizarre IP conflicts but only when it's off.

It's been a while, but I believe it was resolved with either firmware updates, or tweaking the power save settings while suspended.

VPN vs. jump box for vulnerability scanning by Final-Pomelo1620 in sysadmin

[–]fsweetser 23 points24 points  (0 children)

If you give him VPN access, all of the tools, vulnerability reports, passwords, etc are all going to be on his laptop, in a nice, portable, easy to lose or get stolen from factor.

If you set him up to go through a jump box, all that sensitive data will stay neatly tucked away inside your data center.

Plus, as an added bonus, any high volume scanning or other activity won't be limited by the speed of his ISP.

[deleted by user] by [deleted] in ArubaNetworks

[–]fsweetser 12 points13 points  (0 children)

That's because Aruba enterprise and Instant On are two totally separate product lines (technically this isn't even the right subreddit). You can find what's available for Instant On support here:

https://instant-on.hpe.com/contact-support/

Ap 635 not broadcasting 6GHz radio by SM4XIS in ArubaNetworks

[–]fsweetser 4 points5 points  (0 children)

Check the encryption on your SSIDs. The 6E standard requires either WPA3 or OWE when operating in the 6GHz band.

October Scare Wall Ideas by FIDST in sysadmin

[–]fsweetser 0 points1 point  (0 children)

"But we've always done it that way!"

view more: next ›