great-tk

2013年11月1日金曜日

provision-ap copy-provisioning-params ap-name "6c:f3:7f:c6:7e:a6"

provision-ap copy-provisioning-params ap-name "6c:f3:7f:c6:7e:a6"
provision-ap installation default
provision-ap no external-antenna
provision-ap no usb-dev
provision-ap no usb-dial
provision-ap no usb-init
provision-ap no usb-modeswitch
provision-ap no usb-passwd
provision-ap no usb-tty
provision-ap no usb-type
provision-ap no usb-user
provision-ap master 10.215.200.191
provision-ap server-ip 10.215.200.191
provision-ap ap-group "TK-11ac"
provision-ap ap-name "AP-225-3"
provision-ap no syslocation
provision-ap remote-ap
provision-ap reprovision ap-name "6c:f3:7f:c6:7e:a6"

---

(Aruba3600) (AP provisioning) #?
a-ant-bearing Bearing for 5.2GHz (802.11a) antenna in decimal
degrees from True North. Range: 0-360.
a-ant-gain Gain for 5.2GHz (802.11a) antenna
a-ant-tilt-angle Tilt angle for 5.2GHz (802.11a) antenna in decimal
degrees. -ve for downtilt, +ve for uptilt. Range:
-90 to +90.
a-antenna Antenna to use for 802.11a (5GHz) (1, 2, or both)
altitude Altitude of the AP in decimal format.
ap-group The AP group of the AP
ap-name The name of the AP
apdot1x-passwd Password of AP so that AP can authenticate to 802.1x
using PEAP
apdot1x-username The username of the AP so that the AP can
authenticate to 802.1x networks using PEAP
cellular_nw_preference Multimode cellular modem network preference type
copy-provisioning-par.. Copy a provisioning-ap-list entry to
provisioning-params
dns-server-ip The IP address of the AP's DNS server
dns-server-ip6 The IPv6 address of the AP's DNS server
domain-name The DNS domain name of the AP
external-antenna Use external antenna
fqln Fully qualified location name
g-ant-bearing Bearing for 2.4GHz (802.11g) antenna in decimal
degrees from True North. Range: 0-360.
g-ant-gain Gain for 2.4GHz (802.11g) antenna
g-ant-tilt-angle Tilt angle for 2.4GHz (802.11g) antenna in decimal
degrees. -ve for downtilt, +ve for uptilt. Range:
-90 to +90.
g-antenna Antenna to use for 802.11g (2.4GHz) (1, 2, or both)
gateway The default gateway IP address for the AP
gateway6 The default gateway IPv6 address for the AP
ikepsk The IKE pre-shared key
installation The type of installation (Indoor or Outdoor)
ip6addr The static IP6 address of the AP
ip6prefix The prefix of static IPv6 address of the AP
ipaddr The static IP address of the AP
latitude Latitude of the AP in DMS (Degrees,Minutes,Seconds)
format. Example: "37 22 08.75 N" (DDD MM SS.SS D)
link-priority-cellular Priority of cellular link [0=min; 255=max]
link-priority-ethernet Priority of ethernet link [0=min; 255=max]
longitude Longitude of the AP in DMS (Degrees,Minutes,Seconds)
format. Example: "122 02 34.29 W" (DDD MM SS.SS D)
master The DNS name or IP address of the AP's switch
mesh-role The role of the AP in mesh network (Mesh Point or
Portal)
mesh-sae Enable or Disable SAE on Mesh network (Default
Disable)
netmask The netmask associated with the static IP address of
the AP
no Delete Command
pap-passwd The PAP password configured on the switch for the AP
(6-32 characters)
pap-user The PAP username configured on the switch for the AP
pkcs12-passphrase PKCS12 PASSPHRASE
pppoe-chap-secret The CHAP secret key used for CHAP authentication.
Max 50 characters in length.
pppoe-passwd The PAP password configured on the PPPoE Access
Concentrator for the AP
pppoe-service-name The PPPoE service name
pppoe-user The PAP username configured on the PPPoE Access
Concentrator for the AP
read-bootinfo Read current Boot Environment in AP
remote-ap This is a remote AP
reprovision Send current provisioning-params to AP(s)
reset-bootinfo Restore factory default boot variables
sch-mode-radio-0 Single chain mode for Radio 0 (Enable/Disable)
sch-mode-radio-1 Single chain mode for Radio 1(Enable/Disable)
server-ip The IP address of the switch containing the AP image
server-name The DNS name of the switch containing the AP image
set-ikepsk-by-addr Set IKE PSK corresponding to a given IP address.
syslocation SNMP sysLocation
uplink-vlan AP sends/receives frames tagged with this VLAN on
its Ethernet uplink
usb-dev The USB device identifier, if device is not already
supported
usb-dial The dial string for the USB modem, if default is
incorrect
usb-init The initialization string for the USB modem, if
default is incorrect
usb-modeswitch ALL the parameters that is required to be passed to
usb_modeswitch utility
usb-passwd The possibly optional PPP password provided by the
cellular service provider
usb-power-mode Choose USB power mode [auto; enable; disable]
usb-tty The TTY device data path for the USB modem, if
default is incorrect
usb-tty-control The TTY device control path for the USB modem, if
default is incorrect
usb-type The USB driver type, for any 3G/2G USB modems
usb-user The PPP username provided by the cellular service

provider

show web-server

(Aruba3600) #show web-server

Web Server Configuration
------------------------
Parameter Value
--------- -----
Cipher Suite Strength high
SSL/TLS Protocol Config sslv3 tlsv1
Switch Certificate default
Captive Portal Certificate default
Management user's WebUI access method username/password
User session timeout <30-3600> (seconds) 3600
Maximum supported concurrent clients <25-320> 25
Enable WebUI access on HTTPS port (443) false
Web Lync Listen Protocol/Port Config N/A

多数のユーザが同時にアクセスした場合に Captive Portal の画面が表示されるのが遅い(10秒以上)場合、web-max-clients の設定を増やしてみてください。

コード: 全て選択

(config) #web-server

(Web Server Configuration) #web-max-clients ?

<web-max-clients> Configure web servers' maximum supported concurrent

clients <25-400>

(Web Server Configuration) #web-max-clients 200

(Web Server Configuration) #!

(config) #

show ap debug system-status ap-name 6c:f3:7f:c6:7e:a6

（質問）

APがAuthステータス17を返し、接続出来ない。

（回答）

この場合、Auth/Assoc/Reassoc の合計レートが Management Frame Throttle の閾値を超えたために事象が発生している可能性。

デフォルトでは BSSID あたり 1 秒間に 20 個以上の Auth/Assoc/Reassoc を受信すると、それ以降は拒否。

(Aruba3600) #show ap debug system-status ap-name 6c:f3:7f:c6:7e:a6

Reboot Information
------------------
AP rebooted Mon Oct 21 13:07:14 JST 2013; SAPD: Rebooting after provisioning
----------------------------------------------------------------------------

Rebootstrap Information
-----------------------
Date Time Reason (Latest 10)
--------------------------------------
1969-12-31 16:00:37 Changing to LMS #0 (10.215.200.191)

HA Failover Information
-----------------------
Date Time Reason (Latest 10)
--------------------------------------
(none found)

Recent Control Messages from AP to Controller
---------------------------------------------
Date Time Message Description
-------------------------------------------------
Fri Nov 1 19:13:52 2013(77 secs ago): SENT REQ type=BW_REPORT len=62 peer=10.215.200.191 seq_num=4864 num_attempts=1 rtt=0 secs 04000000390400000007050AD7C8440400000022040000130004000000000400000000040000000104000000000200040000000004000000000400000000
Fri Nov 1 19:08:52 2013(377 secs ago): SENT REQ type=BW_REPORT len=62 peer=10.215.200.191 seq_num=4863 num_attempts=1 rtt=0 secs 04000000390400000007050AD7C844040000002204000012FF04000000000400000000040000000104000000000200040000000004000000000400000000
Fri Nov 1 19:08:45 2013(384 secs ago): SENT REQ type=KEEPALIVE len=45 peer=10.215.200.191 seq_num=4862 num_attempts=1 rtt=0 secs 04000000280400000002050AD7C844040000002204000012FE0452737DAD05FFFFFF00050AD7C8010000000000

Rebootstrap LMS
---------------
1969-12-31 16:00:37 Changing to LMS #0 (10.215.200.191)
-------------------------------------------------------

Crash Information
-----------------
(none found)
------------

CPU and Memory Usage
--------------------
Timestamp CPU Util(%) Memory Util(%)
--------- ----------- --------------
2013-11-01 19:15:07 1 15
2013-11-01 19:14:57 1 15
2013-11-01 19:14:47 0 15
2013-11-01 19:14:37 0 15
2013-11-01 19:14:27 0 15
2013-11-01 19:14:17 1 15
2013-11-01 19:14:07 1 15

Peak CPU Util in the last one hour
----------------------------------
Timestamp CPU Util(%) Memory Util(%)
--------- ----------- --------------
2013-11-01 18:56:05 5 15

Output of top
-------------
Mem: 75544K used, 439812K free, 0K shrd, 0K buff, 10164K cached
Load average: 0.06 0.10 0.06 (Status: S=sleeping R=running, W=waiting)
PID USER STATUS RSS PPID %CPU %MEM COMMAND
16225 root R 436 16224 0.4 0.0 busybox
9 root SW 0 2 0.4 0.0 events/0
1696 root S 10928 1639 0.0 2.1 sapd
1801 root S 2112 1696 0.0 0.4 rapper
1702 root S 1888 1639 0.0 0.3 stm
1715 root S 1500 1639 0.0 0.2 lldpd
1639 root S 1332 1 0.0 0.2 nanny
1701 root S 1232 1639 0.0 0.2 rfd
1645 root S < 496 1639 0.0 0.0 msgHandler
1691 root S 464 1 0.0 0.0 sh
1948 root S 452 1639 0.0 0.0 syslogd
1695 root S 408 1639 0.0 0.0 klogd
16224 root S 408 1696 0.0 0.0 sh
1 root S 392 0 0.0 0.0 init
1515 root S 364 1 0.0 0.0 udhcpc
1700 root S < 352 1698 0.0 0.0 wdg
1699 root S < 352 1698 0.0 0.0 wdg
1698 root S 352 1697 0.0 0.0 wdg
1697 root S 352 1639 0.0 0.0 wdg
10 root SW 0 2 0.0 0.0 events/1
1266 root SW 0 2 0.0 0.0 bond0

Heartbeat Stats
---------------
Heartbeats Sent Sent Seqnum Heartbeats Received Rcvd Seqnum MTUs sent Misc sent Measurement Duration
--------------- ----------- ------------------- ----------- --------- --------- --------------------
970444 52966 970443 52966 3 0 since last rebootstrap
970470 n/a 970443 n/a 3 0 total since bootup

Firewall Stats
--------------
ct_in=1172513 ct_out=1172513 stby_hbt=0/0
-----------------------------------------
Downstream: ct_in=1160229 ct_out/drops=1160229/0 fj=0/972446
GRE Rx striping: radio=0 enet0=2130672 enet1=0
GRE Rx striping: radio=1 enet0=0 enet1=0
Firewall Queue scheduled 0 Firewall Queue scheduled 5176247
Firewall Rx Queue: length 0, dropped 0
Firewall Tx Queue: length 0, dropped 0

DMO queue: size:512, dropped:0, rescheduled:0, length:0, high-water:0

CPU 0: Tlet Calls=0 Rx=0/0 Tx=0 yields=0/0 EthIn=0
CPU 1: Tlet Calls=0 Rx=0/5176247 Tx=0 yields=0/5176247 EthIn=0
ASAP_SP-Stats: fp2sp=0 sp2fp=0 sp_calls=0 fp_calls=0 cmd_alloc_fails=0
GMAC 0 Statistics:
RX Frames: 004efbb7 TX Frames: 000013be
Dot1dDiscards: 00000977 Denied Frames: 00000000
GMAC 1 Statistics:
RX Frames: 00000000 TX Frames: 00000000
GMAC 2 Statistics:
RX Frames: 00000000 TX Frames: 00000000
Maintenance Statistics:
Len Errors: 000001e9 Runts: 00000000
IP Addr Errors: 000001ea MsgQFull: 00000000
Application Statistics:
Bridge Statistics:
Cur Entries: 00000021 High Entries: 0000004e
Max Entries: 00001000 Total Entries: 00003c76
IP Reassembly Statistics:
cpu| cur | high | max | tot | full |ageidx|
IP Reverse Fragment Statistics:
cpu| cur | high | max | tot | full | ctx_w_buf | aged |
IPv6 Reassembly Statistics:
cpu| cur | high | max | tot | full |ageidx|
IPv6 Reverse Fragment Statistics:
cpu| cur | high | max | tot | full | ctx_w_buf | aged |
WiFi Reassembly Statistics:
cpu| cur | high | max | tot | full |ageidx|
0| 0000 | 0000 | 0000 | 0000 | 0000 | 0000 |
1| 0000 | 0000 | 0000 | 0000 | 0000 | 0000 |
Route Cache Statistics:
Cur Entries(v4/v6): 0000000e/00000000 High Entries: 0000000e
Max Entries: 00000400 Total Entries: 00000010
session_fib 0 session_fib_routed 0 session_fib_stale 0 session_fib_rt_fallback 0 session_fib_race 0
Route Table Statistics:
Cur Entries(v4/v6): 00000003/00000000 High Entries: 00000003
Max Entries: 00000080 Total Entries: 00000005
Patricia: Cur 00000003 Full 00000000 Dup 00000000 Ignore 00000000
Null: Cur 00000001 Full 00000000 ECMP Full 00000000
Session Statistics:
Cur Entries: 00000005 High Entries: 0000004a
Max Entries: 00001000 Total Entries: 000262d8
Station Statistics:
Cur Entries: 00000001 High Entries: 00000002
Pend. deletes: 00000000
Max Entries: 000003ff Total Entries: 00000008
User Statistics:
Uke Cur Entries: 00000005/00000003/00000002/00000000 High Entries: 00000005
Max Entries: 00000fff Total Entries: 00000006
Full: 00000000 Denied: 00000000/00000000
Uae Cur Entries: 00000005 High Entries: 00000005

Descriptor Usage
----------------
Interface Queue Alloc Free In-use Max Failed
--------- ----- ----- ---- ------ --- ------
wifi0 0(BE) 1151230 1151229 0 32 1
wifi0 1(BK) 0 0 0 0 0
wifi0 2(VI) 0 0 0 0 0
wifi0 3(VO) 658107 658107 0 5 0
wifi0 4(BCMC) 0 0 0 0 0
wifi0 5(ATIM) 0 0 0 0 0

Interface counters
------------------
Interface Rx_pkts Rx_errors Rx drops Tx_pkts Tx_errors Tx_drops Resets
--------- ------- --------- -------- ------- --------- -------- ------
wifi0 1243061 10950619 0 15309878 0 0 8
wifi1 0 0 0 0 0 0 4

MTU Discovery
-------------
Probes Responses Last Sent Last Rcvd
------ --------- --------- ---------
0 0 0 0

Switch MTU, Update sent time, Ack receive time, Current time (Time in seconds since AP booted)
1400 75 75 972446

ARP Cache
---------
IP address HW type Flags HW
-- ------- -- ---- ----- --
192.168.11.2 0x1 0x6 6c:f3:7f:c6:7e:a6 * br0
10.215.200.2 0x1 0x2 00:0b:86:00:3b:80 * br0
10.215.200.191 0x1 0x2 00:0b:86:61:83:14 * br0

Route Table
-----------
Iface Destination Gateway Flags RefCnt Use Metric Mask MTU Window IRTT
----- ----------- ------- ----- ------ --- ------ ---- --- ------ ----
tun0 0AD7C8BF 00000000 0005 0 0 0 FFFFFFFF 0 0 0
br0 0AD7C800 00000000 0001 0 0 0 FFFFFF00 0 0 0
br0 C0A80B00 00000000 0001 0 0 0 FFFFFF00 0 0 0
tun0 00000000 00000000 0001 0 0 0 00000000 0 0 0
br0 00000000 0AD7C801 0003 0 0 -3 00000000 0 0 0

Interface Information
---------------------
Inter-| Receive | Transmit
----------------------------------------------------------------------------
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed reset
lo: 1664 13 0 0 0 0 0 0 1664 13 0 0 0 0 0 0 0
eth0: 843590312 7306923 0 0 0 0 0 0 476471485 2423415 0 0 0 0 0 0 0
eth1: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
dummy0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
bond0: 843590312 7306923 0 0 0 0 0 0 476471485 2423415 0 0 0 0 0 0 0
anul0: 0 0 0 0 0 0 0 0 2558 33 0 0 0 0 0 0 0
ap0: 0 0 0 0 0 0 0 0 174193670 1172513 0 0 0 0 0 0 0
am0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
gre0: 0 970446 0 0 0 0 0 0 0 986611 0 26 0 0 0 0 0
apsos0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
br0: 0 5176251 0 2975 0 0 0 0 0 5093183 0 5101426 0 0 0 0 0
wifi0: 174193670 1243061 70548 0 0 10880071 0 0 173628103 15309878 0 0 0 0 0 0 8
wifi1: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 4
tun0: 14669487 76550 0 0 0 0 0 0 216224402 1193967 0 0 0 0 970444 0 0
aruba000: 174193670 1243061 70548 0 0 10880071 0 0 173628103 15309878 0 0 0 0 0 0 8

ifconfig output for eth0
------------------------
eth0 Link encap:Ethernet HWaddr 6C:F3:7F:C6:7E:A6
---------------------------------------------------------
UP BROADCAST RUNNING SLAVE MULTICAST MTU:9000 Metric:1
RX packets:7306928 errors:0 dropped:0 overruns:0 frame:0
TX packets:2423421 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:843591620 (804.5 MiB) TX bytes:476477233 (454.4 MiB)
Base address:0xe000

Rx broadcast packet:0 Rx broadcast packet per second:0
Rx multicast packet:0 Rx multicast packet per second:0
Tx broadcast packet:0 Tx broadcast packet per second:0
Tx multicast packet:0 Tx multicast packet per second:0

ifconfig output for eth1
------------------------
eth1 Link encap:Ethernet HWaddr 6C:F3:7F:C6:7E:A6
---------------------------------------------------------
UP BROADCAST SLAVE MULTICAST MTU:9000 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
Base address:0x6000

Rx broadcast packet:0 Rx broadcast packet per second:0
Rx multicast packet:0 Rx multicast packet per second:0
Tx broadcast packet:0 Tx broadcast packet per second:0
Tx multicast packet:0 Tx multicast packet per second:0

ifconfig output for bond0
-------------------------
bond0 Link encap:Ethernet HWaddr 6C:F3:7F:C6:7E:A6
---------------------------------------------------------
inet6 addr: fe80::6ef3:7fff:fec6:7ea6/64 Scope:Link
UP BROADCAST RUNNING MASTER MULTICAST MTU:1500 Metric:1
RX packets:7306928 errors:0 dropped:0 overruns:0 frame:0
TX packets:2423421 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:843591620 (804.5 MiB) TX bytes:476477233 (454.4 MiB)

Rx broadcast packet:0 Rx broadcast packet per second:0
Rx multicast packet:0 Rx multicast packet per second:0
Tx broadcast packet:0 Tx broadcast packet per second:0
Tx multicast packet:0 Tx multicast packet per second:0

ifconfig output for br0
-----------------------
br0 Link encap:Ethernet HWaddr 6C:F3:7F:C6:7E:A6
---------------------------------------------------------
inet addr:10.215.200.68 Bcast:10.215.200.255 Mask:255.255.255.0
inet6 addr: fe80::6ef3:7fff:fec6:7ea6/64 Scope:Link
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:5176256 errors:0 dropped:2975 overruns:0 frame:0
TX packets:5093185 errors:0 dropped:5101428 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

Rx broadcast packet:0 Rx broadcast packet per second:0
Rx multicast packet:3297032 Rx multicast packet per second:5
Tx broadcast packet:2442904 Tx broadcast packet per second:4
Tx multicast packet:2616512 Tx multicast packet per second:2

IP Information
--------------
Reassemble Timeout packet 0
-----------------------------------
Reassemble required packet 8
Reassemble ok packet 3
Reassemble failed packet 0
Fragments received ok packet 51344
Fragments failed packet 0
Fragments created packet 111593

iwconfig output for aruba000
----------------------------
aruba000 IEEE 802.11 ESSID:"TK-11ac-psk"
Mode:Master Channel:42 Access Point: 6C:F3:7F:E7:EA:70
Encryption key:off

AP Uptime
---------
11 days 6 hours 7 mins 27 secs

-------------------------------

Process Table
-------------
PID Size State Command
--- ---- ----- -------
1 2236 kB S init
1515 2240 kB S udhcpc
1639 2452 kB S nanny
1645 1272 kB S msgHandler
1691 2236 kB S sh
1695 2236 kB S klogd
1696 13444 kB R sapd
1697 956 kB S wdg
1698 956 kB S wdg
1699 956 kB S wdg
1700 956 kB S wdg
1701 2660 kB S rfd
1702 3468 kB S stm
1715 2928 kB S lldpd
1801 3860 kB S rapper
1948 2240 kB S syslogd

Memory Usage
------------
MemTotal: 515356 kB
---------------------------
MemFree: 439892 kB
Buffers: 0 kB
Cached: 10164 kB
SwapCached: 0 kB
Active: 14804 kB
Inactive: 8064 kB
Active(anon): 12704 kB
Inactive(anon): 0 kB
Active(file): 2100 kB
Inactive(file): 8064 kB
Unevictable: 0 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 12728 kB
Mapped: 3836 kB
Shmem: 0 kB
Slab: 3404 kB
SReclaimable: 444 kB
SUnreclaim: 2960 kB
KernelStack: 272 kB
PageTables: 268 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 257676 kB
Committed_AS: 20560 kB
VmallocTotal: 474976 kB
VmallocUsed: 33288 kB
VmallocChunk: 413836 kB

Kernel slab statistics
----------------------
Kernel slab statistics
----------------------
slabinfo - version: 2.1
# name <active_objs> <num_objs> <objsize> <objperslab> <pagesperslab> : tunables <limit> <batchcount> <sharedfactor> : slabdata <active_slabs> <num_slabs> <sharedavail>
RAWv6 12 12 672 12 2 : tunables 0 0 0 : slabdata 1 1 0
UDPLITEv6 0 0 672 12 2 : tunables 0 0 0 : slabdata 0 0 0
UDPv6 24 24 672 12 2 : tunables 0 0 0 : slabdata 2 2 0
tw_sock_TCPv6 0 0 160 25 1 : tunables 0 0 0 : slabdata 0 0 0
TCPv6 0 0 1280 12 4 : tunables 0 0 0 : slabdata 0 0 0
flow_cache 0 0 80 51 1 : tunables 0 0 0 : slabdata 0 0 0
bsg_cmd 0 0 288 14 1 : tunables 0 0 0 : slabdata 0 0 0
posix_timers_cache 0 0 104 39 1 : tunables 0 0 0 : slabdata 0 0 0
UDP-Lite 0 0 544 15 2 : tunables 0 0 0 : slabdata 0 0 0
xfrm_dst_cache 24 24 320 12 1 : tunables 0 0 0 : slabdata 2 2 0
UDP 30 30 544 15 2 : tunables 0 0 0 : slabdata 2 2 0
tw_sock_TCP 0 0 128 32 1 : tunables 0 0 0 : slabdata 0 0 0
TCP 0 0 1152 14 4 : tunables 0 0 0 : slabdata 0 0 0
eventpoll_pwq 204 204 40 102 1 : tunables 0 0 0 : slabdata 2 2 0
blkdev_queue 0 0 1336 12 4 : tunables 0 0 0 : slabdata 0 0 0
blkdev_requests 0 0 200 20 1 : tunables 0 0 0 : slabdata 0 0 0
biovec-256 10 10 3072 10 8 : tunables 0 0 0 : slabdata 1 1 0
biovec-128 0 0 1536 21 8 : tunables 0 0 0 : slabdata 0 0 0
biovec-64 0 0 768 21 4 : tunables 0 0 0 : slabdata 0 0 0
sock_inode_cache 91 92 352 23 2 : tunables 0 0 0 : slabdata 4 4 0
file_lock_cache 72 72 112 36 1 : tunables 0 0 0 : slabdata 2 2 0
shmem_inode_cache 20 20 400 20 2 : tunables 0 0 0 : slabdata 1 1 0
proc_inode_cache 288 288 328 12 1 : tunables 0 0 0 : slabdata 24 24 0
sigqueue 56 56 144 28 1 : tunables 0 0 0 : slabdata 2 2 0
bdev_cache 18 18 448 18 2 : tunables 0 0 0 : slabdata 1 1 0
sysfs_dir_cache 7650 7650 48 85 1 : tunables 0 0 0 : slabdata 90 90 0
filp 209 300 160 25 1 : tunables 0 0 0 : slabdata 12 12 0
inode_cache 468 468 304 13 1 : tunables 0 0 0 : slabdata 36 36 0
dentry 929 930 136 30 1 : tunables 0 0 0 : slabdata 31 31 0
buffer_head 0 0 56 73 1 : tunables 0 0 0 : slabdata 0 0 0

Kernel slab statistics
----------------------
Kernel slab statistics
----------------------
vm_area_struct 486 506 88 46 1 : tunables 0 0 0 : slabdata 11 11 0
mm_struct 36 36 448 18 2 : tunables 0 0 0 : slabdata 2 2 0
files_cache 38 54 224 18 1 : tunables 0 0 0 : slabdata 3 3 0
signal_cache 101 119 480 17 2 : tunables 0 0 0 : slabdata 7 7 0
sighand_cache 56 60 1312 12 4 : tunables 0 0 0 : slabdata 5 5 0
task_struct 61 65 1216 13 4 : tunables 0 0 0 : slabdata 5 5 0
anon_vma_chain 540 680 24 170 1 : tunables 0 0 0 : slabdata 4 4 0
anon_vma 340 340 24 170 1 : tunables 0 0 0 : slabdata 2 2 0
idr_layer_cache 130 130 152 26 1 : tunables 0 0 0 : slabdata 5 5 0
radix_tree_node 127 195 296 13 1 : tunables 0 0 0 : slabdata 15 15 0
kmalloc-8192 20 20 8192 4 8 : tunables 0 0 0 : slabdata 5 5 0
kmalloc-4096 94 96 4096 8 8 : tunables 0 0 0 : slabdata 12 12 0
kmalloc-2048 108 112 2048 16 8 : tunables 0 0 0 : slabdata 7 7 0
kmalloc-1024 107 112 1024 16 4 : tunables 0 0 0 : slabdata 7 7 0
kmalloc-512 239 240 512 16 2 : tunables 0 0 0 : slabdata 15 15 0
kmalloc-256 2894 2912 256 16 1 : tunables 0 0 0 : slabdata 182 182 0
kmalloc-128 1212 1216 128 32 1 : tunables 0 0 0 : slabdata 38 38 0
kmalloc-64 629 640 64 64 1 : tunables 0 0 0 : slabdata 10 10 0
kmalloc-32 499 512 32 128 1 : tunables 0 0 0 : slabdata 4 4 0
kmalloc-16 1536 1536 16 256 1 : tunables 0 0 0 : slabdata 6 6 0
kmalloc-8 3577 3584 8 512 1 : tunables 0 0 0 : slabdata 7 7 0
kmalloc-192 157 168 192 21 1 : tunables 0 0 0 : slabdata 8 8 0
kmalloc-96 863 924 96 42 1 : tunables 0 0 0 : slabdata 22 22 0

Interrupts
----------
CPU0 CPU1
---------------------------------
16: 188186490 0 OpenPIC Level wifi0
17: 0 0 OpenPIC Level wifi1
18: 4 0 OpenPIC Level phy_interrupt, phy_interrupt
19: 0 0 OpenPIC Level fsl-lbc
20: 0 0 OpenPIC Level fsldma-chan
21: 0 0 OpenPIC Level fsldma-chan
22: 0 0 OpenPIC Level fsldma-chan
23: 0 0 OpenPIC Level fsldma-chan
25: 0 0 OpenPIC Level eth1_g1_tx
26: 0 0 OpenPIC Level eth1_g1_rx
27: 0 0 OpenPIC Level eth1_g1_er
31: 0 0 OpenPIC Level eth1_g0_tx
32: 0 0 OpenPIC Level eth1_g0_rx
33: 0 0 OpenPIC Level eth1_g0_er
35: 0 991683 OpenPIC Level eth0_g0_tx
36: 0 6917454 OpenPIC Level eth0_g0_rx
40: 0 0 OpenPIC Level eth0_g0_er
42: 32 0 OpenPIC Level serial
43: 0 1922 OpenPIC Level i2c-mpc, i2c-mpc
44: 0 0 OpenPIC Level p1020-pmu
45: 30203 0 OpenPIC Level talitos
51: 0 1335378 OpenPIC Level eth0_g1_tx
52: 0 0 OpenPIC Level eth0_g1_rx
58: 0 228172 OpenPIC Level talitos
67: 0 0 OpenPIC Level eth0_g1_er
247: 0 0 OpenPIC Edge mpic timer 0
251: 0 0 OpenPIC Edge ipi call function
252: 3851123 150627851 OpenPIC Edge ipi reschedule
253: 458300 384853 OpenPIC Edge ipi call function single
LOC: 175536912 200262225 Local timer interrupts
SPU: 2 1 Spurious interrupts
CNT: 0 0 Performance monitoring interrupts
MCE: 0 0 Machine check exceptions

Modules
-------
wl 5240350 0 - Live 0xda000000
------------------------------
asap_mod 4226244 5 wl, Live 0xda800000
drvlog_mod 12326 1 wl, Live 0xde12c000 (P)
bonding 82887 0 - Live 0xdc160000

Ethernet bonding
----------------
BondMode NumSlaves LinkPollIntvl(ms)
-------- --------- -----------------
ActiveBackup 2 400

Slave bonding info
------------------
SlaveId Name Link State #LinkFails
------- ---- ---- ----- ----------
0 eth0 UP ACTIVE 0
1 eth1 DOWN STANDBY 0

DHCP Information
==================
listen-address=127.0.0.1
addn-hosts=/etc/ld_eth_hosts
addn-hosts=/etc/ld_ppp_hosts
dhcp-src=192.168.11.1
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-authoritative
filterwin2k
{
vlan-id=4095
dhcp-range=192.168.11.3,192.168.11.254,255.255.255.0,12h
dhcp-option=1,255.255.255.0
dhcp-option=3,192.168.11.1
dhcp-option=54,192.168.11.1
}
DHCP VLAN Id: 4095
DHCP Server Id: 192.168.11.1
DHCP Server Mask: 255.255.255.0

Ethernet Duplex/Speed Settings
------------------------------
Autoneg Speed (Mbps) Duplex Iface
------- ------------ ------ -----
on 1000 Full eth0
on 10 Half eth1

LMS Information
---------------
Item Value
---- -----
Primary LMS 10.215.200.191
Backup LMS N/A
Using Primary
Preemption Disabled
VRRP No

AP to Controller Message Information
------------------------------------
Item Value
---- -----
AP state REGISTERED
AP next message ID (0ad7c844,00000022,4865)
Controller next message ID (0ad7c8bf,5264a8cb,5)

Master discovered by:Provisioned manually

Boot Version
------------
1.4.0.6 (38177)
---------------

Power Status
------------
Operational State DC
----------------- --
Current HW State DC
LLDP Negotiated POE Power 0.0W

Bandwidth Contracts Information
-------------------------------
Received BWM Config:
--------------------
--------------------
ACL DIR Contract-ID PerUser UseCount Rate

Allocated Contracts:
--------------------
Contract-ID Rate UseCount Available-Bytes Max-Bytes Policed-Bytes

AOS: Profile Overview & radio profile

show profile-hierarchy

show rf dot11a-radio-profile default

Profile-1

Profile-2

(M) #show profile-hierarchy

ap-group
wlan virtual-ap
aaa profile
aaa authentication mac
aaa server-group
aaa authentication dot1x
aaa xml-api server
aaa rfc-3576-server
wlan dot11k-profile
wlan handover-trigger-profile
wlan rrm-ie-profile
wlan bcn-rpt-req-profile
wlan tsm-req-profile
wlan hotspot hs2-profile
wlan hotspot advertisement-profile
wlan hotspot anqp-venue-name-profile
wlan hotspot anqp-nwk-auth-profile
wlan hotspot anqp-roam-cons-profile
wlan hotspot anqp-nai-realm-profile
wlan hotspot anqp-3gpp-nwk-profile
wlan hotspot anqp-ip-addr-avail-profile
wlan hotspot h2qp-wan-metrics-profile
wlan hotspot h2qp-operator-friendly-name-profile
wlan hotspot h2qp-conn-capability-profile
wlan hotspot h2qp-op-cl-profile
wlan hotspot anqp-domain-name-profile
wlan ssid-profile
wlan edca-parameters-profile station
wlan edca-parameters-profile ap
wlan ht-ssid-profile
wlan dot11r-profile
wlan wmm-traffic-management-profile
rf dot11a-radio-profile
rf spectrum-profile
rf arm-profile
rf ht-radio-profile
rf am-scan-profile
rf dot11g-radio-profile
rf spectrum-profile
rf arm-profile
rf ht-radio-profile
rf am-scan-profile
ap wired-port-profile
ap wired-ap-profile
ap enet-link-profile
ap lldp profile
ap lldp med-network-policy-profile
aaa profile
aaa authentication mac
aaa server-group
aaa authentication dot1x
aaa xml-api server
aaa rfc-3576-server
ap system-profile
wlan voip-cac-profile
wlan traffic-management-profile
wlan virtual-ap
aaa profile
aaa authentication mac
aaa server-group
aaa authentication dot1x
aaa xml-api server
aaa rfc-3576-server
wlan dot11k-profile
wlan handover-trigger-profile
wlan rrm-ie-profile
wlan bcn-rpt-req-profile
wlan tsm-req-profile
wlan hotspot hs2-profile
wlan hotspot advertisement-profile
wlan hotspot anqp-venue-name-profile
wlan hotspot anqp-nwk-auth-profile
wlan hotspot anqp-roam-cons-profile
wlan hotspot anqp-nai-realm-profile
wlan hotspot anqp-3gpp-nwk-profile
wlan hotspot anqp-ip-addr-avail-profile
wlan hotspot h2qp-wan-metrics-profile
wlan hotspot h2qp-operator-friendly-name-profile
wlan hotspot h2qp-conn-capability-profile
wlan hotspot h2qp-op-cl-profile
wlan hotspot anqp-domain-name-profile
wlan ssid-profile
wlan edca-parameters-profile station
wlan edca-parameters-profile ap
wlan ht-ssid-profile
wlan dot11r-profile
wlan wmm-traffic-management-profile
ap regulatory-domain-profile
rf optimization-profile
rf event-thresholds-profile
ids profile
ids general-profile
ids signature-matching-profile
ids signature-profile
ids dos-profile
ids rate-thresholds-profile
ids impersonation-profile
ids unauthorized-device-profile
ap mesh-radio-profile
ap mesh-ht-ssid-profile
ap mesh-cluster-profile
rf arm-rf-domain-profile
ap provisioning-profile
ap authorization-profile

(Aruba3600) #show rf dot11a-radio-profile default

802.11a radio profile "default"
-------------------------------
Parameter Value
--------- -----
Radio enable Enabled
Mode ap-mode
High throughput enable (radio) Enabled
Very high throughput enable (radio) Enabled
Channel N/A
Transmit EIRP 15 dBm
Non-Wi-Fi Interference Immunity 2
Enable CSA Disabled
CSA Count 4
Spectrum Monitoring Disabled
Spectrum Monitoring Profile default-a
Advertise 802.11d and 802.11h Capabilities Disabled
Spectrum Load Balancing Disabled
Spectrum Load Balancing Mode channel
Spectrum Load Balancing Update Interval (sec) 30 seconds
Spectrum Load Balancing Threshold (%) 20 percent
Spectrum Load Balancing Domain N/A
Beacon Period 100 msec
Beacon Regulate Disabled
Advertized regulatory max EIRP 0
ARM/WIDS Override OFF
Reduce Cell Size (Rx Sensitivity) 0 dB
Management Frame Throttle interval 1 sec
Management Frame Throttle Limit 20
Maximum Distance 0 meters
RX Sensitivity Threshold 0 dB
RX Sensitivity Tuning Based Channel Reuse disable
Adaptive Radio Management (ARM) Profile default
High-throughput Radio Profile default-a
AM Scanning Profile default

show aaa authentication-server radius statistics IAS 使用時、Radiusタイムアウトが多発する

Radius サーバとして Microsoft IAS を使用している場合に Radius のタイムアウトが多発する場合があります。

この原因と解決方法について説明します。

[確認方法]

■1. show aaa authentication-server radius statistics の "Timeouts" カウンタが多い

■2. 以下の SECURITY ログが多発する(nitifications レベル)

コード: 全て選択

124014: <NOTI> |authmgr| Taking Server <サーバ名> out of service for 10 mins

■3. 以下のトラップが多発する

wlsxNAuthServerReqTimedOut

wlsxNAuthServerIsDown

(Aruba3600) # show aaa authentication-server radius statistics

RADIUS Server Statistics
------------------------
Server Acct Rq Raw Rq PAP Rq CHAP Rq MSCHAP Rq MSCHAPv2 Rq Mismatch Rsp Bad Auth Acc Rej Acct Rsp Chal Ukn Rsp Tmout AvgRspTm Tot Rq Tot Rsp Rd Err Uptime SEQ
------ ------- ------ ------ ------- --------- ----------- ------------ -------- --- --- -------- ---- ------- ----- -------- ------ ------- ------ ------ ---

*AvgRspTm is in msec, Uptime is in d:h:m, SEQ is in Total/Free

Orphaned requests = 0

[原因]

IAS には、「ドメイン名\ユーザ名」または「ユーザ名@ドメイン名」形式の認証要求を受信した場合、ドメイン名が不明な場合に認証エラーを返すのではなく認証パケットを破棄する(silently discard)という不具合があります。

この挙動は Aruba コントローラから見るとリクエストのタイムアウトとなるため、out-of-service のログやサーバの切り替わりが多発することになります。

[解決方法]

Microsoft の以下のページにて Hotfix が提供されています。

http://support.microsoft.com/kb/946813/en-us

ワークアラウンドとして、trim-fqdn を使用するとコントローラでドメイン名部分を削除して IAS に送信するため、事象が発生しません。

コード: 全て選択

aaa server-group corp-serv

auth-server ias-2 tim-fqdn

show ap system-profile default Bridge RAPのユーザに対する通信がブロックされる

Bridge RAP配下の端末に対する通信は、ユーザロールが適用されるより先にap-uplink-aclによってフィルタされる。

このACLは ap system-profile にて指定され、デフォルトでは DHCP応答、ping要求、mDNS(Bonjour)以外はブロックされる。

端末から開始する方向の通信についてはユーザロールのみで制御されれる。

Bridge端末に対して外部から接続したい場合は、ap-uplink-aclに許可するルールを追加。

(Aruba3600) #show ap system-profile default

AP system profile "default"
---------------------------
Parameter Value
--------- -----
RF Band g
RF Band for AM mode scanning all
Native VLAN ID 1
Tunnel Heartbeat Interval 1
Session ACL ap-uplink-acl <<<<<<<
Corporate DNS Domain N/A
SNMP sysContact N/A
LED operating mode (11n/11ac APs only) normal
SAP MTU N/A
RAP MTU 1200 bytes
LS IP N/AM
Backup LMS IP N/A
LMS IPv6 N/A
Backup LMS IPv6 N/A
LMS Preemption Disabled
LMS Hold-down Period 600 sec
LMS ping interval 20
GRE Striping IP N/A
Remote-AP DHCP Server VLAN N/A
Remote-AP DHCP Server Id 192.168.11.1
Remote-AP DHCP Default Router 192.168.11.1
Remote-AP DHCP DNS Server N/A
Remote-AP DHCP Pool Start 192.168.11.2
Remote-AP DHCP Pool End 192.168.11.254
Remote-AP DHCP Pool Netmask 255.255.255.0
Remote-AP DHCP Lease Time 0 days
Remote-AP uplink total bandwidth 0 kbps
Remote-AP bw reservation 1 N/A
Remote-AP bw reservation 2 N/A
Remote-AP bw reservation 3 N/A
Remote-AP Local Network Access Disabled
Bootstrap threshold 8
Double Encrypt Disabled
Dump Server N/A
Heartbeat DSCP 0
Maintenance Mode Disabled
Maximum Request Retries 10
Request Retry Interval 10 sec
Number of IPSEC retries 85
AeroScout RTLS Server N/A
RTLS Server configuration N/A
Telnet Disabled
Spanning Tree Disabled

今日の課題

1. PythonはspaceがFor分の切れ目となる

2. Pythonのコンパイルも出来るインプリタでその場でも実行できる。

^C[root@cent ~]# python

Python 2.6.6 (r266:84292, Feb 22 2013, 00:00:18)

[GCC 4.4.7 20120313 (Red Hat 4.4.7-3)] on linux2

Type "help", "copyright", "credits" or "license" for more information.

>>>

>>> 1+1

3. Ecripseを入れる前にPythonのインストールが必要

4. Cを入れる場合はCygwinが必要。Cygwinにはgcc/bashなどもあり、Win<->Cygwin<->Ecripseで作業が出来る

5. RADIUS Pythonなどをする。import linkがある。

6. yum search python | grep radiusでRADIUSのリンクを探す。

7.

登録: 投稿 (Atom)