topic Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy; in Aerohive Migrated Content

I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

michael_bliss — Tue, 28 Aug 2018 13:53:53 GMT

I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

michael_bliss — Tue, 28 Aug 2018 13:54:18 GMT

R: failed to upload file 885BDDC855000616.lpr to remote server!

ERROR: failed to upload file 885BDDC855000616.lpr to remote server!

ERROR: Failed to download web page file from http server!

ERROR: Failed to download web page file from http server!: Inappropriate ioctl for device

2018-08-28 08:43:02 info ah_cli: admin:

2018-08-28 08:42:40 err capwap: ERROR: Failed to download web page file from http server!: Inappropriate ioctl for device

2018-08-28 08:42:40 err capwap: "VHM-000001VA" failed to http from server, r c=1536(6)

2018-08-28 08:42:40 info kernel: [mpi]: socket is closed, pid(25326), protoco l(0)

2018-08-28 08:42:40 info ah_cli: admin:

Any clues as to what I might be doing wrong?

Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

samantha_lynn — Wed, 29 Aug 2018 19:52:59 GMT

Updates use ports UDP12222 and TCP 22, or HTTP 80 and TCP 443 depending on your capwap transport mode. Could you run the following command to confirm we can get traffic through your firewall and content filters?

exec _test tcp-service host <Hivemanager IP address> port 22

Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

michael_bliss — Wed, 29 Aug 2018 20:58:43 GMT

That's odd, its all on a local network and theres no firewalls in place internally. Perhaps a rule on the AP itself?

AH-MikesOffice#exec _test tcp-service host 192.168.4.7 port 443

Testing TCP connection for host=192.168.4.7, port=443, timeout=10 seconds

Test successfully.

AH-MikesOffice#exec _test tcp-service host 192.168.4.7 port 22

Testing TCP connection for host=192.168.4.7, port=22, timeout=10 seconds

Test failed:Connection refused, maybe the TCP service on the port doesn't provide.

AH-MikesOffice#

Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

samantha_lynn — Thu, 30 Aug 2018 03:50:05 GMT

We were unable to pass traffic on port TCP 22 during one of those tests, which could cause an update to fail. We can be sure that is the cause if we run the following debugs on the AP, replicate the issue, and then pull techdata.

Debugs:

_debug capwap info

_debug capwap basic

_debug capwap stat

If you want to send the tech data to me directly at communityhelp@aerohive.com I can review it for you to let you know what we find.

If you think it might be a rule on the AP firewall, could you also provide a screen shot of the rules you have in your IP firewall configuration?

Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

michael_bliss — Tue, 04 Sep 2018 14:12:27 GMT

Hi Sam,

Logs and info sent.

Tx,

Mike

Re: I created a guest SSID on a separate VLAN and all works as expected. Im now trying to deploy a captive portal, so far using default values, but keep getting the below error when trying to deploy;

samantha_lynn — Tue, 04 Sep 2018 19:49:32 GMT

Thanks for those logs Michael, I've emailed you a more detailed explanation of what we saw, but just in case anyone else has the same problems I wanted to post a brief overview of what we found and what we need to look at next.

In the data we were seeing failed .lpr files (you can see this by looking in the buffered log and CTRL+F searching for ".lpr", if you see the word "failed" on the same line, you know they aren't getting through). This indicates we aren't getting traffic through a firewall or content filter, or that there is a delay on the backend network.

We also saw that we were failing to reach the VHM server via http, which also indicates a firewall issue.

Finally we were seeing echo time outs. The HiveManager and AP (or any other aerohive device) have a call and response system to make sure that the APs are still responding to the HiveManager and therefore can be considered connected to the HiveManager. If the AP does not response to enough call and response echo packets, the HiveManager considers that device to be disconnected until it starts responding to echos again. This also indicates either a slow down on your network traffic, or a firewall issue.

If we are sure that the firewall is allowing outbound traffic on UDP 12222, TCP 22, TCP 443, and HTTP 80, then we'll want to run iPerf tests to see if we can find where the traffic is slowing down on the backend network. I sent you a guide that covers how to set up and run iPerf tests for reference.