Yes... We had to do 2 things: Make an exception on the Tipping points, and set the max MTU on the Aruba controllers:
ap system-profile "WC-XXXXXX" ... mtu 1500 ! Thanks Anand From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Philippe Hanset Sent: Friday, December 04, 2009 4:35 PM To: [email protected] Subject: Re: [WIRELESS-LAN] Tipping Point IPS and Aruba Wireless Performance This same issue drove us crazy for a while! We first blamed it on Aruba ;-) We still make the GRE tunnel go through our typing point but have created an exception that ignores IP addresses of APs. Philippe Hanset Univ. of TN On Dec 4, 2009, at 12:14 PM, David Sinn wrote: Yes, we ran into this exact issue. The problem is related to the fact that some of the GRE traffic is fragments which Tippingpoint has a (at least when we ran into it) undocumented rate-limit for all fragments. Removing this limit solved our problems. Thanks! David On Dec 2, 2009, at 2:56 PM, Firsdon, Michael wrote: Hello all, we recently started deploying a few Aruba 125 access points and series 6000 controller which runs 3.2.2.22 code on its m3 modules. While doing some initial testing we encountered very poor performance numbers (like 2-4mb) when running some of the typical speed tests that are out there. After placing one of the ap 125's on a segment that was not being inspected by a tipping point IPS unit the performance was more in the 60-80mbs range which is consistent with what we see on our other campus which does not have these units in place. We suspect the IPS unit is taking the GRE tunneling traffic that the access point is trying to use to communicate with its controller and going "deep" within it creating the latency we are seeing. When I put the IPS unit in a layer 2 fallback mode the traffic when through flawlessly. My question is has anyone seen this behavior before and if you have what did you do in order to resolve the issue? Any help would be greatly appreciated. We are currently working with tipping point support on this issue as well. Thanks! Michael J. Firsdon The University of Toledo Network Engineer III / Team Lead [email protected]<mailto:[email protected]> Office Phone: 419.530.3962 Office Fax: 419.530.3643 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
