Hi All,

Since last Monday we have seen a couple of different websites being blocked
on our Aruba wireless controllers. Spotify has been one of the sites, as
well as all websites hosted on IP 23.185.0.1 (which is our main institution
website - denison.edu). We can confirm that this is being blocked as we see
the "D" (Deny) Flag on the wireless controller. Below is an example of
traffic being blocked to Spotify. Is anyone suing Aruba AOS 8 controllers
seeing this?

(wlc-Thor) #show datapath session | include 35.186.224.25

Source IP or MAC  Destination IP  Prot SPort DPort Cntr     Prio ToS Age
Destination TAge Packets    Bytes      Flags           CPU ID

----------------- --------------- ---- ----- ----- -------- ---- --- ---
----------- ---- ---------- ---------- --------------- -------

10.143.203.26     35.186.224.25   6    52082 443    0/0     0    0   0
tunnel 640  1    0          0          *FDYCA *          21

10.143.195.85     35.186.224.25   6    59767 443    0/0     0    0   0
tunnel 5357 0    0          0        *  FDYCA*           27

10.143.225.178    35.186.224.25   6    52292 443    0/0     0    0   0
tunnel 6753 1    0          0         * FDYCA *          19

10.143.195.85     35.186.224.25   6    59766 443    0/0     0    0   0
tunnel 5357 1    0          0          *FDYCA *          27


(wlc-Thor) #show datapath session | include 23.185.0.1
10.143.228.16     23.185.0.1      6    59500 443    0/0     0    0   0
tunnel 16789 a    0          0          *FDYCA*           18
10.143.244.151    23.185.0.1      6    58758 443    0/0     0    0   0
tunnel 553  1    0          0          *FDYCA*           23
10.143.228.247    23.185.0.1      6    59063 443    0/0     0    0   0
tunnel 13188 a    6          384        *FDYCA*           27
10.143.228.247    23.185.0.1      6    59062 443    0/0     0    0   0
tunnel 13188 a    6          384        *FDYCA*           27
10.143.196.26     23.185.0.1      6    50851 443    0/0     0    0   0
tunnel 5631 1    0          0          *FDYCA*           17
10.143.196.26     23.185.0.1      6    50852 443    0/0     0    0   0
tunnel 5631 1    0          0          *FDYCA*           17
10.143.196.26     23.185.0.1      6    50853 443    0/0     0    0   0
tunnel 5631 1    0          0          *FDYCA*           17


We have two 7240xm controllers running AOS v8.6.9 in a cluster with a
Mobility Conductor as a VM. We have a ticket open with TAC and have
escalated it up to ERT, but wanted to also reach out to others.


Thank you.

Sid


-- 

[image: Denison University] <https://denison.edu>

*Sidharth S. Nandury*
(He, Him, His)
*Infrastructure and Operations Manager*
Information Technology Services

100 West College Street, Granville, OH 43023
<https://deniso.nu/2qF6h7M> | Burton
Hall <https://denison.edu/map>
Office: 740-587-5533 <1-740-587-5533> | Mobile: 516-314-4413
<1-516-314-4413>
nand...@denison.edu
https://denison.edu/campus/technology/service-desk

NOTICE: This email message and all attachments transmitted with it may
contain legally privileged and confidential information intended solely for
the use of the addressee. If the reader of this message is not the intended
recipient, you are hereby notified that any reading, dissemination,
distribution, copying, or other use of this message or its attachments is
strictly prohibited. If you have received this message in error, please
notify the sender immediately by phone or by email, and delete this message
and all copies and backups thereof.

*Please consider the environment before printing this email.*

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Reply via email to