WiFi - Aruba APs show Module STM busy or Module AM busy by Ulises Cázares

When you see the message: "Module STM is busy" in an aruba AP that is not working properly when you type the following commands

ArubaOS

  • show ap remote bss-table ap-name <name>
  • show ap remote client status ap-name <name>

     

InstantOS

  • show ap bss-table
  • show ap association

That means you can have hit an issue regarding 802.11r  and Aruba already have a fix and a workaround for that

Fix, upgrade the environment to the following firmwares

ArubaOS

  • 6.5.4.22
  • 8.3.0.18
    • Note: End of Support with the exception of AP-103H deployments
  • 8.6.0.16
  • 8.7.1.8
  • 8.8.0.3
  • 8.9.0.2

InstantOS

  • 4.2.4.20
  • 6.5.4.22
  • 8.6.0.16
  • 8.7.1.8
  • 8.8.0.3
  • 8.9.0.2

Workaroud, disable 802.11r in the environment just remember that additional load should be expected on the associated authentication servers.

 

Something that I've seen is when you have APs rejecting clients and you see the message Module AM is busy when you type the command show ap debug client-table ap-name <ap-name> you might have hit the same issue since disabling 802.11r makes the APs start to work as usual.





 

 

 

Comments

  1. FerCFebruary 16, 2022 at 8:22 AM

    Good information!

    ReplyDelete
  2. EsaúFebruary 18, 2022 at 10:19 AM

    What would be the impact of disabling 802.11r? or would it be to leave clietmatch just enabled and not 802.11r, or should it be reenabled later?

    ReplyDelete
    Replies
    1. Ulises CazaresFebruary 28, 2022 at 2:46 PM

      The impact of disabling the 802.11r will be more load on the authentication server since every roaming will have to authenitcate again with it. Client match should always be enable and if you see too much load on the server it'd be advisable to upgrade the controllers and to enable it again.

      Delete

Post a Comment

Popular posts from this blog

Aruba Clearpass - How to configure the Cisco WLC for Guest and MAC Caching by Ulises Cázares

Image
 Hi this is a step by step on how to configure an SSID in a functional Cisco WLC (8.10)  for Guest Authentication and MAC Caching using Aruba Clearpass General Steps (this guide assumes you have correctly configured the Clearpass side) Create an Authentication Server (The secret is the same as the one configured in Clearpass) Create an Accounting Server (The secret is the same as the one configured in Clearpass) Configure the WebAuth login Page (use the configured guets login page in Clearpass) Make sure the Web Auth Certificate points to the virtual IP in the WLC Create the FlexConnect Access List (or IPV4) Make sure WebAuth SecureWeb is enable Configure the SSID with the appropiate settings   1.- Create an Authentication Server 2.- Create an Accounting Server  3.- Configure the WebAuth login Page (in this example is; guest.demo-clearpass.net/cisco_login.php)  Note.- In order to avoid the security warnings in the conencting devices, install the appropiate certificate in Clearpass wit
Read more

Using API in ArubaOS Switches with Postman by Ulises Cázares

Image
 Hi, today I'm gonna show how to interact with the Aruba OS version 16.10 switches API using postman. My intention is that you know how to construct the request using headers, parameters and the body of the request. The first things to start working with the switch API are: to have administrative access to the device and to make sure of the switch version so you can look for the appropiate document. Remember, APIs can change form version to version.  You can use the command: show version. In my case is 16.10 Then you can make a quick search in google like "Aruba switch 16.10 API" to get the document and find out what are the option provided in the API. In the document you will find examples using curl and that's why i'm writting this in postman, so you have options. Now, let's do 4 thing so you can use the API: Make sure the REST interface is enable or enable it Login to the device API Construct a GET request Construct a POST request  Make sure the REST inter
Read more

WiFi - How to know supported channels by a wireless client by Ulises Cázares

Image
 Hi, in this post I would tell you how to be sure which WiFi channels are supported by a wireless client so we can configure wireless solutions that will work with the endpoints in the environment. I normally approach this topic in 2 ways 1. Directly in the wireless client This one is the obvious option but, in my experience, the majority of wireless clients don't show that in any part of the configuration. Because wireless clients are very different and their configurations menus too there's no way to show a "common" path to see the supported channels(if the wireless client shows them)   2.- Use a wireless adapter in monitor mode and wireshark to see an Association Request paquet from the client. In the following images we'll see where in the association request we can see that information.    The fastest way to do it is to follow these steps: Put the wireless adapatar in monitor mode in the AP channel we'are going to connect the wireless client Open wireshar
Read more