topic Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud in SmartZone and Virtual SmartZone

Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Fri, 02 Apr 2021 08:08:45 GMT

I've been haunted by the issue as describe in the topic.
My company has recently migrated all of our vm servers to cloud. This includes our vSZ as well.
vSZ is behind a VM fortigate firewall .
Our APs are behind a switch and sophos xg firewall.
Both firewalls has an ipsec tunnel linked.

DHCP server was set on the core switch .
When endpoint devices connected to the SSID of the AP, it has no problem getting IP from the DHCP servers in less than a few seconds. However, it'll show no internet for 4-5 mins.
After sometime, it'll suddenly be with internet.
Although devices connected with the ssid retries connection, it'll immediately have internet connection.
Only for new devices, it'll have a 4-5mins issue without internet .

Anything i need to set on AP side or vSZ side ?

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Fri, 02 Apr 2021 20:17:40 GMT

Hi,

Please use troubleshoot utility in vSZ GUI and check the connection flow for a new client. It will help you to find if connection having any issues while connecting to wireless and get IP address.

I think issue could be related to DHCP.

Also confirm if force DHCP is enabled on WLAN settings.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Mon, 05 Apr 2021 03:49:37 GMT

Hi Omer,
I'm not familiar with the troubleshoot utility.
Due to the fact that the vSZ is over a remote location. .
Which is why i wonder is there any settings i've missed that could have contribute the problem.
All settings were running fine prior to the events of the migration. But that was previously when the vSZ resides locally and not remotely.
May i know if force dhcp actually helps ?
According to my understanding, it means forces the client to get an ip ?
But from the problem here, every endpoint devices have no issue getting an ip. It's just the endpoint devices will need at least 5 mins to exits to internet even after getting an ip.
At first i thought it's a DNS issue.
So i tried assigning the google dns from our dhcp server.
Still the 5min delay exist.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Mon, 05 Apr 2021 13:41:09 GMT

o boy.. i didn't expect the response on this community is that bad.
The response from ruckus was really terrible. At least i knew where to look the last time my support ends. I should have taken sophos or even aruba. At least the chaps in there took the effort to respond properly.
This.. one word. Not bothered.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Mon, 05 Apr 2021 14:45:59 GMT

Hi,

This is a public forum and responses depends upon the members availability, interest, etc.

We as an official forum rep, try our best to respond as soon as we can. But if this is critical for you, best way is to open a support case and support will troubleshoot the issue. Support is 24*7 depending upon your support contract.

To know about troubleshoot utility present in our controllers, please refer the user guide or refer below link.

https://docs.commscope.com/bundle/sz-522-adminguide-sz100vsz/page/GUID-D2790063-9D5F-4C59-800D-F1A08C6F4720.html

Answering your query from previous comment, if DHCP part has no issues, it could be something else in the network path.

In order to troubleshoot such issues, we may have to verify network path and take packet captures on different network nodes to find-out who is dropping the traffic and why it is taking 5 minutes for internet access. At least taking captures and verifying WLAN configuration will help here.

If clients are getting IPs without any difficulty/delay, try to ping gateway or any website, to test the connection?

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Tue, 06 Apr 2021 04:07:43 GMT

I did some basic troubleshooting.
I'm not sure is this the cause of problem.
It's referring to an AAA server.
Despite we don't have any radius server.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Tue, 06 Apr 2021 13:49:23 GMT

Client connection to WiFi looks good to me, at least as per above screenshot.

Info tag is not on AAA but on DHCP.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Tue, 06 Apr 2021 16:59:06 GMT

the column looks kind of vague. I pretty much assume the Client tries to sent something over to an imaginary AAA connection.
Anyway, this troubleshoot results was only shown after the device got itself registered to the wireless controller. Which is exactly after 5 mins later the device could get to internet.
Like i mentioned, all devices had this issue for the first time it's connected to the AP's SSID.
All devices have some sort of delay when trying to register itself first time to the wireless controller at the other end of the cloud's wireless controller.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Tue, 06 Apr 2021 17:31:42 GMT

I think this is the point where you may need to open a case with support for further troubleshooting.

or if you want to troubleshoot further without involving support then below are the possible next troubleshooting steps.

Setup AP for packet captures (this option is available on vSZ GUI).
Use APs wired port for the packet capture and add client's MAC in filter.
Setup capture on gateway as well, using port mirror or if it is firewall, then it should not be a difficult task.
Run two ping tests from test client, one for gateway IP and other one for any public website like google, etc.
Start packet captures on both ends and connect the test client.
Stop captures once client is able to reach internet.
Analyze/compare captures between AP - gateway and find out at what point traffic is dropping.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Tue, 20 Apr 2021 03:17:33 GMT

I've been checking with the vendor and ruckus support as well.
Seems both could not find the problem. Vendor seems to believe the firewall and switch is the culprit. While ruckus support trying to check on the logs for the source of problem. The wireless controller itself wasn't able to the capture sufficient evidence of the root problem.

So far base on tones of implementations out there ?
Isn't there anyone facing the same issue ?
I believe it's quite common to have a wireless controller in cloud servers while the AP were in a remote office location these days.

Noone face that issue ? I've found that Wireless devices connected to the SSID doesnt have issue getting an IP .
However after connected, it'll be connected without internet for 2mins . After 2 mins, there'll be internet access.
This only applies to devices that go onto the SSID for the first time.
After that, the devices that reconnect to the same SSID do not have the issue.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Tue, 20 Apr 2021 18:30:50 GMT

Could you share the support case number?

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

net_admin_elken — Thu, 22 Apr 2021 09:35:55 GMT

Case# 01190975
Case has been closed though.
I've actually contacted a vendor on this.
Vendor routed the support back to Ruckus .
For that i don't have the case number.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Thu, 22 Apr 2021 18:04:55 GMT

Hi,

I have reviewed the case and as per AP logs, there was no delay getting IP address, however, it takes few minutes for client to be able to reach internet.

As I said before, we need to take captures on a few points to check exactly where traffic is dropping.

Support also suggested you to take captures to troubleshoot further, but case was closed as there was no response.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

JakoRockA — Tue, 21 Nov 2023 14:17:35 GMT

Hi net_admin_elken

We are facing a similar issue. Did you manage to solve it?

We are using on-prem Ruckus controller and AP r500 and r610.

Often when new clients try to connect it will take a few seconds up to 30 seconds for it to connect, but then it says "no internet". Then if you leave it for a while maybe several minutes then suddely there will be internet access.

Re: Slow in exiting to internet gateway after connected to AP while vSZ is in remote Cloud

syamantakomer — Wed, 22 Nov 2023 18:14:53 GMT

Hi @JakoRockA,

They raised a case with Support and Support verified the logs, but did not observe any delay in the logs.

For further troubleshooting there was no response thus case was closed.

I suggest posting a new thread with all the details like controller model, software version, symptoms, etc.