J

5 Messages

 • 

170 Points

Wed, Jun 23, 2021 1:03 AM

When internet goes down, so does all Ruckus Unleashed WAPs. How do I disable this anti-feature?

I have a small network of r650 Unleashed WAPs and when the site internet goes down, the WAPs disable their wireless radios after a short period.

This seems to be some kind of anti-feature and I suspect it's enabled by default. How do I disable this?

This might be desirable in public environments but in a business environment where there are LAN resources (file shares for example), this is harmful and undesirable.

I have a clue that this might be related to the CLI "show internet-check" and "no internet-check" commands, but I don't see anything in the http GUI nor in the PDF User Guide after extensive searching.

28 Messages

 • 

480 Points

5 m ago

Not sure if this is the case for you, but this only seemed to happen to me when I had a Ruckus Mesh enabled. Once I disabled mesh, which required a reboot if I remember correctly, and had all AP connected via Ethernet backhaul it has not happened since then when the internet connection goes down.  

5 Messages

 • 

170 Points

We are not using Mesh for the backhaul.

Employee

 • 

341 Messages

 • 

6.5K Points

5 m ago

Hi,

It appears the 'internet-check' function relates to the Unleashed netowork dashboard, where various services are checked by Unleashed and reported to the user - in this case a green 'tick' in the 'Internet' box.  If this feature is disabled in CLI then the 'Internet' box will not appear in the GUI.

https://docs.commscope.com/bundle/unleashed-200.9-commandref/page/GUID-871C3233-C4DC-42E5-8F4B-996F6F48C63A.html

I'm struggling to find other settings which force a system reboot if internet connectivity is down.

Do your Unleashed APs have static IP addresses? They will reboot if they lose connectivity with the Unleashed Master AP if this loses it's IP address.

Hope that helps,
Darrel.

5 Messages

 • 

170 Points

I have disabled the internet-check via the ssh CLI. There is currently no way to disable internet-check from the web interface, and it's only briefly mentioned in the user guide.

All of these WAPs are DHCP. They do not lose access to the DHCP server when the internet goes down and there's no other reason which I can think of which would take the master AP down when our ISP goes down.

I will do some testing in then next day or two after-hours to simulate an internet outage and see how they behave now that I've made the internet-check change.

5 Messages

 • 

170 Points

5 m ago

Okay, I know what is going on here.

Our WAPs have their own management VLAN and each wireless network has it's own VLAN. These all connect to a single physical network interface on our firewall, so I did a bunch of testing by adding ACL rules to block access to the internet, DNS, and/or the gateway.

The Ruckus Unleashed WAPs do a bunch of checks. You can see this with the "show internet" command on the CLI. The system does a check against the gateway, DNS, and the internet-check.

To get the Unleashed WAPs to freak out and reboot, they need to (fail the gateway check) AND (fail the DNS check) AND (either have internet-check disabled OR fail the internet-check).

The reason I noticed this strange behavior was that our gateway was a firewall which was not allowing ping. This was dumb default from the firewall which I had not previously noticed, and I ultimately changed it to allow the Ruckus WAPs to ping their gateway.

Even though the Unleashed instance was previously failing it's gateway check it was happy to continue working as long as the internet-check was succeeding. However, when the internet went down, both the DNS check and the internet check was failing, causing the WAPs to all reboot.

So, the situation isn't as bad as I originally thought it was, but the question still remains... why does this this behavior exist at all?

Theoretically many (even most) small businesses are going to have their WAPs on the same layer-3 network where they might have file servers, printers, and other local network resources. The DHCP server might also be on the same network, separate from the firewall/router. If the firewall/router goes down for some reason, it seems harmful to then also artificially induce an otherwise-unnecessary wireless LAN outage by rebooting the WAPs as well.

I think it's especially ridiculous that the Unleashed instance can fail it's Gateway and Internet check and yet if the DNS check succeeds it's fine. Gomer Pile says "That don't make no sense."

Important Announcement