Troubleshooting AP Join Failures
About This Document
If APs fail to join an AC, we need to locate and troubleshoot the fault. This document provides a set of common troubleshooting methods for Fit APs' failures to go online on an AR router functioning as an AC.
What Is an Access Point
Wireless Access Point
Wireless access point (AP) is a device that provides 802.11-compliant wireless access for STAs. It bridges the wired network and the wireless network. APs are classified into Fat APs and Fit APs.
Fat AP: provides wireless access for STAs in the Fat AP architecture. In addition to wireless connections, a Fat AP provides enhanced functions such as security and management.
Fit AP: provides wireless access for STAs in the Fit AP architecture. A Fit AP only provides reliable, high-performance wireless connections. Other enhanced functions are offered by an access controller (AC). In this architecture, the AC controls and manages all Fit APs on a WLAN.
WLAN Working Modes of AR Routers
An AR router can work in either AC or Fat AP mode to provide WLAN services. These two modes apply to different scenarios.
- Fat AP mode: The AR router functions as a Fat AP to carry the WLAN configuration and provide WLAN access for STAs. This mode applies to small-scale enterprises, homes, cafes, and SOHO offices.
- AC mode: The AR router functions as an AC to provide access to downlink Fit APs. They work together to provide WLAN access for STAs. The WLAN configuration is performed only on the AC but not on Fit APs. The AC mode applies to large-scale venues such as waiting halls and stadiums.
In AC mode, Fit APs may often encounter join failures. This document describes how to locate and troubleshoot this fault. The AC hereinafter refers to the AR router.
Configuration for an AP to Join an AC
AP Join Process
In the AC + Fit AP architecture, Fit APs need to join an AC before being managed and controlled by the AC. The AP join process consists of the following phases:
IP address allocation for APs: APs obtains IP addresses mostly through DHCP.
CAPWAP tunnel establishment: The AC manages and controls APs in a centralized manner through CAPWAP tunnels.
AP access control: The AC authenticates APs. If an AP is successfully authenticated, the AC allows the AP to go online. If the authentication fails, the AP is not allowed to go online.
AP version upgrade: After successful authentication, an AP checks whether the system software version is the same as that configured on the AC. If not, the AP upgrades its version to the specified version in the upgrade mode configured on the AC.
CAPWAP tunnel maintenance: The AP and AC exchange heartbeat packets to maintain the connectivity of CAPWAP tunnels, including the data and control tunnels.
AC service configuration delivery: The AC delivers the AP service configuration to the AP. After the configuration takes effect, the AP can go online.
AP Join Configuration
Figure 1-3 shows the AP join configuration process to facilitate user understanding and operation. Configurations marked with five-pointed stars are key configurations that determine whether an AP can go online. If these configurations are incorrect, the AP cannot go online. Subsequent troubleshooting is also performed based on these key configurations. For details about command operations, see WLAN-AC Configuration Examples.
Determining an AP Join Failure
In normal cases, after the WLAN function is configured on an AR router and delivered to an AP, you need to power on the AP and wait for a short period of time (about 1 to 2 minutes). Then the AP can go online. After the AP goes online, STAs can detect the corresponding SSID. After the correct password is entered on a STA, the STA can access the WLAN. If the STA cannot find the SSID, the AP may fail to go online. In this case, check the AP online status.
Observing the AP Indicator
If you are close to an AP, determine whether the AP is online based on the blinking status of the AP indicator. For example, if the indicator on an AP2050DN blinks green quickly at a frequency of 4 Hz, the AP2050DN is not online. The indicator blinks green slowly after the AP goes online successfully. The indicator status varies depending on the AP model. For details, see the product description of the corresponding AP model. If the AP indicator is steady red, the AP is faulty. Rectify the fault based on the indicator description. If the fault persists, replace the AP.
Running Commands
<Huawei> display ap all Total AP information: nor : normal [2] ----------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime ----------------------------------------------------------------------------------------- 0 dcd2-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP6010DN-AGN nor 0 4H:49M:11S 1 60de-4474-9640 area_2 ap-group1 192.168.120.253 AP5010DN-AGN fault 0 6H:3M:40S ----------------------------------------------------------------------------------------- Total: 2
AP Online States
The State field in the display ap all command output records the AP states in different phases, as described in Table 1-1. If an AP fails to go online, you can preliminarily locate the fault based on the AP state.
State |
Description |
Handling Suggestion |
|---|---|---|
fault |
The AP fails to go online. |
Further locate the cause of the fault. For details, see Displaying Common Reasons for AP Join Failures. |
ver-mismatch |
The versions of the AP and AC do not match. |
Upgrade the AP to the target version and wait for the AP to go online. For details, see AC-AP Version Mismatch. |
config-failed |
WLAN service configurations fail to be delivered to the AP when the AP is going online on an AC. |
The link between the AC and AP may be disconnected. Check the network or CAPWAP link between them. For details, see The Network Between an AP and an AC Fails and CAPWAP Tunnel Fault. |
commit-failed |
WLAN service configurations fail to be delivered to the AP after the AP goes online on an AC. |
|
idle |
It is the initialization state of the AP before it establishes a link with the AC for the first time. |
This is normal when an AP is establishing a link with an AC. If the AP remains in this state, the link between the AC and AP may be disconnected. For details, see The Network Between an AP and an AC Fails and CAPWAP Tunnel Fault. |
name-conflicted |
The name of the AP conflicts with that of an existing AP. |
Run the ap-rename command to change the AP name. |
normal |
The AP is in normal state. |
This is a normal state, indicating that the AP goes online successfully, and no operation is required. |
committing |
The WLAN service configuration is being committed. |
This is a normal state, and no action is required. |
config |
The AP is performing the initial configuration. |
This is a normal state, and no action is required. |
download |
The AP is loading the target system software in an upgrade. |
This is a normal state, and no action is required. |
standby |
This is the AP state on the standby AC. |
This is a normal state, and no action is required. |
Troubleshooting Roadmap
The previous section introduces how to determine an AP join failure and the preliminary troubleshooting method. If the fault persists, refer to this section for the detailed fault locating method. As shown in Figure 1-4, the detailed troubleshooting roadmap involves the network, configuration, version, and license.
Displaying Common Reasons for AP Join Failures
To facilitate fault location, the AR router allows you to run the display ap online-fail-record command to quickly check the reasons for AP join failures. If an AP fails to go online, you can run this command to check the reason and rectify the fault by referring to Table 1-2.
<Huawei> display ap online-fail-record all ------------------------------------------------------------------------------ MAC Last fail time Reason ------------------------------------------------------------------------------ 00e0-fcb1-56a0 2015-01-20/15:48:06 In blacklist ------------------------------------------------------------------------------ Total records: 1
Fault Type |
Reason |
Description |
Handling Suggestion |
|---|---|---|---|
Network issue |
Other reasons |
The AP fails to go online due to other reasons. |
Check whether the AP has obtained an IP address. For details, see An AP Fails to Obtain an IP Address. |
Config timeout |
Configuration delivery times out. |
Check the connectivity between the AC and AP. For details, see The Network Between an AP and an AC Fails. |
|
Config failed |
Configurations failed to be delivered. |
||
Create link failed |
Failed to create a CAPWAP link. |
Check whether the CAPWAP link is faulty. For details, see CAPWAP Tunnel Fault. |
|
Capwap psk mismatch |
The CAPWAP PSK does not match. |
||
Negotiation CAPWAP tunnel failed |
CAPWAP link negotiation failed. |
||
CAPWAP message-integrity PSK mismatch |
The PSK used for CAPWAP message integrity check does not match. |
||
Negotiation DTLS failed |
DTLS negotiation failed. |
||
DTLS negotiation failed, because of negotiation timeout or inconsistent PSKs on two ends |
DTLS negotiation failed due to negotiation timeout or PSK mismatch. |
||
Configuration issue |
In blacklist |
The AP is in the blacklist. |
Delete the AP from the blacklist. For details, see AP Authentication Failure. |
Not in SN whitelist |
The AP is not in the SN whitelist. |
Add the AP to the SN whitelist. For details, see AP Authentication Failure. |
|
Not in MAC whitelist |
The AP is not in the MAC address whitelist. |
Add the AP to the MAC address whitelist. For details, see AP Authentication Failure. |
|
MAC and SN mismatched |
The MAC address and SN of the AP do not match. |
Change the MAC address or SN of the AP to the same as the actual settings. For details, see AP Authentication Failure. |
|
Name conflict |
The name of the AP conflicts with that of an existing AP. |
Run the ap-rename command to change the AP name. |
|
Version issue |
AP type mismatch |
The AP type does not match that on the AC. |
Replace the AP or upgrade the AC version. For details, see AP Type Mismatch. |
Unsupported AP type, AC version may need to be upgraded |
The AP type is not supported. The AC may need to be upgraded. |
||
Version mismatch |
The versions of the AP and AC do not match. |
Upgrade the AP version. For details, see AC-AP Version Mismatch. |
|
License issue |
AP reaches the upper limit |
Reached the maximum number of APs. |
Purchase a license. For details, see The Number of Connected APs Reaches the Upper Limit. |
Lack of license |
The number of APs has reached the maximum value supported by the license. |
||
Other |
AP auto update fail |
The automatic AP upgrade failed. |
Contact technical support. For details, see Collecting Information About AP Join Failures. |
Data batching |
The AC is performing batch backup in VRRP HSB and does not allow APs to go online. |
||
Forcibly disconnected in certain situations |
The AP is forced to go offline in certain cases. |
||
AP IP address mismatch |
The IP address of the AP is different from that configured on the AC. |
Troubleshooting AP Join Failures
An AP Fails to Obtain an IP Address
Context
The preceding section describes how to enable an AP to join an AC. An AP can communicate with an AC only after obtaining an IP address. If an AP fails to go online, check whether the AP has obtained an IP address. An AP obtains an IP address in either of the following ways:
Static mode: Log in to the AP and manually configure an IP address for the AP. This mode is not recommended because it is complex.
DHCP mode: Configure the DHCP server function on an AC to automatically assign IP addresses to DHCP clients (APs). In actual applications, APs obtain IP addresses through DHCP.
Troubleshooting Procedure
- Check whether the AP has obtained an IP address.Run the display ap all command on the AC to check information about all APs. Check the value of the IP field. If the value is displayed as -, the AP has not obtained an IP address.
<Huawei> display ap all Total AP information: nor : normal [2] ----------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime ----------------------------------------------------------------------------------------- 0 xxxx-xxxx-xxxx area_1 ap-group1 192.168.1.10 AP6010DN-AGN fault 0 4H:49M:11S 1 yyyy-yyyy-yyyy area_2 ap-group2 - AP5010DN-AGN fault 0 - ----------------------------------------------------------------------------------------- Total: 2
- If the AP has not obtained an IP address, check whether the DHCP server and related device interfaces are correctly configured as follows:
- Check whether the link between the AP and the AC is properly connected.
- Check whether the DHCP server is configured correctly. For details about how to configure a DHCP server, see Example for Configuring the Device as a DHCP Server (Based on the Interface Address Pool) and Example for Configuring the DHCP Server to Allocate Different Network Parameters to Dynamic Clients and Static Clients in the Global Address Pool.
- Check the connectivity between the APs and AC. For details, see The Network Between an AP and an AC Fails.
- If the AC is used as a DHCP server and on a different network segment from the AP, check whether the DHCP Option 43 field is configured in the address pool to specify the AC's IP address for the AP. If the DHCP Option 43 field is not configured, the AP cannot discover and join the AC.
- If the DHCP Option 43 field is not configured, run the option 43 sub-option 2 ip-address command to specify the AC's IP address for APs.
<Huawei> system-view [Huawei] interface Vlanif 100 [Huawei-Vlanif100] ip address 192.168.1.254 24 //Configure the IP address for the AC's source interface. [Huawei-Vlanif100] quit [Huawei] capwap source interface Vlanif 100 //Specify VLANIF 100 as the source interface. [Huawei] ip pool global1 [Huawei-ip-pool-global1] option 43 sub-option 2 ip-address 192.168.1.254 //Deliver the IP address of the AC's source interface to the AP.
- Run the commit all command to commit the configuration and enable the AP to go online again. Each time the AP configuration is modified on the AC, the new configuration needs to be committed and delivered to the AP. Otherwise, the new configuration does not take effect.
<Huawei> system-view [Huawei] wlan ac [Huawei-wlan-view] commit all Warning: Committing configuration may cause service interruption, continue?[Y/N]:y
The Network Between an AP and an AC Fails
Context
Network connectivity is the basis for normal running of all services. In actual networking, network connectivity must be configured first. Therefore, if an AP fails to go online, check the network connectivity.
- Check the physical connectivity of the basic network. That is, check whether the physical connections between devices are normal and whether all interfaces are Up.
- Check the service connectivity of the basic network, including the configurations of VLANs, IP addresses, and routes.
The configurations of VLANs, IP addresses, and routes for network communication vary depending on the networking. The following provides the configuration guide and troubleshooting roadmap based on project experiences.
Troubleshooting Procedure
- Check whether the AC and AP can successfully ping each other.Run the ping command on the AC to ping the AP's IP address and check the ping result.
<Huawei> ping 192.168.1.10 PING 192.168.1.10: 56 data bytes, press CTRL_C to break Request time out Request time out Request time out Request time out Request time out --- 192.168.1.10 ping statistics --- 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss - If the ping operation fails, check the intermediate network connectivity. If the intermediate network is disconnected, the configurations of VLANs, IP addresses, or routes may be incorrect. These configurations may be complex to achieve Layer 2 or Layer 3 communication between the AC and APs. Therefore, we have summarized the following configuration recommendations:
- When configuring WLAN services, configure one management VLAN and one or more service VLANs. The management VLAN is used to forward management packets between APs and the AC, and service VLANs are used to forward service packets between STAs and the Internet.
- By default, the packets sent by an AP do not carry VLAN tags. The packets are tagged with the management VLAN ID on the Layer 2 interface on the peer device directly connected to the AP. Similarly, packets sent from STAs do not carry VLAN tags. When the packets pass through an AP, the AP tags the packets with a service VLAN ID.
- In direct forwarding mode, ensure that packets from the management VLAN and service VLANs are allowed from the AP's uplink interface to the AC's downlink interface. The management VLAN and service VLANs cannot be the same. Therefore, these interfaces are usually configured as trunk interfaces.
In tunnel forwarding mode, service packets are encapsulated through CAPWAP. Therefore, only the packets from the management VLAN need to be allowed from the AP's uplink interface to the AC's downlink interface.
- If the AP is directly connected to an unmanaged switch that does not support VLAN configuration, the Layer 2 interface on the upstream device connected to the unmanaged switch must be configured as an access interface, which removes VLAN tags of packets.
- By default, a device has only direct network segment routes. If a route to the destination network segment exists among the network segment routes, you do not need to configure a static route. Otherwise, you need to configure a static route to the destination network segment on the device.
In the following example, Table 1-3 lists WLAN AC configuration examples in different networking modes. Layer 2 and Layer 3 interfaces in this table indicate that the AC connects to downstream devices through Layer 2 and Layer 3 interfaces.
Table 1-3 WLAN AC configuration examples in different networking modes
CAPWAP Tunnel Fault
Context
According to the preceding sections, CAPWAP tunnels play an important role in the AP join process. If an AP fails to establish a CAPWAP tunnel with an AC, it cannot join the AC. If this is the case, check whether the CAPWAP tunnel between them is successfully established. CAPWAP tunnels provide the following functions:
- Maintain the status between APs and an AC.
- Allow an AC to manage APs and deliver service configurations to the APs.
- Transmits service data to an AC for centralized forwarding.
Troubleshooting Procedure
- Check whether the CAPWAP tunnel has been created.In the diagnostic view, run the display capwap linkinfo command to check the status of CAPWAP tunnels. If the number of online APs is greater than the number of CAPWAP tunnels, run this command repeatedly and check whether the number of CAPWAP tunnels increases.
<Huawei> system-view [Huawei] diagnose [Huawei-diagnose] display capwap linkinfo Link ID List(R-Run): ------------------------------------------------------------------------------ 0(R) 1(R) 3(R) 8(R) 9(R) ------------------------------------------------------------------------------ 5 link ID(s) in total, 5 in run state
- If the number of CAPWAP tunnels does not increase, the CAPWAP tunnel fails to be established or no CAPWAP tunnel is established. Run the display capwap configuration command to check the CAPWAP configurations. Check whether the following configurations are correct:
- Check whether a correct IP address is configured for the AC's source interface and whether the AC's source interface is shut down.
- Check whether the CAPWAP heartbeat detection interval is less than 25 seconds (default value). If so, the CAPWAP tunnel reliability may be degraded, making the AP fail to go online. The default value is recommended.
- Check whether the number of CAPWAP heartbeat detections is less than 6 (default value). If so, the CAPWAP tunnel reliability may be degraded, making the AP fail to go online. The default value is recommended.
- Check whether CAPWAP control tunnel encryption using DTLS is enabled. By default, CAPWAP control tunnel encryption using DTLS is enabled. If this function is disabled by mistake, DTLS negotiation fails. As a result, the CAPWAP tunnel fails to be established.
<Huawei> display capwap configuration ------------------------------------------------------------ Source interface : vlanif100 //AC's source interface Source ip-address : - //IP address of the AC's source interface Echo interval(seconds) : 25 //CAPWAP heartbeat detection interval Echo times : 6 //Number of CAPWAP heartbeat detections Control priority(server to client) : 7 Control priority(client to server) : 7 Control-link DTLS encrypt : enable //Whether CAPWAP control tunnel encryption using DTLS is enabled DTLS PSK value : ****** PSK mandatroy match switch : disable IPv6 status : disable ------------------------------------------------------------
- If the CAPWAP configurations are correct but the AP still cannot go online, run the capwap echo command to set a larger CAPWAP heartbeat detection interval and a larger number of CAPWAP heartbeat detections. Then, enable the AP to go online again.
<Huawei> system-view [Huawei] capwap echo interval 30 times 10
- Run the commit all command to commit the configuration and enable the AP to go online again.
<Huawei> system-view [Huawei] wlan ac [Huawei-wlan-view] commit all Warning: Committing configuration may cause service interruption, continue?[Y/N]:y
AP Authentication Failure
Context
When an AP attempts to join an AC, the AC authenticates the AP's identity. Only authenticated APs can join the AC. Therefore, when configuring an AP to join an AC, you need to add the AP to the AC in offline mode and set the AP authentication mode on the AC. For example, when adding an AP, you can set the AP authentication mode to MAC address authentication. In this way, when the AP attempts to join an AC, the AC authenticates the AP's MAC address. The AP can join the AC only after being authenticated successfully.
An AC supports three AP authentication modes: MAC address authentication, SN authentication, and non-authentication. To reduce security risks, MAC address authentication or SN authentication is recommended. If an AP fails to join an AC, check whether the AP fails to be authenticated.
- If the AP authentication mode is MAC address authentication, you must enter the MAC address of the AP when adding the AP offline.
- If the AP authentication mode is SN authentication, you must enter the SN of the AP when adding the AP offline. You can obtain the MAC address and SN of the AP from its nameplate.
Troubleshooting Procedure
- Check whether the AP's MAC address is added to the blacklist. If so, the AP fails to be authenticated.Run the display ap blacklist command on the AC to check the AP blacklist.
<Huawei> display ap blacklist -------------------------------------------------------------------------------- ID MAC -------------------------------------------------------------------------------- 0 aaaa-aaaa-aaaa 1 bbbb-bbbb-bbbb 2 xxxx-xxxx-xxxx 3 yyyy-yyyy-yyyy 4 zzzz-zzzz-zzzz -------------------------------------------------------------------------------- Total: 5
- If the AP's MAC address is in the blacklist, run the undo ap blacklist mac command to delete the AP's MAC address from the blacklist.
<Huawei> system-view [Huawei] wlan ac [Huawei-wlan-view] undo ap blacklist mac xxxx-xxxx-xxxx
- If the AP authentication mode is MAC address authentication or SN authentication but the AP is neither added offline nor added to the whitelist, the AP fails to be authenticated when it attempts to join an AC.Run the display ap unauthorized record command to check information about unauthorized APs.
<Huawei> display ap unauthorized record Unauthorized AP record: Total number: 1 -------------------------------------------------------------------------------- AP type: AP7110SN-GN AP SN: yyyyyyyyyyyyyyyyyyyy AP MAC address: xxxx-xxxx-xxxx AP IP address: 192.168.109.252 Record time: 2015-01-22 17:23:17 --------------------------------------------------------------------------------
- If the AP fails to be authenticated, run the ap-confirm all command to allow these AP to join an AC or run the ap whitelist command to add the AP to the whitelist.
<Huawei> system-view [Huawei] wlan ac [Huawei-wlan-view] ap-confirm mac xxxx-xxxx-xxxx
<Huawei> system-view [Huawei] wlan ac [Huawei-wlan-view] ap whitelist mac xxxx-xxxx-xxxx
- Check whether the MAC address, SN, and model of the AP on the AC are the same as those on the nameplate of the AP. If not, modify incorrect parameter settings based on the MAC address, SN, and model on the nameplate of the AP.
<Huawei> display current-configuration | include ap-id ap-id 0 ap-mac xxxx-xxxx-xxxx ap-sn yyyyyyyyyyyyyyyyyyyy
- Run the commit all command to commit the new configuration and enable the AP to join the AC again.
<Huawei> system-view [Huawei] wlan ac [Huawei-wlan-view] commit all Warning: Committing configuration may cause service interruption, continue?[Y/N]:y
AP Type Mismatch
Context
When an AR router functions as an AC and is connected to Fit APs to provide WLAN access for STAs, only Huawei APs can be connected.
- If third-party APs are used, replace them with Huawei APs and bring the APs online again.
- If Huawei APs are used, different AC versions support different AP types. If an AP fails to join an AC, check whether the current AC version supports the AP type.
Troubleshooting Procedure
- Check whether the AC supports the current AP type.Run the display ap-type all command on the AC to check the supported AP types. Different AC versions support different AP types. The following uses the V200R010 version as an example. Currently, ACs running this version support the most AP types.
<Huawei> display ap-type all -------------------------------------------------------------------------------- ID Type -------------------------------------------------------------------------------- 17 AP6010SN-GN 19 AP6010DN-AGN 21 AP6310SN-GN 23 AP6510DN-AGN 25 AP6610DN-AGN 27 AP7110SN-GN 28 AP7110DN-AGN 29 AP5010SN-GN 30 AP5010DN-AGN 31 AP3010DN-AGN 33 AP6510DN-AGN-US 34 AP6610DN-AGN-US 35 AP5030DN 36 AP5130DN 37 AP7030DE 38 AP2010DN 39 AP8130DN 40 AP8030DN 42 AP9330DN 43 AP4030DN 44 AP4130DN 45 AP3030DN 46 AP2030DN 47 AP9131DN 48 AP9132DN 49 AP5030DN-S 50 AP3010DN-V2 51 AP4030DN-E 56 AP6050DN 57 AP6150DN 58 AP7050DE 59 AP7050DN-E 60 AP4030TN 61 AP4050DN-E 62 AP4050DN-HD 64 AP430-E 68 AP1010SN 69 AP2050DN 70 AP2050DN-E 71 AP8130DN-W 73 AP2050DN-S 75 AP4050DN 76 AP4051DN 77 AP4151DN 78 AP4050DN-S 79 AP4051DN-S 80 AP8050DN 81 AP8150DN 82 AP8050DN-S 85 AP1050DN-S 86 AP4051TN 87 AP6052DN 88 AP7052DN 89 AP7052DE 90 AP3050DE 91 AP7152DN 92 AP8050TN-HD 93 AP8082DN 94 AP8182DN 97 AP2051DN 98 AP2051DN-S 99 AP2051DN-E 100 AP7060DN 101 AP5050DN-S 102 AP2030DN-S 103 AP4050DE-M 104 AP4050DE-M-S 105 AP100EC 106 AP200EC 107 AP300EC 108 WA375DD-CE 109 AP4050DE-B-S 110 AP5510-W-GP 111 AP2051DN-L-S -------------------------------------------------------------------------------- Total: 74
- If the AC version does not support the current AP type, you are advised to upgrade the AC to V200R010. For details about how to upgrade the AC version, see the upgrade guide of the corresponding device model and version, for example, AR100, AR120, AR150, AR160, AR200, AR1200, AR1600, AR2200, AR3200, and AR3600 V200R009C00 Upgrade Guide.
AC-AP Version Mismatch
Context
One prerequisite for an AP to join an AC is that the AP version matches the AC version. When an AP attempts to join an AC, the AC checks whether the AP version is supported. If so, the AP is allowed to join the AC. Otherwise, the AP is not allowed to join the AC. If an AP fails to join an AC, check whether the AP version matches the AC version.
Troubleshooting Procedure
- Check whether the AP version matches the AC version.
- Log in to the AC and run the display version command to check the AC's version information.
<Huawei> display version Huawei Versatile Routing Platform Software VRP (R) software, Version 5.170 (Router v2.10.10sp7) Copyright (C) 2011-2020 HUAWEI TECH CO., LTD Huawei 12 Router uptime is 2 weeks, 0 day, 17 hours, 49 minutes BKP 0 version information: 1. PCB Version : Router01BAK2B VER.A 2. If Supporting PoE : Yes 3. Board Type : 12 4. MPU Slot Quantity : 1 5. LPU Slot Quantity : 8 ...
- Log in to the AP through Telnet and run the display version command to check the AP's version information.
<Huawei> display version Huawei Versatile Routing Platform Software VRP (R) software, Version 5.170 (AP4050DN FIT V200R007C20SPCa00) ...
In this example, the AC version is V200R010C10SPC700 and the AP version is V200R007C20SPCa00.
- Log in to the AC and run the display version command to check the AC's version information.
- If you cannot log in to the AP to view its version information, run the display trapbuffer command on the AC to view the traps recorded in the trap buffer. You can obtain the AP's version information by searching for WLAN/4/AP_SOFTWARE_VERSION_MISMATCH in the trap information. APSoftWareVersion indicates the AP's software version.
<Huawei> display trapbuffer Trapping buffer configuration and contents: enabled Allowed max buffer size: 1024 Actual buffer size: 256 Channel number: 3, Channel name: trapbuffer Dropped messages: 0 Overwritten messages: 0 Current messages: 228 #Aug 10 2020 08:28:23+00:00 Huawei LINE/4/USERLOGIN:OID 1.3.6.1.4.1.2011.5.25.20 7.2.2 A user login. (UserIndex=130, UserName=VTY, UserIP=189.44.242.100, UserCha nnel=VTY1) #Aug 10 2020 07:56:20+00:00 Huawei ARP/4/ARP_IPCONFLICT_TRAP:OID 1.3.6.1.4.1.201 1.5.25.123.2.6 ARP detects IP conflict. (IP address=189.44.241.126, Local interf ace=GigabitEthernet0/0/0, Local MAC=4857-02aa-7501, Local vlan=0, Local CE vlan= 0, Receive interface=GigabitEthernet0/0/0, Receive MAC=d849-0b94-27ee, Receive v lan=0, Receive CE vlan=0, IP conflict type=Remote IP conflict). ---- More ----
- Different AC versions support different AP versions. Table 1 lists the AP versions supported by different versions of AR routers when they function as ACs.Table 1-4 Version mapping between AR routers and Fit APs
AR Software Version
AP Software Version
V200R005
V200R002C00
V200R006
V200R005C10
V200R007
V200R005C10, V200R005C20, and V200R005C30
V200R008 (C20&C30&C50)
V200R006C10, V200R006C20, and V200R007C10
V200R009C00
V200R006C10, V200R006C20, V200R007C10, V200R007C20, and V200R008C00
V200R010C00&V200R010C10
V200R006C10, V200R006C20, V200R007C10, V200R007C20, V200R008C00, V200R008C10, V200R009C00, and V200R010C00NOTE:APs running the V200R010C00 version are only supported by the ACs running the V200R010C00SPC600 version.
V300R003C00&V300R003C10
V200R006C10, V200R006C20, and V200R007C10
V300R019C00&V300R019C10
V200R006C10, V200R006C20, V200R007C10, V200R007C20, V200R008C00, V200R008C10, V200R009C00, and V200R010C00NOTE:APs running the V200R007C20, V200R008C00, V200R008C10, V200R009C00, and V200R010C00 versions are only supported by the ACs running the V300R019C00SPC200 and later versions.
Check whether the AC version matches the AP version according to the preceding table. If they do not match, upgrade the AP version. For details about how to upgrade an AP version, see the upgrade guide of the corresponding version, for example, FIT AP V200R007C20 Upgrade Guide.
The Number of Connected APs Reaches the Upper Limit
Context
When an AR router functions as an AC, the number of APs that can be connected varies according to the model of the AR router. Some AR router models can connect to a maximum number of APs without an AC license. While some other AR router models can connect to a maximum number of APs only after an AC license is loaded. For details about the maximum number of APs supported by each AR router model, contact Huawei pre-sales engineers.
For an AR router that can connect to a maximum number of APs only after an AC license is loaded, a maximum of four APs can be connected if no license is loaded. If an AP fails to join an AC, check whether the number of online APs on the AC reaches the maximum.
Troubleshooting Procedure
- Check the number of APs in normal state on the AC.Run the display ap by-state normal command on the AC to check the number of online APs.
<Huawei> display ap by-state normal AP information(State-normal): --------------------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime --------------------------------------------------------------------------------------------------- 0 00e0-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP6010DN-AGN nor 0 4H:50M:55S 1 00e0-fc74-9640 area_2 ap-group1 192.168.120.253 AP5010DN-AGN nor 0 6H:5M:24S --------------------------------------------------------------------------------------------------- Total: 2
- Visit Huawei website Specifications Query Tool or contact Huawei pre-sales engineers to check the maximum number of APs supported by the AC.
- Check whether the number of online APs reaches the maximum value. If not, but the Reason field is displayed as AP reaches the upper limit or Lack of license in the display ap online-fail-record command output, a fault may have occurred. Troubleshoot the fault depending on whether the AC requires a license to connect to a maximum number of APs:
- If the AC can connect to a maximum number of APs without a license, contact technical support personnel. For details, see step 2 in Collecting Information About AP Join Failures. For example, this fault occurs when an AR1220C-S can connect to a maximum of 16 APs without a license but does not allow more than four APs to connect it.
- If the AC can connect to a maximum number of APs only after a license is loaded and four AP have connected to the AC, purchase a license to enable the AC to provide access to more APs. For details about how to purchase and install a license, see Six Steps to Apply for and Load a Commercial License File in How to Configure an AR Router. For example, an AR2240C-S can connect to a maximum of four APs without a license. To enable the AC to provide access to more APs, purchase a license.
Collecting Information About AP Join Failures
- Collect fault information.
- Collect all diagnostic information and export the information to a file.
Run the display diagnostic-information file-name command in the user view to collect diagnostic information and save the information to a file.
<Huawei> display diagnostic-information dia-info.txt This operation will take several minutes, please wait......................... .................................................................. Info: The diagnostic information was saved to the device successfully..
- When the diagnostic file is generated, you can export the file from the device using TFTP, FTP, or SFTP. For details, see Local File Management.
You can run the dir command in the user view to check whether the file is generated.
You can also run the display diagnostic-information command and save STA logs in a diagnostic file on a disk. For details, see Diagnostic File Obtaining Guide.
If this command displays a long output, press Ctrl+C to abort this command.
The display diagnostic-information command displays diagnostic information, which helps locate faults but may affect system performance. For example, the CPU usage may become high. Therefore, do not use this command when the system is running properly.
Do not run the display diagnostic-information command simultaneously on multiple STAs connected to the device. This is because doing so may significantly increase the CPU usage of the device and deteriorate the device performance.
- Collect the log and trap information on the device and export the information to a file.
Run the save logfile command in the user view to save the log and trap information in the buffer to a file.
<Huawei> save logfile Info: It may take several seconds,please wait... Save log file successfully.
- When the diagnostic file is generated, you can export the file from the device using TFTP, FTP, or SFTP. For details, see Local File Management.
You can also run the display logbuffer and display trapbuffer commands to view the log and trap information on the device, and save STA logs in a diagnostic file on a disk. For details, see Diagnostic File Obtaining Guide.
- Collect all diagnostic information and export the information to a file.
- Seek technical support.
Click http://e.huawei.com/en/how-to-buy/contact-us to seek technical support.
Technical support personnel will provide instructions for you to submit all the collected information and files, so that they can locate faults.
More Information About AP Join Issues
AR Router Configuration Guide > WLAN-AC Configuration Guide
AR Router CLI-based Typical Configuration Examples
AR Router Web-based Typical Configuration Examples
Refer to the following for more information about Wi-Fi troubleshooting: