No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

STAs Going Online on an X1E Card of the S12708 Cannot Associate with an SSID

Publication Date:  2019-03-26 Views:  48 Downloads:  0
Issue Description

STAs are disconnected from a wireless network immediately after they go online.

Handling Process

1. Run the display station online-fail-record sta-mac 6C72-E7F3-85C1 command to check the cause of the go-online failure. The command output shows that the cause is "The STA is not in the VAP's whitelist."

Rf/WLAN: Radio ID/WLAN ID

------------------------------------------------------------------------------

STA MAC         AP ID Ap name   Rf/WLAN    Last record time

                Reason

------------------------------------------------------------------------------

6c72-e7f3-85c1  86    JKL_2F_07 1/3        2018-10-11/10:07:36

                The STA is not in the VAP's whitelist.

                37    PCL-2F-06 0/4        2018-10-11/09:53:30

                The STA is not in the VAP's whitelist.

                37    PCL-2F-06 0/3        2018-10-11/09:53:30

                The STA is not in the VAP's whitelist.

------------------------------------------------------------------------------

Total stations: 1 Total records: 3

 

2. Check the corresponding configuration.

It is found that all the VAPs use the same SSID named NS_OFFICE and different whitelist profiles are applied to different VAPs. The MAC address 6C72-E7F3-85C1 is only in the sta-whitelist profile.

Therefore, after the mobile phone with MAC address 6C72-E7F3-85C1 is connected to the wireless network, it cannot be determined which VAP is associated with the mobile phone. As a result, the mobile phone is disconnected immediately after going offline.

 

vap-profile name NS_OFFICE

  forward-mode tunnel

  service-vlan vlan-id 4022

  sta-access-mode whitelist sta-whitelist

  ssid-profile NS_OFFICE

  security-profile secu_office

  traffic-profile wlan_tra_office

vap-profile name NS_OFFICE_02

  forward-mode tunnel

  service-vlan vlan-id 4022

  sta-access-mode whitelist sta-whitelist-02

  ssid-profile NS_OFFICE

  security-profile secu_office

  traffic-profile wlan_tra_office

  band-steer disable

vap-profile name NS_OFFICE_03

  forward-mode tunnel

  service-vlan vlan-id 4022

  sta-access-mode whitelist sta-whitelist-03

  ssid-profile NS_OFFICE

  security-profile secu_office

  traffic-profile wlan_tra_office

 

ap-id 86 type-id 51 ap-mac 446a-2e23-a3c0 ap-sn 21500828008WHC000315

  ap-name JKL_2F_07

  ap-group JKL

  radio 0

   channel 20mhz 1

   eirp 80

  radio 1

   channel 20mhz 165

   eirp 80

 

 

ap-group name JKL

  radio 0

   radio-2g-profile wlan_2g

   vap-profile NS_OFFICE wlan 1

   vap-profile NS_GUEST wlan 2

   vap-profile NS_OFFICE_02 wlan 3

   vap-profile NS_OFFICE_03 wlan 4

   eirp 100

  radio 1

   radio-5g-profile wlan_5g

   vap-profile NS_OFFICE wlan 1

   vap-profile NS_GUEST wlan 2

   vap-profile NS_OFFICE_02 wlan 3

   vap-profile NS_OFFICE_03 wlan 4

 




Root Cause

All the VAPs use the same SSID named NS_OFFICE and different whitelist profiles are applied to different VAPs. The MAC address 6C72-E7F3-85C1 is only in the sta-whitelist profile.

 

Therefore, after the mobile phone with MAC address 6C72-E7F3-85C1 is connected to the wireless network, it cannot be determined which VAP is associated with the mobile phone. As a result, the mobile phone is disconnected immediately after going offline.


Solution

1. Apply different SSID profiles to different VAPs.

2. Bind different VAP profiles to different AP groups.

3. Add all allowed MAC addresses to the whitelist profiles (in this case, access of different STAs cannot be controlled).

END