AP컨트롤러에 조인하지 않는 이유 문제 해결가
소개
이 문서에서는 컨트롤러 버전 4.2.61.0에서 새로운 show ap join stats 명령에 대한 정보를 제공하며 이를 효과적으로 사용하는 방법을 보여 줍니다.자세한 내용은 Troubleshoot a Lightweight Access Point Not Join a Wireless LAN Controller를 참조하여 액세스 포인트(AP)가 컨트롤러에 조인하지 않는 이유를 효과적으로 해결하십시오.AP가 컨트롤러에 조인을 보내지 않을 경우 AP에서 추가 트러블슈팅이 필요할 수 있습니다.
이 문제 해결 문서는 4.2.61부터 최신 버전의 7.2.103까지 모든 컨트롤러(WLC) 버전에 적용됩니다.
컨트롤러에서 발생하는 다양한 오류의 몇 가지 예는 Background Information 및 Troubleshooting Algorithm 섹션을 따릅니다.
사전 요구 사항
요구 사항
이 문서에 대한 특정 요건이 없습니다.
사용되는 구성 요소
이 문서는 특정 소프트웨어 및 하드웨어 버전으로 한정되지 않습니다.
이 문서의 정보는 특정 랩 환경의 디바이스를 토대로 작성되었습니다.이 문서에 사용된 모든 디바이스는 초기화된(기본) 컨피그레이션으로 시작되었습니다.현재 네트워크가 작동 중인 경우, 모든 명령어의 잠재적인 영향을 미리 숙지하시기 바랍니다.
표기 규칙
문서 규칙에 대한 자세한 내용은 Cisco 기술 팁 표기 규칙을 참고하십시오.
배경 정보
컨트롤러 버전 4.2.61.0에서 컨트롤러는 검색 요청을 전송하는 모든 AP와 검색 응답을 전송하는 AP를 추적합니다.또한 컨트롤러에 연결하려고 시도하는 AP와 그 성공 여부를 추적합니다.컨트롤러에 AP가 컨트롤러에 조인하지 못하는 이유를 트러블슈팅하는 데 도움이 되는 2개의 새 CLI(콘솔 또는 SSH) 명령이 있습니다.
Show ap join stats summary [all | AP_Mac_Address] Show ap join stats detailed AP_Mac_Address
문제 해결 알고리즘
show ap join stats summary all 명령을 사용하여 컨트롤러에 조인하지 않는 AP를 확인합니다.컨트롤러가 검색 요청을 수신하는 즉시 AP가 show ap join stats 목록에 삽입됩니다.
참고: 컨트롤러는 컨트롤러가 재부팅될 때까지 show ap join stats 목록에서 AP를 제거하지 않습니다.경우에 따라 장애가 발생한 AP가 하루 이상 가입하려고 했거나 완전히 오프라인 상태입니다.show ap join stats detail 명령을 사용하여 AP에서 마지막 검색 요청 및 마지막 가입 요청이 AP에서 전송된 시기를 확인하여 AP가 컨트롤러와의 연결이 끊겼는지 또는 다른 컨트롤러로 이동되었을 수 있는지 확인합니다.
출력은 컨트롤러가 검색 요청을 받은 총 AP 수를 제공한 다음 해당 AP가 현재 컨트롤러에 조인되었는지 여부를 나열합니다.
(Cisco Controller) >show ap join stats summary all Number of APs................................. 3 00:0b:85:1b:7c:b0............................. Joined 00:12:44:bb:25:d0............................. Joined 00:13:19:31:9c:e0............................. Not joined
조인되지 않은 AP의 MAC 주소가 있는 경우 show ap join stats summary <mac addr>을 사용하여 마지막 조인 및 실패 사유를 검색합니다.
(Cisco Controller) >show ap join stats summary 00:14:f2:63:12:50 Is the AP currently connected to controller............. Yes Time at which the AP joined this controller last time... Jan 24 12:21:32.414 Type of error that occurred last........................ AP got or has been disconnected Reason for error that occurred last..................... Timed out while waiting for ECHO response from the AP Time at which the last join error occurred.............. Jan 24 12:21:14.751
검색 요청, 가입 요청 및 컨피그레이션 요청에 대한 자세한 정보를 보려면 show ap join stats detail <mac-address> 명령을 사용합니다.또한 이 명령은 컨트롤러가 AP의 검색 요청만 확인하지만 가입 요청이 표시되지 않는지 여부를 나타냅니다.
(Cisco Controller) >show ap join stats detail 00:14:f2:63:12:50 Discovery phase statistics - Discovery requests received........................... 2 - Successful discovery responses sent................... 2 - Unsuccessful discovery request processing............. 0 - Reason for last unsuccessful discovery attempt........ Not applicable - Time at last successful discovery attempt............. Jan 24 12:21:20.547 - Time at last unsuccessful discovery attempt........... Not applicable Join phase statistics - Join requests received................................ 2 - Successful join responses sent........................ 2 - Unsuccessful join request processing.................. 0 - Reason for last unsuccessful join attempt............. Not applicable - Time at last successful join attempt.................. Jan 24 12:21:30.669 - Time at last unsuccessful join attempt................ Not applicable Configuration phase statistics - Configuration requests received....................... 2 - Successful configuration responses sent............... 2 - Unsuccessful configuration request processing......... 0 - Reason for last unsuccessful configuration attempt.... Not applicable - Successful configuration attempt...................... Jan 24 12:21:32.414 - Time at last unsuccessful configuration attempt....... Not applicable Last AP message decryption failure details - Reason for last message decryption failure............ Not applicable Last AP disconnect details - Reason for last AP connection failure................. Timed out while waiting for ECHO response from the AP Last join error summary - Type of error that occurred last...................... AP got or has been disconnected - Reason for error that occurred last................... Timed out while waiting for ECHO response from the AP - Time at which the last join error occurred............ Jan 24 12:21:14.751
예 1
이 경우 컨트롤러의 시간이 올바르지 않습니다.이 오류는 AP 인증서 페이로드가 잘못되었음을 나타냅니다.이 오류는 컨트롤러의 시간이 인증서 유효 시간 간격을 초과했기 때문에 발생했습니다.show time 명령이 올바른 시간을 나타내는지 확인합니다.아래 출력에 1993년 3월 6일의 시간 값을 참고하십시오.여기서 NTP가 구성되지 않은 상태에서 컨트롤러에 대해 클럭이 시작됩니다.
타임스탬프가 포함된 AP 가입 보고서 통계의 3단계는 검색, 가입 및 구성 단계입니다.AP가 연결 또는 연결 해제 사유에 실패한 마지막 오류 요약을 확인합니다.
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10 Discovery phase statistics - Discovery requests received........................... 2 - Successful discovery responses sent................... 1 - Unsuccessful discovery request processing............. 2113123 - Reason for last unsuccessful discovery attempt........ Discovery request received on unsupported VLAN - Time at last successful discovery attempt............. Mar 06 19:03:50.779 - Time at last unsuccessful discovery attempt........... Mar 06 19:03:50.782 Join phase statistics - Join requests received................................ 1 - Successful join responses sent........................ 0 - Unsuccessful join request processing.................. 1 - Reason for last unsuccessful join attempt............. Certificate payload in join request contains invalid certificate - Time at last successful join attempt.................. Not applicable - Time at last unsuccessful join attempt................ Mar 06 19:04:00.810 Configuration phase statistics - Configuration requests received....................... 0 - Successful configuration responses sent............... 0 - Unsuccessful configuration request processing......... 0 - Reason for last unsuccessful configuration attempt.... Not applicable - Time at last successful configuration attempt......... Not applicable - Time at last unsuccessful configuration attempt....... Not applicable Last AP message decryption failure details - Reason for last message decryption failure............ Not applicable Last AP disconnect details - Reason for last AP connection failure................. Not applicable Last join error summary - Type of error that occurred last...................... Lwapp join request rejected - Reason for error that occurred last................... Certificate payload in join request contains invalid certificate - Time at which the last join error occurred............ Mar 06 19:04:00.810
예 2
이 경우 AP는 관리 IP 주소 VLAN이 아닌 VLAN에서 검색 요청을 전송합니다.컨트롤러는 관리 인터페이스 서브넷에서 수신되지 않은 모든 검색 요청을 거부합니다.
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10 Discovery phase statistics - Discovery requests received........................... 10 - Successful discovery responses sent................... 5 - Unsuccessful discovery request processing............. 2113123 - Reason for last unsuccessful discovery attempt........ Discovery request received on unsupported VLAN - Time at last successful discovery attempt............. Jan 30 14:30:12.284 - Time at last unsuccessful discovery attempt........... Jan 30 14:30:12.288 Join phase statistics - Join requests received................................ 4 - Successful join responses sent........................ 0 - Unsuccessful join request processing.................. 4 - Reason for last unsuccessful join attempt............. Certificate payload in join request contains invalid certificate - Time at last successful join attempt.................. Not applicable - Time at last unsuccessful join attempt................ Mar 06 19:19:03.345 Configuration phase statistics - Configuration requests received....................... 0 - Successful configuration responses sent............... 0 - Unsuccessful configuration request processing......... 0 - Reason for last unsuccessful configuration attempt.... Not applicable - Time at last successful configuration attempt......... Not applicable - Time at last unsuccessful configuration attempt....... Not applicable Last AP message decryption failure details - Reason for last message decryption failure............ Not applicable Last AP disconnect details - Reason for last AP connection failure................. Not applicable Last join error summary - Type of error that occurred last...................... Failed to send Lwapp discovery response - Reason for error that occurred last................... Discovery request received on unsupported VLAN - Time at which the last join error occurred............ Jan 30 14:30:12.288 (Cisco Controller) >
예 3
이 경우 AP가 이 컨트롤러에서 기본 컨트롤러로 이동했습니다.
참고: 여러 이유로 오류가 생성될 수 있으며, 그 중 하나는 네트워크 중단입니다.
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10
Discovery phase statistics
- Discovery requests received........................... 23
- Successful discovery responses sent................... 23
- Unsuccessful discovery request processing............. 0
- Reason for last unsuccessful discovery attempt........
Not applicable
- Time at last successful discovery attempt.............
Jan 30 14:39:38.526
- Time at last unsuccessful discovery attempt...........
Not applicable
Join phase statistics
- Join requests received................................ 21
- Successful join responses sent........................ 21
- Unsuccessful join request processing.................. 0
- Reason for last unsuccessful join attempt.............
Not applicable
- Time at last successful join attempt..................
Jan 30 14:39:07.085
- Time at last unsuccessful join attempt................
Not applicable
Configuration phase statistics
- Configuration requests received....................... 21
- Successful configuration responses sent............... 21
- Unsuccessful configuration request processing......... 0
- Reason for last unsuccessful configuration attempt....
Not applicable
- Time at last successful configuration attempt.........
Jan 30 14:39:09.481
- Time at last unsuccessful configuration attempt.......
Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............
Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................
Timed out while waiting for ECHO response from the AP
Last join error summary
- Type of error that occurred last......................
AP got or has been disconnected
- Reason for error that occurred last...................
Timed out while waiting for ECHO response from the AP
- Time at which the last join error occurred............
Jan 30 14:40:15.451
예 4
이 경우 AP의 자체 서명 인증서(SSC)가 컨트롤러에서 올바르지 않습니다.컨트롤러는 요청을 정의된 radius 서버로 전달하기 전에 항상 로컬 데이터베이스를 확인합니다.따라서 컨트롤러가 SSC를 로컬에서 찾지 못할 때 AP 오류를 위해 RADIUS 권한 부여가 보류 중입니다.
(Cisco Controller) >show ap join stats detailed 00:13:5f:fa:88:50 Discovery phase statistics - Discovery requests received........................... 2 - Successful discovery responses sent................... 1 - Unsuccessful discovery request processing............. 2113123 - Reason for last unsuccessful discovery attempt........ Discovery request received on unsupported VLAN - Time at last successful discovery attempt............. Jan 30 14:58:58.070 - Time at last unsuccessful discovery attempt........... Jan 30 14:58:58.071 Join phase statistics - Join requests received................................ 1 - Successful join responses sent........................ 0 - Unsuccessful join request processing.................. 1 - Reason for last unsuccessful join attempt............. RADIUS authorization is pending for the AP - Time at last successful join attempt.................. Not applicable - Time at last unsuccessful join attempt................ Jan 30 14:59:13.111 Configuration phase statistics - Configuration requests received....................... 0 - Successful configuration responses sent............... 0 - Unsuccessful configuration request processing......... 0 - Reason for last unsuccessful configuration attempt.... Not applicable - Time at last successful configuration attempt......... Not applicable - Time at last unsuccessful configuration attempt....... Not applicable Last AP message decryption failure details - Reason for last message decryption failure............ Not applicable Last AP disconnect details - Reason for last AP connection failure................. Radius authorization of the AP has failed Last join error summary - Type of error that occurred last...................... AP got or has been disconnected - Reason for error that occurred last................... Radius authorization of the AP has failed - Time at which the last join error occurred............ Jan 30 14:59:13.117 (Cisco Controller) >
예 5
(Cisco Controller) >show ap join stats detailed 0026cb8168c0 Discovery phase statistics - Discovery requests received.............................. 202 - Successful discovery responses sent...................... 0 - Unsuccessful discovery request processing................ 0 - Reason for last unsuccessful discovery attempt........... Not applicable - Time at last successful discovery attempt................ Not applicable - Time at last unsuccessful discovery attempt.............. Not applicable Join phase statistics - Join requests received................................... 122 - Successful join responses sent........................... 0 - Unsuccessful join request processing..................... 0 - Reason for last unsuccessful join attempt................ Not applicable - Time at last successful join attempt..................... Not applicable - Time at last unsuccessful join attempt................... Not applicable Configuration phase statistics - Configuration requests received.......................... 115 - Successful configuration responses sent.................. 0 - Unsuccessful configuration request processing............ 0 - Reason for last unsuccessful configuration attempt....... Not applicable --More-- or (q)uit - Time at last successful configuration attempt............ Not applicable - Time at last unsuccessful configuration attempt.......... Not applicable Last AP message decryption failure details - Reason for last message decryption failure............... Not applicable Last AP disconnect details - Reason for last AP connection failure.................... Image data request received from an unsupported AP Last join error summary - Type of error that occurred last......................... AP got or has been disconnected - Reason for error that occurred last...................... Image data request received from an unsupported AP - Time at which the last join error occurred............... Feb 16 00:50:16.841
Discovery phase statistics - Discovery requests received.............................. 44 - Successful discovery responses sent...................... 44 - Unsuccessful discovery request processing................ 0 - Reason for last unsuccessful discovery attempt........... Not applicable - Time at last successful discovery attempt................ Feb 26 18:36:24.098 - Time at last unsuccessful discovery attempt.............. Not applicable Join phase statistics - Join requests received................................... 44 - Successful join responses sent........................... 0 - Unsuccessful join request processing..................... 44 - Reason for last unsuccessful join attempt................ Join request receive d from an unsupported AP - Time at last successful join attempt..................... Not applicable - Time at last unsuccessful join attempt................... Feb 26 18:36:39.497 Configuration phase statistics - Configuration requests received.......................... 0 - Successful configuration responses sent.................. 0 - Unsuccessful configuration request processing............ 0 - Reason for last unsuccessful configuration attempt....... Not applicable - Time at last successful configuration attemp--More-- or (q)uit t............ Not applicable - Time at last unsuccessful configuration attempt.......... Not applicable Last AP message decrytion failure details - Reason for last message decryption failure............... Not applicable Last AP disconnect details - Reason for last AP connection failure.................... Not applicable Last join error summary - Type of error that occurred last......................... Lwapp join request r ejected - Reason for error that occurred last...................... Join request receive d from an unsupported AP - Time at which the last join error occurred............... Feb 26 18:36:39.497
피드백