Dec 26, 2014

AP joining process (1.c) -- How to troubleshoot

Hello everyone

In this post, I will introduce how to troubleshoot AP joining process. I think it is very tough, but I will try to do my best.
(I have listed some references which are good resources to understand AP joining process, if you have time please read them. )


When you troubleshoot AP joining process you meet the first question that is "Where do I start or how do I begin" (Maybe this question is not just for troubleshooting this issue, possibility, for all of  troubleshooting issues. :) )

The answer is that you need to have a plan and always modify your plan if the parameters of  the problem change while you are troubleshooting.


// The plan of troubleshooting AP joining process //

1.
Understand the AP join process

If you understand it, you job will be much easier !!.  Know the correct sequence of AP join process. See. What is Capwap? .
(After you collectl logs or packet capture, comparing with the correct sequence to identify where is the problem. )


2. 
Understand your topology and Gathering logs

When your network has more than one AP and WLC, you should know which AP cannot join which WLC from topology. Once you identity that,  you can start to gather logs from WLC and AP
  • On WLC side
    config paging disable
    show time
    show run-config
    show run-config commands
    show msglog
    show trap
    show ap join stats summary all
    show ap join stats detail AP_Mac_address
    show ap eventlog

  
  • On AP side
    show version
    show cdp neighbors
    ping
    ping
    show tech-support

    "show run-config" and "show tech-support" are very important things, since you will understand the setting on WLC and AP.


    ///  options for complicate issues ///
   For the difficult issue, you need to use the magic tool -- debug and packet capture.  I will introduce some basic debugs, but remember modify your plan if the parameters of  the problem change.
 
  *  WLC debug *
  (WLC) > debug capwap events enable
  (WLC) > debug capwap errors enable

  *  AP debug *
  ( AP )# debug capwap client event
  ( AP )# debug capwap client error


 
3. 
Analyzing data collected 

   If you find that ping is failure, it means your network readability has the problem. It is better to check your infrastructure.

   "show ap join stats detail AP_Mac_address" is also very useful, since it can give you some hits about the last discovery request and last join request were sent from AP.  See detail from the reference 5

  See the reference 6 , there are some examples about debug commands. Again, It is better to get packet capture. (Hit: compare your debug log and packet capture to identify whether the problem happens on AP discovery process or AP join Process.)



See you and Good luck !!



Reference
1.
Deploy and Troubleshooting Cisco Wireless LAN Controllers

2.
"AP fails to join controller" - Lightweight Access Point (LAP) fails to join Wireless LAN controller (WLC)
https://supportforums.cisco.com/document/69341/ap-fails-join-controller-lightweight-access-point-lap-fails-join-wireless-lan

3. 
Wireless LAN Controller and Lightweight Access Point Basic Configuration Example
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/69719-wlc-lwap-config.html

4
Lightweight AP (LAP) Registration to a Wireless LAN Controller (WLC)
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/70333-lap-registration.html

5.
Troubleshooting Why an AP Does Not Join a Controller
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/100731-ap-not-join-con.html

6.
Troubleshoot a Lightweight Access Point Not Joining a Wireless LAN Controller 
http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99948-lap-notjoin-wlc-tshoot.html

Dec 25, 2014

AP joining process (1.b) -- What is Discovery mechanism - 4?

Hello everyone

In this post, I will explain that How to use Capwap discovery request and response to find out WLC  --- Discovery by DHCP. 

** Topology **
AP  ----   SW3750   ----   SWCat6K  ----   WLC5508

AP IP addr: 172.33.68.234
WLC5508 IP addr: 172.33.67.10

AP is in the Vlan 368 and WLC5508 is the Vlan 367
****  

Before to start, you need give the following commands on SW3750 and SWCat6K.


On SW3750, I use interface Gi3/0/4 to connect AP,
=====
interface GigabitEthernet3/0/4
 switchport access vlan 368
 switchport mode access
 spanning-tree portfast
====

I make dhcp pool on SWCat6k
=====
ip dhcp pool vlan368
   network 172.33.68.0 255.255.255.0
   default-router 172.33.68.254 
   option 43 hex f104.ac21.4310
=====

"option 43 hex f104.ac1f.fe37" is the point.  The option 43 is the hexadecimal string. Its sub-option is Type + Lenght + Value. Type is always the code 0xf1. Lenght is the number of controller management IP addresses times 4 in hex. Value is the ip address of the controller listed sequentially in hex.

For example in here, there is only one controller with WLC's management interface IP address is 172.33.67.10. then type is 0xf1. then length is 1 x 4 = 4 = 0x04. The IP address of wlc translates to ac.21.43.10(172.133.67.10) in hex.  So the command is  "option 43 hex f104.ac1f.fe37"

From the figure, you can see Discovery Type is DHCP(2) in Capwap discovery request. 




If you give "debug capwap client event" on AP,  you will see the similar messages. 

*Time: %CAPWAP-5-DHCP_OPTION_43: Controller address 172.33.67.10 obtained through DHCP
*Time: CAPWAP Control mesg Sent to 172.33.67.10, Port 5246
*Time: Msg Type   : CAPWAP_DISCOVERY_REQUEST
*Time: Msg Length : 99
*Time: Msg SeqNum : 0
*Time: %CAPWAP-3-EVENTLOG: Discovery Request sent to 172.33.67.10 with discovery type set to 2
*Time: CAPWAP Control mesg Recd from 172.33.67.10, Port 5246
*Time: HLEN 2,   Radio ID 0,    WBID 1
*Time: Msg Type   : CAPWAP_DISCOVERY_RESPONSE
*Time: Msg Length : 117
*Time: Msg SeqNum : 0
*Time: %CAPWAP-3-EVENTLOG: Discovery Response from 172.33.67.10


Our "What is Discovery mechanism" has finished. In next post, I will introduce some troubleshooting skill on "AP disjoins WLC""


See you next time and Good Luck!!


Reference 
1.
DHCP option 43 for lightweight cisco aironet access pints configuration
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcp-option-43-00.html

AP joining process (1.b) -- What is Discovery mechanism - 3?

Hello everyone

In this post, I will explain that How to use Capwap discovery request and response to find out WLC  --- Discovery by static configuration. 

Before to do that, you need give the following commands on your AP.

AP# capwap ap ip address 172.33.67.231 255.255.255.0
AP# capwap ap ip default-gateway 172.33.67.254
AP# capwap ap ip primary-base CT5508 172.33.68.10

AP#show capwap ip config                                           
LWAPP Static IP Configuration
IP Address         172.33.67.231    
IP netmask         255.255.255.0    
Default Gateway    172.33.67.254  
Primary Controller 172.33.68.10

By using "capwap ap ip primary-base CT5508 172.33.68.10",  AP can join its primary Controller whose name is CT5508 and its address 172.33.68.10

** Topology **
AP  ----   SW3750   ----   SWCat6K  ----   WLC5508

AP IP addr: 172.33.67.231
WLC5508 IP addr: 172.33.68.10

AP is in the Vlan 367 and WLC5508 is the Vlan 368
****  

As you can see the following packet capture, AP directly touches to WLC 172.33.68.10 by using Capwap discovery request, saying I want to join you. Then WLC responses AP by Capwap discovery response message, saying Yes, you can.
(Notice, comparing to discovery by broadcast, destination address is 172.33.68.10 instead of 255.255.255.255)

Also we can see the inside of Capwap discovery request,  the value == 01 and Discover type is static Configuration (1)





See you next time and Good luck!!