Wireless Access

Hi all,

We have an issue with aruba 275. Recently we have installed the aruba 275. The LED of AP is stable green but it is not showing up in Aruba controller 7210. The controller is able to ping the AP as it getting the ip from DHCP. LLDP is also enabled on cisco 2960S switch. The power output showing on the switch port is 30W.

All remaining Aruba 225 indoor APs aare working fine. Please let mw know whats the issue there is?

Has this ever worked?

Type "show ap database" and see if you see the AP.

Type "show log system all" and see if you see any messages about that AP.

Lastly, type "show datapath session table <ip address of ap>" and see if it is sending that controller any traffic.

Please check the outputs...

(WLC) #ping 10.10.0.26
Press 'q' to abort.
Sending 5, 92-byte ICMP Echos to 10.10.0.26, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 0.663/0.6998/0.814 ms

(WLC) #show ap database

AP Database
-----------
Name Group AP Type IP Address Status Flags Switch IP Standby IP
---- ----- ------- ---------- ------ ----- --------- ----------
70:3a:0e:c9:66:5a Building-A 225 10.10.0.15 Up 21h:41m:45s 192.168.1.245 0.0.0.0
70:3a:0e:c9:66:96 Family-A 225 10.10.0.12 Up 21h:41m:49s 192.168.1.245 0.0.0.0
70:3a:0e:c9:66:9c Building-A 225 10.10.0.16 Up 21h:41m:44s 192.168.1.245 0.0.0.0
70:3a:0e:c9:66:ea Building-A 225 10.10.0.25 Up 21h:41m:31s 192.168.1.245 0.0.0.0
70:3a:0e:c9:69:2e Building-A 225 10.10.0.8 Up 21h:41m:57s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:30 Family-A 225 10.10.0.7 Up 21h:41m:59s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:32 Family-A 225 10.10.0.21 Up 21h:41m:32s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:38 Family-A 225 10.10.0.17 Up 21h:41m:39s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:7c Family-A 225 10.10.0.1 Up 21h:41m:19s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:8a Family-A 225 10.10.0.20 Up 21h:41m:37s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:8c Family-A 225 10.10.0.9 Up 21h:41m:54s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:96 Family-A 225 10.10.0.13 Up 21h:42m:15s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:a4 Family-A 225 10.10.0.4 Up 21h:40m:56s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:b2 Family-A 225 10.10.0.3 Up 21h:44m:7s 192.168.1.245 0.0.0.0
84:d4:7e:c6:56:c0 Family-A 225 10.10.0.10 Up 21h:41m:51s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:7a Family-A 225 10.10.0.22 Up 21h:41m:28s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:92 Family-A 225 10.10.0.23 Up 21h:41m:28s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:96 Family-A 225 10.10.0.24 Up 21h:41m:23s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:b0 Family-A 225 10.10.0.11 Up 21h:41m:51s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:e2 Building-B 225 10.10.0.5 Up 21h:42m:2s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:f0 Building-B 225 10.10.0.14 Up 21h:41m:47s 192.168.1.245 0.0.0.0
84:d4:7e:c6:63:f6 Building-B 225 10.10.0.2 Up 1h:15m:22s 192.168.1.245 0.0.0.0
84:d4:7e:c6:64:00 Building-B 225 10.10.0.6 Up 21h:42m:1s 192.168.1.245 0.0.0.0
84:d4:7e:c6:64:04 Building-B 225 10.10.0.18 Up 21h:41m:37s 192.168.1.245 0.0.0.0
84:d4:7e:c6:64:10 Family-A 225 10.10.0.19 Up 21h:41m:37s 192.168.1.245 0.0.0.0

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
I = Inactive; D = Dirty or no config; E = Regulatory Domain Mismatch
X = Maintenance Mode; P = PPPoE AP; B = Built-in AP; s = LACP striping
R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP;
c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2
u = Custom-Cert RAP; S = Standby-mode AP; J = USB cert at AP
M = Mesh node; Y = Mesh Recovery

Total APs:25

(WLC) #show datapath session table 10.10.0.26

Datapath Session Table Entries
------------------------------

Flags: F - fast age, S - src NAT, N - dest NAT
D - deny, R - redirect, Y - no syn
H - high prio, P - set prio, T - set ToS
C - client, M - mirror, V - VOIP
Q - Real-Time Quality analysis
I - Deep inspect, U - Locally destined
E - Media Deep Inspect, G - media signal
A - Application Firewall Inspect

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
--------------- --------------- ---- ----- ----- ----- ---- --- --- ----------- ---- --------- --------- ---------------

Recently, show datapath session table 10.10.0.26 was showing nothing but now it showing some data but still AP is not showing in controller.

(WLC) #show datapath session table 10.10.0.26

Datapath Session Table Entries
------------------------------

Flags: F - fast age, S - src NAT, N - dest NAT
D - deny, R - redirect, Y - no syn
H - high prio, P - set prio, T - set ToS
C - client, M - mirror, V - VOIP
Q - Real-Time Quality analysis
I - Deep inspect, U - Locally destined
E - Media Deep Inspect, G - media signal
A - Application Firewall Inspect

Source IP Destination IP Prot SPort DPort Cntr Prio ToS Age Destination TAge Packets Bytes Flags
--------------- --------------- ---- ----- ----- ----- ---- --- --- ----------- ---- --------- --------- ---------------
10.10.255.245 10.10.0.26 1 11 2048 0/0 0 0 0 local 2 1 120 FCI
10.10.255.245 10.10.0.26 1 12 2048 0/0 0 0 0 local 2 1 120 FCI
10.10.255.245 10.10.0.26 1 13 2048 0/0 0 0 0 local 2 1 120 FCI
10.10.255.245 10.10.0.26 1 14 2048 0/0 0 0 0 local 2 1 120 FCI
10.10.255.245 10.10.0.26 1 15 2048 0/0 0 0 0 local 2 1 120 FCI
10.10.0.26 10.10.255.245 1 11 0 0/0 0 0 0 local 2 1 120 FI
10.10.0.26 10.10.255.245 1 14 0 0/0 0 0 0 local 2 1 120 FI
10.10.0.26 10.10.255.245 1 15 0 0/0 0 0 0 local 2 1 120 FI
10.10.0.26 10.10.255.245 1 12 0 0/0 0 0 0 local 2 1 120 FI
10.10.0.26 10.10.255.245 1 13 0 0/0 0 0 0 local 2 1 120 FI

The "show datapath session table" is just showing your pings being returned (port 2048).

The "show ap database" is not showing an AP at that ip address, so that means it never registered with the controller.

The problem most likely is your switch not providing enough power to that AP.  What is the configuration on your switchport and what version of Cisco IOS is this?

The ap is connected on port G1/0/2 of cisco 2960S PoE+ switch and IOS version of switch is 12.2. We already implemented the same solution on previous project on the same switch. Following is the output for the switch:

Cisco IOS Software, C2960S Software (C2960S-UNIVERSALK9-M), Version 12.2(55)SE7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Mon 28-Jan-13 10:28 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x01B00000

ROM: Bootstrap program is Alpha board boot loader
BOOTLDR: C2960S Boot Loader (C2960S-HBOOT-M) Version 12.2(55r)SE, RELEASE SOFTWARE (fc1)

Core_SW_Data_RM uptime is 1 day, 16 minutes
System returned to ROM by power-on
System image file is "flash:/c2960s-universalk9-mz.122-55.SE7/c2960s-universalk9-mz.122-55.SE7.bin"

Module Available Used Remaining
(Watts) (Watts) (Watts)
------ --------- -------- ---------
1 370.0 33.7 336.3
Interface Admin Oper Power Device Class Max
(Watts)
--------- ------ ---------- ------- ------------------- ----- ----
Gi1/0/1 auto off 0.0 n/a n/a 30.0
Gi1/0/2 auto on 30.0 Ieee PD 4 30.0
Gi1/0/3 auto off 0.0 n/a n/a 30.0
Gi1/0/4 auto on 3.7 Ieee PD 2 30.0

You are right. The Ap never registered with the controller. The PoE configuration for the port is auto and providing 30W to the switch. LLDP is enabled on the switch. Also changed the switch and port also.

Check to make sure it is not an IAP.  You can look on the box that it came in or you can check it by trying to browse to the IP of the AP.  If a login window comes up, then it's an IAP and you just need to convert it to a campus AP.

Dear clenox.... Thanks for your reply. As per your instructions, yes it is IAP and after converting to AP, it is working fine... I did not checked it before whether it is IAP or AP. Thanks a lot again.