Wireless Access

last person joined: 4 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

access point can't find controller

This thread has been viewed 7 times
  • 1.  access point can't find controller

    Posted Dec 30, 2015 12:51 AM

    Hello,

    I have a 650 controller, one AP-115 and another AP-205. The problem is APs are not joining the controller although they see it as master controller, they pull their IPs as well from DHCP.

    I have configured DHCP option 43 and 60, created DNS forward lookup zone entry and plus APs seem to be using ADP..

    However APs still don't join the controller.

    Here is the boot process of one access point.

     

    APBoot 1.5.3.5 (build 43311)
    Built: 2014-04-19 at 02:39:36

    Model: AP-20x
    CPU: BCM53011/15, revision A0
    I2C: ready
    SKU: 2
    OTP: 0xeca01028
    Clock:
    CPU: 800 MHz
    DDR: 533 MHz
    AXI: 400 MHz
    APB: 200 MHz
    PER: 400 MHz
    DRAM: 128 MB
    POST1: memory passed
    SF: Detected MX25L25635E with page size 4 kB, total 32 MB
    Flash: 32 MB
    PCIe0: RC, link up
    dev fn venID devID class rev MBAR0 MBAR1 MBAR2 MBAR3
    00 00 14e4 4360 00002 03 08000004 00000000 00000000 00000000
    PCIe1: RC, link up
    dev fn venID devID class rev MBAR0 MBAR1 MBAR2 MBAR3
    00 00 14e4 4360 00002 03 40000004 00000000 00000000 00000000
    Power: POE
    Net: eth0
    Radio: bcm43460#0, bcm43460#1

    Hit <Enter> to stop autoboot: 0
    apboot> dhcp
    DHCP broadcast 1
    DHCP IP address: 192.168.0.10
    DHCP subnet mask: 255.255.255.0
    DHCP def gateway: 192.168.0.1
    DHCP DNS server: 192.168.0.25
    DHCP DNS domain: homenetwork.lab
    Controller address: 192.168.0.3
    apboot> boot
    Checking image @ 0x1e100000
    Copying image from 0x1e100000

    Image is signed; verifying checksum... passed
    Signer Cert OK
    Policy Cert OK
    RSA signature verified.
    Uncompressing... done
    [ 0.000000]
    [ 0.000000] Aruba Networks
    [ 0.000000] ArubaOS Version 6.4.2.14 (build 52696 / label #52696)
    [ 0.000000] Built by p4build@lesbos on 2015-11-24 at 13:38:46 PST (gcc version 4.7.2)
    [ 0.000000]
    [ 0.000000] Flash variant: variant0
    [ 0.000000] MPCORE found at 19020000, SCTLR 0x10c53c7f ACTLR 0x00000040 CPSR 0x600001d3 SPSR 0x86004
    f61 PRRR 0x000a81a8 NMRR 0x40e040e0
    [ 0.000000] Memory: 128MB = 128MB total
    [ 0.000000] Memory: 120960k/120960k available, 10112k reserved, 0K highmem
    [ 0.052000] hw perfevents: enabled with ARMv7 Cortex-A9 PMU driver, 7 counters available
    [ 3.376000] PMU: registered new PMU device of type 0
    [ 3.882000] pci 0001:00:00.0: BAR 8: assigned [mem 0x08000000-0x080fffff]
    [ 3.884000] pci 0001:01:00.0: BAR 0: assigned [mem 0x08000000-0x08007fff 64bit]
    [ 3.886000] pci 0001:01:00.0: BAR 0: set to [mem 0x08000000-0x08007fff 64bit] (PCI address [0x800000
    0-0x8007fff]
    [ 4.390000] pci 0002:00:00.0: BAR 8: assigned [mem 0x40000000-0x400fffff]
    [ 4.392000] pci 0002:02:00.0: BAR 0: assigned [mem 0x40000000-0x40007fff 64bit]
    [ 4.394000] pci 0002:02:00.0: BAR 0: set to [mem 0x40000000-0x40007fff 64bit] (PCI address [0x400000
    00-0x40007fff]
    [ 4.738000] i2c-springbank: using remapped base c9d92060
    [ 4.740000] mpcore_wdt mpcore_wdt: enabling watchdog.
    [ 4.744000] qspi_iproc qspi_iproc.1: 1-lane output, 3-byte address
    [ 4.748000] m25p80 spi1.0: mx25l25635e (32768 Kbytes)
    [ 4.750000] Creating 1 MTD partitions on "spi1.0":
    [ 4.752000] 0x000000000000-0x000002000000 : "qspi"
    [ 4.756000]
    [ 4.756000] Starting Kernel SHA1 KAT ...Completed Kernel SHA1 KAT
    [ 4.760000] Starting Kernel HMAC-SHA1 KAT ...Completed Kernel HMAC-SHA1 KAT
    [ 4.774000] Starting Kernel DES KAT ...Completed Kernel DES KAT
    [ 4.778000] Starting Kernel AES KAT ...Completed Kernel AES KAT
    [ 4.780000]
    Domain Name: arubanetworks.com
    No panic info available
    [ 6.280000] AP xml model 81, num_radios 2 (jiffies 3140)
    [ 6.282000] init_asap_mod: installation:0
    [ 6.284000] radio 0: band 1 ant 0 max_ssid 16
    [ 6.286000] radio 1: band 0 ant 0 max_ssid 16
    Starting watchdog process...
    Getting an IP address...
    [ 8.684000] ADDRCONF(NETDEV_UP): bond0: link is not ready
    [ 10.688000] bond0: link up (1000FD)
    [ 10.690000] ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
    192.168.0.10 255.255.255.0 192.168.0.1
    Running ADP...Done. Master is 192.168.0.3
    [ 15.378000] wifi0: AP type AP-205, radio 0, max_bssids 16
    [ 15.422000] wifi1: AP type AP-205, radio 1, max_bssids 16
    shutting down watchdog process (nanny will restart it)...

    <<<<< Welcome to the Access Point >>>>>

    ~ #

     

    Please advise.



  • 2.  RE: access point can't find controller
    Best Answer

    EMPLOYEE
    Posted Dec 30, 2015 03:05 AM

    What version is your controller on?

    What do you see in the datapath on the controller? (show datapath session table 192.168.0.10)

    Do you have control-plane-security enabled?

     



  • 3.  RE: access point can't find controller

    EMPLOYEE
    Posted Dec 30, 2015 02:43 PM

    So the 115 requires 6.3.1.0 or greater.

     

    The 205 requires 6.4.1.0 or greater.

     

    You should upgrade the 650 to the latest software in the GA folder and retest this if you are not at the minimum versions noted above.



  • 4.  RE: access point can't find controller

    Posted Dec 30, 2015 07:32 PM

    Michael,

    Version 6.4.3.6

    (aruba-controller) #show datapath session table 192.168.0.18
    Datapath Session Table Entries
    ------------------------------

    Flags: F - fast age, S - src NAT, N - dest NAT
           D - deny, R - redirect, Y - no syn
           H - high prio, P - set prio, T - set ToS
           C - client, M - mirror, V - VOIP
           Q - Real-Time Quality analysis
           I - Deep inspect, U - Locally destined
           E - Media Deep Inspect, G - media signal
           r - Route Nexthop


    Source IP       Destination IP  Prot SPort DPort  Cntr    Prio ToS Age Destination TAge Packets    Bytes      Flags           
    --------------- --------------- ---- ----- ----- -------- ---- --- --- ----------- ---- ---------  --------- ---------------
    192.168.0.18    192.168.0.111   1    17    0      0/0     0    0   0   1/0         e    0          0          FI              
    192.168.0.18    192.168.0.111   1    16    0      0/0     0    0   0   1/0         f    0          0          FI              
    192.168.0.18    192.168.0.111   1    19    0      0/0     0    0   0   1/0         c    0          0          FI              
    192.168.0.18    192.168.0.111   1    18    0      0/0     0    0   0   1/0         d    0          0          FI              
    192.168.0.18    192.168.0.111   1    21    0      0/0     0    0   0   1/0         a    0          0          FI              
    192.168.0.18    192.168.0.111   1    20    0      0/0     0    0   0   1/0         b    0          0          FI              
    192.168.0.18    192.168.0.111   1    23    0      0/0     0    0   0   1/0         8    0          0          FI              
    192.168.0.18    192.168.0.111   1    22    0      0/0     0    0   0   1/0         9    0          0          FI              
    192.168.0.18    192.168.0.111   1    25    0      0/0     0    0   0   1/0         6    0          0          FI              
    192.168.0.18    192.168.0.111   1    24    0      0/0     0    0   0   1/0         7    0          0          FI              
    192.168.0.18    192.168.0.111   1    27    0      0/0     0    0   0   1/0         4    0          0          FI              
    192.168.0.18    192.168.0.111   1    26    0      0/0     0    0   0   1/0         5    0          0          FI              
    192.168.0.18    192.168.0.111   1    29    0      0/0     0    0   0   1/0         2    0          0          FI              
    192.168.0.18    192.168.0.111   1    28    0      0/0     0    0   0   1/0         3    0          0          FI              
    192.168.0.18    192.168.0.111   1    30    0      0/0     0    0   0   1/0         1    0          0          FI              
    192.168.0.18    192.168.0.111   1    81    0      0/0     0    0   1   1/0         d    0          0          FI              
    192.168.0.18    192.168.0.111   1    80    0      0/0     0    0   1   1/0         e    0          0          FI              
    192.168.0.18    192.168.0.111   1    83    0      0/0     0    0   0   1/0         b    0          0          FI              
    192.168.0.18    192.168.0.111   1    82    0      0/0     0    0   0   1/0         c    0          0          FI              
    192.168.0.18    192.168.0.111   1    85    0      0/0     0    0   0   1/0         9    0          0          FI              
    192.168.0.18    192.168.0.111   1    84    0      0/0     0    0   0   1/0         a    0          0          FI              
    192.168.0.18    192.168.0.111   1    87    0      0/0     0    0   0   1/0         7    0          0          FI              
    192.168.0.18    192.168.0.111   1    86    0      0/0     0    0   0   1/0         8    0          0          FI              
    192.168.0.18    192.168.0.111   1    89    0      0/0     0    0   0   1/0         5    0          0          FI              
    192.168.0.18    192.168.0.111   1    88    0      0/0     0    0   0   1/0         6    0          0          FI              
    192.168.0.18    192.168.0.111   1    91    0      0/0     0    0   0   1/0         3    0          0          FI              
    192.168.0.18    192.168.0.111   1    90    0      0/0     0    0   0   1/0         4    0          0          FI              
    192.168.0.18    192.168.0.111   1    93    0      0/0     0    0   0   1/0         1    0          0          FI              
    192.168.0.18    192.168.0.111   1    92    0      0/0     0    0   0   1/0         2    0          0          FI              
    192.168.0.18    192.168.0.111   1    94    0      0/0     0    0   0   1/0         0    0          0          FI              
    192.168.0.18    192.168.0.111   1    69    0      0/0     0    0   1   1/0         19   0          0          FI              
    192.168.0.18    192.168.0.111   1    71    0      0/0     0    0   1   1/0         17   0          0          FI              
    192.168.0.18    192.168.0.111   1    70    0      0/0     0    0   1   1/0         18   0          0          FI              
    192.168.0.18    192.168.0.111   1    73    0      0/0     0    0   1   1/0         15   0          0          FI              
    192.168.0.18    192.168.0.111   1    72    0      0/0     0    0   1   1/0         16   0          0          FI              
    192.168.0.18    192.168.0.111   1    75    0      0/0     0    0   1   1/0         13   0          0          FI              
    192.168.0.18    192.168.0.111   1    74    0      0/0     0    0   1   1/0         14   0          0          FI              
    192.168.0.18    192.168.0.111   1    77    0      0/0     0    0   1   1/0         11   0          0          FI              
    192.168.0.18    192.168.0.111   1    76    0      0/0     0    0   1   1/0         12   0          0          FI              
    192.168.0.18    192.168.0.111   1    79    0      0/0     0    0   1   1/0         f    0          0          FI              
    192.168.0.18    192.168.0.111   1    78    0      0/0     0    0   1   1/0         10   0          0          FI              
    192.168.0.111   192.168.0.18    1    94    2048   0/0     0    0   0   1/0         0    0          0          FCI             
    192.168.0.111   192.168.0.18    1    93    2048   0/0     0    0   0   1/0         1    0          0          FCI             
    192.168.0.111   192.168.0.18    1    92    2048   0/0     0    0   0   1/0         2    0          0          FCI             
    192.168.0.111   192.168.0.18    1    91    2048   0/0     0    0   0   1/0         3    0          0          FCI             
    192.168.0.111   192.168.0.18    1    90    2048   0/0     0    0   0   1/0         4    0          0          FCI             
    192.168.0.111   192.168.0.18    1    89    2048   0/0     0    0   0   1/0         5    0          0          FCI             
    192.168.0.111   192.168.0.18    1    88    2048   0/0     0    0   0   1/0         6    0          0          FCI             
    192.168.0.111   192.168.0.18    1    87    2048   0/0     0    0   0   1/0         7    0          0          FCI             
    192.168.0.111   192.168.0.18    1    86    2048   0/0     0    0   0   1/0         8    0          0          FCI             
    192.168.0.111   192.168.0.18    1    85    2048   0/0     0    0   1   1/0         c    0          0          FCI             
    192.168.0.111   192.168.0.18    1    84    2048   0/0     0    0   1   1/0         d    0          0          FCI             
    192.168.0.111   192.168.0.18    1    83    2048   0/0     0    0   1   1/0         e    0          0          FCI             
    192.168.0.111   192.168.0.18    1    82    2048   0/0     0    0   1   1/0         f    0          0          FCI             
    192.168.0.111   192.168.0.18    1    81    2048   0/0     0    0   1   1/0         10   0          0          FCI             
    192.168.0.111   192.168.0.18    1    80    2048   0/0     0    0   1   1/0         11   0          0          FCI             
    192.168.0.111   192.168.0.18    1    79    2048   0/0     0    0   1   1/0         12   0          0          FCI             
    192.168.0.111   192.168.0.18    1    78    2048   0/0     0    0   1   1/0         13   0          0          FCI             
    192.168.0.111   192.168.0.18    1    77    2048   0/0     0    0   1   1/0         14   0          0          FCI             
    192.168.0.111   192.168.0.18    1    76    2048   0/0     0    0   1   1/0         15   0          0          FCI             
    192.168.0.111   192.168.0.18    1    75    2048   0/0     0    0   1   1/0         16   0          0          FCI             
    192.168.0.111   192.168.0.18    1    74    2048   0/0     0    0   1   1/0         17   0          0          FCI             
    192.168.0.111   192.168.0.18    1    73    2048   0/0     0    0   1   1/0         18   0          0          FCI             
    192.168.0.111   192.168.0.18    1    72    2048   0/0     0    0   1   1/0         19   0          0          FCI             
    192.168.0.111   192.168.0.18    1    71    2048   0/0     0    0   1   1/0         1a   0          0          FCI             
    192.168.0.111   192.168.0.18    1    70    2048   0/0     0    0   1   1/0         1b   0          0          FCI             
    192.168.0.111   192.168.0.18    1    69    2048   0/0     0    0   1   1/0         1c   0          0          FCI             
    192.168.0.111   192.168.0.18    1    97    2048   0/0     0    0   0   1/0         1    0          0          FCI             
    192.168.0.111   192.168.0.18    1    96    2048   0/0     0    0   0   1/0         2    0          0          FCI             
    192.168.0.18    192.168.0.3     17   8211  8211   0/0     0    0   1   1/1         b    0          0          FCI             
    192.168.0.18    192.168.0.3     17   8211  8222   0/0     0    0   1   1/1         b    0          0          FYCI            192.168.0.3     192.168.0.18    17   8211  8211   0/0     0    0   1   1/1         b    0          0          FYI             
    192.168.0.3     192.168.0.18    17   8222  8211   0/0     0    0   1   1/1         b    0          0          FYI    

     

    Actulally data plane security was enabled and when I disabled it AP quickly joined the controller. I understand now it should stay disabled? It was enabled by default after I reset the controller though.

    Thank you!

     

     



  • 5.  RE: access point can't find controller

    EMPLOYEE
    Posted Dec 31, 2015 03:34 AM

    It is enabled by default, but importantly the 'auto-cert-prov' parameter is disabled, which is why your APs didn't automatically join.

    Good to hear you got there in the end.