Wireless Access

Hi guys,

 

I have put a CAP in an AP group to join it with its local controller. After clicking on Apply and Reboot button, I see the AP in in unprovisioned state in the master controller:

I have cloned an AP group, deleted a SSID and changed the LMS IP with the new local controller IP address.

I have run "show log system 50" and I see things like these:

 

Apr 30 15:35:37 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "admin-ate-vap_prof" is invalid.
Apr 30 15:35:37 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "academ-ate-vap_prof" is invalid.

.

.

.

Apr 30 16:07:29 :303022: <WARN> |AP AP_CIX_140@131.120.117.140 nanny| Reboot Reason: AP rebooted Mon Apr 30 16:05:57 PST 2018; SAPD: Rebooting after provisioning
Apr 30 16:08:05 :305024: <3992> <WARN> |stm| AP AP_CIX_140: Group "GRP_IFB_CIX_02" does not exist.
Apr 30 16:08:05 :305038: <3992> <WARN> |stm| No available license for AP AP_CIX_140
Apr 30 16:08:06 :399803: <3992> <ERRS> |stm| An internal system error has occurred at file sapm_ap_mgmt.c function sapm_get_country_index line 8202 error AP AP_CIX_140 regulatory domain not available ap_group GRP_IFB_CIX_02 ap_name N/A.

 

I am very new with controllers so I don't know if the problem if with the group itself or with licenses. The controllers have Centralized Licensing enabled and enough licenses, when I check the local controller:

On the one hand I see "License available=3849" but on the other hand I see "Remaining AP Capacity=0". Is this the problem or something with the AP group? Please help me!

 

Regards,

Julián

 

Hi guys,

 

If the problem has to do with this:

 

Apr 30 16:08:05 :305024: <3992> <WARN> |stm| AP AP_CIX_140: Group "GRP_IFB_CIX_02" does not exist.

 

I have checked in the local controller and that group indeed doesn't exist. But when I created the group in the master controller, doesn't the group and configuration sync with the local controller? Do I have to create the same group in the local controller?

 

Regards,

Julián

Hi,

 

I also attach the output of "show log system 50".

 

Regards,

Julián

You should SSH  into that controller and type "show ap-group".  If it is not there, you should do a "write mem" or save configuration on the master controller so that it gets pushed to the local.

 

"show swiches" on the master will tell you if the configuration is synched between the master and the local.

Hi Colin,

I have just seen your other post where you say the same:

http://community.arubanetworks.com/t5/Wireless-Access/Master-Push-to-Local-Controllers/td-p/71900

Thank you very much,
Julián

Hi,

It seems I have to click on "Save Configuration" as well. I will try tomorrow...

http://community.arubanetworks.com/t5/Wireless-Access/Master-Push-to-Local-Controllers/td-p/71900

Regards,
Julián

---

@fjulianomwrote:
It seems I have to click on "Save Configuration" as well. I will try tomorrow...

http://community.arubanetworks.com/t5/Wireless-Access/Master-Push-to-Local-Controllers/td-p/71900

---

 

If I had $1 for every time I forgot to save changes on the Master to get a config pushed down to the Locals ... :)

 

That is probably your issue, but please confirm when you're able to test.

Hi Colin and Charlie,

 

Although "show switches" showed all the controllers were in sync, the local controllers lack of the new AP group:

 

(WLCPRI_P201) #show switches

All Switches
------------
IP Address Name Location Type Model Version Status Configuration State Config Sync Time (sec) Config ID
---------- ---- -------- ---- ----- ------- ------ ------------------- ---------------------- ---------
131.119.117.244 WLCPRI_P201 Building1.floor1 master Aruba7205 6.5.3.3_61785 up UPDATE SUCCESSFUL 0 97
10.100.10.100 WLC_PRC_P3 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 1 97
10.121.10.4 WLCSJ2_P101 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 2 97
10.125.10.99 WLC_NORTE_P1 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 2 97
10.130.10.100 WLC_OLI_P4 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 2 97
10.136.10.4 WLCATE_P201 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 2 97
131.110.117.100 WLC_AREQUIPA_P1 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 15 97
131.120.117.100 WLC_CHICLAYO_P1 Building1.floor1 local Aruba7030 6.5.3.3_61785 up UPDATE SUCCESSFUL 2 97

Total Switches:8

(WLCPRI_P201) #

 

After saving the configuration in the master, all the local controllers take the new AP group! And the CAP is no longer unprovisioned. So far it is OK.

But now, I don't see the CAP in the local controller yet, and the local controller shows this:

 

May 2 09:00:30 KERNEL(AP_CIX_140@131.120.117.140): [145230.856143] Resetting spectral chainmask to Rx chainmask
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "academ-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "visitantes-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "admin-ate-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "academ-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "visitantes-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "admin-ate-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "academ-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "visitantes-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "admin-ate-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "academ-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "visitantes-sjl-vap_prof" is invalid.
May 2 09:00:41 :305004: <3992> <ERRS> |stm| AP AP_CIX_140: wlan virtual-ap "admin-ate-vap_prof" is invalid.
May 2 09:02:55 :326085: <WARN> |AP AP_CIX_140@131.120.117.140 sapd| AM: Setting collection of statistics to : enabled
May 2 09:05:12 KERNEL(AP_117@131.120.117.117): RESTARTING ALL TX

 

Why the virtual-ap are invalid if the AP group was cloned from a functional AP group? Those virtual-ap are in use in other CAPs.

 

Regards,

Julián

Looks like you may not have the VLAN configured in the local controller ?

Sent from Mail for Windows 10

Also run the following to sanity check your config and see if there is any missing elements:

 

#show profile-errors

Hi Victor and zailon0,

 

That's was the problem:

 

(WLC_CHICLAYO_P1) #show profile-errors

Invalid Profiles
----------------
Profile Error
------- -----
wlan virtual-ap "academ-ate-vap_prof" Named VLAN "VPool_IFBAcad" is not mapped
wlan virtual-ap "academ-sjl-vap_prof" Named VLAN "VPool_IFBAcad" is not mapped
wlan virtual-ap "admin-ate-vap_prof" Named VLAN "Vpool_IFBAdmin" is not mapped
wlan virtual-ap "admin-sjl-vap_prof" Named VLAN "Vpool_IFBAdmin" is not mapped
wlan virtual-ap "alumnos-Ate-vap_prof" VLAN 92 does not exist
wlan virtual-ap "alumnos-sjl-vap_prof" Named VLAN "VPool_IFBAcad" is not mapped
wlan virtual-ap "atelab7a-ate-vap_prof" VLAN 717 does not exist
wlan virtual-ap "atelab7b-ate-vap_prof" VLAN 718 does not exist
wlan virtual-ap "CERTUS-DIRECTORIO-vap_prof" VLAN 202 does not exist
wlan virtual-ap "CERTUS-EVIRTUAL-vap_prof" VLAN 683 does not exist
wlan virtual-ap "CERTUS-LAB07-vap_prof" VLAN 717 does not exist
wlan virtual-ap "CERTUS-LABE2_01-vap_prof" VLAN 721 does not exist
wlan virtual-ap "CERTUS-LABE2_02-vap_prof" VLAN 722 does not exist
wlan virtual-ap "CERTUS-LABE2_03-vap_prof" VLAN 723 does not exist
wlan virtual-ap "CERTUS_AUDIT-vap_prof" VLAN 682 does not exist
wlan virtual-ap "IFBCORP-vap_prof" VLAN 299 does not exist
wlan virtual-ap "IFBDIR-vap_prof" VLAN 201 does not exist
wlan virtual-ap "IFBINV-vap_prof" VLAN 202 does not exist
wlan virtual-ap "IFBLAB01-vap_prof" VLAN 721 does not exist
wlan virtual-ap "IFBLAB02-vap_prof" VLAN 722 does not exist
wlan virtual-ap "IFBLAB03-vap_prof" VLAN 723 does not exist
wlan virtual-ap "IFBMKT-vap_prof" VLAN 507 does not exist
wlan virtual-ap "lb3b1-sjl-vap_prf" VLAN 723 does not exist
wlan virtual-ap "lb3b2-sjl-vap_prof" VLAN 724 does not exist
wlan virtual-ap "lb4b1-sjl-vap_prof" VLAN 725 does not exist
wlan virtual-ap "lb4b2-sjl-vap_prof" VLAN 726 does not exist
wlan virtual-ap "lb5b1-sjl-vap_prof" VLAN 727 does not exist
wlan virtual-ap "lb5b2-sjl-vap_prof" VLAN 728 does not exist
wlan virtual-ap "lb6b1-sjl-vap_prof" VLAN 729 does not exist
wlan virtual-ap "lb6b2-sjl-vap_prof" VLAN 730 does not exist
wlan virtual-ap "lb7b1-sjl-vap_prof" VLAN 731 does not exist
wlan virtual-ap "lb7b2-sjl-vap_prof" VLAN 732 does not exist
wlan virtual-ap "lb8b1-sjl-vap_prof" VLAN 733 does not exist
wlan virtual-ap "lb8b2-sjl-vap_prof" VLAN 734 does not exist
wlan virtual-ap "NORTE_LAB07-vap_prof" VLAN 717 does not exist
wlan virtual-ap "NORTE_LAB08-vap_prof" VLAN 718 does not exist
wlan virtual-ap "OLI-MODULOS-vap_prof" VLAN 702 does not exist
wlan virtual-ap "prn-ate_vap_prof" VLAN 601 does not exist
wlan virtual-ap "SSID_Prueba-vap_prof" VLAN 682 does not exist
wlan virtual-ap "vap_Docentes-Lab" Named VLAN "Vpool_IFBAdmin" is not mapped
wlan virtual-ap "vapAte_Docente-Lab" VLAN 92 does not exist
wlan virtual-ap "wifiIFB-vap_prof" VLAN 92 does not exist

(WLC_CHICLAYO_P1) #

 

I thought the VLAN is another element is sync between controllers, but it seems I was wrong and it is a local element. I am going to create them and be back here if some problem persists. All your help is very valuable for a controller novice.

 

Regards,

Julián

VLANs , Syslog , SNMP , logging , Internal DHCP are not pushed from the Master those have to be configured locally in AOS 6.x

If you go to AOS 8 with the Mobility Master then all that configuration will be pushed from the Mobility Master to the Mobility Controllers (Locals)




Sent from Mail for Windows 10

Hi guys,

 

After creating the VLANs the Admin and Operation state are N/A:

Is this OK?

 

Regards,

Julián

Is GE0/0/0 up? Or better yet, should the VLANs be mapped to a physical interface, or are they used internally within the controller only ... with the controller routing those VLANs out to a physical interface?

Hi Charlie,

 

The GE0/0/0 is up, the VLANs should be mapped to this port. And the controller should route the traffic out GE0/0/0 with those VLAN tags. There are other VLANs created on the controller with those states as enabled and up:

Regards,

Julián

Great. Re-running the command "show profile-errors" should show the config is good, based on the output you provided earlier.

Yes, the command "show profile-errors" doesn't show errors for those VLANs, the VLANs I have just created, but they are still with Admin and Operation status as N/A.

 

Regards,

Julián

I don't think you'll see those VLANs go up/up until there's a user connected.

Hi Charlie,

 

It is strange because now there are users connected but the VLANs are still as N/A.

 

Regards,

Julián

Are the users working correctly, and are they mapped to the VLAN(s) in question? 

Hi Charlie,

 

I checked and users were connected to the AP, but not working properly. I think those VLANs were not created in the switched network. After assigning the SSIDs to another working VLANs the users started working properly and these new VLANs are Enabled and up. Thanks very much for your help.

 

Regards,

Julián