Controller Based WLANs

Problem:

Out of 1000 APs connected to the Controller, few AP-535s alone were not broadcasting any SSID. The Controller had adequate AP licenses, AP-535s in the network on the same Controller were broadcasting the SSID fine and there were no profile errors, VLAN mismatch, etc. All the APs are were connected to the similar HP switches.

• Looking at the 'show ap database', '2i' flag was seen for the APs that were not broadcasting SSID. 

(HW-Cluster-2) [MDC] #show ap database 

AP Database
-----------
Name    Group  AP Type  IP Address     Status            Flags  Switch IP      Standby IP
----    -----  -------  ----------     ------            -----  ---------      ----------
AP-Desk  11ax   535      10.2.2.1       Up 4d:6h:47m:42s  2     10.1.1.2       10.1.1.3
AP-Dorm  11ax   535      10.2.2.2       Up 5h:48m:20s     2     10.1.1.2       10.1.1.3
AP-Desk2 11ax   535      10.2.2.3       Up 6h:48m:20s     2     10.1.1.2       10.1.1.3
AP-Desk3 11ax   535      10.2.2.4       Up 7h:48m:20s     2     10.1.1.2       10.1.1.3
AP-Desk4 11ax   535      10.2.2.5       Up 5h:21m:20s     2     10.1.1.2       10.1.1.3
AP-Desk5 11ax   535      10.2.2.6       Up 5h:22m:20s     2i    10.1.1.2       10.1.1.3
AP-Desk6 11ax   535      10.2.2.7       Up 5h:23m:20s     2i    10.1.1.2       10.1.1.3
AP-Desk7 11ax   535      10.2.2.8       Up 10h:22m:20s    2i    10.1.1.2       10.1.1.3
AP-Desk8 11ax   535      10.2.2.9       Up 1h:48m:20s     2i    10.1.1.2       10.1.1.3
AP-Desk9 11ax   535      10.2.2.10      Up 48m:20s        2i    10.1.1.2       10.1.1.3

Flags: 1 = 802.1x authenticated AP use EAP-PEAP; 1+ = 802.1x use EST; 1- = 802.1x use factory cert; 2 = Using IKE version 2
       B = Built-in AP; C = Cellular RAP; D = Dirty or no config
       E = Regulatory Domain Mismatch; F = AP failed 802.1x authentication
       G = No such group; I = Inactive; J = USB cert at AP; L = Unlicensed
       M = Mesh node
       N = Duplicate name; P = PPPoe AP; R = Remote AP; R- = Remote AP requires Auth;
       S = Standby-mode AP; U = Unprovisioned; X = Maintenance Mode
       Y = Mesh Recovery
       c = CERT-based RAP; e = Custom EST cert; f = No Spectrum FFT support
       i = Indoor; o = Outdoor; s = LACP striping; u = Custom-Cert RAP; z = Datazone AP
       p = In deep-sleep status
       4 = WiFi Uplink
       r = Power Restricted; T = Thermal ShutDown

Total APs:10

• When checking "ap debug system-status logs", it was found the APs with '2i' flag was not getting enough power(AT) or failed to negotiate LLDP power. 

(HW-Cluster-2) [MDC] #show ap debug  system-status ap-name AP-Desk5
Boot Version
------------
2.5.3.9 (74519)
---------------
Power Status
------------
Item                        Value
----                        -----
Power Supply                : POE-AF
LLDP Power                  : 0.0W
Current Operational State   : 1 ETH port disabled; USB power disabled;  All Radios Disabled
Eth0 HW POE status          : POE AF, LLDP power: 0.0W
Eth1 HW POE status          : NONE
POE Mode                    : Shared

• For the working APs, confirmed they were receiving adequate power: 

(HW-Cluster-2) [MDC] #show ap debug  system-status ap-name AP-Dorm
Boot Version
------------
2.5.3.9 (74519)
---------------
Power Status
------------
Item                        Value
----                        -----
Power Supply                : POE-AT
LLDP Power                  : Successfully negotiated at 23.3W
Current Operational State   : 1 ETH port disabled; USB power disabled;  (Overridden by LLDP)
Eth0 HW POE status          : POE AF, LLDP power: 23.3W
Eth1 HW POE status          : NONE, LLDP power: 0.0W
POE Mode                    : Shared

• To resolve such issue, ensure the switch to which the APs are connected supports POE+ power.
• In other words, the switch must be POE-AT complaint and POE+ must be enabled in the switch configuration as needed.
• If the APs are powered up using POE injector, ensure it provides POE+ power. 
• AP can also be operated under DC or 802.3at/802.3bt. 

APs that were seen with 2i started operating fine after receiving AT power.

(HW-Cluster-2) [MDC] #show ap database 

AP Database
-----------
Name    Group  AP Type  IP Address     Status            Flags  Switch IP      Standby IP
----    -----  -------  ----------     ------            -----  ---------      ----------
AP-Desk  11ax   535      10.2.2.1       Up 4d:6h:47m:42s  2     10.1.1.2       10.1.1.3
AP-Dorm  11ax   535      10.2.2.2       Up 5h:48m:20s     2     10.1.1.2       10.1.1.3
AP-Desk2 11ax   535      10.2.2.3       Up 6h:48m:20s     2     10.1.1.2       10.1.1.3
AP-Desk3 11ax   535      10.2.2.4       Up 7h:48m:20s     2     10.1.1.2       10.1.1.3
AP-Desk4 11ax   535      10.2.2.5       Up 5h:21m:20s     2     10.1.1.2       10.1.1.3
AP-Desk5 11ax   535      10.2.2.6       Up 22m:20s        2     10.1.1.2       10.1.1.3
AP-Desk6 11ax   535      10.2.2.7       Up 23m:20s        2     10.1.1.2       10.1.1.3
AP-Desk7 11ax   535      10.2.2.8       Up 22m:20s        2     10.1.1.2       10.1.1.3
AP-Desk8 11ax   535      10.2.2.9       Up 48m:20s        2     10.1.1.2       10.1.1.3
AP-Desk9 11ax   535      10.2.2.10      Up  8m:20s        2     10.1.1.2       10.1.1.3

Flags: 1 = 802.1x authenticated AP use EAP-PEAP; 1+ = 802.1x use EST; 1- = 802.1x use factory cert; 2 = Using IKE version 2
       B = Built-in AP; C = Cellular RAP; D = Dirty or no config
       E = Regulatory Domain Mismatch; F = AP failed 802.1x authentication
       G = No such group; I = Inactive; J = USB cert at AP; L = Unlicensed
       M = Mesh node
       N = Duplicate name; P = PPPoe AP; R = Remote AP; R- = Remote AP requires Auth;
       S = Standby-mode AP; U = Unprovisioned; X = Maintenance Mode
       Y = Mesh Recovery
       c = CERT-based RAP; e = Custom EST cert; f = No Spectrum FFT support
       i = Indoor; o = Outdoor; s = LACP striping; u = Custom-Cert RAP; z = Datazone AP
       p = In deep-sleep status
       4 = WiFi Uplink
       r = Power Restricted; T = Thermal ShutDown

Total APs:10

(HW-Cluster-2) [MDC] #show ap active               

Active AP Table
---------------
Name    Group  IP Address     AP Type    Flags       Uptime         Outer IP  Cluster Role  Radio 0 Band Ch/EIRP/MaxEIRP/Clients      Radio 1 Band Ch/EIRP/MaxEIRP/Clients  
----    -----  ----------     -------    -----      ------         --------  ------------  ------------------------------------     ------------------------------------  

AP-Desk  11ax   10.2.2.1        535      pA2aK     6h:11m:52s       N/A       A          AP:5GHz-165/15.0/27.5/0                      AP:2.4GHz-6/7.0/25.9/0                
AP-Dorm  11ax   10.2.2.2        535      A2aKf     5h:4m:20s        N/A       A          AP:5GHz-36/15.0/31.7/0                       AP:2.4GHz-11/7.0/25.2/0
AP-Desk2 11ax   10.2.2.3        535      A2aKf     5h:2m:20s        N/A       A          AP:5GHz-48/15.0/31.7/0                       AP:2.4GHz-6/7.0/25.2/0
AP-Desk3 11ax   10.2.2.4        535      A2aKf     5h:8m:20s        N/A       A          AP:5GHz-110/15.0/31.7/0                      AP:2.4GHz-1/7.0/25.2/0
AP-Desk4 11ax   10.2.2.5        535      A2aKf     5h:18m:20s       N/A       A          AP:5GHz-152/15.0/31.7/0                      AP:2.4GHz-1/7.0/25.2/0
AP-Desk5 11ax   10.2.2.6        535      A2aKf     8m:20s           N/A       A          AP:5GHz-161/15.0/31.7/0                      AP:2.4GHz-6/7.0/25.2/0
AP-Desk6 11ax   10.2.2.7        535      A2aKf     2m:20s           N/A       A          AP:5GHz-24/15.0/31.7/0                       AP:2.4GHz-11/7.0/25.2/0
AP-Desk7 11ax   10.2.2.8        535      A2aKf     2m:20s           N/A       A          AP:5GHz-110/15.0/31.7/0                      AP:2.4GHz-1/7.0/25.2/0
AP-Desk8 11ax   10.2.2.9        535      A2aKf     3m:20s           N/A       A          AP:5GHz-24/15.0/31.7/0                       AP:2.4GHz-11/7.0/25.2/0
AP-Desk9 11ax   10.2.2.10       535      A2aKf     1m:20s           N/A       A          AP:5GHz-64/15.0/31.7/0                       AP:2.4GHz-6/7.0/25.2/0