Were any changes made on the controller prior to this incident?
vlans, IP etc?
Check the audit trail on the controller to see if any command was issued during that time - show audit trail.
check the logs for heartbeat missed between the APs and controller. Also take a look at the security logs for any events during that time range.
no paging
show log security 100
show log network 100
show log all
Have this information exported to a text file for easier analysis by logging your cli session.
--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.
--Problem Solved? Click "Accepted Solution" in a post.