Aruba AOS 8.4 AP after image receiving con not connect to MC

[Audrius]

Hi do anyone had an issue when AP receive an image from MC but after that it  tries to connect to MC, but MC reject it  am adding all needed info.

I have a cluster of 2x7210 Aruba MCs.

Two test AP: IAP 305 and IAP 205.

Firmware of MC 8.4

Firmware of MM 8.4

APs MACs added to whitelist

CPSEC is disabled

[A_RAK]

What is the last message you see in the ap boot log?

Did you point them to the MC ip?

Note: An MM cannot terminate an AP in a MM-MD topology

[Audrius]

Hi, yes I point them to MC Cluster VRRP VIP

And seems like APs reach them.

[A_RAK]

Could you post the boot log of any one AP here.

[Audrius]

Today I have access only to MC  cluster and MM. Tomorrow I will get AP boot log.

What  possible issue it might be?

[A_RAK]

In that case,

What do you see for port 8211 traffic in the MC's data path session table?

Show datapath session table [ip of ap] | include [ip of MM]

It could be many things. For example, you have mentioned you have two IAPs, IAP should be converted to a CAP first.

Did the IAPs successfully convert to a campus AP in the first place?

Is the AP able to receive an IP address?

Is the PAPI and GRE traffic being seen in the datapath session table?

What do you see in the show datapath session table?

[Audrius · Accepted solution]

Problem was firewall rules.