Wireless Access

Dear Experts,

We are seeing all ap's are randomly going into D flag and during that time users are not able to see the signal bars. Also few users are disconnecting from the network.

It happens very frequently to many ap's randomly. If i give show log errorlog all, i could see the below

(controller) # show log errorlog all

Oct 23 10:24:49 <sapd 311020>  <ERRS> |AP AP02@x.x.x.x sapd|  An internal system error has occurred at file sapd_msg.c function sapd_proc_log_config_req line 3832 error sapd_proc_log_config_req: result not OK msg from y.y.y.y:8222 id (phy ip of controller,5629b081,0) size 571 code 2

Oct 23 10:24:50 <sapd 311020>  <ERRS> |AP AP02@x.x.x.x sapd|  An internal system error has occurred at file sapd_msg.c function sapd_proc_log_config_req line 3832 error sapd_proc_log_config_req: result not OK msg from y.y.y.y:8222 id (phy ip,5629bcb9,0) size 571 code 2.

 

Kindly suggest

The D flag suggests a connectivity issue. What version of ArubaOS and what model access point?

7010 and version 6.4.2.9. AP model 225.

Controller is configured with internal dhcp server.

Does the output of "show ap debug counters" show alot of rebootstraps?

 

Does "show log system 100" show any bootstraps?

 

Yes. I could see average of 40-80 bootstraps on all the ap's. Also log system 100 showing "internal system error occured at sapd_msg.c"

The bootstraps typically cause the message.  We need to find out why your access points are rebootstrapping.  What kind of controller and how many access points do you have?  What is the uplink to your controller?  Are there any errors on the controller's interface?

 

only 1 uplink to the switch.

GE 0/0/1 is up, line protocol is up
Hardware is Gigabit Ethernet, address is 
Description: GE0/0/1 (RJ45 Connector)
Encapsulation ARPA, loopback not set
Configured: Duplex ( AUTO ), speed ( AUTO )
Negotiated: Duplex (Full), speed (1000 Mbps)
MTU 1500 bytes, BW is 1000 Mbit
Last clearing of "show interface" counters 16 day 4 hr 53 min 32 sec
link status last changed 16 day 4 hr 51 min 12 sec
238583121 packets input, 141028029406 bytes
Received 15700049 broadcasts, 0 runts, 0 giants, 0 throttles
0 input error bytes, 0 CRC, 0 frame
4989316 multicast, 222883072 unicast
225772022 packets output, 138727656441 bytes

 

we have 2 7010 controllers running in vrrp. and 13 ap's registered to it. i am also finding 1 error that lms ip not responding. lms ip is currently configured for physical ip of the controller. 

You might want to open a TAC case in parallel with this, so they can get your detailed logs and attempt to resolve this.

 

How are your access points powerered?  What kind of switch are they on?  What is the infrastructure between that switch and the controller.

Sure. We are having a POE injector and cisco POE switches for powering the ap's. Between controller and switch, gig speed RJ45 connectivity is there.

What model POE injector and what model Cisco switch?

3501G mid span poe injector and 4948 switch

Are there any messages on the switch to indicate power problems? If not, I would try to see if there is a duplicate address on the network for that lms-ip.

I will check from switch end. Any best way to find out whether ip is duplicated? Thanks in advance.

1 more query. lms-ip should be a physical ip or virtual ip..?

You would have to disconnect the link on the controller and ping the lms-ip. The lms-ip can be virtual or physical.

But sad part is.. we face this issue in multiple locations.. ip cannot be duplicated in all places right.. but 1 relevance is wherever we have 7010 with 6.4.2.9 we face this issue. We recently upgraded to this version. :(

Im having the same error code. 2930 does not indicate duplicate IP address. Also the site is managed by APC, and it has a VC. No physical controller.

 

System info:

VC = RAP325 Version: 6.5.4.5

( This is an AWE Account, Certain information is not permitted to be posted on this site) 

AP is connected to Aruba 2920 Version: WB.16.04.0008

This is the Port Config:

Running configuration:

interface 1/22
poe-allocate-by value
poe-value 33
dhcp-snooping trust
tagged vlan ** Omitted **
untagged vlan 802  <------------ VLAN for AP's
spanning-tree bpdu-protection
loop-protect
arp-protect trust
exit

 

We cannot upgrade FW to higher version. This version is the approved version for the account.

 

We checked for VC-Relection bug - was fixed by turning off all AP's minus 2, failed over to new VC, and power cycled the old VC.

 

This did not seems to resolve the issue either 

 

Is there anything you can suggest or have me check?

 

The original poster has a controller-based solution.  The infrastructure does not seem to match your issue.

I suggest opening a new thread on this for visibility. Your issue is not the same as the original post in this topic, since you're using Instant APs without a controller, different AP model, different version, etc.