RAPs have started losing connection to controller
01-08-2019 02:08 PM
Just today, after months of working succesfully the RAPs on one of our sites have randomly started dropping and losing connection to the controller.
This has happened to 3 of them today on two seperate occasions and what i have noticed is that they appear to come back online after 1 hour which is very strange. This is the omnivista events for the 1 of the 3 APS but they are all identical except for the unique values such as name and IP.
You can see that the AP comes back online after almost exactly 1 hour - if it is not creating the tunnel is there something in the RAP that forces it to reboot after an hour?
TIME USER EVENT
|Tue Jan 8 21:39:37 2019||System||Tunnel IP changed from 192.168.35.68 to 192.168.35.70.|
|Tue Jan 8 21:30:23 2019||System||Configuration verification succeeded; configuration is good|
|Tue Jan 8 21:30:06 2019||System||Status changed to 'OK'|
|Tue Jan 8 21:30:06 2019||System||Up|
|Tue Jan 8 21:30:06 2019||System||Device Up: Device: Birmingham-AP07-23365: All device types (Major)|
|Tue Jan 8 21:30:05 2019||System||Device rebooted while marked as down: Device uptime value changed (current: 6 mins 16 secs, calculated: 5 hrs 22 mins 30 secs) and |
Change in number of reboots detected (got 3, expected 2)
|Tue Jan 8 20:35:07 2019||System||Device Down: Device: Birmingham-AP07-23365: Minutes Down Threshold >= 5 minutes (Major)|
|Tue Jan 8 20:30:03 2019||System||Status changed to 'AP is no longer associated with controller'|
|Tue Jan 8 20:30:03 2019||System||Down|
|Tue Jan 8 20:30:03 2019||System||Device Down: Device: Birmingham-AP07-23365: All device types (Major)|
Re: RAPs have started losing connection to controller
01-09-2019 12:12 AM
This sounds like an issue I was seeing with some RAPs. It turned out to be that the uplink they were using was blocking or destroying the IPSEC rekey packets. So when the RAP booted, tunnel was established and everything was fine and then the rekeys didn´t work so when the lifetime of the tunnel died, so did the RAP. There´s a counter of IPSEC retries configurable where the RAP will sit an try to reestablish the IPSEC and that takes an exact amount of time if it doesn´t work, if it fails the configured amount of times it will reboot.
1. Is this affecting all RAPs on a specific site?
2. Is the behaviour consistent? = same amount of time up, same amount of time down, repeat?
3. Do you have other sites with RAPs that are working fine?
Aruba Partner Ambassador
Aruba: ACMX #537 ACCP ACDP | CWNP: CWNE #306