Wireless Access

Dear all 

SSID disappears and after some minutes it appears again

my network Contains the following

Aruba MOBILITY CONTROLLER 7030 version 8.7.0.0-FIPS

28 IAP 305

The configuration file in attach

Attachment(s)

WLC.txt   41 KB 1 version

What device are you observing the SSID with?

All kinds of devices (mobile devices, smart tv & laptops)

I would ssh into the ap with the problem and type "show log system".

EDIT:  That would give you and idea if the AP is having a system issue.

I am trying to access AP via SSH and failed at the end

AP request password I write the password and never access 

I change the password via CLI:-

ap system-profile "default"

ap-console-password 

Nevertheless, I could not access AP via ssh

I apologize.  Since this is a controller-based system, SSH into the MD/Controller that the APS are terminated on and type "show log system 50" to see if there are any problems with access points..

No need to apologize
Thank you for your help

show log system in the attached file 

I read the log file and I didn't see anything wrong

Please read the log file if you see anything wrong. He told me what is wrong

Attachment(s)

show log system all.txt   26 KB 1 version

Try disabling 802.11h, 802.11r and make the basic rates 1,2 and return the transmit rates and the beacon rates in the SSID to default (1,2,6,9,11,12,18,24,36,48,54).

It is possible that your clients or the access point has a problem with a combination of those parameters in the SSID profile.  Returning all of those parameters to their defaults would rule out those situations.

How often does the SSID disappear?

Thanks for his help

This already disabled (802.11r ) happened

I will try and get back to you

How often does the SSID disappear?

Too much that happens

I mean how long does the outage last and how often does it happen?

I mean how long does the outage last and how often does it happen?

This occurs more than once in a day
The outage lasts from two minutes to 10 minutes
Note APs very hot

Do all the SSIDs disappear or only one of them?

All SSIDs

How are you powering these access points?  What kind of switch?

Also, do you have the output of "show ap database"?

2 Aruba 2540 

the switch providing power to APs 

(WLC) [mynode] #show ap database

AP Database

-----------

Name               Group    AP Type  IP Address     Status              Flags  Switch IP      Standby IP

----               -----    -------  ----------     ------              -----  ---------      ----------

e5:08  default  305      x.x.x.226  Up 15d:2h:33m:29s   2      y.y.y.y0.0.0.0

e9:10  default  305      x.x.x.225  Up 15d:9h:1m:37s    2      y.y.y.y0.0.0.0

e9:5e  default  305      x.x.x.224  Up 15d:10h:11m:37s  2      y.y.y.y0.0.0.0

f0:f2  default  305      x.x.x.222  Up 15d:12h:27m:23s  2      y.y.y.y0.0.0.0

f1:26  default  305      x.x.x.207  Up 15d:9h:52m:29s   2      y.y.y.y0.0.0.0

f4:ce  default  305      x.x.x.220  Up 15d:2h:22m:38s   2      y.y.y.y0.0.0.0

f5:d4  default  305      x.x.x.228  Up 15d:11h:7m:1s    2      y.y.y.y0.0.0.0

f6:b2  default  305      x.x.x.221  Up 15d:2h:22m:36s   2      y.y.y.y0.0.0.0

Bar-Room           default  305      x.x.x.218  Up 1d:18h:39m:0s    2      y.y.y.y0.0.0.0

Buffet             default  305      x.x.x.219  Up 15d:2h:53m:26s   2      y.y.y.y0.0.0.0

coiffure           default  305      x.x.x.201  Up 1d:18h:39m:1s    2      y.y.y.y0.0.0.0

G-Office           default  305      x.x.x.217  Up 1d:18h:38m:59s   2      y.y.y.y0.0.0.0

Guest-Area         default  305      x.x.x.216  Up 1d:18h:38m:59s   2      y.y.y.y0.0.0.0

Lounge-Area        default  305      x.x.x.215  Up 1d:18h:38m:59s   2      y.y.y.y0.0.0.0

Massage            default  305      x.x.x.227  Up 1d:18h:39m:1s    2      y.y.y.y0.0.0.0

Master-Living      default  305      x.x.x.214  Up 15d:2h:15m:24s   2      y.y.y.y0.0.0.0

Moroccan-Area      default  305      x.x.x.213  Up 1d:18h:39m:1s    2      y.y.y.y0.0.0.0

Mr. Hamdy          default  305      x.x.x.212  Up 15d:12h:27m:20s  2      y.y.y.y0.0.0.0

Mrs. Rania Office  default  305      x.x.x.211  Up 15d:9h:2m:37s    2      y.y.y.y0.0.0.0

Parking            default  305      x.x.x.202  Up 15d:12h:27m:22s  2      y.y.y.y0.0.0.0

Pool1              default  365      x.x.x.205  Up 14d:11h:16m:24s  2      y.y.y.y0.0.0.0

Port7              default  305      x.x.x.223  Down                2      y.y.y.y0.0.0.0

Room-1             default  305      x.x.x.210  Up 1d:18h:39m:1s    2      y.y.y.y0.0.0.0

Room-2             default  305      x.x.x.208  Up 1d:18h:39m:18s   2      y.y.y.y0.0.0.0

Room-3             default  305      x.x.x.209  Up 1d:18h:39m:1s    2      y.y.y.y0.0.0.0

Room-4             default  305      x.x.x.206  Up 1d:18h:39m:1s    2      y.y.y.y0.0.0.0

Room-5             default  305      x.x.x.204  Up 1d:18h:39m:0s    2      y.y.y.y0.0.0.0

Room-6             default  305      x.x.x.203  Up 1d:18h:39m:17s   2      y.y.y.y0.0.0.0

Flags: 1 = 802.1x authenticated AP use EAP-PEAP; 1+ = 802.1x use EST; 1- = 802.1x use factory cert; 2 = Using IKE version 2

       B = Built-in AP; C = Cellular RAP; D = Dirty or no config

       E = Regulatory Domain Mismatch; F = AP failed 802.1x authentication

       G = No such group; I = Inactive; J = USB cert at AP; L = Unlicensed

       M = Mesh node

       N = Duplicate name; P = PPPoe AP; R = Remote AP; R- = Remote AP requires Auth;

       S = Standby-mode AP; U = Unprovisioned; X = Maintenance Mode

       Y = Mesh Recovery

       c = CERT-based RAP; e = Custom EST cert; f = No Spectrum FFT support

       i = Indoor; o = Outdoor; s = LACP striping; u = Custom-Cert RAP; z = Datazone AP

       p = In deep-sleep status; m = Protocol Mismatch

       4 = WiFi Uplink

       r = Power Restricted; T = Thermal ShutDown; t = Temperature Restricted

Total APs:28

Apologies if this has been asked already but are you able to provide the below output from an AP that is showing the problem?

#show ap debug system-status ap-name [AP NAME]

Do you have any packet loss from the Controller to the AP? If there is packet loss, heartbeats are lost which causes the AP to rebootstrap thus the radios go down for a short period of time. You'd see this in the logs too if it was an issue.

Dear Craig Syme

show ap debug system-status ap-name in the attached file from same APs in my network 

Please read the debug file and tell me what to do?

Attachment(s)

show ap debug system-status ap-name.txt   14 KB 1 version

It looks like you have some DFS channels enabled:

ap regulatory-domain-profile "default"
    country-code EG
    valid-11g-channel 1
    valid-11g-channel 6
    valid-11g-channel 11
    valid-11a-channel 36
    valid-11a-channel 40
    valid-11a-channel 44
    valid-11a-channel 48
    valid-11a-channel 52
    valid-11a-channel 56
    valid-11a-channel 60                           
    valid-11a-channel 64
    valid-11a-channel 149
    valid-11a-channel 153
    valid-11a-channel 157
    valid-11a-channel 161
    valid-11a-channel 165

I would check the "show log wireless all" log and see if there are any radar events observed.  That would force an AP to another channel, but that AP would have to wait 10 minutes.  The behavior when an AP encounters radar is here:  https://community.arubanetworks.com/t5/ArubaOS-and-Controllers/CAC-period-warnings/td-p/12608/page/2

Dear cjoseph

show log wireless all in the attached file 

Please read the log file and tell me what to do?

Attachment(s)

show log wireless all.txt   127 KB 1 version

You have alot of channel changes.

Why did you change the ARM defaults?

   no 80MHz-support
    min-tx-power 12
    max-tx-power 18
    backoff-time 1800
    error-rate-threshold 80                         
    error-rate-wait-time 900
    channel-quality-aware-arm
    channel-quality-threshold 50
    channel-quality-wait-time 900
    cm-band-g-max-signal 10

If I could give you any advice it is to go to 20mhz channels by 

setting the "40MHz-allowed-bands" setting in the ARM profile to "none" so that you can avoid interference.   

Dear cjoseph

you want me to change in 5GHz 

rf arm-profile "profile-a"
40MHz-allowed-bands None

Why did you change the ARM defaults?

This occurs wrong

!
rf arm-profile "DARABDULLAH-a"
 40MHz-allowed-bands None
! 

Dear cjoseph:-

I will try and get back to you

Also check for no packet loss, the AP has rebooted due to Missed Heartbeats

WLC) [mynode] #show ap debug system-status ap-name f5:d4

Reboot Information
------------------
AP rebooted Tue Jul 7 13:59:58 EET 2020; Unable to set up IPSec tunnel, Error:Missed heartbeats
-----------------------------------------------------------------------------------------------

Rebootstrap Information
-----------------------
Date       Time     PID   ZoneID           Current LMS       Next LMS       Last Recv Msg           Last Send Msg           Reason (Latest 10)
----------------------------------------------------------------------------------------------------------------------------------------------
2020-07-07 16:55:39 3230  zone0  x.x.x.x    x.x.x.x    ESSID_LIST           KEEPALIVE            Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=10292 Sent=0 Rcvd=10284; eth Sent=10280 Drop=0; gre Sent=10292 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-07 16:58:31 3230  zone0  x.x.x.x    x.x.x.x    HELLO                STATUS_REPORT        Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=80 Sent=0 Rcvd=72; eth Sent=10354 Drop=0; gre Sent=10372 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-07 16:59:45 3230  zone0  x.x.x.x    x.x.x.x    REG_DOM_INFO         STATUS_REPORT        Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=63 Sent=0 Rcvd=55; eth Sent=10407 Drop=0; gre Sent=10435 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-07 17:01:28 3230  zone0  x.x.x.x    x.x.x.x    CONFIG               STATUS_REPORT        Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=91 Sent=0 Rcvd=82; eth Sent=10487 Drop=0; gre Sent=10526 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-08 01:02:17 3230  zone0  x.x.x.x    x.x.x.x    CONFIG               STATUS_REPORT        Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=28774 Sent=0 Rcvd=28766; eth Sent=39256 Drop=0; gre Sent=39301 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-10 07:40:08 3230  zone0  x.x.x.x    x.x.x.x    CONFIG               KEEPALIVE            Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=64938 Sent=0 Rcvd=64930; eth Sent=235267 Drop=0; gre Sent=235312 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-21 06:07:44 3230  zone0  x.x.x.x    x.x.x.x    CONFIG               KEEPALIVE            Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=25194 Sent=0 Rcvd=25186; eth Sent=1177938 Drop=0; gre Sent=1178011 Drop=0 First=1; ipsec Sent=0 Drop=0.
2020-07-21 06:27:05 3230  zone0  x.x.x.x    x.x.x.x    CONFIG               KEEPALIVE            Switching to LMS x.x.x.x: Missed heartbeats: Last Sequence Generated=883 Sent=0 Rcvd=874; eth Sent=1178821 Drop=0; gre Sent=1178894 Drop=0 First=1; ipsec Sent=0 Drop=0.
-----------------------------------------------------------------------------

Dear Craig Syme

How does this check packet loss?

I would honestly open a technical support case in parallel with this post so that they can get to the bottom of this.  Without obtaining detailed logs, it might not be possible to solve this in an open forum.

Dear joseph:-
When I try to open a support case, this message displays an error
We are unable to load your profile, please contact Aruba Support to log a case