ap's status is "denied" ?

[ddipert]

Has anyone ever come across an ap in the ap database that says denied?

#show ap database

AP Database
-----------
Name               Group    AP Type  IP Address     Status  Flags  Switch IP
----               -----    -------  ----------     ------  -----  ---------
00:0b:86:cf:d1:15  default  105      10.20.100.208  Denied         10.20.0.180
00:0b:86:cf:d1:17  default  105      10.20.100.210  Denied         10.20.0.180

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 2=Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Total APs:2

[zjennings]

I am going to guess that has something to do with CPS (Control Plane Security). Do you have CPS enabled?

[ddipert]

Out of the box controller.

All that was done is:

initial config (ip, mask, gw)

licenses installed.
Code upgraded to 6.1.2.5

So no I don't have CPS unless it was turned on by default. 

[zjennings]

Pretty sure it is enabled by default.

[hstonebraker]

If the controller had 6.x code on it from the factory then CPSec IS on by DEFAULT

[ddipert · Accepted solution]

I have fixed the issue.
Cleared the ap from the database. Rebooted the ap.

Up acts normal now.

Ok so in 6.1 CPS is on.

Nope no denied here:

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 2=Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Would be helpful if DEV is going to use a flag to give us an idea what it does.

[jlucas5565]

Agreed.

[cjoseph]

---

@ddipert wrote:

I have fixed the issue.
Cleared the ap from the database. Rebooted the ap.

Up acts normal now.

Ok so in 6.1 CPS is on.

Nope no denied here:

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 2=Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Would be helpful if DEV is going to use a flag to give us an idea what it does.

---

You get much more than a flag.  You get a big denied when an AP is denied:

(host) #show ap database

AP Database
-----------
Name               Group    AP Type  IP Address     Status     Flags  Switch IP
----               -----    -------  ----------     ------     -----  ---------
00:0b:86:66:97:46  default  RAP-5WN  192.168.1.248  Down              192.168.1.3
00:24:6c:c2:97:1b  default  105      192.168.1.240  Down              192.168.1.3
00:24:6c:cb:30:89  default  105      192.168.1.238  Down              192.168.1.3
00:24:6c:cb:30:94  default  105      192.168.1.239  Down              192.168.1.3
00:24:6c:cb:30:ba  default  105      192.168.1.245  Down              192.168.1.3
AP105              default  105      192.168.1.251  Down       M      192.168.1.3
AP135              default  135      192.168.1.251  Up 10m:8s  2      192.168.1.3
d8:c7:c8:c1:66:ab  default  105      192.168.1.242  Down              192.168.1.3
GOC-SHP1-AP125     default  125      192.168.1.243  Denied            192.168.1.3

Flags: U = Unprovisioned; N = Duplicate name; G = No such group; L = Unlicensed
       I = Inactive; H = Using 802.11n license; D = Dirty or no config
       X = Maintenance Mode; P = PPPoE AP; B = Built-in AP
       R = Remote AP; R- = Remote AP requires Auth; C = Cellular RAP; c = CERT-based RAP; 1 = 802.1x authenticated AP; 2 = Using IKE version 2
       M = Mesh node; Y = Mesh Recovery

Total APs:9

[vkumaar]

Hi,

 Denied is not a Flag, it is Status like up or down or upgrading.

[pmonardo]

I had same problem, I disabled CPSec and My APs came back up