How to check the reason why the AP is rejected from going online.

How to check the reason why the AP is rejected from going online.

When the link is normal and the AC hasreceived the packet from the AP but the capwap tunnel cannot be establishedbetween the AP and the AC, run the

show ap-config summary deny-apcommand to display the specific cause or in combination with the logs displayedon the AC.

Ruijie#show ap-config summary deny-ap

Deny ap num: 1

Mac Address    AP Name                                Reason         

------------------------------------------------------ -----------------

1414.4b71.98a1                                        By conflict  

By bind-ap-mac          //The AP-MAC binding is rejected. The MAC whitelist bind-ap-mac isenabled on the AC but the MAC of this AP does not exist in ap-config.

By wtp-limit            //Indicates that the maximum number of online APs has reached. Acommon cause is that the license is insufficient or the maximum number ofonline APs has reached. It is rarely caused by the wtp-limit configuration.

By conflict             //Indicates that the AP name conflicts with the MAC name.It is because the AP name has already existed on the AC or other APs of thisMAC are online or configured.

By deny-flag            //The AC denies the AP to join it. A common cause is thatdeny-join is configured during networking and debugging.

By ap-auth              //Indicates that the AP certification is restricted.Certification by the certificate, serial number or password is enabled on theAC but the AP does not carry any certification information.

By user-class           //Indicates the APs belong to different classes. For example,SMB-AP can only access SMB-AC but cannot access ordinary ACs.

By overdue-ap           //Indicates the AC has an expired AP. This problem is temporarygenerally. The AC will automatically clears expired APs and then the expiredAPs can join the AC again.

By master-ap-mac        //Indicates that the satellite AP does not carry the master AP MAC. Thisproblem is temporary generally and is caused by quick AP join during startup ofthe satellite AP.

By unknown              //Indicates an unknown cause.

By radio num            //Indicates that interconnection is not supported because the APhas too many RF interfaces. For example, the B7-version AC does not supportAM5528.

By vendor id            //Indicates that the interconnection is not supported because theAP of another vendor is used.

By new-ap-limit         //Indicates that the number of the new APs reaches the upper limit. Forexample, WS5708 supports up to 100 B9-version APs of wave 2.

By local-limit          //Indicates that the number of APs connected to the AC is limited due tothe AC protection in VAC scenario. It is possibly because the switch load isunbalanced or the working ACs are insufficient.

By hot-backup           //Indicates a hot-backup limit. For example, the AP uses the APvirtualization technology which does not support the hot-backup function. Buthot-backup is enabled for this AP in the configuration.

By total-ap-num         //The total number of APs (online + offline) and AP tunnels has reachedthe upper limit. Delete unwanted offline APs.

By none-radio           //The AP is rejected because it does not carry radio. This problemis temporary generally and is caused by quick AP join during startup.

Whenthe packet interaction between the AP and the AC is abnormal, capture packetsfrom the intermediate line to locate the packet loss point and troubleshoot thewired network.