Ruijie Community

Title: How can I troubleshoot if capwap tunnel establishment fails between Ruijie AP and AC [Print this page]
Author: GTAC-Sophia    Time: 2023-7-14 10:16
Title: How can I troubleshoot if capwap tunnel establishment fails between Ruijie AP and AC
1. The communication between the AP and AC is abnormal
1). Whether AP obtained the ip address: show ip int brif
2). Check onDHCP server whether it configures option 138.
3). Check whether the loopback0 (or capwap ctrl-ip X.X.X. x) of AC is communicated.
normally with AP: whether AP can ping the tunnel address created by AC.
4). capwap udp ports 5246 or 5247 are discarded or filtered by the intermediate device
RuijieAC#show ip f f | inc apipaddress

2. The AC and AP are abnormal

1). The ac cpu is too high to process the AP goingonline
RuijieAC#show cpu
2). The ac license is insufficient.
RuijieAC#show ac-config


RuijieAC#show license



RuijieAC#show ap-config summary


3. If the communication is normal, packets from the AP are sent to the AC, but the tunnel cannot be established

RuijieAC#show ap-config summary deny-ap  


  By bind-ap-mac    AP-MAC binding rejected. The MAC whitelist  bind-ap-mac function was enabled on the AC, but the MAC address of the ap was  not in the AP-config  
  By wtp-limit    The number of online APs reaches the upper limit  
  By conflict    The AP name and MAC address conflict. The AP name  and MAC address of another AP are already online or configured on the AC  
  By deny-flag    The AP is actively denied from joining the AC. Generally,  deny-join is adopted in networking debugging  
  By ap-auth    AP authentication restriction. Authentication in  the form of certificate, serial number, and password is enabled on the AC,  but the AP does not carry authentication information  
  By user-class    AP products of different industries. For example,  SMB-APs can connect to SMB-AC only  
  By overdue-ap    An overdue ap exists on the AC, which is usually  temporary. In this case, the AC will automatically clear the overdue AP  information, and the AP will apply for joining again, which should be  completed successfully  
  By master-ap-mac    The satellite ap does not carry the primary ap  mac. It is usually temporary and is added too quickly when the satellite AP  is just started  
  By unknown    The cause is unknown  
  By radio num     AP has too many RF ports that do not support  interconnection  
  By vendor id    Other vendors do not support connection  
  By new-ap-limit     new AP limit  
  By local-limit    VAC scenario placing an AC device for protection  and limiting the number of APs connected to the local device may cause load  imbalance on the switch or other issues  
  By hot-backup      Hot-backup  limitation. For example, the AP uses AP virtualization technology, but AP  virtualization does not support hot-backup, but the AP is configured to be in  hot-backup already  
  By total-ap-num      total  number of aps (online + offline) and number of AP tunnels reached the upper  limit. Delete unnecessary offline AP   
  By none-radio    The AP does not carry radio because the AP is  added too quickly when it is just started  
What information should be collected if you cannottroubleshooting by yourself:
1). Network planning and topology
2). Network sharing
3).  AC andAP configuration:
on AC：   
show version   
show running   
show ac-config   
show license   
show ap-config summary   
show capwap sta   
show cpu   
show memory   
show ip route   
show ip interface brief   
on AP：   
show version   
show ap-mode   
show capwap sta   
show ip route   
show log
show capwap client state




Welcome to Ruijie Community (https://community.ruijienetworks.com/) Powered by Discuz! X3.2