How can I troubleshoot if capwap tunnel establishment fails between Ruijie AP and AC

1. The communication between the AP and AC is abnormal
1). Whether AP obtained the ip address: show ip int brif
2). Check onDHCP server whether it configures option 138.
3). Check whether the loopback0 (or capwap ctrl-ip X.X.X. x) of AC is communicated.
normally with AP: whether AP can ping the tunnel address created by AC.
4). capwap udp ports 5246 or 5247 are discarded or filtered by the intermediate device
RuijieAC#show ip f f | inc apipaddress

2. The AC and AP are abnormal

1). The ac cpu is too high to process the AP goingonline
RuijieAC#show cpu
2). The ac license is insufficient.
RuijieAC#show ac-config


RuijieAC#show license



RuijieAC#show ap-config summary


3. If the communication is normal, packets from the AP are sent to the AC, but the tunnel cannot be established

RuijieAC#show ap-config summary deny-ap  

By bind-ap-mac	AP-MAC binding rejected. The MAC whitelist  bind-ap-mac function was enabled on the AC, but the MAC address of the ap was  not in the AP-config
By wtp-limit	The number of online APs reaches the upper limit
By conflict	The AP name and MAC address conflict. The AP name  and MAC address of another AP are already online or configured on the AC
By deny-flag	The AP is actively denied from joining the AC. Generally,  deny-join is adopted in networking debugging
By ap-auth	AP authentication restriction. Authentication in  the form of certificate, serial number, and password is enabled on the AC,  but the AP does not carry authentication information
By user-class	AP products of different industries. For example,  SMB-APs can connect to SMB-AC only
By overdue-ap	An overdue ap exists on the AC, which is usually  temporary. In this case, the AC will automatically clear the overdue AP  information, and the AP will apply for joining again, which should be  completed successfully
By master-ap-mac	The satellite ap does not carry the primary ap  mac. It is usually temporary and is added too quickly when the satellite AP  is just started
By unknown	The cause is unknown
By radio num	AP has too many RF ports that do not support  interconnection
By vendor id	Other vendors do not support connection
By new-ap-limit	new AP limit
By local-limit	VAC scenario placing an AC device for protection  and limiting the number of APs connected to the local device may cause load  imbalance on the switch or other issues
By hot-backup	Hot-backup  limitation. For example, the AP uses AP virtualization technology, but AP  virtualization does not support hot-backup, but the AP is configured to be in  hot-backup already
By total-ap-num	total  number of aps (online + offline) and number of AP tunnels reached the upper  limit. Delete unnecessary offline AP
By none-radio	The AP does not carry radio because the AP is  added too quickly when it is just started

What information should be collected if you cannottroubleshooting by yourself:
1). Network planning and topology
2). Network sharing
3).  AC andAP configuration:
on AC：   
show version   
show running   
show ac-config   
show license   
show ap-config summary   
show capwap sta   
show cpu   
show memory   
show ip route   
show ip interface brief   
on AP：   
show version   
show ap-mode   
show capwap sta   
show ip route   
show log
show capwap client state