The AC cannot distribute the configuration to the AP

The AP goes online to the AC across thepublic network. But the AC cannot distribute the configuration tothe AP.

[PossibleCauses]

(1) The software version conflicts.

(2) The extranet is restricted.

[troubleshootingSteps]

(1) chekc whether the AP version isconsistent with the AC version and whether the AP has gone online successfully.

(2) Run the show ap-conf run command to check whether the AP has joined thegroup and whether the active/standby configurations are consistent.

(3) Ping the AP to the AC. If the packagesize is 1500 bytes, the AC cannot be pinged. The dichotomic test result shows that the maximum package size that can be pinged is 1410 bytes. Modify the control tunnel MTU to 1410 to solve the problem:

ac-controller

capwap ctrl-mtu 1410

[Summary and Precautions]

In the cross-NAT go-online environment, thefollowing problems may occur: the AC configuration cannot be issued, the tunnelcannot be established or is repeatedly established, and the terminal cannot beaccessed. After troubleshooting, check whether the large-package communication between the AP and the AC is normal. For repeated tunnel establishment, check whether the NAT entry aging time of the egress is too short by testing the tunnel keepalive time.