某局点无线终端无法关联AP WA6320-C故障案例

基本二层注册组网，AC型号WX3520H，AP型号WA6320-C，AP集中转发。

现场有6台AP有故障，能放出信号，但是终端无法关联，看AP的诊断beacon是在增长的。现场共100多台同型号AP，其他同型号AP正常。

测试终端： f49f-xxxx-907f，故障时收集debug并分析：

查看AC上debug:

发现AC上收到终端发来的Probe Request帧请求，且进入到了链路层认证authentication阶段，并且链路层认证阶段成功，重复此阶段；但是一直没有进入到association阶段。

[13-56-02] *Jul  2 13:54:59:071 2021 19F-AC-WX3520-11 STAMGR/7/PktRcv: [APID: 114] Received a frame from f49f-xxxx-907f (Length=41)
[13-56-02]  B0 00 00 00 74 50 4E E9 0B 94 F4 9F F3 FE 90 7F
[13-56-02]  74 50 4E E9 0B 94 10 00 00 00 01 00 00 00 DD 09
[13-56-02]  00 0F E2 09 01 EF 00 00 00
[13-56-02] *Jul  2 13:54:59:071 2021 19F-AC-WX3520-11 STAMGR/7/Event: [APID: 114] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b94] The Sta had exist when proc auth request.
[13-56-02] *Jul  2 13:54:59:072 2021 19F-AC-WX3520-11 STAMGR/7/FSM: [APID: 114] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b94] Received authentication request in the Auth state.
[13-56-02] *Jul  2 13:54:59:072 2021 19F-AC-WX3520-11 STAMGR/7/PktSend: [APID: 114] Sent a frame to f49f-xxxx-907f (Length=30)
[13-56-02]  B0 00 00 00 F4 9F F3 FE 90 7F 74 50 4E E9 0B 94
[13-56-02]  74 50 4E E9 0B 94 00 00 00 00 02 00 00 00
[13-56-02] *Jul  2 13:54:59:072 2021 19F-AC-WX3520-11 STAMGR/7/Event: [APID: 114] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b94] Processed authentication request successfully, and sent authentication response.
[13-56-02] *Jul  2 13:54:59:072 2021 19F-AC-WX3520-11 STAMGR/7/Timer: [APID: 114] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b94] Refreshed state timer.
[13-56-03] *Jul  2 13:54:59:249 2021 19F-AC-WX3520-11 STAMGR/7/PktRcv: [APID: 114] Received a frame from f49f-xxxx-907f (Length=41)

AP上面debug:

提示ssid不可用：

[10-57-07] *Jul  2 10:56:02:549 2021 7450-xxxx-0b80 STAMGR/7/PktRcv: [APID: 1] Received a frame from f49f-xxxx-907f (Length=41)

[10-57-07]  B0 00 3A 01 74 50 4E E9 0B 94 F4 9F F3 FE 90 7F

[10-57-08]  74 50 4E E9 0B 94 30 00 00 00 01 00 00 00 DD 09

[10-57-08]  00 0F E2 09 01 04 02 00 00

[10-57-16] *Jul  2 10:56:11:907 2021 7450-xxxx-0b80 STAMGR/7/Event: [APID: 1] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b91] [Radio:2, Code:0] R[10-57-25]

[10-57-26] <7450-xxxx-0b80>*Jul  2 10:56:21:965 2021 7450-xxxx-0b80 STAMGR/7/Event: [APID: 1] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b91] [Radio:2, Code:0] Responsed broadcast probe request frame of invlaid ssid.

[10-57-26] *Jul  2 10:56:21:966 2021 7450-xxxx-0b80 STAMGR/7/Event: [APID: 1] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b92] [Radio:2, Code:0] Responsed broadcast probe request frame of invlaid ssid.

[10-57-26] *Jul  2 10:56:21:966 2021 7450-xxxx-0b80 STAMGR/7/Event: [APID: 1] [MAC: f49f-xxxx-907f, BSSID: 7450-xxxx-0b94] [Radio:2, Code:0] Responsed broadcast probe request frame of invlaid ssid.

也就是终端链路层认证成功，但是无法关联。这个就怀疑是AC上有特殊配置导致无法进行到关联的步骤。

检查发现AC上面误配置了静态ARP，且10.16.98.14 这个ip地址是AP 7450-xxxx-0b80 的,不是AC配置里配置的这个Mac对应的AP的。由于ARP绑定关系错误，导致终端只能通过链路层认证的阶段，后续关联过程涉及到IP报文交互，故没有产生相应的debug。

arp static 10.16.98.14 8465-xxxx-3d60 98 Bridge-Aggregation2//AP 7450-xxxx-0b80 的IP地址和其他AP的MAC进行绑定了

将静态ARP绑定关系改成正确AP的MAC+IP地址/删除绑定关系，问题解决。

由于AP数量一般较多，后续需要注意在AC或POE上尽量不要绑定AP的MAC+IP地址 表项，如果绑定的话一定要检查绑定关系的对应性。