无
某局点原先使用分层AC架构,local AC使用的是S5560融合AC。现打算将分层AC组网拆除,换用AC加fit ap的传统组网,此时S5560只做接入交换机。
将分层AC组网拆除后,发现AP可以正常上线,但是无线终端无法正常接入。
服务模板无认证,仅PSK加密。AC版本R5430P03。
排查过程如下:
1 确认分层AC组网的相关配置已经删除完全
Central AC上删除以下配置
Local AC上删除以下配置
2 AP可以正常上线但是无线终端接入异常,怀疑capwap data隧道报文交互出现问题
在AP上debug发现AP发出keep-alive的请求后,没有收到AC的回复。
<AP>debugging wlan capwap packet data
*Jul 30 13:18:14:119 2021 xxh-3f-dianyuanshi CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5247.
*Jul 30 13:18:24:118 2021 xxh-3f-dianyuanshi CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:18:34:118 2021 xxh-3f-dianyuanshi CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:18:44:118 2021 xxh-3f-dianyuanshi CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:18:54:118 2021 xxh-3f-dianyuanshi CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:19:04:118 2021 xxh-3f-dianyuanshi CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
此时查看AC侧的capwap报文收发情况发现,AC侧的 Keep Alive报文数量并没有增长,即AP发出的Keep Alive报文并没有送达AC,怀疑在半路被拦截
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1629/1629
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1629/1629
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1629/1629
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1629/1629
3 在远程查看时,偶然发现在S5560上起无线业务vlan的三层接口后,无线业务可以恢复,无线终端可以正常上线。此时查看AP和AC侧信息发现报文交互正常。
AP侧数据保活报文有去有回:
<AP>debugging wlan capwap packet data
*Jul 30 13:12:22:761 2021 xxh-2f-beicezoulang CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:12:22:763 2021 xxh-2f-beicezoulang CWC/7/DATA: Received Data Channel Keep-Alive message from AC.
*Jul 30 13:12:32:761 2021 xxh-2f-beicezoulang CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:12:32:763 2021 xxh-2f-beicezoulang CWC/7/DATA: Received Data Channel Keep-Alive message from AC.
*Jul 30 13:12:42:761 2021 xxh-2f-beicezoulang CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:12:42:762 2021 xxh-2f-beicezoulang CWC/7/DATA: Received Data Channel Keep-Alive message from AC.
*Jul 30 13:12:52:761 2021 xxh-2f-beicezoulang CWC/7/DATA: Sent data channel keep-alive message to AC at 10.100.100.1:5246.
*Jul 30 13:12:52:762 2021 xxh-2f-beicezoulang CWC/7/DATA: Received Data Channel Keep-Alive message from AC.
AC侧数据保活报文有在持续成对增长:
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1629/1629
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1629/1629
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1630/1630
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1630/1630
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1630/1630
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1631/1631
[AC-probe]dis sys int wlan ap mac-address 1111-1111-1111 capwap packet-statistics | inc Keep
Data Channel Keep Alive Request/Response: 1631/1631
4 由此怀疑故障与S5560有关,考虑将S5560上的AC特征包卸载。
卸载参考https://www.h3c.com/cn/d_201906/1200524_30005_0.htm#_Toc8735235,注意卸载完之后需要确认融合AC特性包更改:确认更改请在用户视图下执行install commit命令。
特征包卸载之后发现问题解决,无线终端正常接入上线。
将融合AC上的AC特征包卸载后问题解决
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作