某局点EWPXM1MAC0F插卡跨公网注册成功后，部分ap地址回显不正常的经验案例

组网说明，总公司两块EWPXM1MAC0F插卡配置了主备AC，分公司ap跨公网注册到总部。总部和分支出口都配置了相关NAT保持三层互通。

总公司两块EWPXM1MAC0F插卡配置了主备AC，分公司ap跨公网注册到总部后（两端出口都做了NAT），但在AC上查看ap的地址，部分ap回显不是分公司的出口地址，而是ap获取的私网地址。

举例说明：

部分正常的ap地址显示：

<AC>dis wlan ap name 083a-38c4-xxxx address

AP name                          IP address                       MAC address

083a-38c4-xxxx                    222.240.207. xx                    083a-38c4-xxxx

不正常的是自身ap获取的私网地址：

<AC>dis wlan ap name 083a-38c5-xxxx address

AP name                          IP address                       MAC address

083a-38c5-xxxx                   20.129.148.66                    083a-38c5-xxxx

1、查看设备配置信息，暂未发现不正常

wlan ap-group default-group

priority 7   //主备AC配置

wlan tunnel-preempt enable

backup-ac ip 10.23.213.XX

2、查看ap获取的ac地址,发现option43属性下发正常

<083a-38c5-xxxx>dis dhcp client verbose

Vlan-interface1 DHCP client information:

  Current state: BOUND

  Allocated IP: 20.129.148.66 255.255.255.192

  Allocated lease: 86400 seconds, T1: 36669 seconds, T2: 75600 seconds

  Lease from Oct 27 03:58:50 2021   to   Oct 28 03:58:50 2021

  DHCP server: 20.129.148.126

  Transaction ID: 0x65b32ba0

  Default router: 20.129.148.126

  Boot servers: 114.141.172.xx 140.207.160.xx

  Client ID type: mac-address(type value=01)

  Client ID value: 083a-38c5-9700

  Client ID (with type) hex: 0108-3a38-c597-00

  T1 will timeout in 0 days 4 hours 20 minutes 7 seconds

3、ap的log日志信息，发现ap回去找主备ac的私网地址上线

%Oct 20 06:50:28:059 2021 083a-38c5-9700 CWC/6/CWC_AP_UP: Master CAPWAP tunnel to AC 10.23.213.136 went up.

%Oct 20 06:50:28:666 2021 083a-38c5-9700 CWC/6/CWC_AP_UP: Backup CAPWAP tunnel to AC 10.23.213.135 went up.

%Oct 20 06:55:28:210 2021 083a-38c5-9700 CWC/4/CWC_AP_DOWN: Master CAPWAP tunnel to AC 10.23.213.136 went down. Reason: Backup tunnel changed to master tunnel.

%Oct 20 06:55:30:229 2021 083a-38c5-9700 CWC/6/CWC_AP_UP: Master CAPWAP tunnel to AC 10.23.213.135 went up.

%Oct 20 06:55:30:819 2021 083a-38c5-9700 CWC/6/CWC_AP_UP: Backup CAPWAP tunnel to AC 10.23.213.136 went up.

最终确认，配置了1+1备份导致的。

wlan ap-group default-group

priority 7

wlan tunnel-preempt enable

backup-ac ip 10.23.213.xx    //配了这个命令，ac 会告诉ap 去找这个ip地址注册

vlan 1

所以现场做主备ac，这个现象是正常的。可以把这个地址直接指向公网，不会导致业务中断，可直接操作，现场已验证。