无线AC(V7)无法telnet到AP的处理经验

宁德新能源科技有限公司在WX3540H上远程telnet远端ap失败,提示Login failed。具体操作步骤如下:

[ND-AC-WX3540IRF-probe]dis wlan ap all address | include m5

and-m5-3fs-01_i-factory_prd   172.17.135.202   60da-8338-6730

and-m5-3fs-02_i-factory_prd   172.17.135.200   60da-8338-85f0

and-m5-3fs-03_i-factory_prd   172.17.135.201   60da-8338-6490

[ND-AC-WX3540IRF-probe]dis wlan ap all | include m5

and-m5-3fs-01_i-factory_prd 58 R/M WA4330-ACN 210235A1K6C174000278

and-m5-3fs-02_i-factory_prd 59 R/M WA4330-ACN 210235A1K6C174000442

and-m5-3fs-03_i-factory_prd 62 R/M WA4330-ACN 210235A1K6C174000264

[ND-AC-WX3540IRF-probe]wlan ap-execute  and-m5-3fs-01_i-factory_prd  exec-console enable

[ND-AC-WX3540IRF-probe]quit

<ND-AC-WX3540IRF>telnet 172.17.135.202

Trying 172.17.135.202 ...

Press CTRL+K to abort

Connected to 172.17.135.202 ...

******************************************************************

* Copyright (c) 2004-2016 Hangzhou H3C Tech. Co., Ltd. All rights reserved.  *

* Without the owner&＃39;s prior written consent,                                 *

* no decompiling or reverse-engineering shall be allowed.                    *

******************************************************************

Login failed.

检查操作步骤,完全没有问题,ping ap的ip地址也可以ping通

[H3C]ping 172.17.135.202

  PING 172.17.135.202: 56  data bytes, press CTRL_C to break

    Reply from 172.17.135.202: bytes=56 Sequence=0 ttl=255 time=1 ms

    Reply from 172.17.135.202: bytes=56 Sequence=1 ttl=255 time=1 ms

    Reply from 172.17.135.202: bytes=56 Sequence=2 ttl=255 time=1 ms

    Reply from 172.17.135.202: bytes=56 Sequence=3 ttl=255 time=1 ms

    Reply from 172.17.135.202: bytes=56 Sequence=4 ttl=255 time=1 ms

  --- 172.17.135.202 ping statistics ---

    5 packet(s) transmitted

    5 packet(s) received

    0.00% packet loss

round-trip min/avg/max = 1/1/1 ms

检查AC上的配置:

wlan ap and-m5-3fs-01_i-factory_prd model WA4330-ACN

 serial-id 210235A1K6C174000278

 region-code CN

 description M5-3FS-i-factory

 firmware-upgrade disable

 hybrid-remote-ap enable

 band-navigation enable

 vlan 1

 radio 1

  radio enable

  service-template m5-3fs_i-factory vlan 135

 radio 2

  radio disable

  service-template m5-3fs_i-factory vlan 135

 radio 3

  radio enable

  service-template m5-3fs_i-factory vlan 135

 gigabitethernet 1

 gigabitethernet 2

该ap下配置了firmware-upgrade disable。该配置的含义为用来关闭AP版本升级功能。建立CAPWAP隧道过程中，如果关闭AP版本升级功能，则AC不对AP当前的软件版本进行比较，直接与AP建立CAPWAP隧道连接。

由于禁止了检查版本功能,导致目前ap的版本与ac的版本不一致,出现了telnet异常。

由于找到问题原因，将该配置enable，重启ap，让ap重新下版本注册，

问题解决。

一般在ac上telnet ap都没有问题，如果不通，需要检查版本，另外需要检查一下ap上配置的telnet用户权限。