topic Re: Cannot access AIR-AP1832I-E-K9C after provisioning in Wireless

Cannot access AIR-AP1832I-E-K9C after provisioning

Elie El Amil — Mon, 11 Apr 2022 09:32:59 GMT

After provisioning the AIR-AP1832I-E-K9C we can no longer connect to the access point management IP (not pingable) and the AP does not broadcast SSID. We cannot also ping the management IP from the AP command line

any idea what could be the problem?

Thank you

Interface Name Port Vlan Id IP Address Type Ap Mgr Guest
-------------------------------- ---- -------- --------------- ------- ------ -----
management 1 untagged 192.168.100.2 Static Yes N/A
virtual N/A N/A 192.0.2.1 Static No N/A

(Cisco Controller) >show country

Configured Country............................. LB - Lebanon
Configured Country Codes
LB - Lebanon................................... 802.11a Indoor,Outdoor / 802.11b / 802.11g

(Cisco Controller) show>sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.10.151.0
OUI File Last Update Time........................ N/A

System Name...................................... cisco-1234
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.2371
IP Address....................................... 192.168.100.2
Last Reset....................................... 0: unknown

System Up Time................................... 0 days 0 hrs 7 mins 7 secs
System Timezone Location......................... (GMT +2:00) Jerusalem
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... LB - Lebanon

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1

Number of Active Clients......................... 0

OUI Classification Failure Count................. 0

Memory Current Usage............................. 58
Memory Average Usage............................. 57
CPU Current Usage................................ 0
CPU Average Usage................................ 1

Flash Type....................................... Compact Flash Card
Flash Size....................................... 1073741824

Burned-in MAC Address............................ DC:F7:19:04:4D:40
Maximum number of APs supported.................. 50
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1/SHA2

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Ambuj M — Mon, 11 Apr 2022 12:23:46 GMT

can you explain a little better what did you do as part of provisioning ?

did you register it to controller, added it to prime, added it to DNAC, configured AP locally, any change in AP can be considered provisioning.

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Elie El Amil — Mon, 11 Apr 2022 14:14:51 GMT

My Aim is to configure the access point as stand alone without joining a WLC and at the sane time allow it to act as a controller for few other AIR-AP1832I-E-K9 access points. What I meant by provisioning is:

- I connected wirelessly to CiscoAirProvision SSID

- Connected to https://192.168.1.1

- Configured the Country as LB for Lebanon

- Configured the Time Zone as Jerusalem which is the closest to my time zone GMT+2

- Configured the Management IP as 192.168.100.2/24

- Configured Employee SSID as RSA

- Configured PSK for the SSID

Saved the configuration and rebooted the Access Point. I did the same configuration from the command line but I got the same result, After the AP reboots The new RSA SSID is not broadcasted and I cannot ping the management IP 192.168.100.5. I cannot also ping the management IP from the AP command line,

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Ambuj M — Tue, 12 Apr 2022 03:08:26 GMT

process looks fine, when you created SSID, you mapped it to management interface ?

Assuming that you have done basic checks like PC you are connecting from has an IP in same range 192.168.100.X

share following output please

from switch share output of switch port config where you have this AP (as controller) connected, show power inline and show cdp neighbor or show lldp neighbor

From AP following outputs

interface detailed management

show port summary

show wlan summary

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Elie El Amil — Tue, 12 Apr 2022 09:53:48 GMT

Hello,

The Access point is currently connected to an unmanaged cisco switch SG200-26P to power it and connect my laptop in order to access the AP management IP. My problem for now cannot ping the management IP nor see the SSID

(Cisco Controller) >show interface detailed management

Interface Name................................... management
MAC Address...................................... 00:00:5e:00:01:01
IP Address....................................... 192.168.100.2
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 192.168.100.1
IP Address Type.................................. Static
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
Link Local IPv6 Address.......................... fe80::def7:19ff:fe04:4d40/64
STATE ........................................... NONE
Primary IPv6 Address............................. ::/128
STATE ........................................... NONE
Primary IPv6 Gateway............................. ::
Primary IPv6 Gateway Mac Address................. 00:00:00:00:00:00
STATE ........................................... CREATING
VLAN............................................. untagged
Quarantine-vlan.................................. 0
Physical Port.................................... 1
DHCP Proxy Mode.................................. Global
Primary DHCP Server.............................. Unconfigured
Secondary DHCP Server............................ Unconfigured

DHCP Option 82................................... Disabled
DHCP Option 82 bridge mode insertion............. Disabled
DHCP Option 6 Opendns Override................... Disabled
IPv4 ACL......................................... Unconfigured
IPv6 ACL......................................... Unconfigured
mDNS Profile Name................................ Unconfigured
AP Manager....................................... Yes
Guest Interface.................................. N/A
L2 Multicast..................................... Enabled

(Cisco Controller) >

(Cisco Controller) >show port summary

STP Admin Physical Physical Link Link
Pr Type Stat Mode Mode Status Status Trap POE
-- ------- ---- ------- ---------- ---------- ------ ------- ---------
1 Normal Forw Enable Auto 1000 Full Up Enable N/A

(Cisco Controller) >show wlan summary

Number of WLANs.................................. 1

WLAN ID WLAN Profile Name / SSID Status Interface Name
------- ------------------------------------- -------- --------------------
1 RSA / RSA Enabled management

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Ambuj M — Tue, 12 Apr 2022 10:42:53 GMT

I cannot ping the management IP 192.168.100.5

I hope this is typo but you do realize that the management IP is 192.168.100.2 and not 192.168.100.5.

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Elie El Amil — Tue, 12 Apr 2022 10:47:29 GMT

it is a typo my laptop is 100.5. Regardless there is no RSA SSID broadcasting

Re: Cannot access AIR-AP1832I-E-K9C after provisioning

Ambuj M — Tue, 12 Apr 2022 10:57:01 GMT

That’s what I thought, well I was asking cdp/lldp and Poe information earlier because if the AP is not negotiating correct power then it won’t broadcast SSID, try a different port, may be a cabling issue, I know you can’t do tdr test here.
the switch you mentioned has 4 poe+ ports also try those ports.
try wireshark capture from laptop see if you see a tcp handshake when accessing ip over 80 or 443
your config looks good to me.