【专家面对面】无线控制器的基本配置，使用以及简单故障排错_问题解答

[Yanli Sun]

活动内容：思科TAC部门的技术专家 Linda Wang 会在此回答您关于“无线控制器的基本配置，使用以及简单故障排错”的相关问题。
活动时间：2014年11月20日-11月28日
参与方式：在本主题下跟帖提出您的问题，我们的专家会予以解答。
专家介绍：Linda Wang，Technical Support Engineer
大家提问题时请尽量提交详细的问题描述（包括软、硬件型号，软件版本，等等），从而让我们可以更加高效地提供解答。:)
如果专家的解答对您有帮助的话，记得在专家答复帖中按照1-5星打分哦。

[zhangjijun]

请问下，我现在有两个无线AP1142的，但是每隔两到三天就会重新启动，这个大概是什么问题呢？其他的AP都没有问题。

[cong89402]

总部是专线上网，WLC放在总部，门店是ADSL上网线路，不做vpn能否实现门店ap关联上WLC？

[lindawa]

jijunzhang 发表于 2014-11-21 22:36
请问下，我现在有两个无线AP1142的，但是每隔两到三天就会重新启动，这个大概是什么问题呢？其他的AP都没有 ...

1. 建议先查看WLC上面有没有AP crash log； GUI > MANAGEMENT > TECH SUPPORT > AP Crash Log
2. 如果有，可根据crash log去CCO上面查看是否是已知软件BUG。
3. 如果WLC上面没有AP crash log, 则建议在AP上面抓取show tech / show log ， 开个TAC case进行下一步排查。

[lindawa]

jijunzhang 发表于 2014-11-21 22:36
请问下，我现在有两个无线AP1142的，但是每隔两到三天就会重新启动，这个大概是什么问题呢？其他的AP都没有 ...

现在Controller软件版本是多少？

[lindawa]

cong89402 发表于 2014-11-22 22:08
总部是专线上网，WLC放在总部，门店是ADSL上网线路，不做vpn能否实现门店ap关联上WLC？

这个有很多种可能的场景，比如WLC侧有没有做NAT?
能否提供详细的网络拓扑图？

[lindawa]

cong89402 发表于 2014-11-22 22:08
总部是专线上网，WLC放在总部，门店是ADSL上网线路，不做vpn能否实现门店ap关联上WLC？

简单来说，只要AP和WLC之间网络可达，AP就可以注册到WLC。不论是在公网还是企业内部。

[764963038cisco]

可以用远程部署的方式，AC挂在公网，AP都能注册上来的

[wanghaitao]

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/100731-ap-not-join-con.html

[764963038cisco]

我现在AP一直注册不上去提示这个什么意思？
*Mar 1 00:27:03.971: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
*Mar 1 00:27:03.971: %IP-3-DESTHOST: src=172.16.23.13, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
*Mar 1 00:27:13.971: %IP-3-DESTHOST: src=172.16.23.13, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
*Mar 1 00:27:23.971: %IP-3-DESTHOST: src=172.16.23.13, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
*Mar 1 00:27:33.971: %IP-3-DESTHOST: src=172.16.23.13, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
Not in Bound state.
*Mar 1 00:27:49.471: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
*Mar 1 00:27:52.475: %CAPWAP-3-ERRORLOG: Invalid event 40 & state 2 combination.
*Mar 1 00:27:52.543: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 172.16.23.14, mask 255.255.255.0, hostname AP881d.fc46.e674
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
*Mar 1 00:27:59.471: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Mar 1 00:28:08.471: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
*Mar 1 00:28:08.471: %IP-3-DESTHOST: src=172.16.23.14, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
*Mar 1 00:28:18.471: %IP-3-DESTHOST: src=172.16.23.14, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
*Mar 1 00:28:28.471: %IP-3-DESTHOST: src=172.16.23.14, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
*Mar 1 00:28:38.471: %IP-3-DESTHOST: src=172.16.23.14, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z
Not in Bound state.
*Mar 1 00:28:53.971: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
*Mar 1 00:28:56.975: %CAPWAP-3-ERRORLOG: Invalid event 40 & state 2 combination.
*Mar 1 00:28:57.043: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 172.16.23.15, mask 255.255.255.0, hostname AP881d.fc46.e674
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
*Mar 1 00:29:03.971: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Mar 1 00:29:12.971: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
*Mar 1 00:29:12.971: %IP-3-DESTHOST: src=172.16.23.15, dst=0.0.0.0, NULL desthost -Process= "CAPWAP CLIENT", ipl= 0, pid= 73
-Traceback= 119AF80z 13A3634z 13A4218z 13A4974z 13A49D0z 1331508z 16EEFBCz 16F50B8z 173BD54z 17262D4z 1727CF4z 171E770z 17288B0z 171EA74z 1730D04z 173CD04z

[lindawa]

764963038cisco 发表于 2014-11-25 14:31
我现在AP一直注册不上去提示这个什么意思？
*Mar 1 00:27:03.971: %CAPWAP-3-ERRORLOG: Could Not resolv ...

AP是什么型号？
AP 上面 'show version' 的输出能提供吗？

[lindawa]

大家提问题的时候，请尽量提交详细的问题描述（包括软、硬件型号，软件版本，等等），从而让我们可以更加高效地提供解答。:)

[cong89402]

lindawa 发表于 2014-11-24 12:37
这个有很多种可能的场景，比如WLC侧有没有做NAT?
能否提供详细的网络拓扑图？

WLC侧有做NAT的，门店的ap应该怎么设置呢？

[wanghaitao]

1.首先AP要与WLC关联上，必须保证他们的路由是可达的。
2.二层环境下，AP是通过广播发出请求信息的。
3.三层环境下，广播是无法泛洪的，只能通过DNS或option 43 指定 WLC
4.最后也可以配置LAP :
capwap ap ip add ***
capwap ap ip default-gateway ***
capwap ap controller ip add ***
实现

[lindawa]

cong89402 发表于 2014-11-25 22:24
WLC侧有做NAT的，门店的ap应该怎么设置呢？

@C1whaitao 说得不错。
如果AP走ADSL出去，可以直接在AP上面指定WLC management ip NAT对应的公网IP。
另外，在WLC侧做NAT的时候，请注意以下两点：
1. Note: Select the Enable NAT Address check box and enter the external NAT IP address if you want to be able to deploy your Cisco 5500 Series Controller behind a router or other gateway device that is using one-to-one mapping network address translation (NAT). NAT allows a device, such as a router, to act as an agent between the Internet (public) and a local network (private). In this case, it maps the controller's intranet IP addresses to a corresponding external address. The controller's dynamic AP-manager interface must be configured with the external NAT IP address so that the controller can send the correct IP address in the Discovery Response.
2. Note: With CAPWAP, WLC behind NAT is not supported with the 4400 series, 2100 series Wireless LAN Controllers and the WiSM.

[lindawa]

cong89402 发表于 2014-11-25 22:24
WLC侧有做NAT的，门店的ap应该怎么设置呢？

建议好好理解AP注册的整个过程，推荐阅读CCO文档：
Lightweight AP (LAP) Registration to a Wireless LAN Controller (WLC)
如果在AP注册的过程遇到问题，可以参阅以下文档：
Troubleshoot a Lightweight Access Point Not Joining a Wireless LAN Controller
"AP fails to join controller" - Lightweight Access Point (LAP) fails to join Wireless LAN controller (WLC)