AP Disassociate when link went down

[shubhamtater]

We recently migrated to Fortinet Firewall in which we have seen an issue when any link goes down causing the AP to get disassociated from WLC and then we have to manually do shut-no shut to get them up. Even if we have any power outage in that case we have to manually do shut-no shut to get them up, they are not joining automatically. 

[Arne Bier]

How does this question relate to Network Access Control?  What is your setup?  Do you suspect there is an issue with the switch or your RADIUS server? 

Details !!!!

[shubhamtater]

The issue is whenever we have any power outage all the APs of that particular location get disassociated and we have to reset the switch port where those APs are connected to get them up, they are not auto-joining.

Second, they went down after the firewall code upgrade and again we needed to manually reset the switch port. 

The error which I got recently is-

AP Disassociated. Base Radio MAC:54:a2:74:6d:59:c0 ApName - CK-TrainingRoom
1699 Thu Feb 8 22:37:07 2024 AP's Interface:1(802.11a) Operation State Down: Base Radio MAC:54:a2:74:6d:59:c0 Cause=AP_IF_TRAP_ECHO_TIMEOUT: Radio reset due to (121) Heartbeat Timeout Status:NA
1700 Thu Feb 8 22:37:07 2024 AP's Interface:0(802.11b) Operation State Down: Base Radio MAC:54:a2:74:6d:59:c0 Cause=AP_IF_TRAP_ECHO_TIMEOUT: Radio reset due to (121) Heartbeat Timeout Status:N

[Arne Bier]

Doesn't sound right to me.

Who is the AP vendor?

Who is the switch vendor?

How is the switch port configured that has these APs connected?

[ahollifield]

https://community.cisco.com/t5/security-knowledge-base/how-to-ask-the-community-for-help/ta-p/3704356

[shubhamtater]

First, all APs are in flex connect mode.

AP Vendor - Cisco

Switch Vendor - Cisco

The switch port is configured as a trunk.

[Rich R]

- What model of WLC?
- What model of AP?
- What version of software?
- What model of switch and what version of software is it running?
- Provide "show run int <portname>" for one of the AP switch ports
- What method of WLC discovery are you using for the APs?
- Provide "show log" (after "term len 0") from one of the APs when you see the problem?
- Provide complete console log from one of the APs after power on?

Save those logs to text (.txt) files then attach the files to your reply - don't paste all the output into your reply.