简介
本文档介绍Cisco Wireless AireOS控制器中的show ap join stats命令,并演示如何有效使用它们。
先决条件
要求
本文档没有任何特定的要求。
使用的组件
本文档使用Cisco AireOS控制器版本。
本文档中的信息都是基于特定实验室环境中的设备编写的。本文档中使用的所有设备最初均采用原始(默认)配置。如果您的网络处于活动状态,请确保您了解所有命令的潜在影响。
规则
有关文档规则的详细信息,请参阅 Cisco 技术提示规则。
背景信息
本文档提供了有关控制器版本4.2.61.0中新的show ap join stats命令的信息,并演示了如何有效使用这些命令。有关详细信息,请参阅排除轻量接入点无法加入无线LAN控制器的故障,有效地排除接入点(AP)无法加入控制器的故障。如果AP未向控制器发送加入消息,您需要在AP上进行故障排除。
本文档适用于从4.2.61版到最新版本7.2.103版的所有控制器(WLC)。
控制器上发生不同错误的一些示例输出位于背景信息和故障排除算法部分之后。
在控制器版本4.2.61.0中,控制器现在跟踪向其发送发现请求的所有AP以及向其发送发现应答的AP。它还跟踪尝试加入控制器的AP以及它们是否成功。控制器上有2个新的CLI(控制台或SSH)命令,可帮助排除AP无法加入控制器的故障:
show ap join stats summary [all | AP_Mac_Address]
show ap join stats detail <AP_Mac_Address>
故障排除算法
请使用show ap join stats summary all命令查看未加入控制器的AP。控制器收到发现请求后,AP将立即插入show ap join stats列表。
注意:在控制器重新启动之前,控制器绝不会将AP从show ap join stats列表中删除。在某些情况下,失败的AP已尝试加入超过一天或完全离线。使用show ap join stats detail命令找出上次从AP发送的发现请求和加入请求的时间,以确定AP是否已与控制器失去连接或是否已移动到另一个控制器。
输出提供控制器已收到发现请求的AP总数,然后列出这些AP当前是否已加入控制器。
(Cisco Controller) > show ap join stats summary all
Number of APs................................. 3
00:0b:85:1b:7c:b0............................. Joined
00:12:44:bb:25:d0............................. Joined
00:13:19:31:9c:e0............................. Not joined
获得未加入的AP的MAC地址后,使用show ap join stats summary <mac addr>查找上次加入和失败原因。
(Cisco Controller) >show ap join stats summary 00:14:f2:63:12:50
Is the AP currently connected to controller............. Yes
Time at which the AP joined this controller last time...
Jan 24 12:21:32.414
Type of error that occurred last........................
AP got or has been disconnected
Reason for error that occurred last.....................
Timed out while waiting for ECHO response from the AP
Time at which the last join error occurred..............
Jan 24 12:21:14.751
如果您需要有关发现请求、加入请求和配置请求的详细信息,请使用命令show ap join stats detail <mac-address>。 此命令还指示控制器是否只看到来自AP的发现请求,但不看到加入请求。
(Cisco Controller) >show ap join stats detail 00:14:f2:63:12:50
Discovery phase statistics
- Discovery requests received........................... 2
- Successful discovery responses sent................... 2
- Unsuccessful discovery request processing............. 0
- Reason for last unsuccessful discovery attempt........
Not applicable
- Time at last successful discovery attempt.............
Jan 24 12:21:20.547
- Time at last unsuccessful discovery attempt...........
Not applicable
Join phase statistics
- Join requests received................................ 2
- Successful join responses sent........................ 2
- Unsuccessful join request processing.................. 0
- Reason for last unsuccessful join attempt.............
Not applicable
- Time at last successful join attempt..................
Jan 24 12:21:30.669
- Time at last unsuccessful join attempt................
Not applicable
Configuration phase statistics
- Configuration requests received....................... 2
- Successful configuration responses sent............... 2
- Unsuccessful configuration request processing......... 0
- Reason for last unsuccessful configuration attempt....
Not applicable
- Successful configuration attempt......................
Jan 24 12:21:32.414
- Time at last unsuccessful configuration attempt.......
Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............
Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................
Timed out while waiting for ECHO response from the AP
Last join error summary
- Type of error that occurred last......................
AP got or has been disconnected
- Reason for error that occurred last...................
Timed out while waiting for ECHO response from the AP
- Time at which the last join error occurred............
Jan 24 12:21:14.751
示例 1
在这种情况下,控制器上的时间不正确。此错误表示AP证书负载无效。发生此错误是因为控制器上的时间超出了证书有效时间间隔。确保show time命令指示正确的时间。
注意:以下输出中的1993年3月6日时间值。这是未配置NTP的控制器时钟的开始位置。
使用时间戳加入报告统计信息的AP的三个阶段是发现、加入和配置阶段。检查上次错误摘要,找出AP无法加入或断开的原因。
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10
Discovery phase statistics
- Discovery requests received........................... 2
- Successful discovery responses sent................... 1
- Unsuccessful discovery request processing............. 2113123
- Reason for last unsuccessful discovery attempt........
Discovery request received on unsupported VLAN
- Time at last successful discovery attempt.............
Mar 06 19:03:50.779
- Time at last unsuccessful discovery attempt...........
Mar 06 19:03:50.782
Join phase statistics
- Join requests received................................ 1
- Successful join responses sent........................ 0
- Unsuccessful join request processing.................. 1
- Reason for last unsuccessful join attempt.............
Certificate payload in join request contains
invalid certificate
- Time at last successful join attempt..................
Not applicable
- Time at last unsuccessful join attempt................
Mar 06 19:04:00.810
Configuration phase statistics
- Configuration requests received....................... 0
- Successful configuration responses sent............... 0
- Unsuccessful configuration request processing......... 0
- Reason for last unsuccessful configuration attempt....
Not applicable
- Time at last successful configuration attempt.........
Not applicable
- Time at last unsuccessful configuration attempt.......
Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............
Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................
Not applicable
Last join error summary
- Type of error that occurred last......................
Lwapp join request rejected
- Reason for error that occurred last...................
Certificate payload in join request contains invalid
certificate
- Time at which the last join error occurred............
Mar 06 19:04:00.810
示例 2
在这种情况下,AP会在管理IP地址VLAN以外的VLAN上发送发现请求。控制器拒绝在管理接口子网上未收到的所有发现请求。
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10
Discovery phase statistics
- Discovery requests received........................... 10
- Successful discovery responses sent................... 5
- Unsuccessful discovery request processing............. 2113123
- Reason for last unsuccessful discovery attempt........
Discovery request received on unsupported VLAN
- Time at last successful discovery attempt.............
Jan 30 14:30:12.284
- Time at last unsuccessful discovery attempt...........
Jan 30 14:30:12.288
Join phase statistics
- Join requests received................................ 4
- Successful join responses sent........................ 0
- Unsuccessful join request processing.................. 4
- Reason for last unsuccessful join attempt.............
Certificate payload in join request contains invalid
certificate
- Time at last successful join attempt..................
Not applicable
- Time at last unsuccessful join attempt................
Mar 06 19:19:03.345
Configuration phase statistics
- Configuration requests received....................... 0
- Successful configuration responses sent............... 0
- Unsuccessful configuration request processing......... 0
- Reason for last unsuccessful configuration attempt....
Not applicable
- Time at last successful configuration attempt.........
Not applicable
- Time at last unsuccessful configuration attempt.......
Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............
Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................
Not applicable
Last join error summary
- Type of error that occurred last......................
Failed to send Lwapp discovery response
- Reason for error that occurred last...................
Discovery request received on unsupported VLAN
- Time at which the last join error occurred............
Jan 30 14:30:12.288
(Cisco Controller) >
示例 3
在这种情况下,AP从此控制器移至其主控制器。
注意:该错误可能由于多种原因而生成,其中一个原因就是网络中断。
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10
Discovery phase statistics
- Discovery requests received........................... 23
- Successful discovery responses sent................... 23
- Unsuccessful discovery request processing............. 0
- Reason for last unsuccessful discovery attempt........
Not applicable
- Time at last successful discovery attempt.............
Jan 30 14:39:38.526
- Time at last unsuccessful discovery attempt...........
Not applicable
Join phase statistics
- Join requests received................................ 21
- Successful join responses sent........................ 21
- Unsuccessful join request processing.................. 0
- Reason for last unsuccessful join attempt.............
Not applicable
- Time at last successful join attempt..................
Jan 30 14:39:07.085
- Time at last unsuccessful join attempt................
Not applicable
Configuration phase statistics
- Configuration requests received....................... 21
- Successful configuration responses sent............... 21
- Unsuccessful configuration request processing......... 0
- Reason for last unsuccessful configuration attempt....
Not applicable
- Time at last successful configuration attempt.........
Jan 30 14:39:09.481
- Time at last unsuccessful configuration attempt.......
Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............
Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................
Timed out while waiting for ECHO response from the AP
Last join error summary
- Type of error that occurred last......................
AP got or has been disconnected
- Reason for error that occurred last...................
Timed out while waiting for ECHO response from the AP
- Time at which the last join error occurred............
Jan 30 14:40:15.451
示例 4
在这种情况下,AP的自签名证书(SSC)在控制器上不正确。在将请求转发到定义的radius服务器之前,控制器始终检查其本地数据库。因此,当控制器未在本地找到SSC时,会出现“RADIUS authorization pends for AP”错误消息。
(Cisco Controller) >show ap join stats detailed 00:13:5f:fa:88:50
Discovery phase statistics
- Discovery requests received........................... 2
- Successful discovery responses sent................... 1
- Unsuccessful discovery request processing............. 2113123
- Reason for last unsuccessful discovery attempt........
Discovery request received on unsupported VLAN
- Time at last successful discovery attempt.............
Jan 30 14:58:58.070
- Time at last unsuccessful discovery attempt...........
Jan 30 14:58:58.071
Join phase statistics
- Join requests received................................ 1
- Successful join responses sent........................ 0
- Unsuccessful join request processing.................. 1
- Reason for last unsuccessful join attempt.............
RADIUS authorization is pending for the AP
- Time at last successful join attempt..................
Not applicable
- Time at last unsuccessful join attempt................
Jan 30 14:59:13.111
Configuration phase statistics
- Configuration requests received....................... 0
- Successful configuration responses sent............... 0
- Unsuccessful configuration request processing......... 0
- Reason for last unsuccessful configuration attempt....
Not applicable
- Time at last successful configuration attempt.........
Not applicable
- Time at last unsuccessful configuration attempt.......
Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............
Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................
Radius authorization of the AP has failed
Last join error summary
- Type of error that occurred last......................
AP got or has been disconnected
- Reason for error that occurred last...................
Radius authorization of the AP has failed
- Time at which the last join error occurred............
Jan 30 14:59:13.117
(Cisco Controller) >
示例 5
(Cisco Controller) >show ap join stats detailed 0026cb8168c0
Discovery phase statistics
- Discovery requests received.............................. 202
- Successful discovery responses sent...................... 0
- Unsuccessful discovery request processing................ 0
- Reason for last unsuccessful discovery attempt........... Not applicable
- Time at last successful discovery attempt................ Not applicable
- Time at last unsuccessful discovery attempt.............. Not applicable
Join phase statistics
- Join requests received................................... 122
- Successful join responses sent........................... 0
- Unsuccessful join request processing..................... 0
- Reason for last unsuccessful join attempt................ Not applicable
- Time at last successful join attempt..................... Not applicable
- Time at last unsuccessful join attempt................... Not applicable
Configuration phase statistics
- Configuration requests received.......................... 115
- Successful configuration responses sent.................. 0
- Unsuccessful configuration request processing............ 0
- Reason for last unsuccessful configuration attempt....... Not applicable
--More-- or (q)uit
- Time at last successful configuration attempt............ Not applicable
- Time at last unsuccessful configuration attempt.......... Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............... Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................... Image data
request received from an unsupported AP
Last join error summary
- Type of error that occurred last......................... AP got or
has been disconnected
- Reason for error that occurred last...................... Image data
request received from an unsupported AP
- Time at which the last join error occurred............... Feb 16
00:50:16.841
Discovery phase statistics
- Discovery requests received.............................. 44
- Successful discovery responses sent...................... 44
- Unsuccessful discovery request processing................ 0
- Reason for last unsuccessful discovery attempt........... Not applicable
- Time at last successful discovery attempt................ Feb 26 18:36:24.098
- Time at last unsuccessful discovery attempt.............. Not applicable
Join phase statistics
- Join requests received................................... 44
- Successful join responses sent........................... 0
- Unsuccessful join request processing..................... 44
- Reason for last unsuccessful join attempt................ Join request receive
d from an unsupported AP
- Time at last successful join attempt..................... Not applicable
- Time at last unsuccessful join attempt................... Feb 26 18:36:39.497
Configuration phase statistics
- Configuration requests received.......................... 0
- Successful configuration responses sent.................. 0
- Unsuccessful configuration request processing............ 0
- Reason for last unsuccessful configuration attempt....... Not applicable
- Time at last successful configuration attemp--More-- or (q)uit
t............ Not applicable
- Time at last unsuccessful configuration attempt.......... Not applicable
Last AP message decrytion failure details
- Reason for last message decryption failure............... Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................... Not applicable
Last join error summary
- Type of error that occurred last......................... Lwapp join request r
ejected
- Reason for error that occurred last...................... Join request receive
d from an unsupported AP
- Time at which the last join error occurred............... Feb 26 18:36:39.497
相关信息