故障排除为何无线接入点无法加入无线控制器
简介
本文档提供有关无线控制器版本 4.2.61.0 中 show ap join stats 命令的信并演示了如何有效地 使用它们。 有关解决一个无线接入点无法加入无线控制器的详细信息， 请参阅轻型无线接入 点无法加入无线控制器的故障排除一文。如果无线接入点不发送加入到无线控制器的请求， 可以在无线接入点上进行故障排除。
此故障排除文档适用于版本 4.2.61 到 7.2.103 的所有无线控制器。
输出的 在背景资料和故障排除算法部分之后我们还列举了无线控制器上发生的不同错误 的几个例子。
先决条件
要求
本文档没有具体要求。
组件使用
本文件并不限于特定的软件和硬件版本。
本文档中的资料是从一个特定实验室环境中的设备上生成的。 本文档中使用的所有设备以缺 省（默认） 配置开始配置。 如果您的网络是正在使用的生产系统，请确保您了解所有命令带 来的潜在影响。
背景信息
无线控制器版本 4.2.61.0 开始， 无线控制器保持跟踪所有的无线接入点发送的发现请求和已 经对哪些无线接入点发送一个发现答复。 它还跟踪尝试加入无线控制器的无线接入点的成功 状态。无线控制器上有 2 个新的 CLI（通过控制台或 SSH）命令来帮助解决为什么无线接入 点无法加入无线控制器：
Show ap join stats summary [all | AP_Mac_Address] Show ap join stats detailed AP_Mac_Address
故障诊断算法
使用 show ap join stats summary all 命令来查看哪个无线接入点没有加入无线控制器。 一旦无 线控制器收到一个无线接入点的发现请求， 该无线接入点立即被插入到 show ap join stats 列 表中。
注：无线控制器不会将无线接入点从列表中删除， 直到无线控制器重新启动。 在某些情况下， 失败加入的无线接入点尝试时间超过一天或完全脱机。使用 show ap join stats detail 命令找 出从无线接入点发送出来的最后的发现请求和最后的加入请求， 以确定无线接入点是否失去 了连接或者可能转移到另一个无线控制器。
输出给出无线控制器已收到的所有发出发现请求的无线接入点总数， 然后列出这些无线接入 点当前是否加入到无线控制器。
(Cisco Controller) >show ap join stats summary all Number of APs. 3
00:0b:85:1b:7c:b0............................. Joined
00:12:44:bb:25:d0............................. Joined
00:13:19:31:9c:e0............................. Not joined
一旦你了解到未加入无线接入点使用的 MAC 地址， 使用 show ap join stats summary <mac addr>显示最后加入和失败原因。
(Cisco Controller) >show ap join stats summary 00:14:f2:63:12:50 Is the AP currently connected to controller............. Yes
Time at which the AP joined this controller last time... Jan 24 12:21:32.414
Type of error that occurred last........................ AP got or has been disconnected
Reason for error that occurred last...........Timed out while waiting for ECHO response from the AP
Time at which the last join error occurred.............. Jan 24 12:21:14.751
如果你想了解发现请求、加入请求和配置要求的详细信息，使用 show ap join stats detail
<mac-address>命令。此命令还将显示无线控制器是否只看到从无线接入点发出了发现请求 而没有看到加入请求。
(Cisco Controller) >show ap join stats detail 00:14:f2:63:12:50 Discovery phase statistics
Discovery requests received. 2
Successful discovery responses sent. 2
Unsuccessful discovery request processing. 0
Reason for last unsuccessful discovery attempt........ Not applicable
Time at last successful discovery attempt............. Jan 24 12:21:20.547
Time at last unsuccessful discovery attempt........... Not applicable
Join phase statistics
Join requests received. 2
Successful join responses sent. 2
Unsuccessful join request processing. 0
Reason for last unsuccessful join attempt............. Not applicable
Time at last successful join attempt.................. Jan 24 12:21:30.669
Time at last unsuccessful join attempt................ Not applicable
Configuration phase statistics
Configuration requests received. 2
Successful configuration responses sent. 2
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt.... Not applicable
- Successful configuration attempt...................... Jan 24 12:21:32.414
Time at last unsuccessful configuration attempt....... Not applicable Last AP message decryption failure details
Reason for last message decryption failure............ Not applicable
Last AP disconnect details
Reason for last AP connection failure......Timed out while waiting for ECHO response from the AP
Last join error summary
Type of error that occurred last...................... AP got or has been disconnected
Reason for error that occurred last...... Timed out while waiting for ECHO response from the AP
Time at which the last join error occurred............ Jan 24 12:21:14.751
例子 1
在这种情况下， 无线控制器上的时间是不正确的。 该错误表明， 无线接入点证书的有效载荷 是无效的。发生此错误是因为无线控制器上的时间与证书的有效性时间间隔不一致。通过
show time 命令指示正确的时间。注意：下面输出中的时间值为 MAR 6 1993。这是没有配置 NTP 的无线控制器的时钟开始时间。
无线接入点连接统计报告的三个阶段随着时间的推移为： 发现， 注册和配置阶段。 检查最后 一个错误摘要部分获取无线接入点无法加入或断开连接的原因。
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10 Discovery phase statistics
Discovery requests received. 2
Successful discovery responses sent. 1
Unsuccessful discovery request processing............. 2113123
Reason for last unsuccessful discovery attempt........ Discovery request received on unsupported VLAN
Time at last successful discovery attempt............. Mar 06 19:03:50.779
Time at last unsuccessful discovery attempt........... Mar 06 19:03:50.782
Join phase statistics
Join requests received. 1
Successful join responses sent. 0
Unsuccessful join request processing. 1
Reason for last unsuccessful join attempt............. Certificate payload in join request contains invalid certificate
Time at last successful join attempt.................. Not applicable
Time at last unsuccessful join attempt................ Mar 06 19:04:00.810
Configuration phase statistics
Configuration requests received. 0
Successful configuration responses sent. 0
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt.... Not applicable
Time at last successful configuration attempt......... Not applicable
Time at last unsuccessful configuration attempt....... Not applicable
Last AP message decryption failure details
Reason for last message decryption failure............ Not applicable
Last AP disconnect details
Reason for last AP connection failure................. Not applicable
Last join error summary
Type of error that occurred last...................... Lwapp join request rejected
Reason for error that occurred last...................
Certificate payload in join request contains invalid certificate
Time at which the last join error occurred............ Mar 06 19:04:00.810
例子 2
在这种情况下， 无线接入点发送的发现请求通过非管理 IP 地址所在的 VLAN 接收到。 无线控 制器拒绝所有从非管理接口子网接收到的发现请求。
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10 Discovery phase statistics
Discovery requests received. 10
Successful discovery responses sent. 5
Unsuccessful discovery request processing............. 2113123
Reason for last unsuccessful discovery attempt........
Discovery request received on unsupported VLAN
Time at last successful discovery attempt............. Jan 30 14:30:12.284
Time at last unsuccessful discovery attempt........... Jan 30 14:30:12.288
Join phase statistics
Join requests received. 4
Successful join responses sent. 0
Unsuccessful join request processing. 4
Reason for last unsuccessful join attempt.............
Certificate payload in join request contains invalid certificate
Time at last successful join attempt.................. Not applicable
Time at last unsuccessful join attempt................ Mar 06 19:19:03.345
Configuration phase statistics
Configuration requests received. 0
Successful configuration responses sent. 0
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt.... Not applicable
Time at last successful configuration attempt......... Not applicable
Time at last unsuccessful configuration attempt....... Not applicable
Last AP message decryption failure details
Reason for last message decryption failure............ Not applicable
Last AP disconnect details
Reason for last AP connection failure................. Not applicable
Last join error summary
Type of error that occurred last...................... Failed to send Lwapp discovery response
Reason for error that occurred last................. Discovery request received on unsupported VLAN
Time at which the last join error occurred............ Jan 30 14:30:12.288
例子 3
在这种情况下，无线接入点从当前无线控制器移除，连接到其它无线控制器。 注：产生该错误有多种原因，其中之一是网络中断。
(Cisco Controller) >show ap join stats detailed 00:14:1b:5a:40:10
Discovery phase statistics
Discovery requests received. 23
Successful discovery responses sent. 23
Unsuccessful discovery request processing. 0
Reason for last unsuccessful discovery attempt........ Not applicable
Time at last successful discovery attempt............. Jan 30 14:39:38.526
Time at last unsuccessful discovery attempt........... Not applicable
Join phase statistics
Join requests received. 21
Successful join responses sent. 21
Unsuccessful join request processing. 0
Reason for last unsuccessful join attempt............. Not applicable
Time at last successful join attempt.................. Jan 30 14:39:07.085
Time at last unsuccessful join attempt................ Not applicable
Configuration phase statistics
Configuration requests received. 21
Successful configuration responses sent. 21
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt.... Not applicable
Time at last successful configuration attempt......... Jan 30 14:39:09.481
Time at last unsuccessful configuration attempt....... Not applicable
Last AP message decryption failure details
Reason for last message decryption failure............ Not applicable
Last AP disconnect details
Reason for last AP connection failure.................
Timed out while waiting for ECHO response from the AP
Last join error summary
Type of error that occurred last...................... AP got or has been disconnected
Reason for error that occurred last...................
Timed out while waiting for ECHO response from the AP
Time at which the last join error occurred............ Jan 30 14:40:15.451
例子 4
在这种情况下，无线接入点的自签名证书（ SSC）与无线控制器上的不匹配。无线控制器在 转发请求到 RADIUS服务器之前总是检查其本地数据库定义。因此，当无线控制器无法找到 本地的 SSC，RADIUS授权因为无线接入点的错误而挂起。
(Cisco Controller) >show ap join stats detailed 00:13:5f:fa:88:50 Discovery phase statistics
Discovery requests received. 2
Successful discovery responses sent. 1
Unsuccessful discovery request processing............. 2113123
Reason for last unsuccessful discovery attempt........ Discovery request received on unsupported VLAN
Time at last successful discovery attempt............. Jan 30 14:58:58.070
Time at last unsuccessful discovery attempt........... Jan 30 14:58:58.071
Join phase statistics
Join requests received. 1
Successful join responses sent. 0
Unsuccessful join request processing. 1
Reason for last unsuccessful join attempt............. RADIUS authorization is pending for the AP
Time at last successful join attempt.................. Not applicable
Time at last unsuccessful join attempt................ Jan 30 14:59:13.111
Configuration requests received. 0
Successful configuration responses sent. 0
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt.... Not applicable
Time at last successful configuration attempt......... Not applicable
Time at last unsuccessful configuration attempt....... Not applicable
Last AP message decryption failure details
Reason for last message decryption failure............ Not applicable
Last AP disconnect details
Reason for last AP connection failure................. Radius authorization of the AP has failed
Last join error summary
Type of error that occurred last...................... AP got or has been disconnected
Reason for error that occurred last................... Radius authorization of the AP has failed
Time at which the last join error occurred............ Jan 30 14:59:13.117 (Cisco Controller) >
例子 5
无线控制器收到不支持类型的无线接入点发出的请求。
(Cisco Controller) >show ap join stats detailed 0026cb8168c0 Discovery phase statistics
Discovery requests received. 202
Successful discovery responses sent. 0
Unsuccessful discovery request processing. 0
Reason for last unsuccessful discovery attempt........... Not applicable
Time at last successful discovery attempt................ Not applicable
Time at last unsuccessful discovery attempt.............. Not applicable
Join phase statistics
Join requests received. 122
Successful join responses sent. 0
Unsuccessful join request processing. 0
Reason for last unsuccessful join attempt................ Not applicable
Time at last successful join attempt..................... Not applicable
Time at last unsuccessful join attempt................... Not applicable
Configuration requests received. 115
Successful configuration responses sent. 0
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt....... Not applicable
Time at last successful configuration attempt............ Not applicable
Time at last unsuccessful configuration attempt.......... Not applicable
Last AP message decryption failure details
Reason for last message decryption failure............... Not applicable
Last AP disconnect details
Reason for last AP connection failure....................
Image data request received from an unsupported AP
Last join error summary
Type of error that occurred last......................... AP got or has been disconnected
Reason for error that occurred last......................
Image data request received from an unsupported AP
Time at which the last join error occurred............... Feb 16 00:50:16.841
Discovery phase statistics
Discovery requests received. 44
Successful discovery responses sent. 44
Unsuccessful discovery request processing. 0
Reason for last unsuccessful discovery attempt........... Not applicable
Time at last successful discovery attempt................ Feb 26 18:36:24.098
Time at last unsuccessful discovery attempt.............. Not applicable
Join phase statistics
Join requests received. 44
Successful join responses sent. 0
Unsuccessful join request processing. 44
Reason for last unsuccessful join attempt................
Join request receive d from an unsupported AP
Time at last successful join attempt..................... Not applicable
Time at last unsuccessful join attempt................... Feb 26 18:36:39.497
Configuration phase statistics
Configuration requests received. 0
Successful configuration responses sent. 0
Unsuccessful configuration request processing. 0
Reason for last unsuccessful configuration attempt....... Not applicable
Time at last successful configuration attempt............ Not applicable
Time at last unsuccessful configuration attempt.......... Not applicable
Last AP message decrytion failure details
Reason for last message decryption failure............... Not applicable
Last AP disconnect details
Reason for last AP connection failure.................... Not applicable
Last join error summary
Type of error that occurred last......................... Lwapp join request rejected
Reason for error that occurred last...................... Join request received from an unsupported AP
Time at which the last join error occurred............... Feb 26 18:36:39.497