AP-121 CAPWAP connection issue

  • 2
  • Question
  • Updated 4 years ago
  • Answered
(in a demo environment) I have four AP's, two 330's and two 121's. the 330's connect to my HiveManager and are having no issues. the 121's however are not ever connecting to my HM. in the CLI doing a "show capwap client" command I am given this output:

CAPWAP client: Enabled
CAPWAP transport mode: HTTP on TCP
RUN state: Connected securely to the CAPWAP server
CAPWAP client IP: 10.0.0.3
CAPWAP server IP: 207.20.36.200
HiveManager Primary Name:
HiveManager Backup Name:
CAPWAP Default Server Name: staging-beta.aerohive.com
Virtual HiveManager Name:
Server destination Port: 80
CAPWAP send event: Disabled
CAPWAP DTLS state: Enabled
CAPWAP DTLS negotiation: Enabled
DTLS next connect status: Enable
DTLS always accept bootstrap passphrase: Enabled
DTLS session status: Connected
DTLS key type: passphrase
DTLS session cut interval: 5 seconds
DTLS handshake wait interval: 60 seconds
DTLS Max retry count: 3
DTLS authorize failed: 0
DTLS reconnect count: 0
Discovery interval: 5 seconds
Heartbeat interval: 30 seconds
Max discovery interval: 10 seconds
Neighbor dead interval:105 seconds
Silent interval: 15 seconds
Wait join interval: 60 seconds
Discovery count: 0
Max discovery count: 3
Retransmit count: 1
Max retransmit count: 2
Keepalives lost/sent: 10/11
Event packet drop due to buffer shortage: 0
Event packet drop due to loss connection: 16

it never gets the HM Primary/secondary and then restarts the CAPWAP process. I am unable to get CLI output from a 330 right now, but will try to get it and edit into this post when I am able. I am new to Aerohive and unsure of what to track down first as a problem. any help would be lovely!
Photo of jonah johnson

jonah johnson

  • 6 Posts
  • 0 Reply Likes
  • sad

Posted 4 years ago

  • 2
Photo of Andrew MacTaggart

Andrew MacTaggart, Champ

  • 483 Posts
  • 86 Reply Likes
can the ap resolve staging-beta.aerohive.com

under your network policy
under advanced check you DNS server settings

is this HMOP or HMOL

looks like a HMOL

also for mgt0 dhcp use option 225 and 226 to tell the AP how to phone home

http://www.revolutionwifi.net/2011/03/aerohive-hiveap-provisioning-basics.html

I have HMOP

for isc dhcp I use

option option-225 code 225 = text;
option option-226 code 226 = ip-address;

under subnet
 option option-225 "hivemanager.yourdomain.com";
 option option-226 x.x.x.x;
Photo of jonah johnson

jonah johnson

  • 6 Posts
  • 0 Reply Likes
thanks for the reply.
its hosted by AH? myhive.aerohive.com (HMOL?) AP resolves staging-beta.aerohive.com.
The 330's worked without any manual entries. watching the capwap client, it keeps retrying the capwap connection, never seems to find primary hivemanager. 
Photo of Andrew MacTaggart

Andrew MacTaggart, Champ

  • 483 Posts
  • 86 Reply Likes
beta staging - do you know if this is 6.2 beta and if that supports AP121.

A
Photo of jonah johnson

jonah johnson

  • 6 Posts
  • 0 Reply Likes
Express   6.1r6a. Aerohive sent us this kit, so I would think the 121's would be compatible.(?)
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Jonah,
Have you entered the serial numbers for your AP121s into your HiveManager? It looks like they are successfully reaching the Redirector, but are not being instructed which VHM to go to (HiveManager primary and backup names are blank, Virtual HiveManager name is blank). 

Andrew, everyone else,
staging-beta.aerohive.com is an alias for redirector.aerohive.com. We made a goof during a beta several releases ago and inadvertently shipped some units from the factory with them pointing to staging-beta.aerohive.com, and this was our way to ensure they still connect to the production Redirector.
Photo of Andrew MacTaggart

Andrew MacTaggart, Champ

  • 483 Posts
  • 86 Reply Likes
Thanks Mike

beta threw me, but the question had to be asked

cheers
A
Photo of jonah johnson

jonah johnson

  • 6 Posts
  • 0 Reply Likes
Andrew, thanks for the ideas, helpful to try a few new things.
Mike, how hilarious it is that the AP SN was all that was missing..is there reasoning why that was not needed for the 330's but is needed for the 121s?
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Jonah,
So entering your device serial numbers did allow them to connect and be managed?

You mentioned this was a demo. I am not involved in sales or order fulfillment, but I think those systems are coupled so that when a demo or production system is ordered the serial numbers are entered into the new VHM for you. If we or your reseller subsequently sent you some other platforms that process apparently didn't get followed.
Photo of jonah johnson

jonah johnson

  • 6 Posts
  • 0 Reply Likes
Yep, that did the trick and everything works great, I actually work for a reseller and this kit was put together by Aerohive. the 330's and 121's came in the same box so I wasn't even thinking about any SN adding that was needed.