思科无线AP 2802无法注册，手工指定控制器的IP

背景

Cisco AP 2802I
Default username and password: Cisco Cisco
无法注册成功到wlc 5520上，AP上红灯一直闪烁。
Console连接AP，发现有获得Ip，但因为跨3层又没有dhcp option 43下发WLC IP，所以无法注册成功。
获得IP地址，

[*07/13/2019 15:42:58.9727] ethernet_port wired0, ip 10.129.101.139, netmask 255.255.254.0, gw 10.129.101.254, mtu 1500, bcast 10.129.101.255, dns1 10.138.92.77, dns2 10.138.92.76, domain corp.haier.com, vid 0, static_ip_failover false, dhcp_vlan_failover false
[*07/13/2019 15:43:02.3531] Waiting for POE negotiation to complete

发广播找WLC失败，

[*07/13/2019 15:43:20.2833] CAPWAP State: Discovery
[*07/13/2019 15:43:20.2841] IP DNS query for CISCO-CAPWAP-CONTROLLER.corp.haier.com
[*07/13/2019 15:43:20.2894] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*07/13/2019 15:43:20.2895] 
[*07/13/2019 15:43:20.2895] CAPWAP State: Discovery
[*07/13/2019 15:43:29.8251] 
[*07/13/2019 15:43:29.8251] CAPWAP State: Discovery
[*07/13/2019 15:43:29.8259] IP DNS query for CISCO-CAPWAP-CONTROLLER.corp.haier.com
[*07/13/2019 15:43:29.8327] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*07/13/2019 15:43:39.4140] 
[*07/13/2019 15:43:39.4140] CAPWAP State: Discovery
[*07/13/2019 15:43:39.4147] IP DNS query for CISCO-CAPWAP-CONTROLLER.corp.haier.com
[*07/13/2019 15:43:39.4226] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)[*07/13/2019 15:43:48.8124]

配置步骤

手工指定WLC IP

AP5C5A.C711.3B14#  capwap ap primary-base wlc 10.131.99.100

指定后，AP向WLC发起capwap注册请求，并收到response

AP5C5A.C711.3B14#
AP5C5A.C711.3B14#[*07/13/2019 15:47:32.1296] 
[*07/13/2019 15:47:32.1296] CAPWAP State: Discovery
[*07/13/2019 15:47:32.1312] Discovery Request sent to 10.131.99.100, discovery type STATIC_CONFIG(1)
[*07/13/2019 15:47:32.1314] IP DNS query for CISCO-CAPWAP-CONTROLLER.corp.haier.com
[*07/13/2019 15:47:32.1356] Discovery Request sent to 10.131.99.100, discovery type STATIC_CONFIG(1)
[*07/13/2019 15:47:32.1367] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*07/13/2019 15:47:32.1371] Discovery Response from 10.131.99.100
[*07/13/2019 15:47:32.1449] Discovery Response from 10.131.99.100
[*09/17/2019 01:45:07.0001] 
[*09/17/2019 01:45:07.0001] CAPWAP State: DTLS Setup
[*09/17/2019 01:45:07.6768] 
[*09/17/2019 01:45:07.6768] CAPWAP State: Join
[*09/17/2019 01:45:07.6784] Sending Join request to 10.131.99.100 through port 5264
[*09/17/2019 01:45:12.3377] Join Response from 10.131.99.100 
[*09/17/2019 01:45:12.3415] 
[*09/17/2019 01:45:12.3415] CAPWAP State: Image Data
[*09/17/2019 01:45:12.3784] do PRECHECK, part1 is active part

AP向WLC请求镜像，并下载完成后自动重启

[*09/17/2019 01:45:12.5267] Image Data Request sent to 10.131.99.100
[*09/17/2019 01:45:12.7613] ..................................................
[*09/17/2019 01:45:24.2017] ............ ......................................
[*09/17/2019 01:45:35.6324] ..................................................
[*09/17/2019 01:45:47.0306] .....
[*09/17/2019 01:45:48.0219] Successfully downloaded image.
[*09/17/2019 01:45:48.0590] do PREDOWNLOAD, part1 is active part
[*09/17/2019 01:45:52.6246] Image signing verify success.
[*09/17/2019 01:45:54.1258] upgrade.sh: part to upgrade is part2
[*09/17/2019 01:45:54.2868] root: Adjusting boot partition "part1" size[09/17/2019 01:45:58.4700] UBI: reserved more 6 PEBs for bad PEB handling[*09/17/2019 01:46:36.7716] upgrade.sh: AP backup version: 8.5.135.0
[*09/17/2019 01:46:36.8367] do ACTIVATE, part1 is active part
[*09/17/2019 01:46:36.9384] upgrade.sh: activate part2, set BOOT to part2
[*09/17/2019 01:46:37.4739] upgrade.sh: AP primary version: 8.5.135.0
[*09/17/2019 01:46:37.4754] upgrade.sh: AP backup version: 8.5.140.0
[*09/17/2019 01:46:40.4811] AP Rebooting: Reset Reason - **Image Upgrade**

重新启动完成后，注册到WLC上

为啥这里端口是5248 ?

[*09/17/2019 01:47:49.2620] CAPWAP State: Discovery
[*09/17/2019 01:47:49.2639] Discovery Request sent to 10.131.99.100, discovery type STATIC_CONFIG(1)
[*09/17/2019 01:47:49.2643] IP DNS query for CISCO-CAPWAP-CONTROLLER.corp.haier.com
[*09/17/2019 01:47:49.2699] Discovery Request sent to 10.131.99.100, discovery type STATIC_CONFIG(1)
[*09/17/2019 01:47:49.2710] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*09/17/2019 01:47:49.2710] 
[*09/17/2019 01:47:49.2710] CAPWAP State: Discovery
[*09/17/2019 01:47:49.2715] Discovery Response from 10.131.99.100
[*09/17/2019 01:47:49.2829] Discovery Response from 10.131.99.100[*09/17/2019 01:49:06.0000] 
[*09/17/2019 01:49:06.0000] CAPWAP State: DTLS Setup
[*09/17/2019 01:49:06.6844] 
[*09/17/2019 01:49:06.6844] CAPWAP State: Join
[*09/17/2019 01:49:06.6886] Sending Join request to 10.131.99.100 through port 5248
[*09/17/2019 01:49:06.7045] Join Response from 10.131.99.100 
[*09/17/2019 01:49:06.7848] HW CAPWAP tunnel is ADDED
[*09/17/2019 01:49:06.7997] 
[*09/17/2019 01:49:06.7997] CAPWAP State: Image Data
[*09/17/2019 01:49:06.8366] do NO_UPGRADE, part2 is active part
[*09/17/2019 01:49:06.8429] 
[*09/17/2019 01:49:06.8429] CAPWAP State: Configure
[*09/17/2019 01:49:06.8452] DOT11_CFG[0] Radio Mode is changed from Local to Local
[*09/17/2019 01:49:06.8457] DOT11_CFG[1] Radio Mode is changed from Local to Local
[*09/17/2019 01:49:07.5069] Started Radio 0
[*09/17/2019 01:49:07.5226] Stopped Radio 0

3 Logging

4 Capwap命令及配置举例
Capwap命令参考链接
https://www.cisco.com/c/en/us/td/docs/wireless/access_point/wave2-ap/command-reference/8-7/b-cisco-wave2-ap-cr/capwap_commands.pdf
4.1 AP配置hostname
cisco-wave2-ap# capwap ap hostname BJ-14F-MEETING-1
4.2 AP静态配置IP网关
Ip address, netmask , gateway, DNS, domain name
DNS可以配置多个IP
capwap ap ip 209.165.200.225 255.255.255.224 209.165.200.227 209.165.200.226 example.org
如果配置后IP没有生效，可以按下面重启AP应该就能生效了。
4.3 重启capwap protocol
capwap ap restart
4.4 AP配置多个WLC地址
capwap ap primary-base WLC1 10.248.1.1 !!这里的10.248.1.1是WLC的Ip
capwap ap secondary-base WLC2 ip2
capwap ap tertiary-base WLC3 ip3
4.5 清空AP配置
清空静态配置的IP，或清空所有
capwap ap erase static-ip
capwap ap erase all
4.6 AP开启lag（端口捆绑）
cisco-wave2-ap# capwap ap lag enable
4.7 修改模式
capwap ap mode { bridge | local }
bridge是mesh
local是集中式转发，不要理解为本地转发，本地转发模式是flexconnect
5 CAPWAP show command
5.1 AP查看注册的控制器
CISCO-AP2802# show capwap client config
AdminState : ADMIN_ENABLED(1)
Name : CISCO-AP2802
Location : default location
Primary controller name : BJ-OFF
Primary controller IP : 10.131.102.100
Secondary controller name : BJ-PRO
Secondary controller IP : 10.131.99.100
Tertiary controller name :
Tertiary controller IP :
ssh status : Enabled
ApMode : Local
ApSubMode : None
Link-Encryption : Disabled
OfficeExtend AP : Disabled
Discovery Timer : 10
Heartbeat Timer : 30
Syslog server : 255.255.255.255
Syslog level : errors
AP join priority : 1
IP Prefer-mode : IPv4
CAPWAP UDP-Lite : Unconfigured
AP retransmit count : 5
AP retransmit timer : 3
AP lsc enable : 0
AP Policy Tag : UNKNOWN
AP RF Tag : UNKNOWN
AP Site Tag : UNKNOWN
AP Tag Source : UNKNOWN
AP lsc reboot cnt : 0
AP lsc max num of retry : 0
SwVer : 8.5.151.0
spamStatTimer : 30
Led State Enabled : 1
Primed Interval : 0
AP ILP Pre-Standard Switch Support : Disabled
IPv4 TCP MSS Adjust : Disabled
IPv6 TCP MSS Adjust : Disabled
LinkFailure : 0
SpamReboots : 0
ApCrashes : 0
AP VLAN Tag status : Disabled 0
AP Power Injector : Disabled
CISCO-AP2802#
5.2 AP查看自己的IP及网关
CISCO-AP2802# show capwap ip config
IP Address : 10.130.194.181
IP netmask : 255.255.252.0
Default Gateway : 10.130.192.254

5.3 AP查看WLC IP地址及版本
CISCO-AP2802# show capwap client rcb
AdminState : ADMIN_ENABLED
OperationState : UP
Name : CISCO-AP2802
SwVer : 8.5.151.0
HwVer : 1.0.0.0
MwarApMgrIp : 10.131.102.100
MwarName : BJ-OFF
MwarHwVer : 0.0.0.0
Location : default location
ApMode : Local
ApSubMode : Not Configured
CAPWAP Path MTU : 1485
CAPWAP UDP-Lite : Enabled
IP Prefer-mode : IPv4
AP Link DTLS Encryption : OFF
AP TCP MSS Adjust : Disabled
LinkAuditing : disabled
AP Group Name : default-group
Cisco Trustsec Config
AP Inline Tagging Mode : Disabled
AP Sgacl Enforcement : Disabled
AP Override Status : Disabled
CISCO-AP2802#