Solved

AP250 - Orange LED, I can console, assign an IP but no L2 link (switch LED is off)

  • 21 October 2020
  • 14 replies
  • 202 views

I recently purchased 5 AP250 and three of them onboarded without issues. Two of them are stuck with an Orange LED. One is running 8.2r3 and the other one 10.0.r9b. When I console into them I see them boot. I can log into the console, but not getting a DHCP address, switch LEDs are off for both APs with this issue (tried both Aerohive and Cisco switches). I’ve reset both (pressing button and by “reset config (bootstrap)” cli commands and no change.

I assigned a static IP (int mgt0 x.x.x.x/24) and if I try to ping the gateway or another IP host on the network (which I know is there) it says “Network is unreachable” if I type show int mgt0 it says “ERROR: failed to send message to dcd (attempt to send 12 bytes, actually sent -1 (err = 111 - Connection refused)

It’ll successfully ping its own IP address and 127.x.x.x but nothing in its own subnet including the gateway.

Should I attempt flashing them with an image via USB? Where can I get the latest image? (10.0.r9b)

 

Please help

icon

Best answer by Sam Pirok 26 October 2020, 13:30

Could you try switching the port the AP is connected to with one of the working APs? It’s sounding like the AP isn’t able to reach your network, which could be a VLAN issue, a tagging issue, or a DHCP issue, all of which we can start testing by using a known good switch port.

 

Additionally this guide has a lot of good steps to take when trying to get an AP to connect: https://extremeportal.force.com/ExtrArticleDetail?n=000046466&q=CAPWAP%20troubleshooting

View original

14 replies

*** Update ***

After disconnecting both APs overnight, I reconnected them and they both registered in my VIQ. I cannot however successfully perform an update on these. 

The one running 7 goes through the update process but after rebooting is still running 7. Don’t know what else to do.

Still troubleshooting the one running 8 with no luck.

I can console into the one that is not registering. It displays the following (without even login into the AP)

the process ah_dcd is not ready!: No such file or directory

I am able to login into the Web UI of the AP. I have the option to upgrade using a HiveOS image. Is there any way I can get a copy of the latest? Unless the recommended path is not to go directly to the latest from 7.0r2.

Thanks in advance!

Userlevel 5

Hi @jrfigue , I’ve just emailed you the latest firmware for the AP 250, you should be able to upgrade directly from 7.0r2 to 10.0r9b. 

Sam,

Thanks! I received the firmware via email. I’m having issues now getting the devices to communicate on the network. I can console into them but cannot get the mgt0 interface up. I’ll continue to try to do that so I can upgrade them.

 

Thanks again.

@Sam Pirok, I haven’t been able to connect to the APs again. They power on, the switch ports’ LEDs blink for a few seconds and they go dark. The APs still have a solid Amber LED and I can console into them but no network connection whatsoever. If I configure a static IP and try to ping it says “Network unreachable” I have reset both via CLI and reset button with no change in behavior. Any ideas of what else I can try?

Thanks!

Userlevel 5

Could you try switching the port the AP is connected to with one of the working APs? It’s sounding like the AP isn’t able to reach your network, which could be a VLAN issue, a tagging issue, or a DHCP issue, all of which we can start testing by using a known good switch port.

 

Additionally this guide has a lot of good steps to take when trying to get an AP to connect: https://extremeportal.force.com/ExtrArticleDetail?n=000046466&q=CAPWAP%20troubleshooting

Sam,

Thanks for your response. I tried changing the APs to ports that are working. Say bad APs are A and B, and working APs are C and D. I switched ports so A and B are now connected to the ports where C and D were and vice versa. Not only are A and B not working on the ports previously working for C and D, but C and D have no problems on the ports previously used by A and B.

If I try to interrupt the boot process, I get 3 chances to type a password but none of the known default passwords work.

I was already familiar with the commands from the guide you linked above (found them mostly by typing ? on the CLI)

Is it possible to flash these APs via USB port? Can you share the password to interrupt the bootup process? I think at this point I might need a TFTP flash.

Thanks again for your time and help.

Userlevel 5

Thank you for testing those ports for me. You can perform a TFTP flash on these APs, but you would need to open a support case so a technician can enter that bootloader password for you. Unfortunately we aren’t able to give out the bootloader password. 

Thanks @Sam Pirok. Unfortunately, I do not have a support contract on these. I guess I’m out of luck at this point?

Thanks again for your assistance.

Userlevel 2

I don’t believe that TFTP would work since the APs have no network connectivity. Obviously they have to be replaced. @Sam Pirok: Could you please explain how this can be initiated when one has no support contract?

@reinhardg, thanks for your reply. There’s no network connectivity after booting the OS, the TFTP flash referred to here is done by interrupting the boot process. If you’re familiar with Cisco’s ROM monitor (rommon) mode in Cisco devices, bootstrap environment to handle low-level operations on the device, like TFTP flashing. I believe that’s what can be done with the bootloader password.

Userlevel 5

Sorry for the long wait here guys, thanks for your patience. It looks like you can pay for a one time case, but that can get a bit pricey just so you know. I don’t have access to exact prices, it’s based on a few different factors so you would have to talk to our technical support team for specifics. You can also request a return to factory RMA for the AP without a support contract, and that request would come in the form of another support case. I’m sorry we couldn’t get this AP up and working right now, but hopefully one of these two options will work out for you. Please let me know if I can clarify anything. 

Thanks for the info @Sam Pirok

Reply