topic Re: What means this in Aerohive Migrated Content

What means this

david_wild — Fri, 08 Feb 2019 16:27:20 GMT

error message?

admin:<save config https://xxxxxxx:443/afs-webapp/configuration/2/xxxxxx-deviceFull.config current admin VHM-000001VA password *** basic no-prompt>

2019-02-08 09:17:26 notice capwap: "VHM-000001VA" failed to http from server, rc=1536(6)

I would like to migrate my AP230 from Hivemanager Classic to NG. The manual that i have is https://thehivecommunity.aerohive.com/s/article/HiveManager-Classic-to-HiveManager-Migration-Guide. After that tasks, i see the AP230 in the NG, but I can't update the configurations. The Result ist always the same, also when I reboot the AP230.

Re: What means this

bruce_stahlin — Fri, 08 Feb 2019 19:01:19 GMT

What HIveOS version are you running on your APs? Try updating the OS before pushing the config in NG. Is there a firewall between the APs and HiveManager?

Re: What means this

david_wild — Fri, 08 Feb 2019 19:48:18 GMT

HiveOS on AP230 is HiveOS 8.2r2.196060.

Hivemanager is 12.8.2.2-NGVASEP18.

There is no firewall between.

Re: What means this

bruce_stahlin — Fri, 08 Feb 2019 22:27:42 GMT

Can you console or ssh into the AP to see capwap status before, during, and after the push?

sh capwap client

capwap ping capwap.server.name

Re: What means this

david_wild — Fri, 08 Feb 2019 22:50:20 GMT

2019-02-08 15:48:03 info ah_cli: admin:<clear aaa radius-server-key radiusd>

2019-02-08 15:48:03 info ah_cli: admin:<clear aaa radius-server-key openldap>

2019-02-08 15:48:03 info ah_cli: admin:<save server-files>

2019-02-08 15:48:03 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/web_pages, wildcard:*

2019-02-08 15:48:03 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/ppsk_web_pages, wildcard:*

2019-02-08 15:48:03 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/vpn/certs, wildcard:*

2019-02-08 15:48:03 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/vpn/CA, wildcard:*

2019-02-08 15:48:03 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/icons, wildcard:*

2019-02-08 15:48:04 info ah_cli: admin:<show os-detection dhcp-fingerprint-version>

2019-02-08 15:48:05 info ah_cli: admin:<clear web-directory>

2019-02-08 15:48:05 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/tmp/web_pages, wildcard:*

2019-02-08 15:48:05 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/web_pages, wildcard:*

2019-02-08 15:48:05 info ah_cli: admin:<clear web-directory ppsk-self-reg>

2019-02-08 15:48:05 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/f/ppsk_web_pages, wildcard:*

2019-02-08 15:48:05 debug ah_scd: ah_remove_path_with_wildcard: remove prefix_path:/tmp/ppsk_web_pages, wildcard:*

2019-02-08 15:48:05 info ah_cli: admin:<config rollback enable>

2019-02-08 15:48:05 info ah_cli: admin:<config rollback next-reboot>

2019-02-08 15:48:06 info ah_cli: admin:<save config https://capwap.server.name:443/afs-webapp/configuration/2/MACAddress-deviceFull.config current admin VHM-000001VA password *** basic no-prompt>

2019-02-08 15:48:08 notice capwap: "VHM-000001VA" failed to http from server, rc=1536(6)

Re: What means this

bruce_stahlin — Fri, 08 Feb 2019 22:58:05 GMT

I apologize, what is the output when you run...

show capwap client

The output should produce an output that includes:

HiveManager Primary Name:(x.x.com)

Mine is:

HiveManager Primary Name:cloud-va-cws-0.aerohive.com

Once you discover the name of your HiveManager, see if you cap perform a capwap ping. In my case it would be:

capwap ping cloud-va-cws-0.aerohive.com

Make sure you are using the output from your "show capwap client"

Re: What means this

david_wild — Fri, 08 Feb 2019 23:12:46 GMT

CAPWAP client: Enabled

CAPWAP transport mode: UDP

RUN state: Connected securely to the CAPWAP server

CAPWAP client IP: 100.64.88.61

CAPWAP server IP: 100.64.88.7

HiveManager Primary Name:100.64.88.7

HiveManager Backup Name: 100.64.88.7

CAPWAP Default Server Name: redirector.aerohive.com

Virtual HiveManager Name: home

Server destination Port: 12222

CAPWAP send event: Enabled

CAPWAP DTLS state: Enabled

CAPWAP DTLS negotiation: Disabled

DTLS next connect status: Enable

DTLS always accept bootstrap passphrase: Enabled

DTLS session status: Connected

DTLS key type: passphrase

DTLS session cut interval: 5 seconds

DTLS handshake wait interval: 60 seconds

DTLS Max retry count: 3

DTLS authorize failed: 0

DTLS reconnect count: 0

Discovery interval: 5 seconds

Heartbeat interval: 30 seconds

Max discovery interval: 10 seconds

Neighbor dead interval:105 seconds

Silent interval: 15 seconds

Wait join interval: 60 seconds

Discovery count: 0

Max discovery count: 3

Retransmit count: 0

Max retransmit count: 2

Primary server tries: 0

Backup server tries: 0

Keepalives lost/sent: 0/8032

Event packet drop due to buffer shortage: 0

Event packet drop due to loss connection: 7

Re: What means this

bruce_stahlin — Sat, 09 Feb 2019 00:07:40 GMT

OK, I see some interesting things here. First, the IP addresses of both the AP and the HiveManager are public addresses. Typically, you would want this on an private LAN. Next, I see the Hivemanager address is on the same subnet. Is all this valid? The AP doesn't think so...

Event packet drop due to loss connection: 7

I would assume a "capwap ping 100.64.88.7" will fail.

Re: What means this

david_wild — Mon, 11 Feb 2019 15:18:35 GMT

The network settings are ok. When I reset the device to the default and I configure directly through the Hivemanager NG, can I load the config without any problems. I take the same settings.

Re: What means this

david_wild — Wed, 13 Feb 2019 14:42:19 GMT

The solution was that the DNS Server are not the same on the AP and the Hivemanager.

Thanks for the helping.