The CAPWAP connection was lost - Acces Points (305c and AP460C)

[sharlee_aviles]

Hi there!

Since we upgraded all our Ap's to version 10.7.3.0 (most recent version up to this date) some of them are losing capwap connection, though the clients could browse the internet. The AP's are shown with the green icon (online) and then they appear gray (offline) though after 10 or 15 seconds it returns to green and the uptime is not affected (as the device did not go down).

Here I attach 2 screenshots showing the message. By doing a research in the extreme networks community, I saw another similar case/post where they had this issue with version 10.7.2.0, though when we hadthe 10.7.2.0 version installed previously, this issue wasn't happening. 

Please kindly answer to troubleshoot this issue correctly or why this is happening.

Greetings!

[Wasfi24]

I have this issue constantly happening.

The fix in my case and hope to your case too:

1- check the firewall requirments for the CAPWAP Extreme network. chick this out Australia Firewall Configuration Guides

I'm located in Australia. To check your firewall requirments. Login to Extreme IQ --> click on your account name on the top right of the page -->About ExtremeIQ--> Firewall Configuration Guide. Click on the link to find the firewall requirment in your region.

2- Increase the 300 second UDP stream timeout value on the firewall.

Thanks 

Wasfi Alshare

[sharlee_aviles]

Hi!

Thank you for the response!

I just did the firewall requirements and it seems to work, though I would share the troubleshoot I did before, combined with this, i haven´t seen that issue again:

AP's firmware version: 10.7.3.0

NOTE:  Perform this when there are no clients connected, unless you have authorization to do so.

1.- Check for port reception and transmission errors as well as port congestion from the switch where the AP in question is located:
show AP_port txerrors
show AP_port rxerrors
show AP_port congestion.

If there are errors, clear them with the command:
clear counters AP_port or all ports where there are APs.

2.- Verify that the destination server has port 12222 with the command:
show capwap client

If that port is not set, enter the AP and assign port 12222 with the command:
capwap client server port 12222
save config

3.- Disconnect and reconnect the affected AP port from the switch that controls it, this in front of the switch and disconnect and reconnect the cable.

4.- Clear local and roaming cache, this within the AP:
clear auth local-cache
clear auth roaming-cache
save config

5.- Perform complete update from IQ.

Hope this workaround could help others with this issue that I just found to be solved after a month of researching.