Various APs disconnecting via capwap

[huyckc]

We have had a few of our APs begin disconnecting via CAPWAP, this started quite randomly and without anything showing as to why this is happening. I have worked with these APs as this was happening, they never go down when this happens, so they continue to work for clients. I've worked with support so far the only solution is to factory reset the APs and reconfigure them. These APs are running version 10.7.2.0 at this time. Would there be anything on the wired side that could be a cause? I'm looking for any ideas to start to look at to get this to resolve. Or would this be due to the current firmware version I have seen an article with that idea as well.

https://community.extremenetworks.com/t5/extremecloud-iq/10-7-2-0-update-causing-ap-s-to-lose-capwap...

[Christoph_S]

SSH into an AP and run the following command: Show capwap client

Check the server destination port and make sure it's 12222

Server destination Port: 12222

Make sure that all proper firewall settings have been implemented: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000079399

Check to make sure the native and management vlans are properly set. If this was working before, trace back the changes made since issue was seen. 

If all else fails, please reach out to us and open a GTAC case. 

BR,

[huyckc]

Hello @Christoph_S ,

Yes I can confirm its going to destination port 12222

CAPWAP server IP: 34.67.130.66
HiveManager Primary Name:ia-gcp-cws-0.extremecloudiq.com
HiveManager Backup Name: ia-gcp-cwm.extremecloudiq.com
CAPWAP Default Server Name: redirector.aerohive.com
Virtual HiveManager Name: VHM-XDPWLSMA
Server destination Port: 12222
CAPWAP send event: Enabled
CAPWAP DTLS state: Enabled
CAPWAP DTLS negotiation: Disabled

This is some of the read out from the command.

Thanks 

Cody

[Christoph_S · Accepted solution]

Hello @huyckc,

Please start here: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000058924

This applies to any firewall and not specifically SonicWall. 

BR,

[huyckc]

Hello @Christoph_S ,

We have made the change at the firewall to extend the timer to be 300 seconds in the past. Those changes are still in effect at this time. With our firewall we don't have anything that would translate to setting a consistent NAT.

Thank you for your assistance

Cody