RFS4000 adopts AP7562 and unadopts it instantly

[Roman_Yusupov]

Hello guys!
Can you help me with this question?
Im running RFS4000 and adopt 1 AP7562 as Root directly connected to RFS. When I try to adopt another AP via Mesh network, I see it adopted for 1 second and then it unadopts back. It happens continiously. AP doesn't even upload config from RFS. First AP works as usual.

Thank you!

[ckelly]

Roman,

"If AP fails to detect controller on its port, it became non-root?"
There is a way to create a single AP Profile that will automatically switch a node from a root to non-root and vice-versa, but I'm trying to keep things simple here just to get the mesh connection to work.

Run these commands on both the root and non-root AP and paste the results: (Indicate which AP you are designating as the root node)

#show wireless meshpoint
#show wireless meshpoint config
#sh wireless meshpoint neighbor statistics rf

[Roman_Yusupov]

Chris,
thank you for your answer!
Im assign new profile with no-root settings In RFS and changing settings on AP - nothing happened, mint link still active, but no adoption yet. If AP fails to detect controller on its port, it became non-root?

[ckelly]

Roman,

The issue appears to come from that you copied the full config from the existing root node.
The WMM non-root node will not be connected via the wired connection and thus the meshpoint-device configuration in the non-root AP's main Profile needs to be setup to indicate that.

Current, it looks like this:
meshpoint-device ShougangMine
root <--This is what needs to change on the *non-root* node APs
monitor critical-resource action no-root
monitor primary-port-link action no-root
path-method uniform
hysteresis period 60
exclude wired-peer mint-level-1
acs priority-meshpoint 5GHz ShougangMine
acs priority-meshpoint 2.4GHz ShougangMine


Change that entry to "no root". commit write. Then try again.
Mesh APs that are setup as root nodes only accept mesh connections from other non-root nodes. They don't form mesh connections with other root nodes.
So what's happening here is that the AP is acting as a root node and therefore won't form a mesh connection with your first root node AP.

[Roman_Yusupov]

No, I made no changes, AP adopted and unadopted by itself.

[Roman_Yusupov]

config of AP

!
! Configuration of AP7562 version 5.9.2.5-001R
!
!
version 2.6
!
!
client-identity-group default
load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
disable deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
permit any
!
wlan ShougangWiFi
ssid ShougangWiFi
vlan 50
bridging-mode local
encryption-type ccmp
authentication-type none
no answer-broadcast-probes
wireless-client inactivity-timeout 600
wpa-wpa2 psk 0 Shoug@ngWiFi20!9
no wing-extensions wing-load-information
no client-load-balancing allow-single-band-clients 5ghz
no client-load-balancing allow-single-band-clients 2.4ghz
ip arp trust
shutdown on-unadoption
!

!
firewall-policy default
no ip dos smurf
no ip dos twinge
no ip dos invalid-protocol
no ip dos router-advt
no ip dos router-solicit
no ip dos option-route
no ip dos ascend
no ip dos chargen
no ip dos fraggle
no ip dos snork
no ip dos ftp-bounce
no ip dos tcp-intercept
no ip dos broadcast-multicast-icmp
no ip dos land
no ip dos tcp-xmas-scan
no ip dos tcp-null-scan
no ip dos winnuke
no ip dos tcp-fin-scan
no ip dos udp-short-hdr
no ip dos tcp-post-syn
no ip dos tcphdrfrag
no ip dos ip-ttl-zero
no ip dos ipspoof
no ip dos tcp-bad-sequence
no ip dos tcp-sequence-past-window
no ip-mac conflict
no ip-mac routing conflict
dhcp-offer-convert
no stateful-packet-inspection-l2
no virtual-defragmentation
!
!
mint-policy global-default
mtu 1460
!
meshpoint-qos-policy default
accelerated-multicast autodetect classification trust
!
radio-qos-policy default
!
meshpoint ShougangMine
description MeshConnex_Network
meshid ShougangMine
beacon-format mesh-point
control-vlan 40
allowed-vlans 40,50
neighbor inactivity-timeout 60
security-mode none
no root
!
smart-rf-policy SmartRF
sensitivity high
assignable-power 5GHz max 20
assignable-power 5GHz min 20
assignable-power 2.4GHz max 20
assignable-power 2.4GHz min 10
channel-list 5GHz 136
channel-width 5GHz auto
smart-ocs-monitoring frequency 5GHz 3
smart-ocs-monitoring frequency 2.4GHz 3
smart-ocs-monitoring sample-count 5GHz 3
smart-ocs-monitoring sample-count 2.4GHz 3
smart-ocs-monitoring extended-scan-frequency 5GHz 0
smart-ocs-monitoring extended-scan-frequency 2.4GHz 0
interference-recovery client-threshold 255
interference-recovery channel-switch-delta 5GHz 5
interference-recovery channel-switch-delta 2.4GHz 5
select-shutdown
neighbor-recovery power-threshold 5GHz -65
neighbor-recovery power-threshold 2.4GHz -65
select-shutdown cci-high-threshold -82
select-shutdown cci-low-threshold -95
select-shutdown frequency-limiter 5
select-shutdown frequency 30
coverage-hole-recovery interval 5GHz 15
coverage-hole-recovery interval 2.4GHz 15
coverage-hole-recovery coverage-interval 5GHz 5
coverage-hole-recovery coverage-interval 2.4GHz 5
interference-recovery channel-hold-time 180
!
!
management-policy default
no telnet
no http server
https server
rest-server
no ftp
ssh
user admin password 1 30edda66b744603adcdcebcf392eeff35f4b4f975891a2b413e579b84a6d3261 role superuser access all
no snmp-server manager v3
snmp-server community 0 private rw
snmp-server community 0 public ro
snmp-server user snmptrap v3 encrypted des auth md5 0 motorola
snmp-server user snmpmanager v3 encrypted des auth md5 0 motorola
!
profile ap7562 AP7562-Root
no mint mlcp ipv6
ip igmp snooping querier query-interval 2
bridge vlan 40
bridging-mode local
ip igmp snooping
ip igmp snooping querier
ipv6 mld snooping
ipv6 mld snooping querier
area ShougangMine
autoinstall configuration
no autoinstall firmware
device-upgrade count 5
crypto ikev1 policy ikev1-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ikev2 policy ikev2-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
crypto ikev1 remote-vpn
crypto ikev2 remote-vpn
crypto auto-ipsec-secure
crypto remote-vpn-client
interface radio1
channel 13
rate-selection opportunistic
placement outdoor
rts-threshold 1
wlan ShougangWiFi bss 2 primary
meshpoint ShougangMine bss 1
non-unicast tx-rate lowest-basic
antenna-mode 3x3
no dynamic-chain-selection
antenna-diversity
antenna-downtilt
interface radio2
channel 136
rate-selection opportunistic
placement outdoor
rts-threshold 1
meshpoint ShougangMine bss 1
antenna-mode 3x3
no dynamic-chain-selection
interface radio3
shutdown
placement outdoor
interface ge1
switchport mode trunk
switchport trunk native vlan 1
no switchport trunk native tagged
switchport trunk allowed vlan 1,40,50
use ip-access-list in BROADCAST-MULTICAST-CONTROL
ip arp trust
interface ge2
switchport mode access
switchport access vlan 40
use ip-access-list in BROADCAST-MULTICAST-CONTROL
ip arp trust
interface vlan1
ip address zeroconf
interface vlan40
ip address dhcp
ip dhcp client request options all
interface wwan1
interface pppoe1
use event-system-policy SNMP
use firewall-policy default
ntp server 10.10.1.6
no events on
logging forward critical
controller hello-interval 60 adjacency-hold-time 180
no cdp run
no lldp run
misconfiguration-recovery-time 0
critical-resource monitor interval 120
critical-resource CRM monitor direct all sync-adoptees 169.254.254.254 169.254.70.92 arp-only vlan 1 port ge1
critical-resource retry-count 5
service pm sys-restart
meshpoint-device ShougangMine
root
monitor critical-resource action no-root
monitor primary-port-link action no-root
path-method uniform
hysteresis period 60
exclude wired-peer mint-level-1
acs priority-meshpoint 5GHz ShougangMine
acs priority-meshpoint 2.4GHz ShougangMine

!
rf-domain ShougangMine
location Marcona
country-code ru
use smart-rf-policy SmartRF
channel-list dynamic
channel-list 5GHz 136
channel-list 2.4GHz 13
override-wlan CosapiWiFI ssid CosapiWiFi
controller-managed
!
rf-domain default
no country-code
!
ap7562 94-9B-2C-2A-BA-64
use profile AP7562-Root
use rf-domain ShougangMine
hostname VMM1-2ABA64
adoption-site ShougangMine
!
!
end


Yes, I have console access to AP's