Wing ap7522 is not managing with WING RFS4000 controller

[yohan_vaisseau]

Hello,
I have an ap7522 that is adopted by a rfs4000 controller,but when I make
changes to the controller the ap does not take into account the changes.Best regards

[yohan_vaisseau]

the ap is not on the same site, is behind a router

below the config ap
version 2.5
!
!
client-identity-group default
load default-fingerprints
!
ip access-list BROADCAST-MULTICAST-CONTROL
permit tcp any any rule-precedence 10 rule-description "permit all TCP traffic"
permit udp any eq 67 any eq dhcpc rule-precedence 11 rule-description "permit DHCP replies"
deny udp any range 137 138 any range 137 138 rule-precedence 20 rule-description "deny windows netbios"
deny ip any 224.0.0.0/4 rule-precedence 21 rule-description "deny IP multicast"
deny ip any host 255.255.255.255 rule-precedence 22 rule-description "deny IP local broadcast"
permit ip any any rule-precedence 100 rule-description "permit all IP traffic"
!
mac access-list PERMIT-ARP-AND-IPv4
permit any any type ip rule-precedence 10 rule-description "permit all IPv4 traffic"
permit any any type arp rule-precedence 20 rule-description "permit all ARP traffic"
!
ip snmp-access-list default
permit any
!
firewall-policy default
no ip dos tcp-sequence-past-window
no stateful-packet-inspection-l2
ip tcp adjust-mss 1400
!
!
mint-policy global-default
mtu 1300
!
meshpoint-qos-policy default
!
wlan-qos-policy default
qos trust dscp
qos trust wmm
!
radio-qos-policy default
!
!
management-policy default
telnet
no http server
https server
ssh
user admin password 1 46a001a418ab5129e2d819aea71579abb50a66709139b5832b75507274d5e300 role superuser access all
snmp-server community 0 private rw
snmp-server community 0 public ro
snmp-server user snmptrap v3 encrypted des auth md5 0 admin123
snmp-server user snmpmanager v3 encrypted des auth md5 0 admin123
!
l2tpv3 policy default
!
nsight-policy default
!
profile ap7522 default-ap7522
bridge vlan 119
bridging-mode tunnel
ip igmp snooping
ip igmp snooping querier
ipv6 mld snooping
ipv6 mld snooping querier
autoinstall configuration
autoinstall firmware
crypto ikev1 policy ikev1-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ikev2 policy ikev2-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
crypto ikev1 remote-vpn
crypto ikev2 remote-vpn
crypto auto-ipsec-secure
crypto load-management
crypto remote-vpn-client
interface radio1
interface radio2
interface ge1
interface vlan1
ip address dhcp
ip address zeroconf secondary
ip dhcp client request options all
interface pppoe1
use firewall-policy default
use client-identity-group default
logging on
service pm sys-restart
router ospf
l2tpv3 tunnel vlan119
peer 1 ip-address 172.26.1.48 hostname rfs4000-F9B7DD
session vlan119 pseudowire-id 119 traffic-source vlan 119
establishment-criteria rf-domain-manager
l2tpv3 inter-tunnel-bridging
!
rf-domain default
country-code g1
use nsight-policy default
!
ap7522 B8-50-01-74-D8-40
use profile default-ap7522
use rf-domain default
hostname ap7522-74D840
location default
adoption-mode controller
ip default-gateway 172.27.1.254
interface vlan1
no description
ip address 172.27.1.250/24
no virtual-controller
rf-domain-manager capable
controller host 172.26.1.48 level 2
!
!
end

[RobertZ]

please configure firewall to best practice:

How To: How to apply the best practices firewall policy to WiNG APs

[Andrew_Blomley]

the config being sent is causing the ap to loses connection to the controller.

1) confirm you have configured a virtual interface
2) confirm you have configured a DFG (if dhcp make sure request all options has been selected)

Andy

[yohan_vaisseau]

yes,

[yohan_vaisseau]

The ap is wrong is calle test

rfs4000-F9B7DD#sh adoption status
not adopted to any wireless controller

Adopted Devices:
---------------------------------------------------------------------------------------------------------------
DEVICE-NAME VERSION CFG-STAT MSGS ADOPTED-BY LAST-ADOPTION UPTIME
---------------------------------------------------------------------------------------------------------------
LT2 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:56:59 29 days 06:34:52
SupervGSI 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:03 20 days 00:24:58
test 5.8.4.0-034R error Yes rfs4000-F9B7DD 0 days 01:17:00 0 days 01:18:31
CODIS 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:01 19 days 05:10:00
Techniques 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:02 82 days 21:17:34
FORM-CTA-CODIS-.. 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:04 20 days 00:53:41
Ardoisieres 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:01 95 days 22:46:07
Etat-major 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:01 95 days 22:46:30
Amphi 5.8.4.0-034R configured No rfs4000-F9B7DD 0 days 22:57:03 95 days 22:46:31
----------------------------------------------------------------------------------------------------------------
Total number of devices displayed: 9