取消
显示结果 
搜索替代 
您的意思是: 
cancel
6573
查看次数
36
有帮助
1
评论
fortune
VIP Alumni
VIP Alumni
一个简单的二层组网环境,AP1602 怎么都无法加入WLC,远程到客户那边去抓取AP 跟WLC 的日志分析如下:
WLC 日志:
*spamApTask1: Jan 01 03:53:06.233: #DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:681 Failed to complete DTLS handshake with peer 192.168.201.88 for AP 74:26:ac:b0:c9:8b
*spamApTask6: Jan 01 03:52:56.565: #DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:681 Failed to complete DTLS handshake with peer 192.168.200.150 for AP d0:72:dc:3b:32:76
AP日志:
*Jan 1 04:09:05.999: %CAPWAP-3-ERRORLOG: Failed to load configuration from flash. Resetting to default config
*Jan 1 04:09:06.007: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'HaloWLC'running version 6.0.199.4 is rejected.
*Jan 1 04:09:06.007: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
*Jan 1 04:09:06.007: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
*Jan 1 04:09:06.007: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 1 04:09:06.007: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.200.7
*Jan 1 04:09:06.007: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'HaloWLC'running version 6.0.199.4 is rejected.
*Jan 1 04:09:16.003: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 1 04:10:21.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.200.9 peer_port: 5246
*Jan 1 04:10:21.295: %DTLS-5-ALERT: Received FATAL : Certificate unknown alert from 192.168.200.9
*Jan 1 04:10:21.295: %CAPWAP-3-ERRORLOG: Bad certificate alert received from peer.
*Jan 1 04:10:21.295: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.200.9:5246
*Jan 1 04:10:21.295: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
经过日志分析,检测配置发现是WLC 时间不对导致的故障,WLC 时间恢复了出厂值2000年,两个方法修改:
1.web 界面直接修改时间
2.命令行配置:
命令行修改方法:
config time manual 06/08/17 21:08:00
评论
938332752
Level 7
Level 7
这个不错,有日志,MARK ,遇到了就可以用到
入门指南

使用上面的搜索栏输入关键字、短语或问题,搜索问题的答案。

我们希望您在这里的旅程尽可能顺利,因此这里有一些链接可以帮助您快速熟悉思科社区:









快捷链接