取消
显示结果 
搜索替代 
您的意思是: 
cancel
3736
查看次数
10
有帮助
7
回复

关于无线AP上不了线的问题

wangwang57216
Level 1
Level 1
同一型号的ap ,自带胖版本,用c1140-k9w7-tar.default 这个刷成了瘦ap,配置了固定ip ,lwapp ap ip address 10.73.160.21 255.255.255.224lwapp ap ip default-gateway 10.73.160.2
lwapp ap controller ip address 10.73.160.4
第一个ap直接上线了,剩下的几个上不了
提示这个
7 条回复7

wangwang57216
Level 1
Level 1
哪位老哥帮忙看一下子,只是拍了这么个照片,或者需要什么命令查看一下详细信息的,小白求助

AP型号较老,可能证书已经过期了。
如果WLC支持命令,可以尝试先使用:
For Version 7.0.252.0, use this command:
(WLC)>config ap lifetime-check {mic|ssc} enable
For Versions 7.4.140.0 and later, use this command:
(WLC)>config ap cert-expiry-ignore {mic|ssc} enable
参考:https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html
如果确认是证书过期导致,可以查看一下证书何时过期,将系统时间调整到该过期时间之前也行。
如果不行的话,麻烦在WLC上查看:
show sysinfo
show time
show msglog
AP上看看:
show loggin
show ip int br
show capwap client rcb
谢谢
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Rps-Cheers | If it solves your problem, please mark as answer. Thanks !

wangwang57216
Level 1
Level 1
我又看了一下wlc的日志,应该是证书过期的问题。但是我看了一下ap证书
CA Certificate
Status: Available
Certificate Serial Number (hex): 00
Certificate Usage: General Purpose
Issuer:
e=support@airespace.com
cn=ca
ou=none
o=airespace Inc
l=San Jose
st=California
c=US
Subject:
e=support@airespace.com
cn=ca
ou=none
o=airespace Inc
l=San Jose
st=California
c=US
Validity Date:
start date: 23:38:55 UTC Feb 12 2003
end date: 23:38:55 UTC Nov 11 2012
Associated Trustpoints: airespace-old-root-cert
Storage:
CA Certificate
Status: Available
Certificate Serial Number (hex): 00
Certificate Usage: Signature
Issuer:
e=support@airespace.com
cn=Airespace Root CA
ou=Engineering
o=Airespace Inc.
l=San Jose
st=California
c=US
Subject:
e=support@airespace.com
cn=Airespace Root CA
ou=Engineering
o=Airespace Inc.
l=San Jose
st=California
c=US
Validity Date:
start date: 13:41:22 UTC Jul 31 2003
end date: 13:41:22 UTC Apr 29 2013
Associated Trustpoints: airespace-new-root-cert
Storage:
CA Certificate
Status: Available
Certificate Serial Number (hex): 03
Certificate Usage: General Purpose
Issuer:
e=support@airespace.com
cn=Airespace Root CA
ou=Engineering
o=Airespace Inc.
l=San Jose
st=California
c=US
Subject:
e=support@airespace.com
cn=Airespace Device CA
ou=Engineering
o=Airespace Inc.
l=San Jose
st=California
c=US
Validity Date:
start date: 22:37:13 UTC Apr 28 2005
end date: 22:37:13 UTC Jan 26 2015
Associated Trustpoints: airespace-device-root-cert
Storage:
CA Certificate
Status: Available
Certificate Serial Number (hex): 5FF87B282B54DC8D42A315B568C9ADFF
Certificate Usage: Signature
Issuer:
cn=Cisco Root CA 2048
o=Cisco Systems
Subject:
cn=Cisco Root CA 2048
o=Cisco Systems
Validity Date:
start date: 20:17:12 UTC May 14 2004
end date: 20:25:42 UTC May 14 2029
Associated Trustpoints: Trustpool cisco-root-cert
Storage:
Certificate
Status: Available
Certificate Serial Number (hex): 54E957030000003C3AAC
Certificate Usage: General Purpose
Issuer:
cn=Cisco Manufacturing CA
o=Cisco Systems
Subject:
Name: C1140-c08c60e47f32
e=support@cisco.com
cn=C1140-c08c60e47f32
o=Cisco Systems
l=San Jose
st=California
c=US
CRL Distribution Points:
http://www.cisco.com/security/pki/crl/cmca.crl
Validity Date:
start date: 01:19:55 UTC Sep 7 2013
end date: 01:29:55 UTC Sep 7 2023
Associated Trustpoints: Cisco_IOS_MIC_cert
Storage:
CA Certificate
Status: Available
Certificate Serial Number (hex): 6A6967B3000000000003
Certificate Usage: Signature
Issuer:
cn=Cisco Root CA 2048
o=Cisco Systems
Subject:
cn=Cisco Manufacturing CA
o=Cisco Systems
CRL Distribution Points:
http://www.cisco.com/security/pki/crl/crca2048.crl
Validity Date:
start date: 22:16:01 UTC Jun 10 2005
end date: 20:25:42 UTC May 14 2029
Associated Trustpoints: Trustpool Cisco_IOS_MIC_cert
Storage:
咋这么多证书呢

wangwang57216 发表于 2020-3-31 15:44
我又看了一下wlc的日志,应该是证书过期的问题。但是我看了一下ap证书
CA Certificate
Status: Availab ...

看一下WLC的证书吧,如果是8.x的话,WLC上输入show certificate all看看。show time看看时间。
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Rps-Cheers | If it solves your problem, please mark as answer. Thanks !

likuo
Spotlight
Spotlight
我认为是证书的问题。

wangwang57216 发表于 2020-3-31 15:44
我又看了一下wlc的日志,应该是证书过期的问题。但是我看了一下ap证书
CA Certificate
Status: Availab ...

Certificate
Status: Available
Certificate Serial Number (hex): 54E957030000003C3AAC
Certificate Usage: General Purpose
Issuer:
cn=Cisco Manufacturing CA
o=Cisco Systems
Subject:
Name: C1140-c08c60e47f32
e=support@cisco.com
cn=C1140-c08c60e47f32
o=Cisco Systems
l=San Jose
st=California
c=US
CRL Distribution Points:
http://www.cisco.com/security/pki/crl/cmca.crl
Validity Date:
start date: 01:19:55 UTC Sep 7 2013
end date: 01:29:55 UTC Sep 7 2023

Associated Trustpoints: Cisco_IOS_MIC_cert
Storage:
CA Certificate
Status: Available
Certificate Serial Number (hex): 6A6967B3000000000003
Certificate Usage: Signature
Issuer:
cn=Cisco Root CA 2048
o=Cisco Systems
Subject:
cn=Cisco Manufacturing CA
o=Cisco Systems
CRL Distribution Points:
http://www.cisco.com/security/pki/crl/crca2048.crl
Validity Date:
start date: 22:16:01 UTC Jun 10 2005
end date: 20:25:42 UTC May 14 2029

Associated Trustpoints: Trustpool Cisco_IOS_MIC_cert
Storage:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Rps-Cheers | If it solves your problem, please mark as answer. Thanks !

wangwang57216
Level 1
Level 1
APe4c7.22cc.68d2#capwap ap ip add 10.73.160.23 255.255.255.224
You should configure Domain and Name Server from controller CLI/GUI.
APe4c7.22cc.68d2#capwap ap ip default-gateway 10.73.160.2
APe4c7.22cc.68d2#capwap ap controller ip address 10.73.160.4

APe4c7.22cc.68d2#show cap
后来改wlc时间,各种操作都不行。换了个型号cap2602i,直接上线了。感谢大家
APe4c7.22cc.68d2#
*Mar 1 00:03:58.635: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Mar 1 00:04:04.431: %LINK-6-UPDOWN: Interface BVI1, changed state to up
*Mar 1 00:04:05.431: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:04:15.387: %CAPWAP-3-ERRORLOG: Go join a capwap controller
examining image...!
extracting info (287 bytes)
Image info:
Version Suffix: k9w8-.152-2.JB3
Image Name: ap3g2-k9w8-mx.152-2.JB3
Version Directory: ap3g2-k9w8-mx.152-2.JB3
Ios Image Size: 1331712
Total Image Size: 11459072
Image Feature: WIRELESS LAN|LWAPP
Image Family: AP3G2
Wireless Switch Management Version: 7.4.121.0
Extracting files...
入门指南

使用上面的搜索栏输入关键字、短语或问题,搜索问题的答案。

我们希望您在这里的旅程尽可能顺利,因此这里有一些链接可以帮助您快速熟悉思科社区:









快捷链接