Aironet WAP goes down often

[shanilkumar2003]

Hi

Iam facing an issue with Aironet WAP's. Some of the WAP are going down often. This WAP are powered on with power injectors. As a workaround once after remove and reconnect the patch cable from patch panel to the power injector WAP will come up.

appreciate your help to find the root cause

Thanks in advance

Shanil

[Stephen Rodriguez]

When you say it goes down, does that mean you can't associate and pass traffic, or that it powers down?

Sent from Cisco Technical Support iPad App

[shanilkumar2003]

Yes.. i cant associate and pass traffic, but i can see the WAP from sh cdp neighbours from the switch, but not able to ping or access the WAP

[shanilkumar2003]

Yes.. i cant associate and pass traffic, but i can see the WAP from sh cdp neighbours from the switch, but not able to ping or access the WAP

[Leo Laohoo]

Do the WAP reboot? 

[shanilkumar2003]

Once after reboot the WAP i would be able to access the WAP ,associate and passtraffic.

While WAP is down its powered on and iam able to console and could see all the radio interfaces are up, there are some logs for AAA radius server authentication failed ,find below

*Mar  8 02:34:50.211: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:35:27.188: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius server 192.168.200.14:1645,1646 is responding again (previously dead).

*Mar  8 02:35:27.188: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.200.14:1645,1646 is being marked alive.

*Mar  8 02:35:38.070: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.200.14:1645,1646 is not responding.

*Mar  8 02:36:13.156: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.10.9:1645,1646 is being marked alive.

*Mar  8 02:36:28.280: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.10.9:1645,1646 is not responding.

*Mar  8 02:36:28.280: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 229.

*Mar  8 02:38:51.951: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:43:11.941: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:46:20.526: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:49:51.234: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:50:52.514: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:53:57.464: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:55:02.261: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:56:06.147: %DOT11-4-MAXRETRIES: Packet to client 0021.6a0b.b80e reached max retries, removing the client

*Mar  8 02:56:06.147: Client 0021.6a0b.b80e failed: reached maximum retries

*Mar  8 02:57:17.949: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

*Mar  8 02:58:23.966: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:59:01.895: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

*Mar  8 02:59:25.280: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:00:02.177: Client 0021.6a0b.b80e failed: reached maximum retries

*Mar  8 03:00:02.184: %DOT11-4-MAXRETRIES: Packet to client 0021.6a0b.b80e reached max retries, removing the client

*Mar  8 03:05:13.237: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:05:38.016: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius server 192.168.200.14:1645,1646 is responding again (previously dead).

*Mar  8 03:05:38.016: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.200.14:1645,1646 is being marked alive.

*Mar  8 03:05:50.177: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.200.14:1645,1646 is not responding.

*Mar  8 03:06:02.369: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 45.

*Mar  8 03:06:14.542: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:06:28.279: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius server 192.168.10.9:1645,1646 is responding again (previously dead).

*Mar  8 03:06:28.279: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.10.9:1645,1646 is being marked alive.

*Mar  8 03:06:47.921: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.10.9:1645,1646 is not responding.

*Mar  8 03:07:06.082: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 47.

*Mar  8 03:08:26.030: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

*Mar  8 03:09:00.571: %DOT11-7-AUTH_FAILED: Station 0021.6a36.f204 Authentication failed

*Mar  8 03:09:48.183: Client 0021.6a0b.b80e failed: reached maximum retries

*Mar  8 03:10:44.963: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:11:44.490: %DOT11-7-AUTH_FAILED: Station 0026.bbb1.e195 Authentication failed

*Mar  8 03:14:06.304: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:15:11.103: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:18:17.630: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:19:18.911: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:20:32.489: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

ENOCH3F1A_WAP003#sh ip int bri

Interface                  IP-Address      OK? Method Status                Protocol

BVI1                       172.20.1.20     YES NVRAM  up                    up

Dot11Radio0                unassigned      YES NVRAM  up                    up

Dot11Radio0.23             unassigned      YES unset  up                    up

Dot11Radio0.55             unassigned      YES unset  up                    up

FastEthernet0              unassigned      YES NVRAM  up                    up

FastEthernet0.23           unassigned      YES unset  up                    up

FastEthernet0.50           unassigned      YES unset  up                    up

FastEthernet0.55           unassigned      YES unset  up                    up

ENOCH3F1A_WAP003#

ENOCH3F1A_WAP003#sh dot11 as

802.11 Client Stations on Dot11Radio0:

SSID [WAP] :

MAC Address    IP address      Device        Name            Parent         State
183d.a214.3818 0.0.0.0         ccx-client    ENOCH3F1A_WAP00 self           AAA_Auth
40fc.8947.0777 0.0.0.0         unknown       -               self           AAA_Auth
a088.b420.1c34 0.0.0.0         ccx-client    ENOCH3F1A_WAP00 self           AAA_Auth

*Mar  8 02:34:50.211: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:35:27.188: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius server 192.168.200.14:1645,1646 is responding again (previously dead).

*Mar  8 02:35:27.188: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.200.14:1645,1646 is being marked alive.

*Mar  8 02:35:38.070: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.200.14:1645,1646 is not responding.

*Mar  8 02:36:13.156: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.10.9:1645,1646 is being marked alive.

*Mar  8 02:36:28.280: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.10.9:1645,1646 is not responding.

*Mar  8 02:36:28.280: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 229.

*Mar  8 02:38:51.951: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:43:11.941: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:46:20.526: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:49:51.234: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:50:52.514: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:53:57.464: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:55:02.261: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:56:06.147: %DOT11-4-MAXRETRIES: Packet to client 0021.6a0b.b80e reached max retries, removing the client

*Mar  8 02:56:06.147: Client 0021.6a0b.b80e failed: reached maximum retries

*Mar  8 02:57:17.949: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

*Mar  8 02:58:23.966: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 02:59:01.895: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

*Mar  8 02:59:25.280: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:00:02.177: Client 0021.6a0b.b80e failed: reached maximum retries

*Mar  8 03:00:02.184: %DOT11-4-MAXRETRIES: Packet to client 0021.6a0b.b80e reached max retries, removing the client

*Mar  8 03:05:13.237: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:05:38.016: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius server 192.168.200.14:1645,1646 is responding again (previously dead).

*Mar  8 03:05:38.016: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.200.14:1645,1646 is being marked alive.

*Mar  8 03:05:50.177: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.200.14:1645,1646 is not responding.

*Mar  8 03:06:02.369: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 45.

*Mar  8 03:06:14.542: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:06:28.279: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius server 192.168.10.9:1645,1646 is responding again (previously dead).

*Mar  8 03:06:28.279: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.10.9:1645,1646 is being marked alive.

*Mar  8 03:06:47.921: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.10.9:1645,1646 is not responding.

*Mar  8 03:07:06.082: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 47.

*Mar  8 03:08:26.030: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

*Mar  8 03:09:00.571: %DOT11-7-AUTH_FAILED: Station 0021.6a36.f204 Authentication failed

*Mar  8 03:09:48.183: Client 0021.6a0b.b80e failed: reached maximum retries

*Mar  8 03:10:44.963: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:11:44.490: %DOT11-7-AUTH_FAILED: Station 0026.bbb1.e195 Authentication failed

*Mar  8 03:14:06.304: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:15:11.103: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:18:17.630: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:19:18.911: %DOT11-7-AUTH_FAILED: Station 40fc.8947.0777 Authentication failed

*Mar  8 03:20:32.489: %DOT11-7-AUTH_FAILED: Station 0021.6a0b.b80e Authentication failed

ENOCH3F1A_WAP003#sh ip int bri
Interface                  IP-Address      OK? Method Status                Protocol
BVI1                       172.20.1.20     YES NVRAM  up                    up
Dot11Radio0                unassigned      YES NVRAM  up                    up
Dot11Radio0.23             unassigned      YES unset  up                    up
Dot11Radio0.55             unassigned      YES unset  up                    up
FastEthernet0              unassigned      YES NVRAM  up                    up
FastEthernet0.23           unassigned      YES unset  up                    up
FastEthernet0.50           unassigned      YES unset  up                    up
FastEthernet0.55           unassigned      YES unset  up                    up
ENOCH3F1A_WAP003#

[Scott Fella]

Well as far as associating to the ap, the logs is telling you that connectivity has been lost on the AP to radius. Have you tried moving the ap to another switchport or replacing the patch cord to see if you can isolate the issue. Can you ping from the ap to the switch?

Thanks,

Scott Fella

Sent from my iPhone

[shanilkumar2003]

I tried changing the uplink and cable to different switch port still it happened ,and please note that we are facing issue with multiple WAP's(thats why hopes should not be cable issue). Iam not able to ping the switch from AP, also switch is not showing from AP sh cdp neighbour. but from AP i can see the switch.

As from the logs if radius server is not reaching and thats the issue then still i would be able reach the WAP through management ip right?

[Leo Laohoo]

Remove your radius stuff and try again 

[George Stefanick]

As scott pointed out this doesnt appear to be an issue with your AP going up and down, rather an issue with the radius server or connection to the radius servers.

*Mar  8 02:35:27.188: %RADIUS-6-SERVERALIVE: Group rad_eap: Radius  server 192.168.200.14:1645,1646 is responding again (previously dead).

*Mar  8 02:35:27.188: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.200.14:1645,1646 is being marked alive.

*Mar  8 02:35:38.070: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.200.14:1645,1646 is not responding.

*Mar  8 02:36:13.156: %RADIUS-4-RADIUS_ALIVE: RADIUS server 192.168.10.9:1645,1646 is being marked alive.

*Mar  8 02:36:28.280: %RADIUS-4-RADIUS_DEAD: RADIUS server 192.168.10.9:1645,1646 is not responding.

*Mar  8 02:36:28.280: %RADIUS-3-ALLDEADSERVER: Group rad_eap: No active radius servers found. Id 229.

[shanilkumar2003]

HI

I tried remove the AAA Radius from WAP ,still iam not able to reach the WAP.

[Leo Laohoo]

I tried remove the AAA Radius from WAP

How?  Try the command "no aaa commun".

[shanilkumar2003]

Even if this would cannot be a resolution as iam using radius for wireless user authentication still i tried removing radius by "no aaa new-model" still iam not able to reach the wap.

[Leo Laohoo]

still iam not able to reach the wap.

What is the error message when you try to connect to the WAP?

Do you have ACL on the WAP?

Did you enable remote login using local username/password?

[shanilkumar2003]

Below is the error message iam getting from the WAP while iam trying to connect the client.  iam getting the signal but clients are not associating to the WAP.

*Mar 12 05:10:52.853: Client 0021.6a0b.b80e failed: reached maximum retries
*Mar 12 05:11:30.541: %DOT11-7-AUTH_FAILED: Station 40a6.d97d.7239 Authentication failed

*Mar 12 05:13:01.230: %DOT11-7-AUTH_FAILED: Station 001e.6567.9174 Authentication failed

There is no access-list configured, and SSH remote login to the device is configured while radius server is unavailable. users are authenticating with radius EAP authentication with Active Directory.