Question
FortiAP 220B unable to discover Controller
i am using 310B as wirless controller and 221c, 221B and 220B as clients. Connected to wirless controller from remote site in tunnel mode.
i have only one 220B forti AP and it is unable to connect to wireless controller. it behaves very strange. I have configure through GUI and CLi as well. The AP is connected over ipsec VPN.
FAP22B3U10005888 # factoryreset This operation will reset the system to factory default! Do you want to continue? (y/n)y FG300B3908600454 # execute telnet 172.23.3.110 FAP22B3U10005888 login: admin BusyBox v1.15.0 (2014-09-16 17:39:37 PDT) built-in shell (ash) Enter 'help' for a list of built-in commands. FAP22B3U10005888 # cfg -s BAUD_RATE:=9600 ADMIN_TIMEOUT:=5 ADDR_MODE:=DHCP AP_IPADDR:=192.168.1.2 AP_NETMASK:=255.255.255.0 IPGW:=192.168.1.1 AP_MODE:=0 DNS_SERVER:=208.91.112.53 STP_MODE:=0 AP_MGMT_VLAN_ID:=0 TELNET_ALLOW:=0 HTTP_ALLOW:=1 DDNS_ENABLE:=0 AC_DISCOVERY_TYPE:=0 AC_IPADDR_1:=192.168.1.1 AC_HOSTNAME_1:=_capwap-control._udp.example.com AC_DISCOVERY_MC_ADDR:=224.0.1.140 AC_DISCOVERY_DHCP_OPTION_CODE:=138 AC_CTL_PORT:=5246 AC_DATA_CHAN_SEC:=2 MESH_AP_TYPE:=0 MESH_MAX_HOPS:=4 MESH_SCORE_HOP_WEIGHT:=50 MESH_SCORE_CHAN_WEIGHT:=1 MESH_SCORE_RATE_WEIGHT:=1 MESH_SCORE_BAND_WEIGHT:=100 MESH_SCORE_RSSI_WEIGHT:=100 FAP22B3U10005888 # fap-get-status Version: FortiAP-220B v5.2,build216,140916 (GA) Serial-Number: FAP22B3U10005888 BIOS version: 04000008 Regcode: ALL Base MAC: 00:09:0f:e8:81:d0 Hostname: FAP22B3U10005888 Branch point: 216 Release Version Information: GA FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : SULKING wtp-ip-addr : 172.23.3.110 ac-ip-addr : 0.0.0.0:0,0 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: clear-text ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # FAP22B3U10005888 # cfg -a AC_IPADDR_1=172.22.250.5 FAP22B3U10005888 # cfg -c restarting wtp daemon ... FAP22B3U10005888 # FAP22B3U10005888 # FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : DISCOVERY wtp-ip-addr : 172.23.3.110 ac-ip-addr : 172.22.250.5:5246,5247 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: dtls-enabled ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : AC_IP_DISCOVER wtp-ip-addr : 172.23.3.110 ac-ip-addr : 0.0.0.0:0,0 -----After sometime Controller IP addres change back to 0.0.0.0/0. base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: dtls-enabled ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : DISCOVERY wtp-ip-addr : 172.23.3.110 ac-ip-addr : 224.0.1.140:5246,0 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: dtls-enabled ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : IDLE wtp-ip-addr : 172.23.3.110 ac-ip-addr : 0.0.0.0:0,0 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: clear-text ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : DISCOVERY wtp-ip-addr : 172.23.3.110 ac-ip-addr : 255.255.255.255:5246,0 -----Now change to broadcast address.... base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: clear-text ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : DISCOVERY wtp-ip-addr : 172.23.3.110 ac-ip-addr : 255.255.255.255:5246,0 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: clear-text ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : SULKING wtp-ip-addr : 172.23.3.110 ac-ip-addr : 0.0.0.0:0,0 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: clear-text ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 # cw_diag -c wtp-cfg WTP Configuration name : FAP22B3U10005888 loc : N/A ap mode : thin AP radio cnt : 2 echo-interval : 30 discovery-interval : 5 report-interval : 30 idle-timeout : 300 statistics-interval : 120 fsm-state : SULKING wtp-ip-addr : 172.23.3.110 ac-ip-addr : 0.0.0.0:0,0 base-mac : 00:09:0f:e8:81:d0 bulk data seq num : -1 ap-mgmt-vlanid : 0 data-channel-security: clear-text ip-frag-prevent : disabled LAN port cnt : 0 FAP22B3U10005888 #