ip dhcp pool VLAN110 network 192.168.110.0 255.255.255.0 dns-server 8.8.8.8 default-router 192.168.110.254 !
IP주소를 Clinet에게 할당 하였습니다.
SW01#show ip dhcp binding Bindings from all pools not associated with VRF: IP address Client-ID/ Lease expiration Type State Interface Hardware address/ User name 192.168.110.1 013e.6d3f.25af.12 Dec 27 2024 07:16 AM Automatic Active Vlan110 SW01#
mysql> create database zabbix character set utf8mb4 collate utf8mb4_bin; mysql> create user zabbix@localhost identified by 'Password123!@#'; ->password는 zabbix user password를 입력 합니다. mysql> grant all privileges on zabbix.* to zabbix@localhost; mysql> set global log_bin_trust_function_creators = 1; mysql> quit;
root@kevin-VMware-Virtual-Platform:/home/kevin# mysql -uroot -p Enter password: Welcome to the MySQL monitor. Commands end with ; or \g. Your MySQL connection id is 8 Server version: 8.0.40-0ubuntu0.24.04.1 (Ubuntu)
Copyright (c) 2000, 2024, Oracle and/or its affiliates.
Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> create database zabbix character set utf8mb4 collate utf8mb4_bin; Query OK, 1 row affected (0.01 sec)
mysql> create user zabbix@localhost identified by 'Password123!@#'; Query OK, 0 rows affected (0.03 sec)
mysql> grant all privileges on zabbix.* to zabbix@localhost; Query OK, 0 rows affected (0.01 sec)
mysql> set global log_bin_trust_function_creators = 1; Query OK, 0 rows affected, 1 warning (0.00 sec)
kevin@kevin-VMware-Virtual-Platform:~$ sudo apt-get upgrade Reading package lists... Done Building dependency tree... Done Reading state information... Done Calculating upgrade... Done The following upgrades have been deferred due to phasing: python3-distupgrade ubuntu-release-upgrader-core ubuntu-release-upgrader-gtk The following packages have been kept back: gnome-control-center linux-generic-hwe-24.04 linux-headers-generic-hwe-24.04 linux-image-generic-hwe-24.04 The following packages will be upgraded: acl alsa-ucm-conf amd64-microcode apparmor apport apport-core-dump-handler apport-gtk bubblewrap cloud-init cpp-13 cpp-13-x86-64-linux-gnu cups cups-browsed cups-bsd cups-client cups-common cups-core-drivers cups-daemon cups-ipp-utils cups-ppdc cups-server-common distro-info-data dmidecode dmsetup evince evince-common firmware-sof-signed fwupd gcc-13-base gcc-14-base ghostscript gir1.2-glib-2.0 gir1.2-gnomebluetooth-3.0 gir1.2-gstreamer-1.0 gir1.2-gtk-3.0 gir1.2-javascriptcoregtk-4.1 gir1.2-javascriptcoregtk-6.0 gir1.2-mutter-14 gir1.2-nm-1.0 gir1.2-packagekitglib-1.0 gir1.2-soup-3.0 gir1.2-webkit-6.0 gir1.2-webkit2-4.1 gnome-bluetooth-3-common gnome-bluetooth-sendto gnome-control-center-data gnome-control-center-faces gnome-initial-setup gnome-shell gnome-shell-common gnome-shell-extension-appindicator gnome-shell-extension-ubuntu-dock gstreamer1.0-alsa gstreamer1.0-gl gstreamer1.0-packagekit gstreamer1.0-pipewire gstreamer1.0-plugins-base gstreamer1.0-plugins-base-apps gstreamer1.0-plugins-good gstreamer1.0-tools gstreamer1.0-x gtk-update-icon-cache heif-gdk-pixbuf heif-thumbnailer initramfs-tools initramfs-tools-bin initramfs-tools-core intel-microcode ipp-usb krb5-locales ldap-utils libacl1 libapparmor1 libarchive13t64 libatomic1 libaudit-common libaudit1 libcryptsetup12 libcups2t64 libcupsfilters2-common libcupsfilters2t64 libcupsimage2t64 libcurl3t64-gnutls libcurl4t64 libdevmapper1.02.1 libegl-mesa0 libevdocument3-4t64 libevview3-3t64 libexpat1 libfwupd2 libgbm1 libgcc-s1 libgl1-mesa-dri libglapi-mesa libglib2.0-0t64 libglib2.0-bin libglib2.0-data libglx-mesa0 libgnome-bluetooth-3.0-13 libgnome-bluetooth-ui-3.0-13 libgomp1 libgs-common libgs10 libgs10-common libgsf-1-114 libgsf-1-common libgssapi-krb5-2 libgstreamer-gl1.0-0 libgstreamer-plugins-base1.0-0 libgstreamer-plugins-good1.0-0 libgstreamer1.0-0 libgtk-3-0t64 libgtk-3-bin libgtk-3-common libheif-plugin-aomdec libheif-plugin-aomenc libheif-plugin-libde265 libheif1 libipa-hbac0t64 libjavascriptcoregtk-4.1-0 libjavascriptcoregtk-6.0-1 libk5crypto3 libkrb5-3 libkrb5support0 libldap-common libldap2 libmpg123-0t64 libmutter-14-0 libnm0 libnss-sss libopenjp2-7 libpackagekit-glib2-18 libpam-sss libpipewire-0.3-0t64 libpipewire-0.3-common libpipewire-0.3-modules libppd2 libppd2-common libproc2-0 libpython3.12-minimal libpython3.12-stdlib libpython3.12t64 libsoup-2.4-1 libsoup-3.0-0 libsoup-3.0-common libsoup2.4-common libspa-0.2-bluetooth libspa-0.2-modules libspeex1 libssl3t64 libsss-certmap0 libsss-idmap0 libsss-nss-idmap0 libstdc++6 libsysmetrics1 libtiff6 libudisks2-0 libwebkit2gtk-4.1-0 libwebkitgtk-6.0-4 libxatracker2 linux-firmware linux-libc-dev linux-tools-common login mesa-vulkan-drivers mtr-tiny mutter-common mutter-common-bin nano network-manager network-manager-config-connectivity-ubuntu openssl openvpn packagekit packagekit-tools passwd pipewire pipewire-alsa pipewire-audio pipewire-bin pipewire-pulse procps python3-apport python3-pkg-resources python3-problem-report python3-software-properties python3-sss python3-update-manager python3-urllib3 python3.12 python3.12-minimal snapd software-properties-common software-properties-gtk ssh-import-id sssd sssd-ad sssd-ad-common sssd-common sssd-ipa sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy systemd-hwe-hwdb thermald ubuntu-advantage-desktop-daemon ubuntu-drivers-common ubuntu-pro-client ubuntu-pro-client-l10n ubuntu-report ubuntu-settings udisks2 unzip update-manager update-manager-core vim-common vim-tiny xdg-desktop-portal xserver-common xserver-xephyr xserver-xorg-core xserver-xorg-legacy xwayland xxd zip 226 upgraded, 0 newly installed, 0 to remove and 7 not upgraded. Need to get 718 MB of archives. After this operation, 23.7 MB of additional disk space will be used. N: Some packages may have been kept back due to phasing. Do you want to continue? [Y/n] y Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 login amd64 1:4.13+dfsg1-4ubuntu3.2 [202 kB] Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libexpat1 amd64 2.6.1-2ubuntu0.2 [87.4 kB] Get:3 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libpython3.12t64 amd64 3.12.3-1ubuntu0.3 [2,333 kB] 0% [3 libpython3.12t64 1,322 kB/2,333 kB 57%]
업그레이드가 완료 될때까지 기다립니다.
kevin@kevin-VMware-Virtual-Platform:~$ sudo apt-get update Hit:1 http://archive.ubuntu.com/ubuntu noble InRelease Hit:2 http://security.ubuntu.com/ubuntu noble-security InRelease Hit:3 http://archive.ubuntu.com/ubuntu noble-updates InRelease Hit:4 http://archive.ubuntu.com/ubuntu noble-backports InRelease Reading package lists... Done kevin@kevin-VMware-Virtual-Platform:~$ sudo apt-get upgrade Reading package lists... Done Building dependency tree... Done Reading state information... Done Calculating upgrade... Done The following upgrades have been deferred due to phasing: python3-distupgrade ubuntu-release-upgrader-core ubuntu-release-upgrader-gtk The following packages have been kept back: gnome-control-center linux-generic-hwe-24.04 linux-headers-generic-hwe-24.04 linux-image-generic-hwe-24.04 0 upgraded, 0 newly installed, 0 to remove and 7 not upgraded. N: Some packages may have been kept back due to phasing. kevin@kevin-VMware-Virtual-Platform:~$
더이상 업데이트 할것이 없습니다.
지금까지 [ZABBIX][#3]-Ubuntu 24.04.01 update/upgrade 글을 읽어주셔서 감사합니다.
오늘은 C9800에 Data Interface 2개를 Port Channel로 구성하는 방법에 대해서 알아보겠습니다.
WLC01: Gi3 - MGMT IP vrf MGMT
G1 and G2 - Portchannel 01로 묶고 Trunk 포트로 모든 VLAN를 허용 하게 설정 하겠습니다.
1. WLC GUI에 접속합니다.
Gi1/Gi2를 아래와 같이 설정합니다.
2. Port-channel를 설정합니다.
SW01(config)#int ra g1/0, gi0/3 SW01(config-if-range)#channel-group 1 mode on SW01(config)#int po 1 SW01(config-if)#sw tr en dot1q SW01(config-if)#sw mo trunk
Interface Status 확인
SW01#show int status
Port Name Status Vlan Duplex Speed Type Gi0/0 connected trunk auto auto unknown Gi0/1 connected trunk auto auto unknown Gi0/2 connected 100 auto auto unknown Gi0/3 connected trunk auto auto unknown Gi1/0 connected 1 auto auto unknown Gi1/1 connected 10 auto auto unknown Gi1/2 connected 20 auto auto unknown Gi1/3 connected 100 auto auto unknown Po1 connected trunk auto auto SW01#
테스트를 위해서 WLC 아래와 같이 설정 합니다.
VLAN 110
VLAN 120 VLAN 130
SVI 110 - 192.168.110.254
SVI 120 - 192.168.120.254
SVI 130 - 192.168.130.254
VLAN 110를 설정합니다. 그리고 아래 사진처럼 VLAN 120, VLAN 130도 설정 합니다.
VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------- 1 default active Gi1/0 10 VLAN0010 active Gi1/1 20 VLAN0020 active Gi1/2 30 VLAN0030 active 100 VLAN0100 active Gi0/2, Gi1/3 110 VLAN0110 active 120 VLAN0120 active 130 VLAN0130 active 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup SW01#
SW01#show ip int brie Interface IP-Address OK? Method Status Protocol GigabitEthernet0/0 unassigned YES unset up up GigabitEthernet0/1 unassigned YES unset up up GigabitEthernet0/2 unassigned YES unset up up GigabitEthernet0/3 unassigned YES unset up up GigabitEthernet1/0 unassigned YES unset up up GigabitEthernet1/1 unassigned YES unset up up GigabitEthernet1/2 unassigned YES unset up up GigabitEthernet1/3 unassigned YES unset up up Port-channel1 unassigned YES unset down down Vlan10 192.168.10.250 YES NVRAM administratively down down Vlan20 unassigned YES unset administratively down down Vlan100 192.168.100.179 YES NVRAM up up Vlan110 192.168.110.253 YES manual up up Vlan120 192.168.120.253 YES manual up up Vlan130 192.168.130.253 YES manual up up
ping test
SW01#ping 192.168.110.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.110.254, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/3 ms SW01#ping 192.168.120.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.120.254, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/6 ms SW01#ping 192.168.130.254 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.130.254, timeout is 2 seconds: .!!!! Success rate is 80 percent (4/5), round-trip min/avg/max = 1/2/4 ms SW01#
SW01#show etherchannel summary Flags: D - down P - bundled in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use N - not in use, no aggregation f - failed to allocate aggregator
M - not in use, minimum links not met m - not in use, port not aggregated due to minimum links not met u - unsuitable for bundling w - waiting to be aggregated d - default port
A - formed by Auto LAG
Number of channel-groups in use: 1 Number of aggregators: 1
Group Port-channel Protocol Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SU) - Gi0/3(P) Gi1/0(P)
지금까지 [C9800CL][#8]- Data Interface Redundancy - Port Channel 글을 읽어주셔서 감사합니다.
사용할 방법은 AP MAC주소를 WLC에 등록해서 허가된 AP MAC만 WLC에 등록 할 수 있습니다.
AP IP: DHCP Server로 부터 IP주소를 받아감. 192.168.200.X/24
AP GW: 192.168.200.181
WLC: 192.168.100.182 DHCP option43를 이용함.
1. Configuration -> Security -> AAA 클릭 합니다.
2. AAA Advanced -> AP Policy 에서 Authorized AP aginast MAC를 Enable하고 Apply를 클릭 합니다.
*** 만약에 Default값으로 아래 처럼 설정 안되어져 있으면 추가로 설정 합니다. ***
3. 현재 아래처럼 AP한대가 WLC에 등록 되어져 있습니다.
4. AP를 재부팅 합니다.
5. 약 5분후 - Monitoring -> Wireless -> AP statistics를 클릭해서 AP가 상태를 확인 합니다.
AP가 WLC에게 CAPWAP join request 메시지를 전송하지만 reponse패킷을 받지 못합니다.
그리고 CAPWAP state: DTLS Teardown이 되고, 다시 CAPWAP join request를 보냅니다. 이 과정을 반복합니다.
[*12/25/2024 05:57:51.4299] CAPWAP State: Join [*12/25/2024 05:57:51.6198] Sending Join request to 192.168.100.182 through port 5272, packet size 1376 [*12/25/2024 05:57:56.3783] Sending Join request to 192.168.100.182 through port 5272, packet size 1376 [*12/25/2024 05:58:01.0569] Sending Join request to 192.168.100.182 through port 5272, packet size 896
[*12/25/2024 05:58:48.1321] CAPWAP State: DTLS Teardown [*12/25/2024 05:58:48.3621] status 'upgrade.sh: Script called with args:[CANCEL]' [*12/25/2024 05:58:48.4121] do CANCEL, part2 is active part [*12/25/2024 05:58:48.4320] status 'upgrade.sh: Cleanup tmp files ...' [*12/25/2024 05:58:53.0506] dtls_queue_first: Nothing to extract! [*12/25/2024 05:58:53.0506] [*12/25/2024 05:58:53.5504] Discovery Response from 192.168.100.182 [*12/25/2024 05:59:04.0000] Started wait dtls timer (60 sec) [*12/25/2024 05:59:04.0099] [*12/25/2024 05:59:04.0099] CAPWAP State: DTLS Setup [*12/25/2024 05:59:04.1799] First connect to vWLC, accept vWLC by default [*12/25/2024 05:59:04.1799] [*12/25/2024 05:59:04.1799] dtls_verify_server_cert: vWLC is using SSC, returning 1 [*12/25/2024 05:59:04.2599] [*12/25/2024 05:59:04.2599] CAPWAP State: Join [*12/25/2024 05:59:04.4299] Sending Join request to 192.168.100.182 through port 5272, packet size 1376 [*12/25/2024 05:59:09.1284] Sending Join request to 192.168.100.182 through port 5272, packet size 1376
[*12/25/2024 06:20:28.8807] CAPWAP State: Discovery [*12/25/2024 06:20:28.8807] Got WLC address 192.168.100.182 from DHCP. [*12/25/2024 06:20:29.1006] Discovery Request sent to 192.168.100.182, discovery type STATIC_CONFIG(1) [*12/25/2024 06:20:29.3005] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*12/25/2024 06:20:29.3005] Discovery Response from 192.168.100.182 [*12/25/2024 06:20:39.0000] Started wait dtls timer (60 sec) [*12/25/2024 06:20:39.0099] [*12/25/2024 06:20:39.0099] CAPWAP State: DTLS Setup [*12/25/2024 06:20:39.1099] First connect to vWLC, accept vWLC by default [*12/25/2024 06:20:39.1099] [*12/25/2024 06:20:39.1199] dtls_verify_server_cert: vWLC is using SSC, returning 1 [*12/25/2024 06:20:39.1799] [*12/25/2024 06:20:39.1799] CAPWAP State: Join [*12/25/2024 06:20:39.3399] Sending Join request to 192.168.100.182 through port 5272, packet size 1376 [*12/25/2024 06:20:43.9185] Sending Join request to 192.168.100.182 through port 5272, packet size 1376 [*12/25/2024 06:20:44.1484] Join Response from 192.168.100.182, packet size 1397 [*12/25/2024 06:20:44.1484] AC accepted previous sent request with result code: 0 [*12/25/2024 06:20:44.1484] Received wlcType 0, timer 30 [*12/25/2024 06:20:44.2584] nss_capwapmgr_enable_tunnel[1682]:ef30e800: tunnel 0 is already enabled [*12/25/2024 06:20:44.2783] [*12/25/2024 06:20:44.2783] CAPWAP State: Image Data [*12/25/2024 06:20:44.2883] AP image version 17.13.0.107 backup 17.8.0.144, Controller 17.13.0.107 [*12/25/2024 06:20:44.2883] Version is the same, do not need update. [*12/25/2024 06:20:44.3583] status 'upgrade.sh: Script called with args:[NO_UPGRADE]' [*12/25/2024 06:20:44.3983] do NO_UPGRADE, part2 is active part [*12/25/2024 06:20:44.4183] [*12/25/2024 06:20:44.4183] CAPWAP State: Configure [*12/25/2024 06:20:44.6382] Radio [2] Administrative state DISABLED change to ENABLED [*12/25/2024 06:20:44.6382] Radio [1] Administrative state DISABLED change to ENABLED [*12/25/2024 06:20:44.6382] Radio [0] Administrative state DISABLED change to ENABLED [*12/25/2024 06:20:45.3880] [*12/25/2024 06:20:45.3880] CAPWAP State: Run [*12/25/2024 06:20:45.4680] AP has joined controller WLC01 [*12/25/2024 06:20:45.4680] Flexconnect Switching to Connected Mode! [*12/25/2024 06:20:46.0678] Previous AP mode is 2, change to 2 [*12/25/2024 06:20:46.0778] Current session mode: ssh, Configured: Telnet-No, SSH-No, Console-Yes [*12/25/2024 06:20:46.0778] [*12/25/2024 06:20:46.3377] Current session mode: telnet, Configured: Telnet-No, SSH-No, Console-Yes [*12/25/2024 06:20:46.3377] [*12/25/2024 06:20:46.3577] Current session mode: console, Configured: Telnet-No, SSH-No, Console-Yes [*12/25/2024 06:20:46.3577] [*12/25/2024 06:20:46.4177] chpasswd: password for user changed [*12/25/2024 06:20:46.4677] chpasswd: password for user changed [*12/25/2024 06:20:46.6376] [*12/25/2024 06:20:46.6376] Same LSC mode, no action needed [*12/25/2024 06:20:46.9275] Same value is already set. [*12/25/2024 06:20:47.2374] USB Device Disconnected from the AP [*12/25/2024 06:20:47.3974] Got WSA Server config TLVs [*12/25/2024 06:20:48.7270] Socket: Valid Element: wcp/wcp_db Handler: set_vlan_name_map Data: null Length: 10 [*12/25/2024 06:20:50.4064] SD AVC only supports 802.11ax AP [*12/25/2024 06:20:50.5664] Re-Tx Count=1, Max Re-Tx Value=5, SendSeqNum=16, NumofPendingMsgs=1 [*12/25/2024 06:20:50.5664] [*12/25/2024 06:20:50.8163] DOT11_DRV[0]: Stop Radio0 - Begin [*12/25/2024 06:20:50.8963] DOT11_DRV[0]: Stop Radio0 - End [*12/25/2024 06:20:50.8963] DOT11_DRV[0]: Start Radio0 - Begin [*12/25/2024 06:20:50.8963] DOT11_DRV[0]: Start Radio0 - End [*12/25/2024 06:20:53.0756] **** CAC start for 62 seconds for radio 1 **** [*12/25/2024 06:21:15.6385] netlink socket init done, pnl->spectral_fd=4 [*12/25/2024 06:21:15.6385] CLEANAIR: Slot 0 admin disabled [*12/25/2024 06:21:16.6382] CLEANAIR: Slot 1 admin disabled [*12/25/2024 06:21:55.1962] cac_timeout cac expired, chan 5560 curr time 306 [*12/25/2024 06:21:55.1962] **** CAC stop for radio 1 ****
Username: Username: % Authentication failed
아래 사진처럼 AP가 WLC에 등록 되었습니다.
시간이 지나도 AP는 계속 UP상태 입니다. 그 이유는 이미 WLC등록되어기 때문에, 다시 AP Authentication를 확인 하지 않습니다.
AP를 재부팅 합니다.
재부팅후에는 다시 AP authentication를 시도해야합니다. 하지만 WLC에서 AP MAC주소를 제거 했기 떄문에, 아래처럼 인증 실패로 표시 됩니다.
지금까지 [C9800CL][#7]- AP authentication - AP Mac Filter 글을 읽어주셔서 감사합니다.
Type: Sub-option code 241, used to define a method for Cisco Lightweight APs, represented in hex (f1)
Length: Number of controller IP addresses to be supplied - multiplied by 4, represented in hex (04)
Value: List of Cisco WLC IP addresses, represented in hex(c0a864b6)
1. 스위치에서 DHCP 서버를 설정합니다
ip dhcp pool AP-MGMT-POOL network 192.168.200.0 255.255.255.0 dns-server 8.8.8.8 default-router 192.168.200.181 option 43 hex f104.c0a8.64b6
2. AP에서 IP주소를 확인 합니다
APC884.A1CC.2F48#show ip interface brief Brief summary of IP status and configuration APC884.A1CC.2F48#show ip interface brief Interface IP-Address Method Status Protocol Speed Duplex wired0 192.168.200.1 DHCP up up 1000 full wired1 n/a n/a administatively down down n/a n/a auxiliary-client unassigned unset up up n/a n/a wifi0 n/a n/a administatively down down n/a n/a wifi1 n/a n/a administatively down down n/a n/a
3. switch에서 IP주소 Binding를 확인 합니다
SW1#show ip dhcp binding Bindings from all pools not associated with VRF: IP address Client-ID/ Lease expiration Type Hardware address/ User name 192.168.200.1 01c8.84a1.cc2f.48 Dec 25 2024 11:09 AM Automatic SW1#
4. 아래처럼 capwap 명령어로도 확인 가능 합니다.
APC884.A1CC.2F48#show capwap ip config CAPWAP IP static configuration APC884.A1CC.2F48#show capwap ip config IP Address : 192.168.200.1 IP netmask : 255.255.255.0 Default Gateway : 192.168.200.181
5. 패킷 상황
[*12/24/2024 10:49:41.9079] pid 4559's new affinity mask: 1 [*12/24/2024 10:49:42.0079] hostapd:failed to open wcp socket [*12/24/2024 10:49:42.2878] device aptrace0 entered promiscuous mode [*12/24/2024 10:49:43.0275] pid 4632's current affinity mask: 3 [*12/24/2024 10:49:43.0275] pid 4632's new affinity mask: 1 [*12/24/2024 10:49:43.6273] USB not initialized [*12/24/2024 10:49:44.0372] chpasswd: password for user changed [*12/24/2024 10:49:45.0069] ethernet_port wired0, ip 192.168.200.1, netmask 255.255.255.0, gw 192.168.200.181, mtu 1500, bcast 192.168.200.255, dns1 8.8.8.8, vid 0, static_ip_failover false, dhcp_vlan_failover false [*12/24/2024 10:49:46.0366] Check whether client_ip_table entry need to be cleared 0 [*12/24/2024 10:49:46.0366] Clearing client entry [*12/24/2024 10:49:46.1366] DOT11_TXP[0]:Domain configured: 1 class:E [*12/24/2024 10:49:46.3365] DOT11_TXP[0]:Regdb file: /radio_fw/AP1852I_power_table_mapping.txt [*12/24/2024 10:49:46.3665] DOT11_TXP[1]:Domain configured: 14 class:S [*12/24/2024 10:49:46.8263] /etc/dnsmasq.host.conf: [*12/24/2024 10:49:46.8363] no-resolv [*12/24/2024 10:49:46.8363] pid-file=/var/run/dnsmasq.host.pid [*12/24/2024 10:49:46.8363] port=53 [*12/24/2024 10:49:46.8363] min-port=61000 [*12/24/2024 10:49:46.8363] server=8.8.8.8 [*12/24/2024 10:49:46.8363] bind-interfaces [*12/24/2024 10:49:46.8363] interface=lo [*12/24/2024 10:49:47.1363] DOT11_TXP[1]:Regdb file: /radio_fw/AP1852I_power_table_mapping.txt [*12/24/2024 10:49:47.4661] DOT11_DRV[1]: vendor_set_slot_capability: slot 1, radio_service_type 0 [*12/24/2024 10:49:47.4661] DOT11_DRV[1]: Init Radio1 [*12/24/2024 10:49:47.4961] DOT11_DRV[1]: set_channel Channel set to 36 [*12/24/2024 10:49:47.5261] DOT11_DRV[0]: vendor_set_slot_capability: slot 0, radio_service_type 0 [*12/24/2024 10:49:47.5261] DOT11_DRV[0]: Init Radio0 [*12/24/2024 10:49:47.5561] DOT11_DRV[0]: set_channel Channel set to 6 [*12/24/2024 10:49:47.9660] DOT11_DRV[0]: set_channel Channel set to 1 [*12/24/2024 10:49:47.9760] DOT11_DRV[0]: Channel set to 1, width 20 [*12/24/2024 10:49:47.9760] DOT11_DRV[0]: Channel set to 1 skipped [*12/24/2024 10:49:48.3559] DOT11_DRV[0]: Channel set to 1, width 20 [*12/24/2024 10:49:48.3559] DOT11_DRV[0]: Channel set to 1 skipped [*12/24/2024 10:49:48.4358] DOT11_DRV[1]: set_channel Channel set to 36 [*12/24/2024 10:49:48.4358] DOT11_DRV[1]: Channel set to 36, width 20 [*12/24/2024 10:49:48.4358] DOT11_DRV[1]: Channel set to 36 skipped [*12/24/2024 10:49:48.5258] DOT11_DRV[1]: Channel set to 36, width 20 [*12/24/2024 10:49:48.5258] DOT11_DRV[1]: Channel set to 36 skipped [*12/24/2024 10:49:54.5839] pid 4895's current affinity mask: 3 [*12/24/2024 10:49:54.5839] pid 4895's new affinity mask: 1 [*12/24/2024 10:49:55.2737] AP IPv4 Address updated from 0.0.0.0 to 192.168.200.1 [*12/24/2024 10:49:58.9726] dtls_init: Use MIC certificate [*12/24/2024 10:49:59.2825] [*12/24/2024 10:49:59.2825] CAPWAP State: Init [*12/24/2024 10:50:08.5096] PNP:Server not reachable, Start CAPWAP Discovery [*12/24/2024 10:50:08.5196] [*12/24/2024 10:50:08.5196] CAPWAP State: Discovery [*12/24/2024 10:50:08.5196] Got WLC address 192.168.100.182 from DHCP. [*12/24/2024 10:50:08.7295] Discovery Request sent to 192.168.100.182, discovery type DHCP(2) [*12/24/2024 10:50:08.7795] Discovery Response from 192.168.100.182 [*12/24/2024 10:50:08.9294] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*12/24/2024 10:50:08.9494] [*12/24/2024 10:50:08.9494] CAPWAP State: Discovery [*12/24/2024 11:24:00.0000] Started wait dtls timer (60 sec) [*12/24/2024 11:24:00.0000] [*12/24/2024 11:24:00.0000] CAPWAP State: DTLS Setup [*12/24/2024 11:24:00.0999] First connect to vWLC, accept vWLC by default [*12/24/2024 11:24:00.0999] [*12/24/2024 11:24:00.1099] dtls_verify_server_cert: vWLC is using SSC, returning 1 [*12/24/2024 11:24:00.1699] [*12/24/2024 11:24:00.1699] CAPWAP State: Join [*12/24/2024 11:24:00.3499] Sending Join request to 192.168.100.182 through port 5248, packet size 1376 [*12/24/2024 11:24:02.5492] [*12/24/2024 11:24:02.5492] phy_value=0: org="0x1800" phy_reg="0x1000" [*12/24/2024 11:24:02.5592] device wired1 left promiscuous mode [*12/24/2024 11:24:02.5592] [*12/24/2024 11:24:02.5592] Detect link-status changed !! [*12/24/2024 11:24:02.5592] wired1 ADDED [*12/24/2024 11:24:04.9185] Sending Join request to 192.168.100.182 through port 5248, packet size 1376 [*12/24/2024 11:24:05.0184] Join Response from 192.168.100.182, packet size 1397 [*12/24/2024 11:24:05.0184] AC accepted previous sent request with result code: 0 [*12/24/2024 11:24:05.0184] Received wlcType 0, timer 30 [*12/24/2024 11:24:05.0684] nss_capwapmgr_enable_tunnel[1682]:c5b68000: tunnel 0 is already enabled [*12/24/2024 11:24:05.1284] [*12/24/2024 11:24:05.1284] CAPWAP State: Image Data [*12/24/2024 11:24:05.1284] AP image version 17.13.0.107 backup 17.8.0.144, Controller 17.13.0.107 [*12/24/2024 11:24:05.1284] Version is the same, do not need update. [*12/24/2024 11:24:05.1884] status 'upgrade.sh: Script called with args:[NO_UPGRADE]' [*12/24/2024 11:24:05.2384] do NO_UPGRADE, part2 is active part [*12/24/2024 11:24:05.2584] [*12/24/2024 11:24:05.2584] CAPWAP State: Configure [*12/24/2024 11:24:05.2584] Telnet is not supported by AP, should not encode this payload [*12/24/2024 11:24:05.4683] Radio [2] Administrative state DISABLED change to ENABLED [*12/24/2024 11:24:05.4683] Radio [1] Administrative state DISABLED change to ENABLED [*12/24/2024 11:24:05.4683] Radio [0] Administrative state DISABLED change to ENABLED [*12/24/2024 11:24:05.4783] DOT11_CFG[1]: Starting radio 1 [*12/24/2024 11:24:05.4783] DOT11_DRV[1]: Start Radio1 - Begin [*12/24/2024 11:24:05.4783] DOT11_DRV[1]: Start Radio1 - End [*12/24/2024 11:24:05.4783] DOT11_CFG[0]: Starting radio 0 [*12/24/2024 11:24:05.4783] DOT11_DRV[0]: Start Radio0 - Begin [*12/24/2024 11:24:05.4883] DOT11_DRV[0]: Start Radio0 - End [*12/24/2024 11:24:05.9681] Radio Authority: no country code [*12/24/2024 11:24:05.9881] Cannot open CDUMP_COUNT! [*12/24/2024 11:24:06.1081] [*12/24/2024 11:24:06.1081] CAPWAP State: Run [*12/24/2024 11:24:06.1881] AP has joined controller WLC01 [*12/24/2024 11:24:06.2980] Previous AP mode is 0, change to 2 [*12/24/2024 11:24:06.3080] DOT11_CFG[0] Radio Mode is changed from Local to FlexConnect [*12/24/2024 11:24:06.3080] DOT11_DRV[0]: Stop Radio0 - Begin [*12/24/2024 11:24:06.3080] DOT11_DRV[0]: Stop Radio0 - End [*12/24/2024 11:24:06.3080] DOT11_CFG[0]: Starting radio 0 [*12/24/2024 11:24:06.3080] DOT11_DRV[0]: Start Radio0 - Begin [*12/24/2024 11:24:06.3080] DOT11_DRV[0]: Start Radio0 - End [*12/24/2024 11:24:06.3180] DOT11_CFG[1] Radio Mode is changed from Local to FlexConnect [*12/24/2024 11:24:06.3180] DOT11_DRV[1]: Stop Radio1 - Begin [*12/24/2024 11:24:06.3280] DOT11_DRV[1]: Stop Radio1 - End [*12/24/2024 11:24:06.3280] DOT11_CFG[1]: Starting radio 1 [*12/24/2024 11:24:06.3280] DOT11_DRV[1]: Start Radio1 - Begin [*12/24/2024 11:24:06.3280] DOT11_DRV[1]: Start Radio1 - End [*12/24/2024 11:24:06.4980] DOT11_DRV[0]: Stop Radio0 - Begin [*12/24/2024 11:24:06.4980] DOT11_DRV[0]: Stop Radio0 - End [*12/24/2024 11:24:06.4980] DOT11_DRV[0]: Start Radio0 - Begin [*12/24/2024 11:24:06.4980] DOT11_DRV[0]: Start Radio0 - End [*12/24/2024 11:24:06.8778] USB Device Disconnected from the AP [*12/24/2024 11:24:07.0678] syslog level is being set to 70 [*12/24/2024 11:24:07.0678] [*12/24/2024 11:24:07.1078] Previous AP mode is 2, change to 2 [*12/24/2024 11:24:07.1378] Current session mode: ssh, Configured: Telnet-No, SSH-No, Console-Yes [*12/24/2024 11:24:07.1378] [*12/24/2024 11:24:07.3577] Current session mode: telnet, Configured: Telnet-No, SSH-No, Console-Yes [*12/24/2024 11:24:07.3577] [*12/24/2024 11:24:07.3777] Current session mode: console, Configured: Telnet-No, SSH-No, Console-Yes [*12/24/2024 11:24:07.3777] [*12/24/2024 11:24:07.4377] chpasswd: password for user changed [*12/24/2024 11:24:07.4877] chpasswd: password for user changed [*12/24/2024 11:24:07.6476] [*12/24/2024 11:24:07.6476] Same LSC mode, no action needed [*12/24/2024 11:24:07.6476] Cannot open CDUMP_COUNT! [*12/24/2024 11:24:07.9275] Same value is already set. [*12/24/2024 11:24:08.3674] Got WSA Server config TLVs [*12/24/2024 11:24:09.5470] Socket: Valid Element: wcp/wcp_db Handler: set_vlan_name_map Data: null Length: 10 [*12/24/2024 11:24:11.2565] SD AVC only supports 802.11ax AP [*12/24/2024 11:24:11.7963] AP tag change to default-policy-tag [*12/24/2024 11:24:32.6698] ip6_port srcr2, ip6local fe80::ca84:a1ff:fecc:2f48, ip6 ::, plen 0, gw6 ::, gw6_mac 00:00:00:00:00:00, mtu 1500, vid 0, mode6 2(slaac) [*12/24/2024 11:24:34.6392] netlink socket init done, pnl->spectral_fd=4 [*12/24/2024 11:24:34.6392] CLEANAIR: Slot 0 admin disabled [*12/24/2024 11:24:36.6385] CLEANAIR: Slot 1 admin disabled
6. WLC GUI에서 AP 등록 되었는지 확인 합니다.
별도 설정이 없으면, AP가 WLC에 붙으면 Policy Tag, Site Tag, RF Tag, Location이 Default로 설정 됩니다.
지금까지 [C9800CL][#5]-AP Join Process - DHCP option 43 글을 읽어주셔서 감사합니다.
