《对 Catalyst 9800 无线控制器进行故障排除.pdf》由会员分享,可在线阅读,更多相关《对 Catalyst 9800 无线控制器进行故障排除.pdf(122页珍藏版)》请在三个皮匠报告上搜索。
1、#CiscoLive#CiscoLiveJavier Contreras AlbesaPrincipal EngineerBRKEWN-3628Troubleshoot Catalyst 9800 Troubleshoot Catalyst 9800 Wireless ControllersWireless Controllers 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAbout me 2023 Cisco and/or its affiliates.All rights reser
2、ved.Cisco Public#CiscoLiveEnter your personal notes hereCisco Webex App Questions?Use Cisco Webex App to chat with the speaker after the sessionFind this session in the Cisco Live Mobile AppClick“Join the Discussion”Install the Webex App or go directly to the Webex spaceEnter messages/questions in t
3、he Webex spaceHowWebex spaces will be moderated by the speaker until June 9,2023.12345https:/ 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKEWN-36285Agenda 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicTroubleshooting 101Architecture BasicsCat9800 Control Pla
4、ne debuggingCat9800 Data Plane debuggingAccess point Control Plane debuggingAccess point Data Plane debuggingWLC top issuesConclusionBRKEWN-36286Troubleshooting 101 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhere do we start?8BRKEWN-3628IPDHCPWLCIPISECAPWAPEOIP802.11
5、 CAPWAPRADIUSChan.1802.11 Management802.11 ManagementEAPIPsupp.driverradioWireless Link =Complex multi-variable equation Isolate and remove the variablesCAPWAP 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting BasicsTroubleshooting 101Clearly define the probl
6、emUnderstand any possible triggersKnow the expected behaviorReproducibilityDo not jump to conclusions9BRKEWN-3628Problem DefinitionQuestionsTestsSolution(s)Analysis 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting BasicsLogical and procedural mindsetStep 1:D
7、efine the problemBad:“Client slow to connect”Good:“Client associations are rejected with Status17 several times before they associate successfully.”Reduce Scope!Isolate multiple possible problems10BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting
8、BasicsStep 2:Understand triggersDid it work before?ChangesFinding a patternStep 3:Know the expected behaviorExample:“One way audio between Phone A and B,because Phone A does not get an ARP Response for Phone B”11BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveT
9、roubleshooting BasicsStep 4:ReproducibilityReproducible=EasierStep 5:FixValidate Root Cause Analysis Develop FixTest for solution,intersection12BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting Process13BRKEWN-3628DetectCollectAnalyze 2023 Cisco a
10、nd/or its affiliates.All rights reserved.Cisco Public#CiscoLiveComplexity Control14BRKEWN-3628Simple(STW/Always on)Medium(RA Trace)Complex(OTA/RA/AP)Case Starts 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveSupport Case Starting SuggestionsClient issue:Show tech wireless
11、RA Trace or Always on tracingDevice ReloadAny support bundle/core/crash reportShow tech wirelessAny feature/config questionShow tech wireless Run WCAE15BRKEWN-3628Architecture Basics 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntroductionWhy do I need to care about th
12、ose control plane and data plane details?Control PlaneData PlaneClient OnboardingRRMManagementDebug/EventsState MachinesData ForwardingAVCData EncryptionACLsThroughputBRKEWN-362817 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveC9800 Software Process ArchitectureDataplane
13、(CPP/CPP SW/Doppler)IPCWNCdWNCdWNCdWireless processes(mobilityd,rrmd,rogued,nmspd)Wireless processPunt Path LegendLinux kernelLSMPILFTSLinux TCP/IPPlumbing PathIOSdFMAN RPFMAN FPASIC DriverIOS-XE infraDbCisco DNA-CDMI procs REPM infra3rdpartyPrime InfrawebUIDBMODMCLI Agent CLIManagement accessDB Acc
14、essProgrammable InterfaceBRKEWN-362818 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveLife of Packet Control and Data PlaneQFPPort ASICX86 CPU complexIngress bufferingBuffering10G PHYSFP+x4 or x8Astro(pass through)Crypto chipAstro(pass through)QFPPort ASICX86 CPU complexI
15、ngress bufferingBuffering10G PHYSFP+x4 or x8Crypto chipControl Plane Packet(Punt/Inject)Data Plane PacketBRKEWN-362819WLC Control PlaneTracing and Debugging 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIOSd Logging Your Traditional SyslogBinary TracingFast infrastructur
16、e for real-time loggingAlways On TracingReal time data collection for all relevant eventsIOS-XE Tracing/Debugging21Conditional Debugging/Radioactive TracingPer IP/MAC address debuggingNon-Conditional Debugging/Per Process TracingYour traditional debugClient Delete ReasonsWhy a device was removedBRKE
17、WN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIOSd Syslog:System Good starting pointGet it with:#show loggingAP Join:IOSd LoggingMay 22 2023 09:34:31.251 UTC:%LINEPROTO-5-UPDOWN:Line protocol on Interface Capwap2,changed state to upMay 22 2023 09:34:31.249 UTC:%C
18、APWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN:Chassis 1 R0/0:wncd:AP Event:AP Name:ap3800i-r2-sw1-te0-1,MAC:0042.68a0.ee78 JoinedMay 22 2023 09:36:19.548 UTC:%CAPWAPAC_SMGR_TRACE_MESSAGE-3-EWLC_GEN_ERR:Chassis 1 R0/0:wncd:Error in Session-IP:192.168.25.1015264 Mac:00a3.8ec2.da00 Heartbeat timer expir
19、y for AP.Close CAPWAP DTLS sessionBRKEWN-362822 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAdmin GUI connection:Wrong PSK:IOSd LoggingMay 29 2019 08:43:37.238 UTC:%WEBSERVER-5-LOGIN_PASSED:Chassis 1 R0/0:nginx:Login Successful from host 192.168.0.110 by user admin usi
20、ng crypto cipher ECDHE-RSA-AES128-GCM-SHA256May 29 2019 08:48:25.388 UTC:%CLIENT_EXCLUSION_SERVER-5-ADD_TO_BLACKLIST_REASON:Chassis 1 R0/0:wncmgrd:Client MAC:001e.e5e2.35cf was added to exclusion list,reason:Wrong PSKBRKEWN-362823 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#Cis
21、coLiveIOS-XE Tracing24BRKEWN-3628Binary,line rate tracing mechanismNo CPU impactEach BinOS(non-IOSd)process has its own tracelog file(before 17.7)Unified tracing in 17.7+File starts in memoryRotation:At X size-compressed and moved to diskSyslog-like severity levelsBase infrastructure for other featu
22、res 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIOS-XE TracingBinary trace(Btrace)25BRKEWN-3628myc9800-CL#dir bootflash:tracelogsDirectory of bootflash:/tracelogs/372820 -rw-5270 Nov 25 2022 13:28:43+01:00 plogd_R0-0.22150_44788.20221125122727.bin.gz372746 -rw-5265 Nov
23、 25 2022 13:27:27+01:00 plogd_R0-0.22150_44787.20221125122611.bin.gz372495 -rw-2263043 Aug 1 2022 23:42:49+02:00 wncd_x_R0-0.17829_27.20220731171658.bin.gz372508 -rw-2290676 Jul 31 2022 19:17:48+02:00 wncd_x_R0-0.17829_26.20220730103553.bin.gz372767 -rw-2284388 Jul 30 2022 12:36:12+02:00 wncd_x_R0-0
24、.17829_25.20220729001047.bin.gz372545 -rw-2276683 Jul 29 2022 02:11:42+02:00 wncd_x_R0-0.17829_24.20220727124941.bin.gz372493 -rw-88311 Jul 28 2022 20:58:02+02:00 cpp_ha_F0-0.22679_2.20220718170801.bin.gz 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIOS-XE TracingBinary
25、 trace levelsERROR ERROR level represent abnormal situations.We want to raise the user attention to theseWARNINGWARNING represent an incident that could potentially lead to an error(or not)NOTICENOTICE is the default logging level for binos daemons.It captures significant events if they are normal w
26、orking conditions.(client connect,failover)INFOINFO contains details about state machines and the communication flowDEBUGDEBUG contains traces needed to root cause failure conditionsVERBOSEVERBOSE voluminous traces more tuned to help developers with bugs 2-Critical3-Error4-Warning5-Notice6-Info7-Deb
27、ug8-VerboseBRKEWN-362826 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAlways On tracingContextual Logs WITHOUT debuggingEach process writes relevant events at Notice level General Problem isolation assistanceIs client facing authentication issues or DHCP issue or someth
28、ing elseHelps establish trendsIsolate if reported client connectivity problem is specific to certain APs or certain client mac addressesBox can store 48h approx.at max HW capacity,weeks typicallyBRKEWN-362827 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAlways on Tracin
29、g CLIUseful commands28BRKEWN-3628#show logging process#show logging process to-file#more bootflash:alwayson-process.txt#copy bootflash:alwayson-process.txt tftp:/path OR ftp:/user:passserverip/path 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAlways on Tracing 29BRKEWN-
30、3628Aggregated view across processes:Focus on time window,export to fileDefault time:last 10 minutes#show logging profile wireless filter mac|ip client-mac|mobility-peer-ip to-file.txt#show logging profile wireless start timestamp“MM/DD/YYYY HH:MM:SS”filter mac to-file#show logging profile wireless
31、start last 30 minutes 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAlways on:successful client connection#show log profile wireless filter mac 0040.96b9.b5c4 to-file output.txtclient-orch-sm 24632:(note):MAC:0040.96b9.b5c4Association received.BSSID 0038.df25.f12f,old BS
32、SID 0000.0000.0000,WLAN 1,Slot 1 AP 0038.df25.f120,AP0038.DF24.62A8client-orch-state 24632:(note):MAC:0040.96b9.b5c4Client state transition:S_CO_INIT-S_CO_ASSOCIATINGdot11 24632:(note):MAC:0040.96b9.b5c4Association success.AID 1,Roaming=0,WGB=0,11r=0,11w=0client-orch-state 24632:(note):MAC:0040.96b9
33、.b5c4Client state transition:S_CO_ASSOCIATING-S_CO_L2_AUTH_IN_PROGRESSclient-auth 24632:(note):MAC:0040.96b9.b5c4ADD MOBILE sent.Client state flags:0 x71BSSID:MAC:0038.df25.f12fcapwapIFID:0 xf90400004client-auth 24632:(note):MAC:0040.96b9.b5c4L2 Authentication initiated.method DOT1X,Policy VLAN 1,AA
34、A override=0ewlc-infra-evq 24632:(note):Authentication Success.Resolved Policy bitmap:11 for client 0040.96b9.b5c4client-auth 24632:(note):MAC:0040.96b9.b5c4L2 Authentication Key Exchange Start.EAP type:PEAP,Resolved VLAN:16,Audit Session id:22100A090000000E89D69B30client-keymgmt 24632:(note):MAC:00
35、40.96b9.b5c4EAP Key management successful.AKM:DOT1X Cipher:CCMP WPA2client-orch-sm 24632:(note):MAC:0040.96b9.b5c4Mobility discovery triggered.Client mode:Localclient-orch-state 24632:(note):MAC:0040.96b9.b5c4Client state transition:S_CO_L2_AUTH_IN_PROGRESS-S_CO_MOBILITY_DISCOVERY_IN_PROGRESSclient-
36、auth 24632:(note):MAC:0040.96b9.b5c4ADD MOBILE sent.Client state flags:0 x72BSSID:MAC:0038.df25.f12fcapwapIFID:0 xf90400004client-orch-state 24632:(note):MAC:0040.96b9.b5c4Client state transition:S_CO_MOBILITY_DISCOVERY_IN_PROGRESS-S_CO_DPATH_PLUMB_IN_PROGRESSdot11 24632:(note):MAC:0040.96b9.b5c4Cli
37、ent datapath entry params-ssid:dot1x_j,slot_id:1 bssid ifid:0 x0,radio_ifid:0 xf90400002dpath_svc 24632:(note):MAC:0040.96b9.b5c4Client datapath entry created for ifid 0 xfa0000001client-orch-state 24632:(note):MAC:0040.96b9.b5c4 Client state transition:S_CO_DPATH_PLUMB_IN_PROGRESS-S_CO_IP_LEARN_IN_
38、PROGRESSclient-iplearn 24632:(note):MAC:0040.96b9.b5c4Client IP learn successful.Method:DHCP IP:9.10.16.121client-orch-state 24632:(note):MAC:0040.96b9.b5c4Client state transition:S_CO_IP_LEARN_IN_PROGRESS-S_CO_RUNRARA tracingtracingBRKEWN-362830 2023 Cisco and/or its affiliates.All rights reserved.
39、Cisco Public#CiscoLiveAlways on:successful client connectionRA traceRA traceBRKEWN-362831 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWireless Debug AnalyzerRA traceRA traceBRKEWN-362832 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWireles
40、s Debug AnalyzerRA traceRA traceBRKEWN-362833 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveProblem example 134BRKEWN-3628Always on logs of selected clients.Connection last state(stuck in IP LEARN?)?Were they being intentionally disconnected?RADIUS/authentication issue?C
41、isco DNAC can be keyYesterday we had many users complaining about wifi in a given area 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is Radioactive TracingTrack“trace of execution”for a given application contextApplication defines what is interestingOnly context has
42、 increased verbosity35BRKEWN-3628PacketFunction1Function2Function3Log1Log2Log30191.ba88.ccc55 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing36BRKEWN-3628RA trace automatically enables all debugs when a given MAC or IP is processed 2023 Cisco and/or its
43、 affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing37BRKEWN-3628Clicking“Generate”will decode the on-flash binary logs and collate a readable text file filtered on the mac/IP requested.2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracin
44、g with Internal FlagLogs extremely verboseOnly need to collect TAC and BU is involvedAlways On:14 linesRA Trace:400 linesRA Trace+Internal:3000 linesBRKEWN-362838 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing39BRKEWN-3628Debug wireless CLI is a macro
45、RA tracing for a period of timeCollates the result#debug wireless mac 1111.2222.3333?ftp-server Move log file to FTP server,temporary storage:flash:/internal Collect all logs.(Default:only customer curated logs)level Select logs above specific level(Default:debug)monitor-time Max time to trace the c
46、ondition(Default:30min)to-file File path in internal storage,default storage:flash:/2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing40BRKEWN-3628Basic client/AP data collection:Basic client/AP data collection:Data is there,just pull itData is there,just
47、pull itCollect data with Collect data with show logging profile wireless filter mac|ipAdvanced client/AP:Use Radioactive Tracingdebug wireless mac mac.of.client ftp-server ser.ver.ip.add/directoryBasic Box logsTraditional show logs/syslog 2023 Cisco and/or its affiliates.All rights reserved.Cisco Pu
48、blic#CiscoLiveLive Debugging41BRKEWN-3628Optional:Output on real timeSimilar to AireOS“debug client”Console is reservedmonitor logging profile wireless filter mac 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Trace Association FailuresClient sends disassociat
49、eclient-orch-sm 20370:(info):MAC:Deleting the client,reason:2,CO_CLIENT_DELETE_REASON_DEAUTH_OR_DISASSOC_REQ,Client state S_CO_RUN client-orch-sm 20370:(note):MAC:Client delete initiated.Reason:CO_CLIENT_DELETE_REASON_DEAUTH_OR_DISASSOC_REQ,fsm-state transition 00|00|00|00|00|00|00|00|00|00|00|00|00
50、|00|00|00|01|07|13|17|18|28|33|42|44|46|48|4d|5c|5e|7f|a4|Data Rate Mismatch in Client Association Requestdot11-validate 23406:(ERR):MAC:Dot11 validate radio rates.Missing Supported Rate for index=5,encode value:12,radio type:DOT11_RADIO_TYPE_BGAP has max clients connectedewlc-infra-evq 17707:(ERR):
51、CLIENT_ASSOC_FAIL Failure=IE_POST_VALIDATION_FAILURE Validation Failure Type=17,WLAN profile=WLAN1,Policy profile=POLICY1dot11 17707:(ERR):MAC:Dot11 update co assoc fail.Sent assoc failure to CO.delete reason:41,CO_CLIENT_DELETE_REASON_DOT11_MAX_STAclient-orch-sm 17707:(note):MAC:Client delete initi
52、ated.Reason:CO_CLIENT_DELETE_REASON_DOT11_MAX_STA,fsm-state transition 00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|01|08|10|BRKEWN-362842 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioActive Trace Failed AuthenticationGroup
53、 Key Update Failedclient-keymgmt 23562:(ERR):MAC:CLIENT_MAC Keymgmt:Failed to eapol key m5 retransmit failure.Max retries for M5 overclient-orch-sm 23562:(ERR):MAC:CLIENT_MAC L2 Authentication of station failed.client-orch-sm 23562:(note):MAC:CLIENT_MAC Client delete initiated.Reason:CO_CLIENT_DELET
54、E_REASON_GROUP_KEY_UPDATE_TIMEOUT,fsm-state transitionAAA Server Downerrmsg 17837:(note):%DOT1X-5-FAIL:Authentication failed for client CLIENT_MAC)with reason(AAA Server Down)on Interface capwap_9000000c AuditSessionID0B7CFB2C000002145E61348Eewlc-infra-evq 17837:(ERR):SANET_AUTHC_FAILURE-AAA Server
55、Down username,audit session id 0B7CFB2C000002145E61348Eerrmsg 17837:(note):%SESSION_MGR-5-FAIL:Authorization failed or unapplied for client(CLIENT_MAC)on Interface capwap_9000000c AuditSessionID0B7CFB2C000002145E61348E.Failure reason:Authc fail.Authc failure reason:AAA Server Down.client-orch-sm 178
56、37:(note):MAC:a86d.aa32.5271 Client delete initiated.Reason:CO_CLIENT_DELETE_REASON_AAA_SERVER_UNAVAILABLE,fsm-state transition 00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|00|01|07|13|1a|23|BRKEWN-362843 2023 Cisco and/or its affiliates.All rights reserved.Cisco Pub
57、lic#CiscoLiveCustomer problem example 244BRKEWN-3628RA trace of the client running for the whole dayClient A is facing some problems everyday at some point 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing bundle45BRKEWN-3628New in 17.10/17.9.2Client debu
58、g bundle:Show tech wirelessShow tech wireless client mac RA tracesOptional packet captureShow logging 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing bundle46BRKEWN-3628New in 17.10/17.9.2To Enable RA traces and client detailsC9800#debug wireless bundle
59、 client To disableC9800#no debug wireless bundle client To Enable Packet captureC9800#debug wireless bundle include epc client To disableC9800#no debug wireless bundle include epc client 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveRadioactive Tracing bundle47BRKEWN-362
60、8New in 17.10/17.9.2C9800#show bootflash:|inc 2022.tar1047 1230336 Sep 19 2022 17:20:01.0000000000+00:00 wireless_bundle_42e4.cb89.e878 _171958_UTC_Sep_19_2022.tar1048 316416 Sep 19 2022 17:40:51.0000000000+00:00 wireless_bundle_42e4.cb89.e878_174050_UTC_Sep_19_2022.tarC9800#C9800#copy bootflash:wir
61、eless_bundle_42e4.cb89.e878_060908_UTC_Sep_20_2022.tar tftp:/C9800#2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCustomer problem example 348BRKEWN-3628Controller known information about APRA trace of one AP MACAP console(syslog)outputs PCAPsMy new APs are not joining th
62、e WLC 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP Join Process49DiscoveryJoinDTLSConfigurationImageMaintenance 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP Discover/JoinKnownConfiguredBroadcastReaches WLCs with MGMT Interface in loca
63、l subnet of APUse“ip helper-address”with“ip forward-protocol udp 5246”DynamicDNS:cisco-capwap-controllerDHCP:Option 43PnPOnly with no config50 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDebugging AP Join IssuesBasics First9800cl-1#sh ap uptimeNumber of APs:3AP Name Et
64、hernet MAC Radio MAC AP Up Time Association Up Time-ap9136-1 687d.b45c.14bc 687d.b45e.f7b0 175 days 1 hour 21 days 8 hours 17 minap9136-4 687d.b45c.1398 687d.b45e.ea00 153 days 1 hour 21 days 6 hours 52 min9130I-r3-sw2-1_0_40 04eb.409e.1dc4 04eb.409f.5480 0 days 1 hour 0 days 0 hours 52 min51BRKEWN-
65、3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDebugging AP Issues9800cl-1#sh wireless stats ap join summary Number of APs:7Base MAC Ethernet MAC AP Name IP Address Status Last Failure Phase Last Disconnect Reason-0042.68c6.4870 0042.68a0.d248 ap3800i-r3sw2-te-1-0-39
66、-dev 192.168.41.49 Joined NA NA 04eb.409f.5480 04eb.409e.1dc4 9130I-r3-sw2-1_0_40 192.168.41.43 Joined NA NA 0c75.bdb5.7e80 0c75.bdb6.28c0 9130E-r3-sw2-g1012 192.168.41.48 Joined NA NA 0042.68c6.4870 687d.b45c.1398 ap9136-4 192.168.41.44 Joined Run Heart beat timer expiry 687d.b45e.f240 687d.b45c.14
67、48 ap9136-2 192.168.41.47 Joined Run Max Retransmission to AP 687d.b45e.f7b0 687d.b45c.14bc ap9136-1 192.168.41.46 Joined NA NA 687d.b45f.1160 687d.b45c.16e0 ap9136-3 192.168.41.45 Joined Run Wtp reset config cmd sent 52BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#Ci
68、scoLiveDebugging AP Issues9800cl-1#show wireless stats ap mac-address 0042.68c6.4870join detailedDiscovery phase statistics.Last AP message decryption failure detailsReason for last message decryption failure :NAAP reported disconnect detailDisconnect reason from AP :Max retransmission reachedAP rep
69、orted reboot detailReboot reason from AP :Reboot cmd from AP consoleLast AP disconnect detailsLast Disconnect Phase :NALast Disconnect Reason :NALast Disconnect Time :NACurrent Join Status :Joined53BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDebugging AP Is
70、sues54BRKEWN-3628Collect logs Radio mac:generalEthernet mac:discovery/dtlsshow logging profile wireless filter mac 687d.b45c.16e02023/06/07 19:27:53.753618033 wncmgrd_R0-01:capwapac-discovery 15193:(note):MAC:687d.b45f.1160 Public IP learnt is FALSE,public IP discovery is FALSE,private IP discovery
71、is TRUE.2023/06/07 19:27:53.753751387 wncmgrd_R0-01:capwapac-discovery 15193:(note):MAC:687d.b45f.1160 IP:192.168.41.2465256,Discovery Response sent2023/06/07 19:27:53.937692128 wncmgrd_R0-01:capwapac-discovery 15193:(note):MAC:687d.b45f.1160 Public IP learnt is FALSE,public IP discovery is FALSE,pr
72、ivate IP discovery is TRUE.2023/06/07 19:27:53.937843498 wncmgrd_R0-01:capwapac-discovery 15193:(note):MAC:687d.b45f.1160 IP:192.168.41.2465256,Discovery Response sent 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDebugging AP Side55BRKEWN-3628Check Logs first!ap9136-3#s
73、ho logConsole logging:Level-notification,Status-enabled Syslog logging :Level-information,Status-active,IP-255.255.255.255 Syncing syslogs to flash every 600 seconds.System logging:May 27 04:01:48 kernel:*05/27/2023 04:01:48.5450 Re-Tx Count=1,Max Re-Tx Value=5,SendSeqNum=238,NumofPendingMsgs=2May 2
74、7 04:01:48 kernel:*05/27/2023 04:01:48.5450 May 27 11:59:54 kernel:*05/27/2023 11:59:54.6813 Re-Tx Count=1,Max Re-Tx Value=5,SendSeqNum=243,NumofPendingMsgs=2 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveDebugging AP Side56BRKEWN-3628CAPWAP Client debug as next stepap91
75、36-3#deb cap client error ap9136-3#deb cap client events*06/07/2023 17:41:39.7436 CAPWAP State:Run*06/07/2023 17:41:39.7460 CAPWAP moved to RUN state stopping post join timer*06/07/2023 17:41:39.7472 CAPWAP IP nexthopmac F872.EAB7.3A40*06/07/2023 17:41:39.7668 CAPWAP data tunnel ADD to forwarding SU
76、CCEEDED*06/07/2023 17:41:39.8051 AP has joined controller 9800cl-1*06/07/2023 17:41:39.8056 AP in local mode config starting timer*06/07/2023 17:41:39.8066 Change State Event Response from 192.168.40.10*06/07/2023 17:41:39.8070 IOT device ttyiot0 not found*06/07/2023 17:41:39.8286 Change State Event
77、 Response from 192.168.40.10Other debugging points 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveUnconditional debugging1.Enable set platform software trace set platform software trace chassis active R0 all debugchassis active R0 all debug2.Reproduce the issue3.Collect s
78、how logging process show logging process to to-filefile 4.View with more more bootflash:FILENAME.txtbootflash:FILENAME.txt5.Export with copy copy bootflash:FILENAME.txtbootflash:FILENAME.txt tftptftp|ftpftp|httpshttps|scpscp 6.Disable traces with undebugundebug all all OR set platform software trace
79、 set platform software trace chassis active R0 all noticechassis active R0 all noticeBRKEWN-362858 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveClient Delete Reasons59BRKEWN-3628Tracking“all”client removal events,good and badTracking“all”client removal events,good and b
80、adAround 320 delete points,both form controller and APAround 320 delete points,both form controller and APCovers:Covers:Normal(session timeout/idle timeout)Normal(session timeout/idle timeout)Errors/Defects(i.e.wrong bits in M2)Errors/Defects(i.e.wrong bits in M2)“It depends”(i.e.Key timeout)“It dep
81、ends”(i.e.Key timeout)9800-cl#sh wireless stats client delete reasons Total client delete reasons-Controller deletes-Datapath plumb :0WPA key exchange timeout :107802.11w MAX SA queries reached :0 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWireless Detector60BRKEWN-36
82、28Pull individual failures with:Pull individual failures with:show logging profile wireless start last X min filter mac 1111.2222.333Use Wireless Detector tool for general assessment Use Wireless Detector tool for general assessment DataplaneDebugging 2023 Cisco and/or its affiliates.All rights rese
83、rved.Cisco Public#CiscoLiveEmbedded Packet CaptureGet packets sent from or to and through the controllerExport to WiresharkNo need for switch captureAccessible either from GUI or CLIBRKEWN-362862 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEmbedded Packet CaptureWeb in
84、terface to the existing EPC CLI“monitor capture”One click start/stop/downloadPhysical and VLAN interfaces can be selected BRKEWN-362863 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveEmbedded Packet Capture(EPC)CLImonitor capture interface bothmonitor capture control-plan
85、e both(optional)monitor capture match any monitor capture inner mac|access-list monitor capture buffer size 100 circularmonitor capture limit pps 1000000monitor capture startmonitor capture stopmonitor capture export bootflash:.pcap64BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.C
86、isco Public#CiscoLiveData Plane Statistics Global Wireless Drops show platform hardware chassis active qfp statistics drop all|inc Global|WlsGlobal Drop Stats Packets OctetsPuntGlobalPolicerDrops0 0SdwanGlobalDrop0 0WlsCapwapError1471733 327309563WlsCapwapFragmentationErr0 0WlsCapwapNoUidb0 0WlsCapw
87、apReassAllocErr0 0WlsCapwapReassFragConsume242814618 37954342616WlsCapwapReassFragDrop0 0WlsClientError212513426 62965772923WlsClientFNFV9Err 0 0WlsClientFNFV9Report 0 0WlsDtlsProcessingError0 0BRKEWN-362865 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCustomer problem
88、example 466BRKEWN-3628RA trace of the clientPCAP on the WLC,filtered on the client MACClient A(centrally switched)is not able to get an IP addressAccess PointControl Plane 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCatalyst APsSimplified View68Wireless ControlWCPWCPho
89、stapdhostapdPlatform ManagementwatchdogwatchdogLEDLEDcapwapdcapwapdcapwapcapwapbrainbrainConfig/system mngsshsshDevice ManagementLightLighthttpdhttpdCLICLIClick Click DataPathDataPathLinux Linux Networking Networking stackstackCiscoCiscoServicesServices/clickfileclickfilesystemsystemEthernet Etherne
90、t DriverDriverRadioRadioDriverDriverFlashFlashDriverDriverLinuxKernelBRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting on the AP sideAP console output/Syslogs are stored in the flash even after rebootDebug client Debug client :macro for control-pl
91、ane capture.Can be exported to.pcap or export in hex17.3+:you can export an AP support bundle to the WLCACL and counters:show client accessshow client access-listslistsMuch more in“Troubleshoot COS APsTroubleshoot COS APs”For Wave 2 and Wifi 6/6e APsBRKEWN-362869 2023 Cisco and/or its affiliates.All
92、 rights reserved.Cisco Public#CiscoLiveAP ServiceabilityAPs have various Flash Directories to view syslog,crash and core dumpsap9136-3#show flash syslogsDirectory of/storage/syslogs/total 1848K-rw-r-r-1 root root 36722 Nov 29 2022 19-rw-r-r-1 root root 40916 Nov 29 2022 19.0ap9136-3#show flash cores
93、Directory of/storage/cores/total 13128K-rw-rw-rw-1 root root 1974149 Jan 12 15:02 ap9136-3_27149-core-wcpd.17.9.2.52.2023-01-12.tgzap9136-3#show flash crashNo AP crashfile found70BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTroubleshooting Clients on the AP
94、sideAP client traceAP0CD0.F894.46E4#show ap client-trace events mac CLIENT_MAC*04/06/2022 10:11:54.287675 AP CLIENT_MAC U:W DOT11_AUTHENTICATION:(.)*04/06/2022 10:11:54.288144 AP CLIENT_MAC D:W DOT11_AUTHENTICATION:(.)*04/06/2022 10:11:54.289870 AP CLIENT_MAC U:W DOT11_ASSOC_REQUEST:(.)*04/06/2022 1
95、0:11:54.317341 AP CLIENT_MAC D:W DOT11_ASSOC_RESPONSE:(.)*04/06/2022 10:11:54.341370 AP CLIENT_MAC D:W EAPOL_KEY.M1:DescType 0 x02 KeyInfo 0 x008b*04/06/2022 10:11:54.374500 AP CLIENT_MAC U:W EAPOL_KEY.M2:DescType 0 x02 KeyInfo 0 x010b*04/06/2022 10:11:54.377237 AP CLIENT_MAC D:W EAPOL_KEY.M3:DescTy
96、pe 0 x02 KeyInfo 0 x13cb*04/06/2022 10:11:54.390255 AP CLIENT_MAC U:W EAPOL_KEY.M4:DescType 0 x02 KeyInfo 0 x030b*04/06/2022 10:11:54.396855 AP CLIENT_MAC U:W DOT11_ACTION:(.)*04/06/2022 10:11:54.416650 AP CLIENT_MAC D:W DOT11_ACTION:(.)*04/06/2022 10:11:54.469089 AP CLIENT_MAC U:W DOT11_ACTION:(.)*
97、04/06/2022 10:11:54.469157 AP CLIENT_MAC D:W DOT11_ACTION:(.)*04/06/2022 10:11:57.921877 AP CLIENT_MAC U:W DOT11_ACTION:(.)*04/06/2022 10:11:57.921942 AP CLIENT_MAC D:W DOT11_ACTION:(.)U=upstream(from client)D=downstream(to client)W-Wireless driverE-Ethernet driverC -Click driverBRKEWN-362871 2023 C
98、isco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAP commands from ControllerWhen SSH is not possiblemyc9800-CL#ap name 9120-etage remote enablemyc9800-CL#ap name 9120-etage remote command show clockmyc9800-CL#term monmyc9800-CL#ap name 9120-etage remote command show clockmyc9800-
99、CL#Jan 4 18:59:25 CET:%AP_LOG-6-9120-etage:Chassis 1*17:59:25 UTC Wed Jan 4 2023myc9800-CL#BRKEWN-362872 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveClient 360 View73BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntelligent capt
100、ure74BRKEWN-3628You can enable intelligent capture for a given client in the Client Health 360 dashboard 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntelligent capture75BRKEWN-3628RF stats can be enabled globally or on specific APs 2023 Cisco and/or its affiliates.All
101、 rights reserved.Cisco Public#CiscoLiveCustomer problem example 576BRKEWN-3628Cisco DNAC Intelligent capture(Channel utilization,drops,)show commands on the APs themselvesSpecific APs lead to bad user experienceAccess Points Dataplane Debugging 2023 Cisco and/or its affiliates.All rights reserved.Ci
102、sco Public#CiscoLiveIntelligent captureThe power of Cleanair/RF Asic/Cleanair Pro78BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntelligent capture79BRKEWN-3628Intelligent capture page gives you an overview of events related to the client 2023 Cisco and/or i
103、ts affiliates.All rights reserved.Cisco Public#CiscoLiveIntelligent captureClient intelligent capture80BRKEWN-3628Data packet capture supported on 4800,9130,9166Live Capture(onboarding)on all other AP models including 9160s 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveI
104、ntelligent capture81BRKEWN-3628Track all client traffic when you see itAWLCCisco DNA Center 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntelligent captureAnomaly captureABRKEWN-362882WLC top issues 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#Cisc
105、oLiveWLC High CPUControl Plane:Client onboarding and authenticationRRMWeb authentication interceptionRogue detectionmDNSAP CAPWAP state802.11k/v84BRKEWN-3628Data Plane:AP and client data traffic ACLs AVC QoS 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC High CPU“High
106、 CPU”can happen on any single CPU core if a single process is causing it.CPU utilization within IOSd:#show process cpu sortedCPU utilization for five seconds:0%/0%;one minute:0%;five minutes:0%PID Runtime(ms)Invoked uSecs5Sec 1Min 5Min TTY Process698 288459 7731847 37 0.07%0.01%0.00%0 NTP309 437356
107、7723454 56 0.07%0.00%0.00%0 nbar-graph-sende236 1150250 240761597 4 0.07%0.02%0.00%0 IP ARP Retry Age682 854081 38604249 22 0.07%0.01%0.00%0 ONEP Network Ele495 123974 7981160 15 0.07%0.00%0.00%0 Crypto IKEv2BRKEWN-362885 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC
108、 High CPUException for 9800-CL and 9800-L:dedicated CPU cores DP#show process cpu platform sortedCPU utilization for five seconds:8%,one minute:5%,five minutes:5%Core 0:CPU utilization for five seconds:1%,one minute:1%,five minutes:1%Core 1:CPU utilization for five seconds:2%,one minute:2%,five minu
109、tes:2%Core 2:CPU utilization for five seconds:1%,one minute:1%,five minutes:2%Core 3:CPU utilization for five seconds:6%,one minute:17%,five minutes:17%PidPPid5Sec 1Min 5Min Status Size Name-22225 21691 29%29%29%S 248940 ucode_pkt_PPE029758 8871 1%1%1%S 1140752 linux_iosd-imag21672 21163 1%1%1%S 255
110、992 fman_fp_image29725 29544 0%0%0%S 9672 pttcd29653 29388 0%0%0%S 206924 pubdBRKEWN-362886 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC High CPUException for 9800-CL and 9800-L:dedicated CPU cores DP#show platform hardware chassis active qfp datapath utilization su
111、mmCPP 0:5 secs 1 min 5 min 60 minInput:Total(pps)7 5 5 5(bps)4224 12584 11216 10872Output:Total(pps)5 4 3 3(bps)20712 11056 10976 10856Processing:Load(pct)0 0 0 0BRKEWN-362887 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC High CPUBRKEWN-362888 2023 Cisco and/or its a
112、ffiliates.All rights reserved.Cisco Public#CiscoLiveWLC High CPUWhat to do in case a specific process like WNCD is on high CPU?Check the balancing of APs across WNCD processes#show wireless loadbalance tag affinity wncd 0Tag Tag type No of APs Joined-Site1 SITE TAG 200Site2SITE TAG200BRKEWN-362889 2
113、023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC High CPULeverage WCAE for WNCD analysisBRKEWN-362890Back to Content TabWNCD ID Tags CountTags AssignedAP CountClient CountCPU loadPercentage ApsPercentage Clients02(Click on+sign to expand)1411250229.007.2811(Click on+sign
114、 to expand)22724974314.5014.5421(Click on+sign to expand)22720353414.5011.8531(Click on+sign to expand)22630255114.4317.6241(Click on+sign to expand)22620924314.4312.1851(Click on+sign to expand)22626394714.4315.3762(Click on+sign to expand)1542275349.8313.2572(Click on+sign to expand)1391356228.887
115、.90Totals:156617169 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveControl Plane Dropssh platform software punt-policer dropsPunt Config Rate(pps)Conform Packets Dropped Packets Config Burst(pkts)Cause Description Normal High Normal High Normal High Normal High -2 IPv4 Op
116、tions 874 655 0 0 0 0 874 655 3 Layer2 control and legacy 8738 2185 947389 0 0 0 87382185 4 PPP Control 437 1000 0 0 0 0 437 1000 5 CLNS IS-IS Control 8738 2185 0 0 0 0 8738 2185 6 HDLC keepalives 437 1000 0 0 0 0 437 1000 7 ARP request or response 437 1000 0 1702688 0 0 437 1000 8 Reverse ARP reque
117、st or repso437 1000 0 0 0 0 437 1000 9 Frame-relay LMI Control 437 1000 0 0 0 0 437 1000 BRKEWN-362891 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveData Plane Statistics Traffic sent to CPU show platform hardware chassis active qfp feature wireless capwapdatapath statis
118、tics drop allDrop Cause Packets Octets=Wls Capwap unsupported link type Error 0 0Wls Capwap invalid tunnel Error 0 0Wls Capwap input config missing Error 0 0Wls Capwap invalid TPID Error 0 0Wls Capwap ingress parsing Error 0 0Wls Capwap invalid FC subtype Error 0 0Wls Capwap SNAP Invalid HLEN Error
119、0 0Wls Capwap Invalid SNAP Error 1461925 323436123Wls Capwap ipv4 tunnel not found Error 10943 4017497BRKEWN-362892 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveData Plane Statistics Traffic sent to CPU show platform hardware chassis active qfp feature wireless wlclient
120、 datapathstatistics drop all9800-cl#show platform hardware chassis active qfp feature wireless wlclient datapath statistics drop allDrop Cause Packets Octets=Wls Client V6 Max Address drop 0 0Wls Client IPGlean Counter Index Error 0 0Wls Client IPGlean Counter Unchanged Error 0 0Wls Client IPGlean a
121、lloc no memory Error 0 0Wls Client IPGlean bucket max limit drop 0 0Wls Client iplearn l2 punt data packet skip 0 0Wls Client iplearn v4 punt data packet skip 5 1373Wls Client iplearn v6 punt data packet skip 5 950Wls Client input subblock missing error 0 0Wls vlan bridging mcast/bcast DMAC i/p SB m
122、iss error 0 0Wls vlan bridging src SVI i/p SB miss error 0 0BRKEWN-362893 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC High CPUOther possible causes for high WNCD CPU usage:Very high probing activityARP storms(controlled now with auto-exclusion)Huge amount of cleana
123、ir interferersHeavy mDNS usageBRKEWN-362894 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveHA hot issuesMy WLC HA pair keeps failing over regularly!2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC HA related concernsKatar2#show redundancy swi
124、tchover history Index Previous Current Switchover Switchoveractive active reason time-8 2 1 active unit removed 14:06:05 CEST Wed Mar 29 20239 1 2 active unit removed 14:25:29 CEST Wed Mar 29 202310 2 1 Active RMI port down 11:00:22 CEST Thu Mar 30 202311 1 2 active unit removed 11:08:53 CEST Thu Ma
125、r 30 202312 2 1 active unit removed 11:18:47 CEST Thu Mar 30 202313 1 2 active unit removed 11:34:32 CEST Thu Mar 30 202314 2 1 active unit removed 11:51:34 CEST Thu Mar 30 202315 1 2 user forced 12:01:51 CEST Thu Mar 30 202316 2 1 active unit removed 12:08:46 CEST Thu Mar 30 202317 1 2 user forced
126、09:40:40 CEST Tue May 9 2023BRKEWN-362896 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC HA related concernsUnexpected failovers:Check WLC reload reason,system reports and crash filesFor 9800-CL:VMWare featuresAggressive failover timersBRKEWN-362897 2023 Cisco and/or
127、its affiliates.All rights reserved.Cisco Public#CiscoLiveWLC HA useful troubleshooting commandsShow tech wireless redundancyShow chassis detailshow platform software stack-mgr chassis active R0 sdp-counters show platform software stack-mgr chassis standby R0 sdp-counters show platform software stack
128、-mgr chassis standby R0 peer-timeoutshow logging process stack_mgr start last 30 minutes to-file bootflash:stack_mgr_logs.txtshow logging process rif_mgr start last 30 minutes to-file bootflash:rif_mgr_logs.txtBRKEWN-362898 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveW
129、LC HA useful testing commandsUseful to troubleshoot RPCapture all traffic in porttest wireless redundancy packetdump start test wireless redundancy packetdump stopKatar2#dirDirectory of bootflash:/25 -rw-237568 May 10 2023 11:51:30+02:00 haIntCaptureLo.pcap1087409 drwx90112 May 10 2023 11:50:59+02:0
130、0 tracelogstest wireless redundancy rpingpBRKEWN-362899 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveAAA top issuesMy AAA server is not responding!2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntermittent RADIUS server not respondingIs it b
131、ecause the 9800 is not even sending RADIUS requests?Because it marked the RADIUS as dead?RA trace+PCAP%RADIUS-4-RADIUS_DEAD:RADIUS server:1812,1813 is not responding.BRKEWN-3628101 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntermittent RADIUS server not respondingRA
132、trace after server is dead:not usefulBest:RA trace for client triggering dead stateNot easy.May need WNCD logs to debug and collect over a period of time.BRKEWN-3628102 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveIntermittent RADIUS server not responding#Show aaa serve
133、rsRADIUS:id 18,priority 1,host 1.1.1.1,auth-port 1812,acct-port 1813,hostname r1 State:current UP,duration 304s,previous duration 0s Dead:total time 0s,count 0 Platform State from SMD:current UP,duration 304s,previous duration 0s SMDPlatform Dead:total time 0s,count 0 Platform State from WNCD(1):cur
134、rent UP Platform State from WNCD(2):current UP Platform State from WNCD(3):current UP Platform State from WNCD(4):current UP Platform State from WNCD(5):current UP Platform State from WNCD(6):current UP Platform State from WNCD(7):current UP Platform State from WNCD(8):current UP,duration 2559s,prev
135、ious duration 0s Platform Dead:total time 0s,count 0BRKEWN-3628103 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTypical causesRADIUS servers may ignore RADIUS requestsBRKEWN-3628104 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTypical cause
136、sDead time not set means dead RADIUS is immediately marked back aliveBRKEWN-3628105 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveTypical causesDead timer can be set within AAA server groupsBRKEWN-3628106 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#
137、CiscoLiveThroughput IssuesMy wifi is slow!2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is slow?Slow can be:few kbps,few Mbps or“just 100Mbps instead of 800”Important:Delimited problem descriptionIs everything equally slow?Speedtest?Local file transfer?FTP?Are all l
138、aptops affected equally?Is it just browsing thats giving a slow“feel”?108BRKEWN-3628 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is slow?General“wifi is slow”versus one app(Citrix)Per application behavior.FTP vs iPerf,TCP vs UDPFragmentation impact(adjust MSS)or l
139、atencyIsolate client typesIsolate locations,ApsGet RF dataIs client roaming?BRKEWN-3628109 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is slow?Very slow:Over the Air captureFrame retries vs TotalGaps:no AP or client TXReconnections?MCS data rates usedBeacon lossBR
140、KEWN-3628110 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWhat is slow?“Could be better”:Open/WPA2-AES or betterWMMFrame aggregation.Block ACKing 64 vs acking 3-4 framesMCS Data rateSpatial streamsBRKEWN-3628111 2023 Cisco and/or its affiliates.All rights reserved.Cisco
141、 Public#CiscoLiveFlash space issuesMy WLC flash is full!2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveCan my WLC face free space problems?Low frequency on appliancesTracelogs have limit in size and file countAutomatic rotationIOS images,crash files,system reports can use
142、 rest of spaceC9800-CL are typically limited on flash spaceCommon:Old CL on 8 GB disk(16 mandatory now)BRKEWN-3628113Tools and References 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveWireless Troubleshooting Toolshttps:/ PollerWireless Debug AnalzyerGuestshell scriptsBR
143、KEWN-3628115 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveMonitor 9800 KPIsWhat commands to collect to monitor 9800 operations?https:/ 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLiveConclusionAmazon link to purchaseBRKEWN-3628117 2023 Cisco a
144、nd/or its affiliates.All rights reserved.Cisco Public#CiscoLiveFill out your session surveys!Attendees who fill out a minimum of four session surveys and the overall event survey will get Cisco Live-branded socks(while supplies last)!These points help you get on the leaderboard and increase your cha
145、nces of winning daily and grand prizesAttendees will also earn 100 points in the Cisco Live Challenge for every survey completed.BRKEWN-3628118 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicContinue your educationVisit the Cisco Showcase for related demosBook your one-on-oneMeet t
146、he Engineer meetingAttend the interactive education with DevNet,Capture the Flag,and Walk-in LabsVisit the On-Demand Library for more sessions at www.CiscoL you#CiscoLive 2023 Cisco and/or its affiliates.All rights reserved.Cisco Public#CiscoLive121Gamify your Cisco Live experience!Get points Get po
147、ints for attending this session!for attending this session!Open the Cisco Events App.Click on Cisco Live Challenge in the side menu.Click on View Your Badges at the top.Click the+at the bottom of the screen and scan the QR code:How:1234121 2023 Cisco and/or its affiliates.All rights reserved.Cisco PublicBRKEWN-3628#CiscoLive