Wireless Access

 View Only
Expand all | Collapse all

AP with Flag ID

This thread has been viewed 54 times
  • 1.  AP with Flag ID

    Posted Jul 03, 2014 08:33 AM

    Hello need some help.


    I have a Master and Local controller. Which initally had AP's split equally 50/50.

     

    However due to circumstances I needed to send all AP's that had been connected on the Local to the Master.

    So re-provisioned them to use the Master IP address.

     

    Since doing so all the AP's that had been on the Local controller still have the "Switch IP" as the Local IP address and they all have the flags ID. Although the flags seem to come and go depedning on how often I refresh the page......

     

    Basically those AP's that had been on the Local AP do not allow clients to connect.

     

    Regards,

    Red.



  • 2.  RE: AP with Flag ID

    Posted Jul 03, 2014 08:34 AM
    That means inactive, dirty config. On the controller, can you run show profile errors


  • 3.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:23 AM

    Hi Thank you for the quick response.

    There was no messages  form "show profile-errors" see below-

     

     Invalid Profiles
     ----------------
     Profile  Error
     -------  -----



  • 4.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:30 AM
    The D flag is usually temporary. If its persistent, you should call TAC. The I flag can be caused by a number of things, but most of them show up under profile-errors. Check to make sure you have the AP group created on the controller. The APs store the name of their AP group in flash and then try to join that same group. If it doesn?t exist, the AP will be ?I? flagged. It will also be I flagged if you don?t have any VAPs assigned to the AP group the AP joins. It might also be due to CPSec being disabled, but the VAPs assigned to the AP group are in bridge mode.


  • 5.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:32 AM
    Another big one? if you use VLAN pool names in the VAP, make sure that name exists on the controller where the AP is trying to terminate.


  • 6.  RE: AP with Flag ID

    Posted Jul 03, 2014 08:43 AM
    How are your APs discovering the controller ?

    Do you have enough licenses on your master ?

    How do you have configured the AP system profile ? Are you using VRRP ?


  • 7.  RE: AP with Flag ID

    Posted Jul 03, 2014 08:52 AM
    Try running the show log system all | include <ap Mac >
    Show ap debug status ap-name <ap name>
    this will give some idea why your are getting that flag


  • 8.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:34 AM


    show log system all | inc <ap MAC>

     Jul 3 08:50:48 :311004:  <WARN> |AP Burton-1stFlr-24:de:c6:c4:d4:da@10.41.11.4 sapd|  Missed 8 heartbeats; rebootstrapping

     

    Which suggests it keeps loosing sight on the Master controller?!!



  • 9.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:41 AM
    That's is correct , those APs are having issues reaching the master controller so they keep going back and forth between the master / local



  • 10.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:55 AM

    If the AP's are losing heartbeat to the controller.... Why does it only effect those AP's that had been configured with the Local as the primary LMS?

     

    All AP's now have the Master LMS profile and have been reprovisioned.



  • 11.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:32 AM

    Q: How are AP's discovering controller?

     A: Via IP address manually set when initially configured by console. E.g. Some AP's with Master IP, then some with Local IP.

       Since then I tried re-provisioning to set them all to the Master conrtollers IP address.

     

    Q: Do you have enough licenses?
     A: 145 License on each controller. 76 AP's deployed in totoal.

     

    Q: How is AP system profile configured? VRRP?
     A: VRRP is not used. We have a Primary and a Backup LMS specified

      e.g. Master AP with Primary IP as Master and backup as Local.
                Local AP had Primary IP as Local and Master as backup.

     

    The Master has a AP-profile and the Local a different one.

    So im at the point now where I want all APs to use the Mater AP proflile and the Master Switch. Which I set on re-provisioning.

     

    I've not had much time on this and being thrown in at the deep end....

     

    Thank you for your help.



  • 12.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:42 AM
    What do you mean a different profile on each controller ?


  • 13.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:51 AM

    Each has a different AP system Profile.

     

    So When assigned to the Master or Local controller the appropriate AP has the correct controller as its primary/backup LMS.



  • 14.  RE: AP with Flag ID

    Posted Jul 03, 2014 09:58 AM
    Do you have other APs that are the IP segment join to the master controller with no issues ?

    Under the AP provisioning settings what do you have configured ? Can you remove any manual settings and allow the APs to find the controller based on the ap system profile ?


  • 15.  RE: AP with Flag ID

    Posted Jul 03, 2014 10:06 AM

    Hi Victor,

     

    Q: Do you have other APs that are the IP segment join to the master controller with no issues?

    •  A: Yes, I have a site which has 6 AP's. Two of which are newly deployed AP's and I set via console on my desk with the serverip and master as the "MASTER" IP address. The already installed AP's orignally had the Local IP set as both server and master IP as the Local address.
    • The newly deployed AP's work as expected. The AP's previously configured to use the local do not.
    • Regards, Red.


  • 16.  RE: AP with Flag ID

    Posted Jul 03, 2014 10:12 AM
    Why do you assign the controller manually that way ?

    You should implement either dhcp option 43 or DNS Aruba-master for APs to discover your controller.

    To get to the bottom of this you should probably open a TAC they will be able to look at your environment and determine what's causing this issue


  • 17.  RE: AP with Flag ID

    Posted Jul 03, 2014 10:20 AM

    Hi Victor,

     

    We only have two controllers and the IP's are static and not going to change so it was our preference to use static IP.

     

    Thankyou for your help.

     

    Regards,

    Chris,



  • 18.  RE: AP with Flag ID
    Best Answer

    Posted Jul 07, 2014 05:07 AM

    Hello All,

     

    Just wanted to update this post with a solution.

     

    To recap..... We have two controllers

       North-(Local (Backup))   &   South-(Master)

     

    We originally configured (via console) our AP's according to which controller was the closest e.g.

     

    Northern-AP                                              Southern-AP

      setenv ipaddr 10.3.1.1                          10.2.1.1
      setenv netmask 255.255.0.0               255.255.0.0
      setenv gatewayip 10.3.0.1                    10.2.0.1
      setenv serverip 192.168.1.10             192.168.0.10
      setenv master 192.168.1.10               192.168.0.10

     

    Everything was working until.....

    We then needed to change (re-provision) all Northern AP's to use the Southern controller.

    Doing this via the GUI lead to the Northern AP's constatnly flapping between both controllers and showing/flapping the flags D (Dirty) & I (inactive).

     

    The solution-

    Disbale ADP on the Northern-(Local) controller.

    Although configured manually we found that ADP was not helping our setup.

    This fixed the majority of re-provisioned AP's

     

    Next for those stuborn AP's  that still kept falpping. We re-re-provisioned with a new IP in the same range.

    E.g for an AP that had IP 10.3.1.1 we moved it to 10.3.1.10.

     

    All AP's are now using the Southern-(Master) controller.

     



  • 19.  RE: AP with Flag ID

    Posted Jul 10, 2025 09:05 AM

    Subject: Ongoing Issue with 2ID and 2D Flags on Controller 9012 (Version 8.12.0.5)

    Hello,

    We are currently experiencing an issue with 2ID and 2D flags on our Controller 9012, which is running software version 8.12.0.5.

    Network Setup:

    • Controller A IP: 192.168.203.134 (Physical)

    • Controller B IP: 192.168.203.135 (Physical)

    • Both controllers are managed by the Mobility Master (MM) at IP: 192.168.203.133 (VM)

    Issue Summary:

    • The 9012 controller has a known limitation of supporting only 32 Access Points (APs).

    • We opened a case with TAC, and they recommended upgrading the controller version to increase the AP limit.

    • After the upgrade, the controller now supports 36 APs, but the remaining APs (total of 52 in production) are showing D and ID flags.

    • We have a total of 100 licenses available.

    Observations:

    • If we decommission any one of the currently working 36 APs, one of the flagged APs takes its place and starts serving clients as expected.

    • As a temporary workaround, we moved the flagged APs to Controller B, and they are now functioning properly.

    • The TAC case remains open and unresolved for the past three weeks.




  • 20.  RE: AP with Flag ID

    Posted Jul 10, 2025 09:14 AM

    If you have more APs on a controller than the hardware capacity of that controller, it's expected that only the hardware capacity number of APs come up.

    In the case of an AOS8 cluster of two controllers, the APs should be load-balanced over the two controllers, and as long as both are up all APs should be able to connect. If you lose one of the controllers, APs that won't fit on the remaining controller will go inactive. So this situation/design is quite deprecated if availability is of your concern.

    Without clustering, it's expected to only have 32/36 APs up at the same time unless you distribute manually over the controllers, what you did.

    I can't imagine that it is this simple and TAC can't solve it, so make sure you escalate the TAC case, which you should do as soon as you feel there is not enough progress or the assigned TAC engineer doesn't fully understand your issue.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 21.  RE: AP with Flag ID

    Posted Jul 10, 2025 11:49 PM

    Yes, we have escalated the case to the L3 engineer. As per their instructions, we upgraded the firmware. The documentation also mentions that the hardware limit should increase from supporting 32 APs to 64 APs after the upgrade. However, we are currently seeing support for only 36 APs.

    As per TAC's recommendation, we removed the L2 redundancy and configured the LMS. In doing so, we also disabled ADP on the controller.

    When we manually move the working AP-69 to the secondary controller, the 'D' flag that was previously shown for AP-78 is no longer visible.

    Before

    After



    Regards,

     Rakesh Biradar




  • 22.  RE: AP with Flag ID

    Posted Jul 14, 2025 02:29 AM

    You could check/validate with 'show license platform-limits' and 'show license limits' what are the effective limits.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------