Troubleshoot AP Disconnection Issues

1. Check whether the switch port connected to the AP learns the MAC address of the AP.

2. Check the power logs on the AP to verify that PoE is enabled on the switch port.

3. Check whether the switch is supplying power to the AP. Change the cable and the switch port to see whether the AP powers on.

4. If you have a working AP, swap it with the faulty AP. Check whether the issue persists.

   Note:

   If your APs are already installed and you cannot swap any AP, skip this step.

1. Verify that the relevant ports are open on the firewall. See Firewall Configuration.

2. Connect a laptop to the same switch port as the AP. Open https://ep-terminator.mistsys.net/test and see if it resolves the host.

   Your output should look like this:

   Welcome to MIST

3. Check the firewall logs to see whether any policy is blocking the https://ep-terminator.mistsys.net/test URL.

1. Run a cable test to verify that the cable connected to the AP is working correctly.

2. Check whether the switch port connected to the AP learns the MAC address of the AP.

3. Check for any eth0 errors on the switch port.

4. Change the cable and switch port and verify that the AP powers on.

5. If you have a working AP, swap it with the faulty AP. Check whether the issue persists.

   Note:

   If your APs are already installed and you cannot swap any AP, skip this step.

The AP can obtain an IP address either through DHCP or through a static configuration.

Troubleshooting steps for DHCP:

1. Check whether the switch port configuration has the required parameters (such as native VLAN and VLAN ID) configured.

2. Check the DHCP server logs to verify that leases are available in the DHCP pool.

3. Connect a laptop to the switch port to which the AP was connected. Verify that the laptop is able to obtain an IP address from the VLAN management pool.

   • If the laptop is unable to obtain an IP address, contact the DHCP team to fix the DHCP pool. You can port-mirror the switch port to identify which step in the DHCP Discover, Offer, Request, Acknowledgment (DORA) process is failing.

   • If your laptop is able to obtain an IP address whereas the AP is unable to obtain an IP address, contact the Juniper support team.

Troubleshooting steps for static configuration:

If the AP was connected to the Juniper Mist cloud earlier, check the static configuration on the Juniper Mist portal. If the static configuration is incorrect, then the AP will not be able to connect to the Juniper Mist cloud. To correct the static configuration:

1. Power off the AP by shutting down the PoE on the switch connected to the AP. Alternatively, you can remove the physical cable that provides power to the AP.

2. Correct the configuration on the switch port.

3. Reset the AP to the factory-default configuration. See Reset an AP to the Factory-Default Configuration.

4. Power on the AP.

1. Check the DHCP pool configuration to see whether the default gateway is configured.

2. If you've configured a static IP address for the AP, check whether the default gateway is configured correctly.

   If the default gateway is not configured correctly, follow these steps:

   1. Power off the AP by shutting down the PoE on the switch port to which the AP is connected. Alternatively, you can remove the physical cable that provides power to the AP.

   2. Correct the configuration on the switch port.

   3. Reset the AP to the factory-default configuration. See Reset an AP to the Factory-Default Configuration.

   4. Power on the AP.

3. Perform port mirroring for the switch port and obtain the packet capture. In the DHCP offer packet from the server, check whether the default gateway field displays an IP address.

   • If the default gateway field does not display an IP address, contact your DHCP server team to fix the configuration on the DHCP server.

   • If the default gateway field displays an IP address, contact Juniper Mist support to troubleshoot the issue.

1. Verify that the default gateway IP address is set correctly in all the configurations on the switch port (VLAN, native VLAN) and the DHCP pool configuration.

2. If you've configured a static IP address for the AP, check whether the default gateway is configured correctly.

   If the default gateway is not configured correctly, follow these steps:

   1. Power off the AP by shutting down the PoE on the switch port to which the AP is connected. Alternatively, you can remove the physical cable that provides power to the AP.

   2. Correct the configuration on the switch port.

   3. Reset the AP to the factory-default configuration. See Reset an AP to the Factory-Default Configuration.

   4. Power on the AP.

   If the configuration is correct and the LED still blinks yellow five times, follow these steps:

   1. Connect a laptop on the same VLAN, network, or switch port to which the AP was connected.

   2. Ping the default gateway. Use the ipconfig /all command to get the default gateway information.

      If the ping fails, contact your network administrator to check for issues on the wired side.

      If the ping succeeds but the AP still fails to connect, contact Juniper Mist support.

1. Check the DHCP pool configuration to see whether the DNS server is configured.

2. If you've configured a static IP address for the AP, check whether the DNS server is configured correctly.

   If the DNS server is not configured correctly, follow these steps:

   1. Power off the AP by shutting down the PoE on the switch port to which the AP is connected. Alternatively, you can remove the physical cable that provides power to the AP.

   2. Correct the configuration on the switch port.

   3. Reset the AP to the factory-default configuration. See Reset an AP to the Factory-Default Configuration.

   4. Power on the AP.

3. Perform port mirroring for the switch port and obtain the packet capture. In the DHCP offer packet from the server, check whether the dns server field displays an IP address.

   • If the dns server field does not display an IP address, contact your DNS server team to fix the configuration on the DNS server.

   • If the dns server field displays an IP address, contact Juniper Mist support to troubleshoot the issue.

• Connect a laptop on the same VLAN or network, and try to resolve the URL ep-terminator.mistsys.net to an IP address by executing the nslookup command at the command prompt.

  C:\Users\username>nslookup ep-terminator.mistsys.net
  Server: dns.google
  Address: 8.8.8.8
  Non-authoritative answer:
  Name: ep-term-production-1584483204-1989267174.us-west-1.elb.amazonaws.com
  Addresses: 52.9.76.55
  13.57.102.113
  Aliases: ep-terminator.mistsys.net

• If the nslookup command cannot resolve the URL, explicitly add the URL to your DNS server.

• If the issue is still not resolved, check the firewall and proxy logs to see whether the traffic for the URL is getting dropped. You can also take a packet capture to analyze further.