WLC exchange tunnel - Failure

[Henri]

Hallo,

3 Fragen, ich habe hier 2*4006 mit 8.84.
Heute Morgen können 3/4 APs keine Verbindung mit den WLCs mehr aufbauen. WLCB ist als Backup eingerichtet, LANMonitor zeigt WLC Conncetions:1 , Missing APs:3., Connected APs:1.

Was kann ich den hier noch tracen um zu verstehen wieso die Verbindung nicht mehr funktioniert (trace unten ist gekürzt)?
Habe bisher "CAPWAP FIREWALL ST ERR SCEP RADIUS" versucht.

Danke
Henri

1.) [CAPWAP-CTRL] 2014/02/24 09:47:24,359
No PMTU discovery message was received during 60 seconds. Destroying connection.


2.) Job-ID.: w6
State..: Idle
UdpConn: L:X.X.X.15:1027 R:X.X.X.12:6851 (LAN-1, INTRANET)
Message content:
Message type: Discovery Request
Sequence Num: 118
Flags : 0
Vendor Specific Payload: 'WLC exchange tunnel' (28)
AC Name: 'WLCB'
Vendor Specific Payload: 'LAN MAC' (1)
MAC-Addr: 00:a0:57:17:XX:XX
Discovery Type: 'Unknown'

[WLC-Tunnel] 2014/02/24 09:47:07,665
CAPWAP Message to transmit:
UdpConn: L:X.X.X.15:1027 R:X.X.X.12:6851 (LAN-1, INTRANET)
Message content:
Message type: Discovery Response
Sequence Num: 118
Flags : 0
Vendor Specific Payload: 'WLC exchange tunnel' (28)
Result Code: Failure
AC Name: 'WLC'
Vendor Specific Payload: 'LAN MAC' (1)
MAC-Addr: 00:a0:57:13:XX:XX


3.) AP Client trace
[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client info: initSingleCA: SCEP_INIT_STATE_CAS_PRESENT: CA certificates present for DN=/CN=LANCOM CA/O=LANCOM SYSTEMS/C=DE


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client debug: initSingleCA: increasing CA index


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client info: initSingleCA: all configured CAs handled


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client debug: initialiseCAs: all CAs were handled


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client info: initialiseCAs: all CA certificates are present


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client info: initialiseCAs: state FULLSCEP reached


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client info: initialiseCAs: SCEP_INIT_STATE_FULL_SCEP has been reached, 1 CAs handled, 1 CAs ok


[SCEP-Client] 2014/02/24 09:55:05,367
SCEP-Client info: checkConfigurationAndCertificates: initialised all CAs


[CAPWAP-CTRL] 2014/02/24 09:55:05,063
CAPWAP Message received
Job-Name: w4
State..: Discovery
UdpConn: L:x.x.x.8:6685 R:x.x.x.12:1027 (LAN-1, INTRANET)
Message content:
Message type: Discovery Response
Sequence Num: 1
Flags : 0
Result Code: Success
AC Name Index: 'WLCB' (Idx:1)
Vendor Specific Payload: 'Management VLan' (20)
Mgmt VLan-ID: 1
Mgmt Trunk-Port:65535
Vendor Specific Payload: 'SCEP CA-URL' (3)
CA-URL: 'http://x.x.x.12/cgi-bin/pkiclient.exe'
Vendor Specific Payload: 'SCEP CA-Identifier' (33)
CA-Identifier: 'xxx'
Vendor Specific Payload: 'SCEP Distinguished Name' (5)
Distinguished Name: '/CN=LANCOM CA/O=LANCOM SYSTEMS/C=DE'
WTP Static IP Addr:
IP-Addr: x.x.x.8
Net-Mask: 255.255.254.0
Gateway: x.x.x.1
Enable Addr: yes
Vendor Specific Payload: 'DNS Configuration' (26)
DNS-1: x.x.x.1
DNS-2: x.x.x.1
Suffix: 'x.de'
AC Timestamp: 2014/2/24 8:55:4
AC IPv4 List: x.x.x.15
AC Descriptor:
Stations: 0
Limit: 65535
Active WTPs: 4
Max WTPs: 6
Security: X.509 Certificate Based,
R-MAC Field: yes
Reserved1: 0x0
DTLS Policy: Clear Text Data Channel,
Vendor ID: 2356
Hardware Version:
Vendor ID: 2356
Software Version: 8.84.0132 / 31.01.2014
Vendor Specific Payload: 'Control Encrypt Type' (2)
Ctrl-Encrypt: DTLS
CAPWAP Control IPv4 Addr:
IP-Addr: x.x.x.12
WTP Count: 4
Vendor Specific Payload: 'LAN MAC' (1)
MAC-Addr: 00:a0:57:17:0e:18

[CAPWAP-CTRL] 2014/02/24 09:55:04,066
CAPWAP Message to transmit:
UdpConn: L:x.x.x.8:6686 R:x.x.x.15:1027 (RtgTag:0)
Message content:
Message type: Discovery Request
Sequence Num: 1
Flags : 0
Discovery Type: 'AC Referral'
WTP Board Data:
Vendor ID: 2356
WTP Model Number: LANCOM L-460agn dual Wireless
WTP Serial Number: 4002789518100036
Board ID: nos
Board Revision: B
WTP Descriptor:
Max Radios: 2
Radios in use: 2
Encrypt Capability: 0x0
Vendor ID: 2356
Hardware Version:
Vendor ID: 2356
Software Version: 8.84.0132 / 31.01.2014
Vendor ID: 2356
Boot Version: 3.30
WTP Frame Tunnel Mode: LocalBridging,
WTP MAC Type: 'Local MAC'
Vendor Specific Payload: 'LAN MAC' (1)
MAC-Addr: 00:a0:57:xx:xx:xx

[CAPWAP-CTRL] 2014/02/24 09:55:12,762
CAPWAP Message received
Job-Name: w2
State..: Discovery
UdpConn: L:x.x.x.8:6689 R:x.x.x.15:1027 (LAN-1, INTRANET)
Message content:
Message type: Discovery Response
Sequence Num: 1
Flags : 0
Result Code: Success
AC Name Index: 'WLC' (Idx:1)
Vendor Specific Payload: 'Management VLan' (20)
Mgmt VLan-ID: 1
Mgmt Trunk-Port:65535
Vendor Specific Payload: 'SCEP CA-URL' (3)
CA-URL: 'http://x.x.x.15/cgi-bin/pkiclient.exe'
Vendor Specific Payload: 'SCEP CA-Identifier' (33)
CA-Identifier: 'x'
Vendor Specific Payload: 'SCEP Distinguished Name' (5)
Distinguished Name: '/CN=LANCOM CA/O=LANCOM SYSTEMS/C=DE'
WTP Static IP Addr:
IP-Addr: x.x.x.8
Net-Mask: 255.255.254.0
Gateway: x.x.x.1
Enable Addr: yes
Vendor Specific Payload: 'DNS Configuration' (26)
DNS-1: x.x.x.1
DNS-2: 0.0.0.0
Suffix: 'x.de'
AC Timestamp: 2014/2/24 8:55:13
AC Descriptor:
Stations: 0
Limit: 65535
Active WTPs: 5
Max WTPs: 6
Security: X.509 Certificate Based,
R-MAC Field: yes
Reserved1: 0x0
DTLS Policy: Clear Text Data Channel,
Vendor ID: 2356
Hardware Version:
Vendor ID: 2356
Software Version: 8.84.0132 / 31.01.2014
Vendor Specific Payload: 'Control Encrypt Type' (2)
Ctrl-Encrypt: DTLS
CAPWAP Control IPv4 Addr:
IP-Addr: x.x.x.15
WTP Count: 5
Vendor Specific Payload: 'LAN MAC' (1)
MAC-Addr: 00:a0:57:xx:xx:xx