Can't find what you need?


• Ask the Community
• Create a Case
Reset Search
 

 

Article

Minimum Firmware version for the WS-AP3825i/e; New AP3825i and AP3825e Not Registering/connecting to ExtremeWireless Controller

« Go Back

Information

 
TitleMinimum Firmware version for the WS-AP3825i/e; New AP3825i and AP3825e Not Registering/connecting to ExtremeWireless Controller
Symptoms
  • What is the minimum firmware version required to support the WS-AP3825i/e or the WS-AP3825i/e-1?
  • AP3825i Not Registering to the Controller
  • AP3825e Not Registering to the Controller
  • Sample of ap.log when experiencing this issue:
Jan  1 00:05:18 iked: [INFO]: ike_spmif.c:296: Received message flush
Jan  1 00:05:18 kernel: netflow_mtu_update ip:0 mtu:1450 src:0.
Jan  1 00:05:18 kernel: netflow_mtu_update set mtu:1450.
Jan  1 00:05:18 kernel: netflow_mtu_update: number_netflow_report_per_packet:30.
Jan  1 00:05:18 cap: 00276:ru_misc.c:312-ru_ikedRspRecv()-
Jan  1 00:05:18 cap: ru_ikedRspRecv312: 00276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:314-ru_ikedRspRecv()-1500276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:
Jan  1 00:05:18 cap: 00276:ru_misc.c:359-ru_ikedRspRecv()-ru_ikedRspRecv359: IKED tid 1 received response: 526 rc 0
Jan  1 00:05:18 cap: 00276:ru_misc.c:266-ru_ikedRspHandler()-ru_ikedRspHandler: IKED All secure tunnel have been deleted
Jan  1 00:05:18 cap: 00276:ru_misc.c:533-ru_ikedReqHandler()-ru_ikedReqHandler: IKED opCode 527 tid 1 totalNumIp 1 ru_id -100276:ru_misc.c:535-ru_ikedReqHandler()- a0a0a0200276:ru_misc.c:537-ru_ikedReqHandler()-
Jan  1 00:05:18 cap: 00276:ru_misc.c:441-ru_addIkeIp()-ru_addIkeIp: IKED alloc 10 used 100276:ru_misc.c:443-ru_addIkeIp()- a0a0a02(0)00276:ru_misc.c:445-ru_addIkeIp()-
Jan  1 00:05:18 iked: [INFO]: ike_spmif.c:247: Received message init:1 -1 1 a0a0a02
Jan  1 00:05:18 cap: 00276:ru_mgmt.c:2366-whsl_trans()-S_EDISC 3
Jan  1 00:05:18 iked: [INFO]: ikev2.c:1006: 12:10.10.10.44[500] - 10.10.10.2[500]:(nil):Adding pversion 1 information
Jan  1 00:05:19 iked: [INFO]: ikev2.c:1695: 12:10.10.10.44[4500] - 10.10.10.2[4500]:0x1007b198:Opposite side uses a legacy discovery
Jan  1 00:05:19 iked: [INTERNAL_ERR]: ikev2.c:1809: 12:10.10.10.44[4500] - 10.10.10.2[4500]:0x1007b198:discarding ike_sa
Jan  1 00:05:19 iked: [INFO]: ike_sa.c:276: 12:10.10.10.44[4500] - 10.10.10.2[4500]:(nil):aborting ike_sa
Jan  1 00:05:19 iked: [INFO]: ike_pfkey.c:460: SADB_DELETE ul_proto=255 src=10.10.10.2[4500] dst=10.10.10.44[4500] satype=ESP spi=0x0000020b
Jan  1 00:05:19 iked: [INFO]: ike_spmif.c:353: ipAddr a0a0a02 ctrl 0 ru_id 0 rc -5
Jan  1 00:05:19 iked: [INFO]: ike_spmif.c:384: fffb00000a0a0a0200000000000000000000013a0002000e000000000000
Jan  1 00:05:19 cap: 00276:ru_misc.c:312-ru_ikedRspRecv()-
Jan  1 00:05:19 cap: ru_ikedRspRecv312: 00276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:314-ru_ikedRspRecv()-1500276:ru_misc.c:314-ru_ikedRspRecv()-0000276:ru_misc.c:
Jan  1 00:05:19 cap: 00276:ru_misc.c:341-ru_ikedRspRecv()-ru_ikedRspRecv341: IKED tid 1 received response: 528 ip a0a0a02 rc -5
Jan  1 00:05:19 cap: 00276:ru_misc.c:457-ru_deleteIkeIp()-ru_deleteIkeIp: IKED delete a0a0a02 from ikedIpList
Jan  1 00:05:19 cap: 00276:ru_misc.c:474-ru_deleteIkeIp()-ru_deleteIkeIp: IKED alloc 10 used 000276:ru_misc.c:478-ru_deleteIkeIp()-
Jan  1 00:05:19 cap: 00276:logging.c:866-show_one_alarm()-ALARM    67 INFO:  322 sec in cycle 28: The AP 10.10.10.44 has failed to connect to AC 10.10.10.2 using secure tunnel.
Jan  1 00:05:19 cap: 00276:ru_misc.c:255-ru_ikedRspHandler()-ru_ikedRspHandler255: IKED has failed to connect to AC 10.10.10.2. Error -5
Jan  1 00:05:19 cap: 00276:ru_misc.c:734-ru_ike_discovery()-ru_ike_discovery: IKED request HWC a0a0a02 response HWC a0a0a02
Jan  1 00:05:19 cap: 00276:ru_misc.c:533-ru_ikedReqHandler()-ru_ikedReqHandler: IKED opCode 525 tid 1 totalNumIp 0 ru_id -100276:ru_misc.c:537-ru_ikedReqHandler()-

 
Environment
  • ExtremeWireless Access Points
  • IdentiFi
  • All current controller models
  • WS-AP3825i - Version 9.01 and older
  • WS-AP3825i-1, WS-AP3825e-1
  • Firmware 10.01.02.0038 and older
  • Firmware 9.21.07.0007 and older
Cause
  • New hardware models end in a -1 such as follows:
WS-AP3825i-1
WS-AP3825e-1
  • IKE error in AP log
  • ISAKMP handshaking is not complete
  • Background:
    • Due to compliance requirements, the FCC required the up-revving of any units shipped after June 2016 (but as the AP3825i does not have a regulatory variant, it affected all units). The new rules impacted new production but grandfathered existing deployments. So, to not affect existing installations, Extreme Networks up-revved the internal model for the device. Although the units continue to be ordered as the standard AP3825i, the new variant is designated as AP3825i-1, or revision 5L+. You can see the revision in the label as AP_ID: AP3825-1. This requirement is reflected (sticker) on the gift-box of the unit.
Resolution
  • AP3825i/e (HW REV 5L, or APP_ID: AP3825i/e-1) or greater (Manufactured after April 2016) have a minimum Firmware release of 9.21.08.0013 or 10.01.04.0011.
    • Please upgrade the ExtremeWireless Appliance and AP3825i/e-1 to 10.01.04.0011 (if on version 10 code track)
    • Please upgrade the ExtremeWireless Appliance and AP3825i/e-1 to 9.21.08.0013 (if on version 9 code track)
  • For earlier hardware revisions the minimum firmware required is 9.01.01.
  • Our recommendation is to always be running the latest firmware release available from Extreme Networks.
Additional notes
NOTE: The new hardware models will have a serial number ending in revision '5L' or higher (eg. Serial# 12345678905L).

User-added image
 

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255