AP日志一看就懂.docx

1、文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 1 页 , 共 7 页1 AP 日志远程获取方法先在 AC 上 telnet 到 AP进入 super 模式如果 131AP 是 WA131SN-NZ:V100R005C00SPC100，161 是 WA161DD-NZ:V100R005C00SPC020 及以后的版本，需要输入如下命令进入如果是此前的老版本则直接输入 sup 即可在 super 模式下输入 more /mnt/ext-mtd-1/log_normal 即可显示 AP 的 normal 日志信息more /mnt/ext-mtd-1/log_except

2、 即可显示 AP 的异常日志信息2 AP 日志解读注：本文档中所有的日志信息都是从下往上看文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 2 页 , 共 7 页2.1 上电启动部分2012/10/03_04:26:40 dock(417) ap send to capwap info: AP ip 172.16.57.213, AC count 1, AC ip 172.16.46.2 mode dhcp,/ 准备和 172.16.46.2的 AC建立 capwap隧道2012/10/03_04:26:40 dock(417) Huawei capwap lib ve

3、rsion: V1.3.22012/10/03_04:26:40 dock(417) syslog start: capwap.2012/10/03_04:26:39 configserver(48) run system config.2012/10/03_04:26:37 dhcp_client(203) AP seconary_dns_server has changed to :255.255.255.255 (DHCP MODE)2012/10/03_04:26:37 dhcp_client(203) AP primary_dns_server has changed to :255

4、.255.255.255 (DHCP MODE)2012/10/03_04:26:37 dhcp_client(203) AP gateway has changed to :172.16.57.1 (DHCP MODE)2012/10/03_04:26:37 configserver(48) AP gateway has changed to :172.16.57.1/ AP的网关地址2012/10/03_04:26:37 dhcp_client(203) AP net mask has changed to :255.255.255.0 (DHCP MODE)2012/10/03_04:2

5、6:37 dhcp_client(203) AP ip has changed to :172.16.57.213 (DHCP MODE)2012/10/03_04:26:37 configserver(48) AP ip address has changed to :172.16.57.213 /AP获取到 IP地址2012/10/03_04:26:20 ag7240_mod eth0 up (ag7240_check_link 872) /有线端口起来2012/10/03_04:24:41 configserver(48) run system config.2012/10/03_04:

6、24:39 configserver(48) eth0 up2012/10/03_04:24:37 configserver(46) system start./ AP上电文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 3 页 , 共 7 页2.2 CAPWAP 隧道建立部分2012/10/08_09:38:34 dock(544) Set Radio 2, Enable / 使能射频口 2（可选）2012/10/08_09:38:34 dock(544) Set Radio 1, Enable /使能射频口 1，表示空口开始工作，有空口无线信号2012/10/08_

7、09:38:34 dock(544) capwap state change from DATA_CHECK to RUN. / 进入 run状态，表示 AP和 AC间的 CAPWAP隧道建立完成2012/10/08_09:38:34 dock(544) WCWP_FSM_StopTimer: stop timer timer name = DATA_CHECK ulLinkID = 02012/10/08_09:38:34 dock(544) WCWP_FSM_ChangeStatusEventResponseProc: change state response msg proc ulLi

8、nkid = 0 status = DATA_CHECK 2012/10/08_09:38:34 dock(544) capwap state change from CONFIGURE to DATA_CHECK./进入 data check状态2012/10/08_09:38:34 dock(544) WCWP_FSM_EnterinDataCheck: enter in datacheck oristate = CONFIGURE ulLinkID = 02012/10/08_09:38:34 dock(544) WCWP_FSM_StopTimer: stop timer timer

9、name = CHANGE_STATE_PENGDING ulLinkID = 02012/10/08_09:38:34 dock(544) WCWP_FSM_CfgStatusResponseProc: cfg state response msg proc ulLinkid = 0 status = CONFIGURE 2012/10/08_09:38:34 dock(544) capwap state change from JOIN to CONFIGURE./进入 configure状态 , 此 configure状态主要是 AP上报自己的射频物理状态以及重启记录等情况，可以通过抓到

10、的有线口报文看到，一般出现最多问题的就是 131AP在 AC上配置的 ap-type参数错误导致最后 configure failed，后面阶段出异常的可能极少，基本不会有问题2012/08/25_15:35:17 configserver(47) firmware upgrade, reboot system.2012/08/25_15:35:17 configserver(47) finish system upgrade.文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 4 页 , 共 7 页2012/08/25_15:32:52 configserver(47)

11、 start system upgrade./AP版本加载。2012/08/25_15:32:48 dock(530) capwap state change from IMAGE_DATA to RESET./ 复位升级2012/08/25_15:32:43 dock(530) download firmware success! /下载版本文件成功2012/08/25_15:32:25 dock(530) capwap state change from JOIN to IMAGE_DATA /AP进入 IMAGE DATA状态开始升级./蓝色部分表示 AP升级过程可选部分，2012/10

12、/08_09:38:34 dock(544) WCWP_FSM_EnterinConfigure: enter in configuatin oristate = JOIN ulLinkID = 02012/10/08_09:38:34 dock(544) WCWP_FSM_StopTimer: stop timer timer name = WAIT_JOIN ulLinkID = 02012/10/08_09:38:34 dock(544) WCWP_FSM_JoinResponseProc: join response msg proc ulLinkid = 0 status = JOI

13、N /这里收到了 JOIN Response的响应报文，表示 AC检查通过。后面阶段有 2个分支，如果有升级任务则进入 image data状态，如果没有升级任务则进入 configure状态2012/10/08_09:38:34 dock(544) capwap state change from DISCOVERY to JOIN.、 /这里是 AP发出 JOIN Request报文，进入 join阶段，主要发起 AP的 MAC和 SN有效性检查2012/10/08_09:38:34 dock(544) WCWP_FSM_EnterinJoin: enter in join oristat

14、e = DISCOVERY ulLinkID = 02012/10/08_09:38:34 dock(544) WCWP_FSM_DiscIntervalTimerProc: Have received discovery response begin to choose ulLinkid = 0, status = DISCOVERY 2012/10/08_09:38:27 dock(544) WCWP_FSM_DiscoveryResponseProc: discovery response msg proc ulLinkid = 0 status = DISCOVERY /这里是收到 c

15、apwap discovery response报文2012/10/08_09:38:27 dock(544) capwap state change from IDLE to DISCOVERY.文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 5 页 , 共 7 页2012/10/08_09:38:27 dock(544) WCWP_FSM_EnterinDiscovery: enter in discovery oristate = IDLE ulLinkID = 0/ ulLinkID 用来表示和 AC建立的链路号，比如 0就是和 AC0交互的消息， 1就是和

16、AC1交互的消息2012/10/08_09:38:27 dock(544) WCWP_SendAllDiscoveryRequest: send discovery READY /这个表示发出了capwap discovery request报文开始建立隧道2012/10/08_09:38:27 dock(544) capwap state change from START to IDLE.2.3 AP 空口射频部分2012/10/08_11:43:41 configserver(48) ath2 ssid has changed to :“CMCC-AUTO“2012/10/08_11:4

17、3:40 configserver(48) ath0 ssid has changed to :“CMCC“ / 射频口 1已经开始工作，射频信号 ssid是 CMCC，至此用户可以搜索到空口信号了2012/10/08_11:43:39 configserver(48) run system config.。2012/10/03_04:25:01 dock(446) Set Radio 1, vap 1, Tunnel Mode 0 / 设置隧道模式2012/10/03_04:25:01 dock(446) Set Radio 1, vap 1, Vap Type 02012/10/03_04

18、:25:01 dock(446) Set Radio 1, vap 1, Hide Ssid 1 /设置隐藏 ssid属性2012/10/03_04:25:01 dock(446) Set Radio 1, vap 1, Vlan Id 1343 /设置用户 vlan2012/10/03_04:25:01 dock(446) Set Radio 1, Vap 1, Auth Mode 8, Unicast Cipher 6, Multicast Cipher 6/./配置空口认证加密算法2012/10/03_04:25:01 dock(446) Set Radio 1, Radio Work

19、Mode 1文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 6 页 , 共 7 页2012/10/03_04:25:01 dock(446) Set Radio 1, Channel 1./配置空口信道2012/10/03_04:25:00 dock(446) Set Radio 1, Enable2.4 用户关联部分2012/10/08_13:14:24 umac Address: e0:06:e6:49:90:11 leave the ap! FOR Station send deauth reason 6/mac为 48:02:2a:48:d1:95用户去关联上

20、 AP，去关联的原因指是 62012/10/08_13:13:25 umac Address: e0:06:e6:49:90:11 associate the ap now!2012/10/08_13:30:54 umac Address: 48:02:2a:48:d1:95 leave the ap! FOR /mac为 48:02:2a:48:d1:95用户去关联上 AP 2012/10/08_13:29:59 umac Address: 48:02:2a:48:d1:95 associate the ap now!/mac为 48:02:2a:48:d1:95用户关联上 AP2.5 异常

21、打印2.5.1 端口反复 up/down2012/08/14_11:10:45 athrs_gmac eth0 down (athr_gmac_poll_link 72) /有线端口 down2012/08/14_11:09:06 athrs_gmac eth0 up athr_gmac_poll_link 123 /有线端口 up2012/08/14_11:08:52 athrs_gmac eth0 down (athr_gmac_poll_link 72) 2012/08/14_11:07:54 athrs_gmac eth0 up athr_gmac_poll_link 123 2.5.

22、2 心跳超时在异常日志中找到如下信息2012/10/09_11:16:28 dock(544) WCWP_FSM_SessionDeleteTimerProc: session delete timer proc ulLinkid = 0, status = DTLS_TEADOWN 文档名称 文档密级2019-5-20 华为保密信息,未经授权禁止扩散 第 7 页 , 共 7 页2012/10/09_11:16:20 dock(544) WCWP_FSM_EchoIntervalTimerProc: Error ulLinkid = 0 status = DTLS_TEADOWN is ill

23、egal2012/10/09_11:16:20 dock(544) WCWP_FSM_DataChannelKeepAliveTimerProc: Error ulLinkid = 0 status = DTLS_TEADOWN is illegal2012/10/09_11:16:20 dock(544) WCWP_FSM_EnterinTeardown: enter in teardown oristate = RUN ulLinkID = 02012/10/09_11:16:20 dock(544) WCWP_FSM_DataChannelDeadTimerProc: data chan

24、nel dead timer proc ulLinkid = 0, status = RUN / 这个表示 AP在 run状态下没有心跳报文导致 capwap链路 down2.5.3 Discover request 发出后没响应2012/08/23_06:39:44 dock(530) WCWP_FSM_DiscIntervalTimerProc: Have not received discovery response and not broadcast ulLinkid = 1 / 看到这样的打印表示没有 discover response响应报文2012/08/23_06:39:39 dock(530) WCWP_FSM_EnterinDiscovery: enter in discovery oristate = DISCOVERY ulLinkID = 12.6 其他2012/09/22_01:53:06 dock(446) AC set reboot./ AC下发的复位命令2012/08/09_17:47:56 dock(530) capwap state change from RUN to DTLS_TEARDOWN./ AP在 RUN状态下拆除 capwap链路，这里的状态可以有多种可能，比如 JOIN