Problems with deleted AP

Hi,

I've problems with an deleted AP:


2010:07:20-15:03:02 fw-1 awed[1208]: new connection from 192.168.1.43:3858

2010:07:20-15:03:03 fw-1 awed[1208]: recv msg: id '', type: '2', digest: '4f02d9a178173cc9f48dcfa2a8365316656b8380', length: '32'

2010:07:20-15:03:03 fw-1 awed[1208]: >=========================================================================

2010:07:20-15:03:03 fw-1 awed[1208]: checksum mismatch

2010:07:20-15:03:03 fw-1 awed[1208]:

2010:07:20-15:03:03 fw-1 awed[1208]: 1. main:[:D]ecrypt_and_verify:464() awed.pl

2010:07:20-15:03:03 fw-1 awed[1208]: 2. main::handle_read:355() awed.pl

2010:07:20-15:03:03 fw-1 awed[1208]: 3. main::top-level:224() awed.pl

2010:07:20-15:03:03 fw-1 awed[1208]: |=========================================================================

2010:07:20-15:03:03 fw-1 awed[1208]: data encryption/verification error

2010:07:20-15:03:03 fw-1 awed[1208]:

2010:07:20-15:03:03 fw-1 awed[1208]: 1. main::handle_read:365() awed.pl

2010:07:20-15:03:03 fw-1 awed[1208]: 2. main::top-level:224() awed.pl

2010:07:20-15:03:03 fw-1 awed[1208]:

I deleted the AP because of the problems mentionend in the thread:
https://community.sophos.com/products/unified-threat-management/astaroorg/f/107/t/69956

Maybe not everything got deleted?

If i connect the deleted AP the WLAN doesn't work anymore, the functional AP keeps rebooting. After removing the deleted AP from LAN everything works again!

Regards, Mario

Parents

0 quasar3c279 over 14 years ago

Any hints on this?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 hschaa over 14 years ago in reply to quasar3c279

It seems as if the AP lost parts of its permanent memory. That basically means that the AP cannot be restored without direct hardware access.

Helmut
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 quasar3c279 over 14 years ago in reply to hschaa

ok, but why do i see the ap in the inline report? please see attachment.
- deleted_ap.png
- View
- Hide
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 hschaa over 14 years ago in reply to quasar3c279

Because the AP sends an empty ID to the ASG (which should not happen of course) but the ASG is not able to handle an empty ID.

Nevertheless there might be more things (like the MAC address) corrupted. To be sure, could you please check which MAC address the AP uses (via tcpdump or similar)?

Thanks,
Helmut
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wOLLi over 14 years ago in reply to hschaa

After I changed my IP address on wlan 1 the APs were "Inactive" (see: https://community.sophos.com/products/unified-threat-management/astaroorg/f/107/t/69939).
Now I delete them and I've got the same problem:

2010:07:21-15:11:22 ibkchfw001 awed[24988]: handle_read: short read or connection error:
2010:07:21-15:11:22 ibkchfw001 awed[24988]: error handling client 192.168.180.135, cutting connection.
2010:07:21-15:11:22 ibkchfw001 awed[24988]: >=========================================================================
2010:07:21-15:11:22 ibkchfw001 awed[24988]: low-level recv error: sysread failed
2010:07:21-15:11:22 ibkchfw001 awed[24988]:
2010:07:21-15:11:22 ibkchfw001 awed[24988]: 1. main::handle_read:257() awed.pl
2010:07:21-15:11:22 ibkchfw001 awed[24988]: 2. main::top-level:224() awed.pl
2010:07:21-15:16:18 ibkchfw001 awed[24988]:
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 hschaa over 14 years ago in reply to wOLLi

wOLLi, please attach a larger part of your logfile. From the snippet you've posted it is not yet obvious if you encounter the same problem.

Thanks,
Helmut
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wOLLi over 14 years ago in reply to hschaa

hello helmut,
i wrote it just now to andreas: after deleting them and another reboot the aps appear as "Pending". i accept them and they're working again.

do you still want more text (logs)? [:)]

grtx
wOLLi
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 hschaa over 14 years ago in reply to wOLLi

do you still want more text (logs)? [:)]

Ehh, no, thanks [;)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 quasar3c279 over 14 years ago in reply to hschaa

Good Morning,

what shall i do with the broken AP? Send it back? Anything i can do to get it working?

Thanks...

Regards, Mario
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 quasar3c279 over 14 years ago in reply to quasar3c279
Well, think i got the MAC:

FW-Wlan:/root # arp -a
? (10.24.5.101) at 00:0C:43:30:52:77 [ether] on br0

I can ssh to the AP but i have no credentials...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 quasar3c279 over 14 years ago in reply to quasar3c279
Well, think i got the MAC:

FW-Wlan:/root # arp -a
? (10.24.5.101) at 00:0C:43:30:52:77 [ether] on br0

I can ssh to the AP but i have no credentials...
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 hschaa over 14 years ago in reply to quasar3c279
Well, think i got the MAC:

FW-Wlan:/root # arp -a
? (10.24.5.101) at 00:0C:43:30:52:77 [ether] on br0

I can ssh to the AP but i have no credentials...

Ok, that verifies my assumption. The AP also lost it's MAC address and falls back to a default one. It should indeed be possible to reprogram the ID and MAC address via ssh. Let me check that for you ...

Helmut
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel