We want to show you how to use the Easy Troubleshoot on the Web GUI Dashboard of the Access Point to check if there is an issue with the connection of Access Point when it has been integrated into Nebula. This is a new feature that has been implemented in Firmware Version 6.30.
Connect to the Access Point via assigned IP Address from Nebula or the standard default IP Address (192.168.1.2) and log in with the Nebula or standard password.
You can see how the Cloud Control Dashboard:
AP will automatically check each connection stage when going online on Nebula and display the result on GUI. When AP fails online, users can directly get the related information from AP's dashboard, precisely cut to the point and start troubleshooting.
AP checks each connection stage and displays the result on the circle. If the previous one fails and shows orange, AP won't check the next stage. Mouse over the circle to see detailed failure information.
We will separate the next steps into:
Check "Internet" Connection
AP ensures it has correct interface settings to access the local gateway and the Internet access.
Check "Nebula" Connection
AP make sure the traffic towards the Nebula server goes well
Check "Registration" Status
Negotiate with Nebula server about the registration status
Check "Internet" Connection
Check Internet Connection includes:
Check Interface settings / DNS setting and Internet access
You can't get an IP from your DHCP Server!
If the device fail to get IP, check the network setting:
DHCP Server function is enabled on AP's management VLAN. Switch setting on AP's access port (Avoid the wrong PVID is set). Ensure VLAN traffic is allowed by switches on the traffic path.
Missing default gateway setting:
When missing gateway settings, check IP settings on GUI.
Configuration -> Network -> IP Setting
Gateway unreachable!
When the gateway is unreachable, check VLAN settings on the switch in the traffic path and check AP's IP settings (the wrong gateway is assigned).
Configuration -> Network -> IP Setting
IP x.x.x.x conflict with Mac Address (aa:bb:cc::dd:ee:ff), please check !
When finding IP Conflict, use ZON to scan the network or check the MAC table on the switch to figure out the conflicting device.
NTP DNS query failed!
When DNS Query fails, check device DNS Setting on AP GUI. You can manually set 8.8.8.8 as AP's DNS Server and allow DNS traffic to pass through the Firewall. Please make sure the Firewall itself can sync.System time correctly.
On AP:
On Firewall:
NTP update failed!
When NTP Time Sync fails, check firewall settings and allow port 123 to pass through.
Check "Nebula" Connection
Check Nebula Connection includes:
The certificate has been imported on AP, resolve Nebula's IP address and check traffic allowed between AP and Nebula.
Certificate Problem !
When it fails to get the certificate, manually set 8.8.8.8 as AP's DNS Server
Also, allow DNS traffic to pass through the Firewall and allow HTTPS/ port 443 to pass through on the Firewall (for certificate download).
On AP:
On Firewall:
DNS queries fail!
When fail DNS Query, check device DNS Setting on AP GUI
You can manually set 8.8.8.8 as AP's DNS Server and allow DNS traffic to pass through the Firewall.
On AP:
On Firewall:
Proxy authentication fail!
When fail on Proxy Server check connectivity between AP and Proxy server.
TCP port 4335 blocked!
When both ports 4335 and 6667 are blocked, allow port 4335 on the security firewall.
Check "Registration" Status
Not registered yet, next retry in 13 seconds!
Check Nebula registration, once AP confirms its registration on Nebula, it will transfer to cloud mode. The AP increases the checking interval once it's not registered on NCC.
On-off the button to trigger the checking action.
How you can register a device in NCC, see the following KB article:
Registering a product in Nebula Control Center
Comments
0 comments
Please sign in to leave a comment.