This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AP30 unstable since 9.401

Hi,

(currently running 9.402-7)

My AP30 frequently seems to reboot, after moving from 9.355 with VLANs to a new VM running 9.401 without VLANs.

Sometimes, I get email messages from the UTM "WARN-728 Access Point is Offline".

Here's the wireless.log entries from the last occurance:

2016:05:27-00:22:00 192.168.211.211 hostapd: wlan1: STA 1c:5c:f2:9b:34:79 IEEE 802.11: authenticated
2016:05:27-00:22:00 192.168.211.211 hostapd: wlan1: STA 1c:5c:f2:9b:34:79 IEEE 802.11: associated (aid 5)
2016:05:27-00:22:00 192.168.211.211 awelogger[1477]: id="4103" severity="info" sys="System" sub="WiFi" name="STA authentication" ssid="WIFIWIFI2" ssid_id="WLAN2.0" bssid="00:1a:8c:29:77:81" sta="1c:5c:f2:9b:34:79" status_code="0"
2016:05:27-00:22:00 192.168.211.211 awelogger[1477]: id="4104" severity="info" sys="System" sub="WiFi" name="STA association" ssid="WIFIWIFI2" ssid_id="WLAN2.0" bssid="00:1a:8c:29:77:81" sta="1c:5c:f2:9b:34:79" status_code="0"
2016:05:27-00:22:00 192.168.211.211 hostapd: wlan1: STA 1c:5c:f2:9b:34:79 WPA: pairwise key handshake completed (RSN)
2016:05:27-00:22:00 192.168.211.211 awelogger[1477]: id="4101" severity="info" sys="System" sub="WiFi" name="STA connected" ssid="WIFIWIFI2" ssid_id="WLAN2.0" bssid="00:1a:8c:29:77:81" sta="1c:5c:f2:9b:34:79"
2016:05:27-00:23:51 192.168.211.211 hostapd: wlan1: STA 0c:d7:46:ab:84:00 IEEE 802.11: disassociated due to inactivity
2016:05:27-00:23:51 192.168.211.211 awelogger[1477]: id="4102" severity="info" sys="System" sub="WiFi" name="STA disconnected" ssid="WIFIWIFI2" ssid_id="WLAN2.0" bssid="00:1a:8c:29:77:81" sta="0c:d7:46:ab:84:00"
2016:05:27-00:23:52 192.168.211.211 hostapd: wlan1: STA 0c:d7:46:ab:84:00 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] kswapd0: page allocation failure: order:0, mode:0x20
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] CPU: 0 PID: 99 Comm: kswapd0 Not tainted 3.10.49 #3
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] Stack : 00000000 00000000 00000000 00000000 8054a0de 00000033 8182b3e8 00000000
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] 	  80237544 8026c673 00000063 805437fc 8182b3e8 00000000 00000000 00000000
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] 	  00000000 801e73cc 00000000 8015b69c 00000006 00000000 80239070 819a5a9c
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] 	  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] 	  00000000 00000000 00000000 00000000 00000000 00000000 00000000 819a5a28
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] 	  ...
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] Call Trace:
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] [<80193870>] show_stack+0x48/0x70
2016:05:27-00:25:54 192.168.211.211 kernel: [  549.240000] [<801f8b7c>] warn_alloc_failed+0x108/0x12c
2016:05:27-00:26:40 fw awed[22827]: [A4000BE4D4BC5D2] ll_read: dead socket: Resource temporarily unavailable
2016:05:27-00:26:40 fw awed[22827]: [A4000BE4D4BC5D2] disconnected. Close socket and kill process.
2016:05:27-00:26:44 fw awed[4687]: [MASTER] new connection from 192.168.211.211:41002
2016:05:27-00:26:45 fw awed[23793]: [A4000BE4D4BC5D2] AP30 from 192.168.211.211:41002 identified as A4000BE4D4BC5D2
2016:05:27-00:26:45 fw awed[23793]: [A4000BE4D4BC5D2] (Re-)loaded identity and/or configuration




This thread was automatically locked due to age.
  • Hi,

    Restart awed services, take SSH to UTM with root privileges. Run command: /var/mdw/scripts/awed restart. 

    Also, try reflashing AP30, please refer : https://www.sophos.com/en-us/support/knowledgebase/118843.aspx

    Hope that helps.

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hi Sachin,

    I have run the awed restart command and will keep an eye on it.

    However, I have already applied recent up2dates and rebooted, so I'm sure awed had restarted then.

    Also, I am sure the AP was flashed during the 9.400 setup, and probably during the 9.401 & 9.402 up2dates as well. If you let me know what to look for in the logs to confirm that, I will check.

    I had a hard time getting the AP30 working with 9.4xx without VLANs; if re-flashing the firmware with the RecoveryApp is going to revert me back to an older firmware and cause problems again, I'd rather avoid that if possible.

    Thanks,

    Barry

  • Hi, after the awed restart, I am seeing the following in wireless.log:

    2016:05:31-11:33:23 fw awed[10346]: [MASTER] new connection from 192.168.211.211         :59999
    2016:05:31-11:33:23 fw awed[10386]: [A4000BE4D4BC5D2] AP30 from 192.168.211.211:         59999 identified as A4000BE4D4BC5D2
    2016:05:31-11:33:23 fw awed[10386]: [A4000BE4D4BC5D2] (Re-)loaded identity and/o         r configuration
    2016:05:31-11:33:23 192.168.211.211 aweclient[716]: Cloudclient not found on ubu         s.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    2016:05:31-11:41:45 192.168.211.211 netifd: lan (751): Sending renew...
    2016:05:31-11:41:45 192.168.211.211 netifd: lan (751): Lease of 192.168.211.211 obtained, lease time 86400
    2016:05:31-11:41:46 192.168.211.211 hostapd: wlan2: STA 00:14:d1:f1:c5:ba WPA: group key handshake completed (RSN)
    2016:05:31-11:41:46 192.168.211.211 hostapd: wlan1: STA 00:d0:2d:26:37:2c WPA: group key handshake completed (RSN)
    2016:05:31-11:41:46 192.168.211.211 hostapd: wlan1: STA 10:1c:0c:2a:f0:9f WPA: group key handshake completed (RSN)
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.
    nl80211 not found.

    currently on 9.403 btw.

  • Hi Barry,

    Such logs are usually generated when the boot process went wrong. What happens to AP now?

    Yes, AP will boot to previous firmware and automatically update to the latest version during the flash process. Once the AP is connected back to the UTM, it will check the latest firmware version available for AP to upgrade.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hi, the AP has still mostly been working, but I did get a message from the firewall at 23:10 that it was offline again (briefly).

    I can try power-cycling the AP tonight if you think it'd help.

    Barry

  • Please try and update us.

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hi, I power cycled the ap30 about 10 minutes ago, and it was OK but then went offline about 5 minutes later. It's working again now. Barry
  • Hi, my AP30 still frequently reboots while web surfing. Anyone else experiencing this? Anyone else running an AP on 9.4?
  • Thanks, again, Barry.  Your thread helped me keep my clients that use Wireless Protection on 9.3.  This is not a problem for everyone, but I would urge everyone that can to get a ticket open with Sophos Support.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • No improvement in 9.404