topic Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today in M and MSM Series

12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

svhelden — Thu, 17 Apr 2014 11:11:19 GMT

We have an MSM760 (Firmware 6.3.0.0) with 93 Access Points. Everything worked until yesterday, and there were no changes in our network.

Now, suddenly, 12 of the Access Points cannot connect anymore. They are in a constant loop:

get DHCP address
contact MSM760 controller
"Establishing tunnel"
reboot

All affected Access Points are MSM310. But also have lots of MSM310s that are working.

I could also not find any useful information from the logs. Of course I rebooted the Access Controller and one of the Access Points, but it did not help. Also it's not a license issue (we have 120 licenses).

Do others also have the same problem? Is it a known issue, maybe due certificate expiry? Or is there any special log that I could check?

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

svhelden — Fri, 18 Apr 2014 07:08:04 GMT

We worked around the issue by setting the date on the controller a month back. Seems that some certificate has expired (which is not visible in the controller's certificate list). Now working with HP to find a permanent solution.

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

Adam_Brown — Wed, 13 Aug 2014 23:25:13 GMT

Hi!

Wondering if HP ever came up with a permanent solution to this one. We're experiencing the exact same thing here. I set the date back (thanks for posting that!) and we're working for now, but I'm curious if there's been a permanent fix.

Thanks!

Adam Brown

Systems Manager II, Technological Services

Visalia Unified School District

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

hoganwillig — Mon, 29 Sep 2014 15:40:36 GMT

Had the same issue today with a MSM710. Changing the date back 2 months got everything back up. Thanks for the info!!

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

ToeLei — Fri, 14 Nov 2014 09:23:26 GMT

I had the exact same issue today at one of my customer. Setting back the date 1 year got the AP's working again.

Did anyone find a permanent solution for this?

I've been unable to find any info about this from HP official documentation.

/tobias

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

Arimo — Sun, 23 Nov 2014 20:27:19 GMT

Hi all

If setting the date on the controller back resolves the issue, then it seems clear that it's a question of expired certificates. The solution is simply to upload new certificates and you're good to go. How to is described in the Config guide section 16 Security, "Managing certificates".

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

ToeLei — Wed, 26 Nov 2014 09:29:36 GMT

The problem is that I can't find any certificate that has expired so I don't know what kind of certificate to upload.

See attached image.

Earlier in the thread it was stated that the expired certificate wasn't visible in their list either and that they were working with HP to find a solution. It would be intresting to hear from them what kind of solution they got.

/Tob

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

JeremyHout — Thu, 26 Mar 2015 14:44:44 GMT

Has there been any update on this topic from HP?

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

svhelden — Fri, 27 Mar 2015 05:56:51 GMT

Oh, did I forget to update this topic?

HP could not explain how it came to the situation, likely it was a bug in some older firmware.

Reason was to factory reset all affected Access Points:

1) set controller date back

2) wait until APs connect

then for each affected AP

3) perform factory reset

4) delete from controller before AP completes reboot

then

5) set controller date back to correct one

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

TomAtWorkI — Wed, 13 May 2015 17:36:02 GMT

Hello,

If you using the colubris flag and using layer 3 communication it could be an MTU problem.

Got to "Maintenance" and backup your config.

Open the file with an usefull editor (e.g. N++)

Find the interface/port where the access points are located:

<INTERFACE-1>
    interface = br0
    hwaddr = ""
    afname = inet
    address = 10.11.12.13
    broadcast = 10.11.12.255
    netmask = 255.255.255.0
    dstaddress = ""
    flags = "UP BCST RUN MULTCST "
    mtu = 1300
    metric = 1
    txqlen = 1000

Change the MTU size to a value below 1500. For VPN Tunnels to branch offices 1300 is a good value.

Restore the configuration file.

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

svhelden — Fri, 15 May 2015 13:57:19 GMT

Thanks, though in our case it was definitely an issue of expired certificates. Maybe some faulty firmware version issued those.

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

YakupZz — Tue, 31 Jul 2018 07:23:13 GMT

Thank you so much for this notification. he also helped me. I experienced the same problem I got from problem certificates. I resolved the issue by taking back the date

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

margeritta — Mon, 03 Sep 2018 23:18:15 GMT

Did anyone find a permanent solution for this? I've been unable to find any info about this from HP official documentation.

Re: 12 of 93 Access Points (all MSM310) stuck on 'Establishing tunnel' since today

svhelden — Tue, 04 Sep 2018 05:27:37 GMT

@margeritta wrote:
Did anyone find a permanent solution for this?

Depends on what caused your issue. For me it was a permanent solution to set the date on the controller back. All APs connected, received new certificates, I could set the data on the controller correct again, and the issue has not appeared anymore since then.