vSZ essential - site to site vpn - remote ap issue

alex — Sun, 06 Mar 2022 08:37:36 GMT

I have site to site vpn between 2 locations.(all traffic allowed)

i can ping/ssh from each location to device.

when i setup the vsz ip on ap it connects to vsz - i approve it - move it to correct group and then :

- AP connected

-AP heartbeat lost

-AP disconnected

-AP connected

-AP heartbeat lost

but ping / ssh working. Ap shows online but not receiving AP Firmware

Configuration Status - New configuration

Re: vSZ essential - site to site vpn - remote ap issue

sarita_shekhar — Mon, 07 Mar 2022 12:48:17 GMT

Hello Alex,

Hope you doing good today!

Please check the following:

1. Verify if required firewall ports are opened for communication between the AP and the vSZ. If all the ports are allowed, then check if there is any packet drop seen on the firewall between the AP and the vSZ.

Reference document on the firewall ports: https://docs.commscope.com/bundle/sz-600-adminguide-sz300vsz/page/GUID-078C00BE-7543-4439-9326-F6509EA404A0.html

Please note, AP communicates to the control plane of the vSZ, hence communication should be allowed for the control-plane interface.

2. VPN MTU size: Try to reduce the VPN MTU size to 1200 and see if it helps. See if no jumbo frames are enabled on the uplinks.

Regards,
Sarita Shekhar | CCNA | CWNA
Senior Technical Support Engineer,
https://support.ruckuswireless.com/contact-us

topic Re: vSZ essential - site to site vpn - remote ap issue in SmartZone and Virtual SmartZone

vSZ essential - site to site vpn - remote ap issue

Re: vSZ essential - site to site vpn - remote ap issue