AP R760 not discovered by vSZ

[NoiseUnit]

I've a vSZ and an AP, on the same vlan (management).

First curious problem, the AP has not been able to get a DHCP ip address. 
Then I manually configured an IP on the AP and, my AP and my vSZ are able tto ping each other, as ther are able to ping the internet or local dns addresses.

I did manually enter the "Primary Controller Addr" in the AP Administration/management configuration, with no success. Also, I did create a DNS entry for ruckuscontroller.something.com and zonedirector.something.com. I also tyring with the DHCP option 43.

I did a pfsense firewall, but there is no specific rules for this vlan, all traffic allowed. My AP is on a trunk, management vlan is untag and the others are taged.

The fact that the DHCP is not working in the first time is still bugging me, but I can't see the reason for all this.
Please advise. Thank you. 

[GreensTheorem]

Can you please provide some basic info like 

- SmartZone Version

- AP Firmware Version 

- Is ZD Migration enabled in your SmartZone?

[noiseUnit1]

- SmartZone Version :
Controller Version
6.1.2.0.441
Control Plane Software Version
6.1.2.0.222
AP Firmware Version
6.1.2.0.1309

And both my AP model (r560 and r760) are supported by this firmware version : 

M510,R720,H320,T610S,R350:R350E,E510,T305I,T305E,R550,R650,T750,R350,R710,T310S,R510,R610,T710,R310,R750,T610,T750SE,H350,R850,T310N,T710S,H550,H510,T811CM,T310D,C110,T310C,T350SE,R320,R760,R560,T350D,T350C

- AP R560 (I got the same issue with my R760)
Software Version: 118.2.0.0.875

But, good new, my DHCP is working and AP are able to get an IP automatically, at least. 
(and I was able to spot the dhcp43 option using Wireshark, but still, vSZ is not detecting AP )

- Is ZD Migration enabled in your SmartZone?
I do not understand this question. I do not know what is ZD. I've llok at the seeting but I do not have a ZD server, this is a new setup.

Please advise. Thank you very much! 

[simon_louis]

Hi @NoiseUnit ,

Is this a vSZ-E or vSZ-H?

If you are using vSZ-H please check if the AP is present under staging zone?

Could you please share the output of get scg and get rpki-cert issuer from the AP CLI?

On the vSZ do verify if you have any AP registration rules set.

What is the AP firmware version of your default zone?

For the issue related to DHCP option 43, do refer article link: https://support.ruckuswireless.com/articles/000008703 and validate if you have it configured correctly.

Also, ensure that the R760 AP is powered up in atleast 802.3 at mode. You can verify the power mode using command get power-mode.

Regards,

Simon Louis

[noiseUnit1]

Hello, 

I do have vSZ-E. 

Here is the information for one R760 : 

rkscli: get power-mode

PoE Configured Mode      : Auto

Power Consumption Status : 802.3at Switch/Injector

USB Status               : Disabled

OK

rkscli: get scg

------ SCG Information ------

SCG Service is enabled.

AP is not managed by SCG.

State: GETSVRIP

Server List: Not found

No SSH tunnel exists

Last Join Time : NA

Tunnel Uptime : NA

Total SSH Tunnel Establishments: 0

Failover List: Not found

Failover Max Retry: 2

DHCP Opt43 Code: 6

Server List from DHCP (Opt43/Opt52): 10.10.5.48

SCG default URL: RuckusController

SCG config|heartbeat intervals: 30|30

SCG gwloss|serverloss timeouts: 1800|7200

Controller Cert Validation : disable

-----------------------------

OK

rkscli: get rpki-cert issuer

Issuer: RuckusPKI-DeviceSubCA-1

OK

rkscli: get version
Ruckus R760 Multimedia Hotzone Wireless AP, FCC ID: S9GR760
Version: 6.1.2.0.1309
OK

---

Here is the same information for one R560 : 

rkscli: get power-mode
PoE Configured Mode : Auto
Power Consumption Status : 802.3at Switch/Injector
USB Status : Disabled
OK
rkscli: get scg

------ SCG Information ------
SCG Service is enabled.
AP is not managed by SCG.
State: SETUP
Server List:
No SSH tunnel exists
Last Join Time : NA
Tunnel Uptime : NA
Total SSH Tunnel Establishments: 0
Failover List: Not found
Failover Max Retry: 2
DHCP Opt43 Code: 6
Server List from DHCP (Opt43/Opt52): 10.10.5.48
SCG default URL: RuckusController
SCG config|heartbeat intervals: 30|30
SCG gwloss|serverloss timeouts: 1800|7200
Controller Cert Validation : disable
-----------------------------
OK

rkscli: get rpki-cert issuer
Issuer: RuckusPKI-DeviceSubCA-2
OK
rkscli: get version
Ruckus R560 Multimedia Hotzone Wireless AP
Version: 118.2.0.0.875
OK

---

"On the vSZ do verify if you have any AP registration rules set."
Yes, with subnet acceptable for : Network: 10.10.5.0, Mask :255.255.255.0

"What is the AP firmware version of your default zone?"
6.1.2.0.1309

Also, more surprisingly, a R760 what, somehow, half-detected : I saw a mysterious message about the ACL rights, I did : 
vSZ# config
vSZ (config)# lwapp2scg=
vSZ (config-lwapp2scg)# policy accept-all
and then : 



So, at this point, I understand less and less. Any advise or suggestion will be, of course, welcome and very appreciated. Thank you.