CAPWAP Connection

1. The AP discovers ExtremeCloud IQ through one of four mechanisms, executed in the following sequence:
   • DHCP option 43
   • DNS
   • Local subnet discovery
   • Redirector
     

     Note

     The Redirector is the primary mechanism for ExtremeCloud IQ. The AP will use DNS to find the Redirector IP address.
2. The AP automatically discovers and CAPWAP connects to the redirector.
   

   Note

   Outbound UDP 12222 or TCP 80 is required.
   • By default, all CAPWAP connections first attempt to connect using UDP 12222. If unable to connect, the AP attempts to connect using TCP 80 instead.
   • Refer to the firewall guide to identify the IP address ports needed to permit traffic to the Redirector.
3. If the AP serial number is onboarded to ExtremeCloud IQ:
   • The Redirector directs the AP to connect to the RDC master CAPWAP server by setting the command capwap client server name <CAPWAPMASTERHOSTNAME>.
   • The AP disconnects from the Redirector and CAPWAP to connect to the RDC master CAPWAP server.
     

     Note

     Outbound UDP 12222 or TCP 80 is required.
   • The RDC master CAPWAP server directs the AP to connect to the CAPWAP server designated as the primary management instance for the device by setting the command capwap client server name <CAPWAPSERVERHOSTNAME>.
4. If the AP is not onboarded to customer account, it continues to cycle through the AP discovery methods defined above.

Tip

CAPWAP Connection troubleshooting:

• Ensure the AP can resolve hostnames using DNS.
• Ensure firewall ports are open on UDP 12222 or TCP 80 to the IP addresses defined in the Global Data Center Services and Regional Data Center Services sections of your firewall configuration guide.
• If using TCP 80, CAPWAP connection times will increase.
• To locate the firewall configuration guide specific to your installation, hover over to open the ExtremeCloud IQ menu and select About ExtremeCloud IQ to find the link to your Firewall Configuration Guide.