Universal/Worldwide SKU Region and Country Fingerprinting

1. ExtremeCloud IQ informs Universal and Worldwide SKU APs to begin the country discovery process that assigns region and country compliance tables.
2. Universal and Worldwide SKU APs are initially configured for the WORLD region, with an ISO Country Code of 998.
3. When a Universal or Worldwide SKU AP is onboarded:
   • The AP contacts stun.extremenetworks.com on outbound UDP 12222.
     

     Important

     The AP must have the correct time to validate the certificate provided by the STUN server.
   • The AP communicates its configured Region and ISO Country Code to the STUN server.
   • The STUN server gathers the AP's reported public IP address, a process known as fingerprinting, and cross-references it with a database to identify the country where the device is connected.
   • If fingerprinting is successful:
     • The STUN server informs the AP of its region and country.
     • The AP reconfigures itself to comply with the appropriate region and country compliance tables.
     • The AP is released to appear connected to ExtremeCloud IQ in the UI.
   • If fingerprinting fails, ExtremeCloud IQ initiates a new region/country fingerprinting attempt every 5 minutes until fingerprinting succeeds.
4. If the AP is not a Universal or Worldwide SKU, fingerprinting is skipped.

Tip

Region and Country Fingerprinting Troubleshooting:

• The AP must have the correct time (from NTP) to validate the certificate and establish connection to the STUN server.
• Ensure firewall ports are open for outbound UDP 12222 to all of the STUN servers defined in the firewall configuration guide.
• To locate the firewall configuration guide specific to your installation, hover over to open the ExtremeCloud IQ menu and select About ExtremeCloud IQ to find the link to your Firewall Configuration Guide.
• If the previous steps are unsuccessful and your AP is operating on a code version earlier than 10.6.1, use TFTP to sideload IQ Engine 10.6.1 or a later version onto your AP.
• If a newly onboarded Universal or Worldwide AP has already been assigned to the FCC (US) or Canada regions, the fingerprinting process cannot change to a different country. Please contact GTAC for options.