Stranded AP recovery
Techniques for wireless communication are disclosed. These techniques include determining that a first wireless access point (AP) has a failure to connect to a controller. The techniques further include identifying one or more neighbor APs, for the first AP, as candidate rescue APs, selecting a rescue AP, from among the candidate rescue APs, and establishing a secure connection from the first AP to the rescue AP. The techniques further includes transmitting diagnostic data from the first AP to the controller using the secure connection from the first AP to the rescue AP. The diagnostic data relates to the failure to connect from the first AP to the controller, and the controller is configured to use the diagnostic data to assist in establishing a connection from the first AP to the controller that bypasses the rescue AP.
1 . A method, comprising:
determining that a first wireless access point (AP)—has a failure to connect to a controller;
identifying one or more neighbor APs, for the first AP, as candidate rescue APs;
selecting a rescue AP, from among the candidate rescue APs, and establishing a secure connection from the first AP to the rescue AP; and
transmitting diagnostic data from the first AP to the controller using the secure connection from the first AP to the rescue AP,
wherein the diagnostic data comprises cable diagnostic data for a cable connected to the first AP,
wherein the controller is configured to use the diagnostic data to assist in establishing a connection from the first AP to the controller that bypasses the rescue AP, and
wherein assisting in establishing the connection from the first AP to the controller comprises performing a reverse diagnostic from the controller to the first AP.
2 . The method of claim 1 , wherein identifying the one or more neighbor APs, for the first AP, as candidate rescue APs comprises:
scanning a plurality of accessible channels, at the first AP, to identify the one or more neighbor APs; and
selecting one or more candidate rescue APs, from the one or more neighbor APs, based on determining that the one or more candidate rescue APs are compatible for rescue of the first AP.
3 . The method of claim 2 , wherein determining that the one or more candidate rescue APs are compatible for rescue of the first AP is based on analyzing an information element (IE) in a wireless response received to a message relating to the scanning the plurality of accessible channels.
4 . The method of claim 3 , wherein the IE indicates that the one or more candidate rescue APs are from a same vendor as the first AP.
5 . The method of claim 1 , wherein selecting the rescue AP, from among the candidate rescue APs, is based on sorting the candidate rescue APs based on a service set identifier (SSID) value associated with each of the respective candidate rescue APs.
6 . The method of claim 1 , wherein establishing the secure connection from the first AP to the rescue AP comprises establishing a connection using at least one or more of: (i) opportunistic wireless encryption (OWE) or (ii) pre-association security negotiation (PASN).
7 . The method of claim 1 , wherein establishing the secure connection from the first AP to the rescue AP comprises establishing a connection using a hidden SSID.
8 . The method of claim 1 , wherein the diagnostic data further comprises at least one of: (i) data relating to one or more neighbors for the first AP, (ii) switch system diagnostic data, (iii) internet protocol (IP) address diagnostic data, (iv) controller connection diagnostic data, or (v) layer 3 (L3) connection diagnostic data.
9 . The method of claim 8 , wherein the diagnostic data further comprises the data relating to one or more neighbors for the first AP, and wherein the data relating to the one or more neighbors for the first AP reflects at least one of: (i) channel data or (ii) signal strength data for the one or more neighbors.
10 . The method of claim 1 , wherein assisting in establishing the connection from the first AP to the controller further comprises presenting the diagnostic data to an administrator using an electronic user interface or establishing an association from the first AP to the controller using the rescue AP, wherein the association allows the first AP to transmit wireless station (STA) traffic to the controller through the rescue AP.
11 . A first wireless access point (AP), comprising:
one or more wireless radios;
a wired network interface;
a processor; and
a memory having instructions stored thereon which, when executed on the processor, performs operations comprising:
determining that the first AP has a failure to connect to a controller using the wired network interface;
identifying one or more neighbor APs, for the first AP, as candidate rescue APs using at least one of the one or more wireless radios;
selecting a rescue AP, from among the candidate rescue APs, and establishing a secure connection from the first AP to the rescue AP using at least one of the one or more wireless radios; and
transmitting diagnostic data from the first AP to the rescue AP using at least one of the one or more wireless radios,
wherein the rescue AP is configured to relay the diagnostic data to the controller,
wherein the diagnostic data comprises cable diagnostic data for a cable connected to the first AP,
wherein the controller is configured to use the diagnostic data to assist in establishing a connection from the first AP to the controller using the wired network interface, and
wherein assisting in establishing the connection from the first AP to the controller comprises performing a reverse diagnostic from the controller to the first AP.
12 . The first AP of claim 11 , wherein identifying the one or more neighbor APs, for the first AP, as candidate rescue APs comprises:
scanning a plurality of accessible channels, at the first AP using at least one of the one or more wireless radios, to identify the one or more neighbor APs; and
selecting one or more candidate rescue APs, from the one or more neighbor APs, based on determining that the one or more candidate rescue APs are compatible for rescue of the first AP.
13 . The first AP of claim 12 , wherein determining that the one or more candidate rescue APs are compatible for rescue of the first AP is based on analyzing an information element (IE) in a wireless response received to a message relating to the scanning the plurality of accessible channels.
14 . The first AP of claim 11 , wherein selecting the rescue AP, from among the candidate rescue APs, is based on sorting the candidate rescue APs based on a service set identifier (SSID) value associated with each of the respective candidate rescue APs.
15 . The first AP of claim 11 , wherein establishing the secure connection from the first AP to the rescue AP comprises establishing a connection using at least one or more of: (i) opportunistic wireless encryption (OWE) or (ii) pre-association security negotiation (PASN).
16 . The first AP of claim 11 , wherein assisting in establishing the connection from the first AP to the controller further comprises presenting the diagnostic data to an administrator using an electronic user interface or establishing an association from the first AP to the controller using the rescue AP, wherein the association allows the first AP to transmit wireless station (STA) traffic to the controller through the rescue AP.
17 . A non-transitory computer-readable medium having instructions stored thereon which, when executed by a processor, performs operations comprising:
determining that a first wireless access point (AP) has a failure to connect to a controller;
identifying one or more neighbor APs, for the first AP, as candidate rescue APs;
selecting a rescue AP, from among the candidate rescue APs, and establishing a secure connection from the first AP to the rescue AP; and
transmitting diagnostic data from the first AP to the controller using the secure connection from the first AP to the rescue AP,
wherein the diagnostic data comprises cable diagnostic data for a cable connected to the first AP,
wherein the controller is configured to use the diagnostic data to assist in establishing a connection from the first AP to the controller that bypasses the rescue AP, and
wherein assisting in establishing the connection from the first AP to the controller comprises performing a reverse diagnostic from the controller to the first AP.
18 . The non-transitory computer-readable medium of claim 17 , wherein identifying the one or more neighbor APs, for the first AP, as candidate rescue APs comprises:
scanning a plurality of accessible channels, at the first AP, to identify the one or more neighbor APs; and
selecting one or more candidate rescue APs, from the one or more neighbor APs, based on determining that the one or more candidate rescue APs are compatible for rescue of the first AP.
19 . The non-transitory computer-readable medium of claim 17 , wherein establishing the secure connection from the first AP to the rescue AP comprises establishing a connection using at least one or more of: (i) opportunistic wireless encryption (OWE) or (ii) pre-association security negotiation (PASN).
20 . The non-transitory computer-readable medium of claim 17 , wherein assisting in establishing the connection from the first AP to the controller further comprises presenting the diagnostic data to an administrator using an electronic user interface or establishing an association from the first AP to the controller using the rescue AP, wherein the association allows the first AP to transmit wireless station (STA) traffic to the controller through the rescue AP.