topic Thanks Jeremy. Been racking in Application Networking

ISR 4351 AppNav-XE registration - SSL Handshake failed

jeremy.t — Mon, 24 Aug 2015 16:21:47 GMT

Hi, I'm trying to setup a new ISR 4351 router with vWAAS running on UCS-E but having trouble with registering the router for AppNav. The vWAAS install on UCS-E appears to be ok and is registered with the WAAS Central Manager. But when I try to register the IOS router on the WAAS Central Manager I get a 'Successfully processed the registration request' message on the Cisco IOS Router Registration page however when I go to the Devices page I get Device Status of Pending for ages and then eventually get status of Offline and error 'SSL Handshake failed while communicating with AppNav-XE Controller device.' Also, on the router if I have debug ip http running I get the following errors every 5 minutes;

Aug 24 16:10:59.175: %HTTPS: SSL handshake fail (-6992)
Aug 24 16:10:59.175: HTTP: ssl handshake failed (-40404)

I'm running Cisco IOS XE Software, Version 03.15.01.S Version 15.5(2)S1

Has anyone got any ideas why this would happen?

Thanks

Did you solve this? something

Sean Alexander — Wed, 02 Sep 2015 11:59:27 GMT

Did you solve this? something to do with the trustpoint used for the SSL handshake but cant figure out what needs changing.

Hi Sean, the SSL handshake

jeremy.t — Thu, 03 Sep 2015 15:09:04 GMT

Hi Sean, the SSL handshake issue was down to a bug in Central Manager v5.5.1, upgrading it to 5.5.5 resolved that issue. I then had further problems due to ACS authorisation but that's another story.

Thanks Jeremy. Been racking

Sean Alexander — Thu, 03 Sep 2015 15:51:59 GMT

Thanks Jeremy.

Been racking my brian on this for the past 2 days. Tried CA certificates etc with no joy.

We are on WAASCM 5.5.1 so am upgrading now to see if this resolves.

Running ACS too and now hoping the WAASCM is the last stumbling block.

Cheers,

Thanks Jeremy! I feel I ou

Sean Alexander — Thu, 03 Sep 2015 19:53:12 GMT

Thanks Jeremy!

I feel I ou you one! the upgrade resolved the issue!

Thanks so much for the reply or I would still be sitting here scratching my head.

Thanks,

Hi All, Just for your

Nicolas Fournier — Fri, 02 Oct 2015 13:06:11 GMT

Hi All,

Just for your information, the issue you had was due to CSCus70116 and this is why your issue got solved after upgrade to 5.5.5.

Regards,

Nicolas

Same issue here with 6.1.1a

neidlein.p — Wed, 24 Feb 2016 21:03:22 GMT

Same issue here with 6.1.1a and ISR4331 on bootflash:isr4300-universalk9.03.15.02.S.155-2.S2-std.SPA.bin

hi jeremy,

diomuhammad — Thu, 29 Sep 2016 09:18:25 GMT

hi jeremy,

anyway i have some issue SSL Handshake failed while communicating with AppNav-XE Controller device in ASR,so how to upgrade vWaas ver. 5.5.1 to ver. 5.5.5 ?

thanks

Re: Same issue here with 6.1.1a

gautham.com — Mon, 30 Oct 2017 22:14:19 GMT

Hey neidlein,

Did you fix device registration? I got the same message 'SSL Handshake failed while communicating with AppNav-XE controller device'. CM is running 'waas-universal-6.1.1.26-k9.bin '.

Re: ISR 4351 AppNav-XE registration - SSL Handshake failed

Ian Waddell — Fri, 24 Aug 2018 17:21:47 GMT

I have the same issue. I'm running WCM version 6.2.3e. I'm trying to register a ASR1004 RP2 as an AppNav XE controller.

Re: ISR 4351 AppNav-XE registration - SSL Handshake failed (SOLVED)

Dejan Uskokovic — Wed, 07 Aug 2019 09:03:17 GMT

I am having the same issue with ISR AppNav-XE Controllers 4351 and 4451; after a successful registration the units transition from Pending to Offline Status with an Error of " Socket connect timed out while communicating with AppNav-XE Controller device."