topic Re: AP Not Joining request Failed in Controllers

AP Not Joining request Failed

Rohatash Singh — Mon, 21 Nov 2022 15:26:46 GMT

Hi guys.

AP 1562E-not joining vWlc. I have attached the logs.

Kindly suggest.

dtls_verify_con_cert: vWLC Certificate verification error
dtls_process_packet: Controller certificate verification failed
sendPacketToDtls: DTLS: Closing connection 0x2147c00.
Lost connection to the controller, going to restart CAPWAP (reason : dtls_rc_connection_closed)...
DTLS: Error while processing DTLS packet 0x21b1000.
Restarting CAPWAP State Machine.
Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Setup(3).
Failed to disconnect DTLS-CTRL session.

CAPWAP State: DTLS Teardown
No more AP manager addresses remain..
No valid AP manager found for controller 'cisco-vWLC' (ip: 172.168.81.218)
Failed to join controller cisco-vWLC.
Failed to join controller.

CAPWAP State: Discovery
Discovery Request sent to 172.168.81.xxx, discovery type STATIC_CONFIG(1)
Discovery Request sent to 172.168.81.xxx, discovery type STATIC_CONFIG(1)
Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
Discovery Response from 172.168.81.xxx
Unsupported vendor spec payload TLV_VENDOR_SPECIFIC_PAYLOAD(215) for msgtype 2
Discovery Response from 172.168.81.xxx
Unsupported vendor spec payload TLV_VENDOR_SPECIFIC_PAYLOAD(215) for msgtype 2

Re: AP Not Joining request Failed

balaji.bandi — Mon, 21 Nov 2022 19:25:34 GMT

what is the version vWLC ? do you have any other AP joined or are none of them working?

Do you have enough License?

Re: AP Not Joining request Failed

KyoCode — Mon, 21 Nov 2022 19:29:40 GMT

Hi,

check this one out https://community.cisco.com/t5/wireless-mobility-knowledge-base/lightweight-ap-fail-to-create-capwap-lwapp-connection-due-to/ta-p/3155111

If AP is fairly new, you can try checking a few things:

1. Version might be better to be at the same number.

2. Config WLC to accept those new certificates not yet installed in the WLC (which is tearing down the TLS):

For 7.0.252.0:
(WLC)>config ap lifetime-check {mic|ssc} enable

For 7.4.140.0 and later:
(WLC)>config ap cert-expiry-ignore {mic|ssc} enable

3. NTP might be an issue, try checking the clock in the AP which should be close to the WLC one, if not, apply a NTP field in the DHCP for the AP so it can be up to date and connect to the WLC.

hope that helps,

AIV

Re: AP Not Joining request Failed

Leo Laohoo — Mon, 21 Nov 2022 22:07:01 GMT

Post the complete output to the following commands:

WLC: sh sysinfo
WLC: sh time
AP: sh capwap client rcb
AP: sh version

Re: AP Not Joining request Failed

Rohatash Singh — Wed, 23 Nov 2022 11:28:58 GMT

Hi,

Vwlc version is -8.10.181.

No other AP has joined

It's showing 200 AP supported

Re: AP Not Joining request Failed

Leo Laohoo — Wed, 23 Nov 2022 13:23:47 GMT

wrote:@Rohatash Singh
AP Image type : MOBILITY EXPRESS IMAGE

The 1562 is loaded with Mobility Express firmware.