topic Re: C2700 AP Not Joinining vWLC in Wireless

C2700 AP Not Joinining vWLC

NETAD — Mon, 05 Jul 2021 15:10:32 GMT

Hello I'm trying to get my AP to join my vWLC and it's not working. I've tried multiple versions of the vWLC with the same behavior. Something is wrong with my AP. It joins for a brief moment then it drops. Can you assist please. I've tried resetting through the mode button but that didn't do it. I'm using 8.3.102 for the controller version

I got some messages from the AP while joining.

Thanks

Re: C2700 AP Not Joinining vWLC

Flavio Miranda — Mon, 29 Jan 2018 06:12:34 GMT

I'd say that the problem may be this:

*Mar  3 20:38:41.659: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
*Mar  3 20:38:44.759: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.88.88.11, mask 255.255.255.0, hostname APa89d.2188.3f5c

Double check if the IP address provided by DHCP is correct. The IP is in a different network, then, you need a gateway to get to the WLC.

-If I helped you somehow, please, rate it as useful.-

Re: C2700 AP Not Joinining vWLC

Leo Laohoo — Mon, 29 Jan 2018 06:14:13 GMT

@NETAD wrote:

*Mar  3 20:37:56.155: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.30.30.77 obtained through DHCP

Post the complete output to the following commands:

1. WLC: sh sysyinfo;

2. WLC: sh time; and

3. AP: sh version

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 22:03:18 GMT

I'm able to ping the wlc from the AP.

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 22:13:57 GMT

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.3.102.0
RTOS Version..................................... 8.3.102.0
Bootloader Version............................... 8.3.15.96
Emergency Image Version.......................... 8.3.102.0

OUI File Update Time............................. Sun Sep 07 10:44:07                                                  IST 2014

Build Type....................................... DATA + WPS

System Name...................................... vWLC
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.163                                                 1
IP Address....................................... 10.30.30.77
IPv6 Address..................................... ::
System Up Time................................... 1 days 22 hrs 31 mi                                                 ns 15 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

--More-- or (q)uit

Configured Country............................... US - United States

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

OUI Classification Failure Count................. 0

Burned-in MAC Address............................ 00:0C:29:36:96:F0
Maximum number of APs supported.................. 200
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1
Licensing Type................................... RTU
vWLC config...................................... Small

APa89d.2188.3f5c#sho version
Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JD, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 29-Jul-16 04:06 by prod_rel_team

ROM: Bootstrap program is C2700 boot loader
BOOTLDR: C2700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB5m, RELEASE SOFTWARE (fc2)

APa89d.2188.3f5c uptime is 4 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-k9w8-mx.153-3.JD/ap3g2-k9w8-xx.153-3.JD"
Last reload reason:

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP2702I-A-K9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID FCW1909NL7J
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 8.3.102.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: A8:9D:21:88:3F:5C
Part Number                          : 73-15824-03
PCB Serial Number                    : FOC190753G3
Top Assembly Part Number             : 068-100373-01
Top Assembly Serial Number           : FCW1909NL7J
Top Revision Number                  : A0
Product/Model Number                 : AIR-CAP2702I-A-K9

Configuration register is 0xF

NTP isn't configured on my controller.

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 22:18:56 GMT

I did configure NTP but the AP is still not joining.

(Cisco Controller) >show time

Time............................................. Tue Jan 30 22:18:45 2018

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
    NTP Polling Interval.........................     600

     Index     NTP Key Index                  NTP Server                Status          NTP Msg Auth Status
    ------- ----------------------------------------------------------------------------------------------
       1              0                                66.228.48.38     In Sync              AUTH DISABLED

Re: C2700 AP Not Joinining vWLC

Flavio Miranda — Tue, 30 Jan 2018 22:22:10 GMT

Time on wlc looks incorrect.

-If I helped you somehow, please, rate it as useful.-

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 22:25:24 GMT

Should I use a different NTP server? Do you recommend one?

Re: C2700 AP Not Joinining vWLC

Flavio Miranda — Tue, 30 Jan 2018 22:38:52 GMT

Set it manually for now. But it is important to have it accurate as wlc and AP use certificate which is very time sensitive.

-If I helped you somehow, please, rate it as useful.-

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 22:50:29 GMT

(Cisco Controller) >show time

Time............................................. Tue Jan 30 05:48:54 2018

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
NTP Polling Interval......................... 600

Index NTP Key Index NTP Server Status NTP Msg Auth Status
------- ----------------------------------------------------------------------------------------------

unfortuanetly that didn't do it.

%Error opening flash:/capwap-saved-config (No such file or directory)
%Error opening flash:/capwap-saved-config-bak (No such file or directory)

*Mar 3 20:43:04.095: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.30.30.77 obtained through DHCP
Not in Bound state.
*Mar 3 20:43:49.599: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 22:54:56 GMT

Still, didn't join.
(Cisco Controller) >show time

Time............................................. Tue Jan 30 05:48:54 2018

*Mar 3 20:46:45.655: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.30.30.77 obtained through DHCP
Not in Bound state.
*Mar 3 20:47:31.159: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.

%Error opening flash:/capwap-saved-config (No such file or directory)
%Error opening flash:/capwap-saved-config-bak (No such file or directory)

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
NTP Polling Interval......................... 600

Index NTP Key Index NTP Server Status NTP Msg Auth Status

Re: C2700 AP Not Joinining vWLC

Leo Laohoo — Tue, 30 Jan 2018 23:17:21 GMT

In addition to Flavio's post, I'd upgrade the firmware of the controller.

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 23:20:44 GMT

The only time this AP joins is when I hold the reset button for 30 secs. It joins for a little then reboots don't join at all. This time it extracted the software. This is a vWLC. I've tried multiple versions already with the same problem. Can I do anything to the AP to restore it completely?

Re: C2700 AP Not Joinining vWLC

Leo Laohoo — Tue, 30 Jan 2018 23:31:00 GMT

The attachment only shows me the AP downloading the firmware.
Let me just say that I've used 8.3.102.0 with a 3700 and all I can say is, daily, I have to go hunt around for APs that would "disappear". It's a known bug and was only fixed in later versions.

Re: C2700 AP Not Joinining vWLC

NETAD — Tue, 30 Jan 2018 23:33:46 GMT

Ok which version do you recommend?

Re: C2700 AP Not Joinining vWLC

Leo Laohoo — Tue, 30 Jan 2018 23:36:38 GMT

If you want to stick with 8.3 then find the latest 8.3 firmware. Don't stick with the first version that was released because I can guarantee the list of bugs are as long as a take-away menu.

Re: C2700 AP Not Joinining vWLC

Leo Laohoo — Tue, 30 Jan 2018 23:48:06 GMT

Console into the AP and reboot the AP.
We want to see what the AP is doing (or attempting to do).

Re: C2700 AP Not Joinining vWLC

NETAD — Wed, 31 Jan 2018 00:08:31 GMT

I see the following now. The latest in 8.3 didn't work either.

*Jan 30 07:07:08.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.30.30.77 peer_port: 5246
*Jan 30 07:07:08.027: %PKI-3-CERTIFICATE_INVALID_NOT_YET_VALID: Certificate chain validation has failed. The certificate (SN: 1000) is not yet valid Validity period starts on 18:46:18 UTC Jan 30 2018Peer certificate verification failed 001A

*Jan 30 07:07:08.027: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:496 Certificate verified failed!
*Jan 30 07:07:08.027: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to 10.30.30.77:5246
*Jan 30 07:07:08.027: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.30.30.77:5246

I will log my session to the AP and show you.

Re: C2700 AP Not Joinining vWLC

NETAD — Wed, 31 Jan 2018 00:46:19 GMT

I noticed this.

LWAPP image version 8.0.115.0

Re: C2700 AP Not Joinining vWLC

Leo Laohoo — Wed, 31 Jan 2018 04:57:28 GMT

Can the AP ping the controller IP address of 10.30.30.77?