topic I'm not sure if this could be in Wireless

AP 2800 - stuck during join process - cap wap discard configure state - with vWLC 8.4.100

Mon, 05 Jul 2021 14:25:22 GMT

I try to connect an AP 2800i on a virtual WLC 8.4.100 and the process is stuck during capwap join with a capwap discard in configure state.

I try this AP on a WLC 2504 with no issue. The clock is synchronized between AP and WLC.

Do you know why the join process could be stuck in state 8

Log on AP

[*07/26/2017 15:02:01.0956] HW CAPWAP tunnel is ADDED
[*07/26/2017 15:02:01.1029] CAPWAP data tunnel UPDATE to forwarding SUCCEEDED
[*07/26/2017 15:02:01.1098] Starting Post Join timer
[*07/26/2017 15:02:01.1098]
[*07/26/2017 15:02:01.1098] CAPWAP State: Image Data
[*07/26/2017 15:02:01.1103] AP current image version 8.4.100.0
[*07/26/2017 15:02:01.1103] Controller current image version 8.4.100.0
[*07/26/2017 15:02:01.1103] Version is the same, do not need update.
[*07/26/2017 15:02:01.1425] do NO_UPGRADE, part1 is active part
[*07/26/2017 15:02:01.1459]
[*07/26/2017 15:02:01.1459] CAPWAP State: Configure
[*07/26/2017 15:02:01.1478] DOT11_CFG[0] Radio Mode is changed from Local to Local
[*07/26/2017 15:02:01.1483] DOT11_CFG[1] Radio Mode is changed from Local to Local
[*07/26/2017 15:02:01.1819] Configuration Status sent to 10.x.x.1 (part 0)
[*07/26/2017 15:02:16.6695] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Configure(8).
[*07/26/2017 15:02:17.2388] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Configure(8).
[*07/26/2017 15:02:31.6015] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Configure(8).
[*07/26/2017 15:02:32.5153] Re-Tx Count=11, Max Re-Tx Value=5, NumofPendingMsgs=1
[*07/26/2017 15:02:32.5153]
[*07/26/2017 15:02:35.3661] Re-Tx Count=12, Max Re-Tx Value=5, NumofPendingMsgs=1
[*07/26/2017 15:02:35.3662]
[*07/26/2017 15:02:38.2170] Re-Tx Count=13, Max Re-Tx Value=5, NumofPendingMsgs=1
[*07/26/2017 15:02:38.2170]
[*07/26/2017 15:02:41.0679] Re-Tx Count=14, Max Re-Tx Value=5, NumofPendingMsgs=1
[*07/26/2017 15:02:41.0679]
[*07/26/2017 15:02:43.9187] Re-Tx Count=15, Max Re-Tx Value=5, NumofPendingMsgs=1
[*07/26/2017 15:02:43.9187]
[*07/26/2017 15:02:46.7696] Re-Tx Count=16, Max Re-Tx Value=5, NumofPendingMsgs=1
[*07/26/2017 15:02:46.7696]
[*07/26/2017 15:02:46.7696] Max retransmission count exceeded, going back to DISCOVER mode.
[*07/26/2017 15:02:46.7697] GOING BACK TO DISCOVER MODE
[*07/26/2017 15:02:46.7706]
[*07/26/2017 15:02:46.7706] CAPWAP State: DTLS Teardown
[*07/26/2017 15:02:47.7767] [DP] Deleting capwap hardware assisted fast path
[*07/26/2017 15:02:47.7767] [DP] Deleting capwap datapath
[*07/26/2017 15:02:47.7767] CAPWAP data tunnel delete from forwarding succeeded
[*07/26/2017 15:02:52.4712] DTLS session cleanup completed. Restarting capwap state machine.

Log on WLC

*spamApTask3: Jul 26 23:06:02.451: CAPWAP Timer Msg

*spamApTask3: Jul 26 23:06:06.123: CAPWAP Timer Msg

*spamApTask3: Jul 26 23:06:09.999: CAPWAP Timer Msg

*spamApTask3: Jul 26 23:06:13.671: CAPWAP Timer Msg

*spamApTask3: Jul 26 23:06:17.343: CAPWAP Timer Msg

*spamApTask6: Jul 26 23:06:18.385: CAPWAP DTLS session established msg

*spamApTask3: Jul 26 23:06:18.607: dtlLradEntryAdd: lrad-a12fc3b(5256) mwar-ad22301(5247)

*spamApTask3: Jul 26 23:06:18.607: DTL Adding AP 186
*spamApTask3: Jul 26 23:06:18.736: Received SPAM_NOTIFY_LCB_CONFIGURED_MSG

*spamApTask3: Jul 26 23:06:18.736: Received SPAM_NOTIFY_LCB_CONFIGURED_MSG

*spamApTask3: Jul 26 23:06:19.110: CAPWAP DTLS connection closed msg

*spamReceiveTask: Jul 26 23:06:19.111: Received SPAM_MFP_RADIO_DOWN message

*spamApTask3: Jul 26 23:06:19.112: DTL Deleting AP 186 - 0.0.0.0
*spamApTask3: Jul 26 23:06:19.112: Could not get AP index.

*spamReceiveTask: Jul 26 23:06:19.112: Received SPAM_UPDATE_GLOBAL_PATH_MTU
*spamReceiveTask: Jul 26 23:06:19.112: Lowest PMTU 1485

Two things that I see here,

patoberli — Wed, 26 Jul 2017 15:34:29 GMT

Two things that I see here, for whatever reason the AP hasn't the same time as the WLC, but this might be normal.

Do you have a firewall between the AP and the management address of the WLC? It looks like some packets get dropped.

Except the time zone, time

Thu, 27 Jul 2017 07:42:20 GMT

Except the time zone, time are synchronized

AP0081.C46C.DCE0#show clock
*07:39:50 UTC Thu Jul 27 2017

(Cisco Controller) >show time

Time............................................. Thu Jul 27 15:40:17 2017

I have one firewall between AP and WLC but I don't see some drop in the log.

I don't understand why the DTLS process start well until operation 8.

I'm not sure if this could be

patoberli — Thu, 27 Jul 2017 07:56:42 GMT

I'm not sure if this could be an issue:

spamReceiveTask: Jul 26 23:06:19.112: Lowest PMTU 1485

I believe PMTU is working, but can you make sure that ICMP is allowed in both directions on the firewall?

Thanks for your help. I find

Thu, 27 Jul 2017 09:35:12 GMT

Thanks for your help. I find the issue . The AP has been ordered with bad regulatory domain -E for a WLC located in TW domain.

Re: Thanks for your help. I find

sa7hvik — Tue, 26 Mar 2019 04:19:51 GMT

how to did you find the AP and controller regulatory mismatch. I am facing the same issue and hope to find a solution.

thank you..

Re: Thanks for your help. I find

Ric Beeching — Tue, 26 Mar 2019 05:16:29 GMT

Use this tool to check what your regulatory domain should be:

https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html

On the WLC you can configure multiple country codes if you want to support them but from a regulation perspective it will apply the stricter of the country RF settings.

To check WLC do 'show country' and on the AP the domain is in the model e.g -E-K9 indicates Europe/ETSI.

Cheers,
Ric

Re: AP 2800 - stuck during join process - cap wap discard configure state - with vWLC 8.4.100

erodriguez1 — Thu, 06 Feb 2020 19:45:03 GMT

I had the same issue before when attempting to join a 2802i to a vWLC running 8.5.151.0. I added licenses through the adder license feature found under Management->Software Activation->Licenses. After that the APs were able to join the vWLC.