topic 1562I won't join 2504 controller in Wireless

1562I won't join 2504 controller

Nettech98 — Mon, 05 Jul 2021 14:35:27 GMT

We just purchased a 1562I (AIR-AP-1562I-B-K9) and it won't join our 2504 controller. The AP has version 8.4.100 and our controller is 8.3.111. I have also installed the matching AP bundle (hopefully correctly). This is our first outdoor access point. Following is an extract from the console (domain info changed to XXX):

===========================

[*08/24/2017 20:30:37.7119] CRIT-MeshLink: Set Root port Mac: 2C:33:11:0E:4B:60 BH Id: 0 Port:0 Device:DEVNO_WIRED0
[*08/24/2017 20:30:37.7123] CRIT-MeshLink: Notify Capwap Link Up: mac: 2C:33:11:0E:4B:60 BH Id: 0 GW_reachable: No Roam: false
[*08/24/2017 20:30:37.7136] driver_wpas: - wpa_driver_wpas_init
[*08/24/2017 20:30:50.8858] ethernet_port wired0, ip 192.168.3.124, netmask 255.255.255.0, gw 192.168.3.1, mtu 1500, bcast 192.168.3.255, dns1 192.168.3.10, domain XXX.localDOT11_CFG[0] Radio Mode is changed from Bridge to Bridge
[*08/24/2017 20:30:52.4254] DOT11_CFG[1] Radio Mode is changed from Bridge to Bridge
[*08/24/2017 20:30:52.4453] AP IPv4 Address updated from 0.0.0.0 to 192.168.3.124
[*08/24/2017 20:30:52.4585] dtls_init: Use MIC device cert
[*08/24/2017 20:30:52.4589] dtls_init: Use MIC device cert private key
[*08/24/2017 20:30:52.4591]
[*08/24/2017 20:30:52.4591] CAPWAP State: Init
[*08/24/2017 20:30:52.4597]
[*08/24/2017 20:30:52.4597] PNP is not required, Starting CAPWAP discovery
[*08/24/2017 20:30:52.4597]
[*08/24/2017 20:30:52.4599]
[*08/24/2017 20:30:52.4599] CAPWAP State: Discovery
[*08/24/2017 20:30:52.4606] IP DNS query for CISCO-CAPWAP-CONTROLLER.XXX.local
[*08/24/2017 20:30:52.4972] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*08/24/2017 20:30:52.4973]
[*08/24/2017 20:30:52.4973] CAPWAP State: Discovery
[*08/24/2017 20:30:52.4990] Discovery Response from 192.168.3.70
[*08/24/2017 20:56:37.0002] Discovery response from MWAR 'XXX'running version 8.3.111.0 is rejected.
[*08/24/2017 20:56:37.0002] Failed to decode discovery response.
[*08/24/2017 20:56:37.0002] CAPWAP SM handler: Failed to process message type 2 state 2.
[*08/24/2017 20:56:37.0002] Failed to handle capwap control message from controller - status 4
[*08/24/2017 20:56:37.0003] Failed to process unencrypted capwap packet 0x15ca000 from 192.168.3.70
[*08/24/2017 20:56:37.0003] Failed to send capwap message 0 to the state machine. Packet already freed.
[*08/24/2017 20:56:37.0003] IPv4 wtpProcessPacketFromSocket returned 4
[*08/24/2017 20:56:37.1977] set led_patteren 12

=================================

Any help is appreciated!

Re: 1562I won't join 2504 controller

Leo Laohoo — Fri, 25 Aug 2017 00:21:00 GMT

@Nettech98 wrote:

[*08/24/2017 20:56:37.0002] Discovery response from MWAR 'XXX'running version 8.3.111.0 is rejected.

Upgrade the firmware of the controller to, say, 8.3.122.0.

Re: 1562I won't join 2504 controller

Philip D'Ath — Fri, 25 Aug 2017 00:27:25 GMT

8.3.111 is a deferred release due to serious defects. I'm with Leo. Upgrade to 8.3.122.0.

Re: 1562I won't join 2504 controller

Nettech98 — Fri, 25 Aug 2017 00:34:45 GMT

As long as I'm upgrading, is there a reason I shouldn't go to 8.4.x or 8.5.x?

Is the AP bundle file required for this AP?

Thanks!

Re: 1562I won't join 2504 controller

Francesco Molino — Fri, 25 Aug 2017 00:39:33 GMT

There're several things that can block an app to join your wlc.

Under security tab, ap policy, have you activated mic cert to join your wlc? Otherwise you'll need to add the ap mac address.

Did you validate the country code?

Thanks

PS: Please don't forget to rate helpful answers and mark as accepted answer if this solves your issue

Re: 1562I won't join 2504 controller

Nettech98 — Fri, 25 Aug 2017 00:46:20 GMT

MIC cert was already activated, but I had also tried adding the AP to the MAC filtering list, with no change in outcome.

I didn't 'validate country code', but it is a B model. How would one validate that?

Thanks.

Re: 1562I won't join 2504 controller

Francesco Molino — Fri, 25 Aug 2017 00:56:16 GMT

Is it your first universal ap?

Have you already done the priming?

If not, take a look here:

https://www.cisco.com/c/en/us/td/docs/wireless/access_point/ux-ap/guide/uxap-mobapp-g.html#52524

Thanks

PS: Please don't forget to rate helpful answers and select add correct answers if this solved your issue

Re: 1562I won't join 2504 controller

Leo Laohoo — Fri, 25 Aug 2017 00:56:31 GMT

I'm running 8.5 in production. So far so good.
8.4 is not a good idea because it's just a "one-off" special release.

Re: 1562I won't join 2504 controller

Leo Laohoo — Fri, 25 Aug 2017 00:57:18 GMT

@Nettech98 wrote:

I didn't 'validate country code', but it is a B model. How would one validate that?

Post the complete output to the command "sh sysinfo".

Re: 1562I won't join 2504 controller

Leo Laohoo — Fri, 25 Aug 2017 01:00:28 GMT

@Francesco Molino wrote:

Is it your first universal ap?

There is no such thing as a "universal AP" or "universal Regulatory Domain" for the 1800/2800/3800 and 1540/1560/1570.

The "universal AP" or "universal Regulatory Domain" has temporarily been suspended after 1700/2700/3700 APs.

Re: 1562I won't join 2504 controller

Francesco Molino — Fri, 25 Aug 2017 01:06:36 GMT

OK sorry I wasn't aware.
Not installed any new ap since 1 year now 🙂

Then let's focus on country codes for now

Re: 1562I won't join 2504 controller

Nettech98 — Fri, 25 Aug 2017 01:29:10 GMT

I don't think it needs priming as it's a B model - AIR-AP1562I-B-K9. Right?

Re: 1562I won't join 2504 controller

Nettech98 — Fri, 25 Aug 2017 01:44:03 GMT

On the AP or the controller? I only seem to have access to the GUI on the controller remotely now....

Re: 1562I won't join 2504 controller

Leo Laohoo — Fri, 25 Aug 2017 01:49:46 GMT

@Nettech98 wrote:

On the AP or the controller? I only seem to have access to the GUI on the controller remotely now....

The controller. I want to see what country codes are enabled on the WLC.

Re: 1562I won't join 2504 controller

Nettech98 — Fri, 25 Aug 2017 02:10:38 GMT

Based on the GUI, the only country code enabled is US

Re: 1562I won't join 2504 controller

Francesco Molino — Fri, 25 Aug 2017 02:23:20 GMT

Based on the below document

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.pdf#page2

And also based on Cisco download page (8.3.111 differed release), upgrade to at least 8.3.112

Thanks

Re: 1562I won't join 2504 controller

Leo Laohoo — Fri, 25 Aug 2017 04:53:50 GMT

Ok, so try upgrading the controller firmware to 8.3.122.0.

Re: 1562I won't join 2504 controller

Quietman — Fri, 29 Sep 2017 17:23:09 GMT

I had experienced an issue similar to this. The solution in my case was to issue the following command in the console CLI: ap-type capwap

Nothing else worked, including AP policies or MAC lists. As soon as I typed the ap-type command the AP rebooted and joined the controller immediately. It seems the 1562 APs are shipping in either ME mode or a hybrid discovery mode, because when I consoled into the AP it was in Mobility Express setup wizard. SSH or Telnet do not work when it is sitting in this mode, only the console works for this command after rebooting the AP to get it out of ME controller setup mode.

WLC code was 8.3.121 and it appeared that the AP would reach out to the controller but not complete the join process. After a while I think it flips to the ME mode and you can't revert it without running the ap-type command.

I hope this helps.

Re: 1562I won't join 2504 controller

helpdesk147 — Wed, 14 Mar 2018 15:59:45 GMT

This command worked on our new 1542is that wouldn't join our WLC. Thank you!

Re: 1562I won't join 2504 controller

LUinfra — Wed, 19 Sep 2018 14:51:04 GMT

Having this same issue and already attempted the ap-type capwap which is not working even after a reboot of the ap device.

Our WLC is running 8.3.141.0 and the aps are running 8.4.100.0. The previous Engineer stated that the above command worked for him without any issues.

I read and re-read the many comments in this thread and the only current option I see is updating the firmware version. My question is which one? The WLC or the AP? In either case, where can I find the step-by-step instructions to complete? In addition, IF done on the WLC, I am believing that this will cause an outage? IF so, how long would this be?

Thank you in advance for your responses.

Sincerely,

Scott Mellring