topic There is a bug with the IOS in Wireless

IOS based wireless lan controller

sobin peter — Mon, 05 Jul 2021 13:58:16 GMT

Hi I have a WS-C3650-48PS with 03.06.06E (IOS based wireless lan controller) Can someone send me the configuration guide or quick start guide.

If i get some video link to

sobin peter — Thu, 04 May 2017 15:27:22 GMT

If i get some video link to set up from the beginning then that would be really helpful.

Rasika has some good guides

Ric Beeching — Thu, 04 May 2017 15:36:37 GMT

Rasika has some good guides for 3850 which is pretty much identical config: https://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/

Otherwise Youtube is your friend!

Ric

Thanks Rasika. I was looking

sobin peter — Thu, 04 May 2017 15:43:20 GMT

Thanks Rasika. I was looking for 3650 but i think the commands might be similar for both. Let me try to do it and I will keep you posted updates.

No probs,if you have any

Ric Beeching — Thu, 04 May 2017 15:48:42 GMT

No probs,if you have any issues with specific config tasks let us know!

Ric

Hi Ric,

sobin peter — Tue, 09 May 2017 05:35:43 GMT

Hi Ric,

The configuration is done, but there is an error while connecting the AP702i. Logs below. Configuration and logs and version details attached. Kindly help.

*May 9 05:13:06.211: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]
*May 9 05:13:55.130: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:13:55.130: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event () and state (CAPWAP Join Response) combination
*May 9 05:14:00.716: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:14:31.251: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:14:31.251: *%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 05:14:31.252: *%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 05:14:31.252: *%LWAPP-3-VENDOR_PLD_VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload(155) with length=10 failed - AP f0:78:16:3c:af:40
*May 9 05:14:31.252: *%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 05:14:31.252: *%LWAPP-3-RD_ERR4: 1 wcm: Invalid regulatory domain 802.11bg:-A 802.11a:-AB for AP f078.163c.af40
*May 9 05:14:31.254: %CAPWAP-3-AP_PORT_CFG: AP connected port Gi1/0/2 is not an access port.
*May 9 05:14:31.254: *%CAPWAP-3-POST_DECODE_ERR: 1 wcm: Post decode processing failed for Config status from AP f078.163c.af40
*May 9 05:14:31.255: *%CAPWAP-3-DATA_TUNNEL_CREATE_ERR2: 1 wcm: Failed to create CAPWAP data tunnel with interface id: 0xd05e400000000e for AP: f078.163c.af40 Error Reason: Capwap Data Tunnel create retry exceeded max retry count.
*May 9 05:14:31.353: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 05:14:51.354: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]

But i can see the AP registered.

FASCO-WLC-SW#sh ap summary
Number of APs: 1

Global AP User Name: Not configured
Global AP Dot1x User Name: Not configured

AP Name AP Model Ethernet MAC Radio MAC State
----------------------------------------------------------------------------------------
APdceb.94bf.f034 702I dceb.94bf.f034 f078.163c.af40 Registered

FASCO-WLC-SW#show wireless

sobin peter — Tue, 09 May 2017 05:40:42 GMT

FASCO-WLC-SW#show wireless mobility summary

Mobility Controller Summary:

Mobility Role : Mobility Controller
Mobility Protocol Port : 16666
Mobility Group Name : default
Mobility Oracle Configured Mode : Disabled
Mobility Oracle IP Address : 0.0.0.0
DTLS Mode : Enabled
Mobility Domain ID for 802.11r : 0xac34
Mobility Keepalive Interval : 10
Mobility Keepalive Count : 3
Mobility Control Message DSCP Value : 48
Mobility Domain Member Count : 1

Link Status is Control Link Status : Data Link Status

Controllers configured in the Mobility Domain:

IP Public IP Group Name Multicast IP Link Status
-------------------------------------------------------------------------------
10.1.1.1 N/A default 0.0.0.0 N/A

FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
*May 9 05:27:11.090: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#show run | in wireless
wireless mobility controller
wireless management interface Vlan999
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#
FASCO-WLC-SW#sh cdp neighbors | in AIR
APdceb.94bf.f034 Gig 1/0/2 175 T B I AIR-CAP70 Gig 0

%LWAPP-3-RD_ERR7: 1 wcm:

Sandeep Choudhary — Tue, 09 May 2017 06:17:18 GMT

%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40

Check the country code you configured on 3650 controller.

paste the output of sh version form AP.

show wireless country configured from 3650..

Regards

Dont forget to rate helpful posts

Hi Sandeep,

sobin peter — Tue, 09 May 2017 12:24:08 GMT

Hi Sandeep,

FASCO-WLC-SW#show wireless country configured
*May 9 12:10:48.751: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]

Configured Country.............................: US - United States
Configured Country Codes
US - United States : 802.11a Indoor,Outdoor/ 802.11b / 802.11g

FASCO-WLC-SW#

=======================================================

APdceb.94bf.f034#sh ver
Cisco IOS Software, C702 Software (ap1g1-K9W8-M), Version 15.3(3)JN11, RELEASE S OFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Fri 16-Dec-16 05:59 by prod_rel_team

ROM: Bootstrap program is C702 boot loader
BOOTLDR: C702 Boot Loader (ap1g1-BOOT-M) Version 15.2(4)JA, RELEASE SOFTWARE (fc 1)

APdceb.94bf.f034 uptime is 6 hours, 51 minutes
System returned to ROM by power-on
System image file is "flash:/ap1g1-k9w8-mx.153-3.JN11/ap1g1-k9w8-mx.153-3.JN11"
Last reload reason: Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP702I-E-K9 (MIPS74k) processor (revision 01) with 86016K/45056K bytes of memory.
Processor board ID KWC19310465
MIPS74k CPU at 560Mhz, revision number 0x0000
Last reset from power-on
LWAPP image version 10.2.160.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: DC:EB:94:BF:F0:34
Part Number : 74-11077-02
PCA Assembly Number : 000-00000-00
PCA Revision Number :
--More--
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.25PCB Serial Number : KWC19310465
Top Assembly Part Number : 000-00000-00
Top Assembly Serial Number : KWC19310465
Top Revision Number : 01
Product/Model Number : AIR-CAP702I-E-K9

Configuration register is 0xF
APdceb.94bf.f034#

Hi,

Sandeep Choudhary — Tue, 09 May 2017 12:29:22 GMT

Hi,

WLC Country configured: US

AP Product/Model Number : AIR-CAP702I-E-K9 --> Its for European Domain

Means there is mismatch between domians........

You must buy a AP with -B- Regulatory domain. (Ask your supplier to change it with correct domain)

Check the compliance status here:

http://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html

Regards

Dont forget to rate helpful posts

As Sandeep has covered, your

Ric Beeching — Tue, 09 May 2017 12:35:07 GMT

As Sandeep has covered, your AP is for the European indicated by the E in its Model number: AIR-CAP702I-E-K9 and your WLC is configured to use United States which is the default.

If you are in Europe then this can be rectified by issuing the following commands on your switch (note, this will shutdown all wireless networks)

ap dot11 24ghz shut

ap dot11 5gh shut

ap country E (might be EU for europe)

no ap dot11 24ghz shut

no ap dot11 5ghz shut

If you aren't in Europe then what Sandeep says is the next step as it is not a good idea to run multiple country codes on a WLC and I'm not even sure you can with IOS-XE.

Ric

Hi Ric,

sobin peter — Tue, 09 May 2017 13:03:26 GMT

Hi Ric,

I tried but its shows me invalid country code:

FASCO-WLC-SW(config)#ap country E
Changing country code could reset channel and RRM grouping configuration. If running in RRM One-Time mode, reassign channels after this command. Check customized APs for valid channel values after this command.
Are you sure you want to continue? (y/n)[y]: y
% switch-1:wcm:Unsupported country code.
FASCO-WLC-SW(config)#

Both AP and switch purchased separately and it has to be used in Oman.

Is there any possible way to change the country code of AP. or any other workaround.

Hmm you can try this:

Ric Beeching — Tue, 09 May 2017 13:15:16 GMT

Hmm you can try this:

ap country OM

However, I will need to research whether European APs are compatible with Oman RF.

*edit*

This link shows that -E APs are compliant with Oman regulatory RF domain so OM should be good!

http://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html

Cheers,

Ric

Do these:

Sandeep Choudhary — Tue, 09 May 2017 13:18:16 GMT

Do these:

Switch# enable
Switch# show wireless country supported
Switch# configure terminal
Switch(config)# ap dot11 5ghz shutdown
Switch(config)# ap dot11 24ghz shutdown
Switch(config)# ap country OM
Switch(config)# end
Switch# configure terminal
Switch(config)# no ap dot11 5ghz shutdown
Switch(config)# no ap dot11 24ghz shutdown

Regards

Dont forget to rate helpful posts

I changed the country code to

sobin peter — Tue, 09 May 2017 13:50:30 GMT

I changed the country code to OM but getting the below logs:

But we can see the AP is registered in the WLC, the screen shot attached.

*May 9 13:34:27.435: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 13:34:27.435: *%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 13:34:27.435: *%LWAPP-3-RD_ERR9: 1 wcm: APs f078.163c.af40 country code changed from () to (OM )
*May 9 13:34:27.435: *%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP f078.163c.af40
*May 9 13:34:27.435: *%LWAPP-3-RD_ERR9: 1 wcm: APs f078.163c.af40 country code changed from () to (OM )
*May 9 13:34:27.435: *%LWAPP-3-VENDOR_PLD_VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload(155) with length=10 failed - AP f0:78:16:3c:af:40
*May 9 13:34:27.437: %CAPWAP-3-AP_PORT_CFG: AP connected port Gi1/0/2 is not an access port.
*May 9 13:34:27.438: *%CAPWAP-3-DATA_TUNNEL_CREATE_ERR2: 1 wcm: Failed to create CAPWAP data tunnel with interface id: 0xe1afc000000007 for AP: f078.163c.af40 Error Reason: Capwap Data Tunnel create retry exceeded max retry count.
*May 9 13:34:27.538: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 13:34:47.537: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]
*May 9 13:35:07.538: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination[...It occurred 2 times/sec!.]
*May 9 13:35:56.374: *%LOG-3-Q_IND: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response) combination
*May 9 13:35:56.374: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event () and state (CAPWAP Join Response) combination
*May 9 13:36:02.043: *%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Discovery Request) and state (CAPWAP Join Response)

Your AP is not connected to

Ric Beeching — Tue, 09 May 2017 13:58:01 GMT

Your AP is not connected to an Access Port. It needs to be configured as access and on the same VLAN as your wireless management interface.

Ric

run these commands on 36590:

Sandeep Choudhary — Tue, 09 May 2017 14:01:12 GMT

run these commands on 36590:

Switch# ap name AP02 shutdown
Switch# ap name AP02 no shutdown

Also paste the output of this command:

show ap auth-list

Regards

Dont forget to rate helpful posts

Also make sure:

Sandeep Choudhary — Tue, 09 May 2017 14:13:36 GMT

Also make sure:

summarize the requirements if you really need/want to do this:
1. The access-point needs to be in the same VLAN as the wireless management interface of the 3650 switch.
2. The interface where the access-point is being located on/after needs to be in access mode.
3. Only one access-point per interface.

Normally by default its enabled ...if not then do it:

ap auth-list ap-policy mic

Regards

Dont forget to rate helpful posts

Both the management and AP in

sobin peter — Tue, 09 May 2017 14:19:28 GMT

Both the management and AP in the same vlan 999.

interface GigabitEthernet1/0/2
switchport access vlan 999
switchport mode access
spanning-tree portfast

interface Vlan999
ip address 10.1.1.1 255.255.255.0
ip pim sparse-mode

FASCO-WLC-SW#show ap auth-list
Authorize MIC APs against AAA : Disabled

APs Allowed to Join:
AP with Manufacturing Installed Certificate : Enabled
AP with Self-Signed Certificate : Disabled

AP joined status attached.

sobin peter — Tue, 09 May 2017 14:23:33 GMT

AP joined status attached.