topic Re: Restarting CAPWAP after 1 minute in Wireless

Restarting CAPWAP after 1 minute

MJU-NETDESIGN — Mon, 05 Jul 2021 15:43:28 GMT

Hi there

I have a Office connected to a Main office via a site2site running a Asa in both ends.

There are a Access point 2802, that are losing the connection to the WLC every 1 minute.

[*06/06/2018 02:36:44.1579] Warning, unencrypted data keepalive failed
[*06/06/2018 02:36:44.1579] Failed to receive data keepalive
[*06/06/2018 02:36:44.1580]
[*06/06/2018 02:36:44.1580] Lost connection to the controller, going to restart CAPWAP...
[*06/06/2018 02:36:44.1580]
[*06/06/2018 02:36:44.1580] Restarting CAPWAP State Machine.

Can it be a bug or a config issue ?

Mvh Mickey

Re: Restarting CAPWAP after 1 minute

Leo Laohoo — Sat, 09 Jun 2018 23:13:47 GMT

What firmware is the WLC running on?

Re: Restarting CAPWAP after 1 minute

MJU-NETDESIGN — Sun, 10 Jun 2018 18:51:36 GMT

Its a WLC 3504 running version 8.5.120.0 and the accesspoint is a 2802.

Mvh Mickey

Re: Restarting CAPWAP after 1 minute

Leo Laohoo — Sun, 10 Jun 2018 23:57:40 GMT

Console into the AP and leave it alone for about 15 minutes. Make sure the output from the console is logged.
Attach the logs into the thread.

Re: Restarting CAPWAP after 1 minute

patoberli — Tue, 12 Jun 2018 08:42:42 GMT

Could be a UDP timeout, have you opened the required CAPWAP control/data ports?
https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113344-cuwn-ppm.html#anc8
Otherwise do what Leo suggested.

Re: Restarting CAPWAP after 1 minute

MJU-NETDESIGN — Mon, 03 Sep 2018 21:00:57 GMT

The solution was:

No _ in the AP group name.

Re: Restarting CAPWAP after 1 minute

moises.tavares1 — Thu, 30 Apr 2020 16:31:14 GMT

I have the same problem, did you use the command "no ap group name"?

What was the solution?

Re: Restarting CAPWAP after 1 minute

ajc — Wed, 19 Aug 2020 16:24:01 GMT

Did you mean that we should not use "_" in the AP Group Name?

Re: Restarting CAPWAP after 1 minute

Scott Fella — Wed, 19 Aug 2020 16:47:21 GMT

From this old thread, yes it states the fix was not to use an underscore “_”.

Re: Restarting CAPWAP after 1 minute

ajc — Wed, 19 Aug 2020 22:23:47 GMT

Hi Scott,

thanks for answering, we are currently migrating our WIFI network to SD-WAN (which basically means IPSEC Tunneling), I have some AP's continuously sending me this:

*Aug 19 16:27:36.000: %CAPWAP-3-DATA_KEEPALIVE_ERR: Failed to receive data keep-alive *Aug 19 16:27:36.000: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.1:5246

I check this post but the AP Group name configuration is not the case so I read the following article about CAPWAP Path MTU Discovery, so I am wondering if the additional encapsulation caused by SD-WAN devices in addition to CAPWAP could be the cause because from the AP showing those disconnections negotiated a MTU of 576 with the WLC instead of the maximum required one.

(Cisco Controller) >show ap config general APTESTING

Cisco AP Identifier.............................. 520
Cisco AP Name.................................... APTESTING
CAPWAP Path MTU.................................. 576
Cisco AP Group Name.............................. TESTINGACCESSPOINT
Primary Cisco Switch Name........................ WLC

https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/211405-Configure-CAPWAP-Path-MTU-Discovery.html

Re: Restarting CAPWAP after 1 minute

Scott Fella — Wed, 19 Aug 2020 17:26:41 GMT

Oh... you should start your own thread then since your issue is totally different.

Re: Restarting CAPWAP after 1 minute

k.ameen@kaa.org.uk — Tue, 20 Apr 2021 11:46:56 GMT

Hi,

This happens in my environment as well but I don't have a solution yet. It only happens on a group of WAPs and not all of them. The AP group name i have is "default-group" any suggestions?

Thanks

Re: Restarting CAPWAP after 1 minute

MJohar2 — Wed, 22 Mar 2023 08:47:08 GMT

Hi,

I had the same problem too but weirdly enough, the issue somehow resolved after I changed the cable from the AP to the switch. Hopefully this will help.

Thanks.