topic Re: WLC 3504 Unable to see AP 1560 in Wireless

WLC 3504 Unable to see AP 1560

HunterMathews2967 — Mon, 05 Jul 2021 18:24:53 GMT

First time setting up a network with WLC.

WLC is configured and can both web browse and SSH into it. It currently has 1 SSID configured. I hardwire one of the APs into port 3 (PoE port) and it doesn't receive the SSID configuration.

WLC Firmware is 8.5.140.0

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Mon, 09 Dec 2019 18:59:22 GMT

Here's the sh ver for the AP


             Restricted Rights Legend

Use, duplication, or disclosure by the Government is subject to
restrictions as set forth in subparagraph (c) of the Commercial
Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and
subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

            Cisco Systems, Inc.
            170 West Tasman Drive
            San Jose, California 95134-1706

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

This product contains some software licensed under the
"GNU General Public License, version 2" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

This product contains some software licensed under the
"GNU Library General Public License, version 2" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Library
General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html

This product contains some software licensed under the
"GNU Lesser General Public License, version 2.1" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser
General Public License, version 2.1", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

This product contains some software licensed under the
"GNU General Public License, version 3" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, Version 3", available here:
http://www.gnu.org/licenses/gpl.html.

This product contains some software licensed under the
"GNU Affero General Public License, version 3" provided
with ABSOLUTELY NO WARRANTY under the terms of
"GNU Affero General Public License, version 3", available here:
http://www.gnu.org/licenses/agpl-3.0.html.

Cisco AP Software, (ap3g3), C1562, RELEASE SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Sat Nov 24 22:06:45 PST 2018

ROM: Bootstrap program is U-Boot boot loader
BOOTLDR: U-Boot boot loader Version 2013.01-gf899470 (Aug 16 2018 - 15:50:45)

AP7C21.0E72.F106 uptime is 0 days, 0 hours, 23 minutes
Last reload time   : Fri Oct 18 02:02:43 UTC 2019
Last reload reason : unknown

--More-- [*10/18/2019 02:25:13.0657] Resetting wired0 and[10/18/2019 02:25:13.1000] wired0: stopped
 restart DHCP client
cisco AIR-AP1562E-B-K9 ARMv7 Processor rev 1 (v7l) with 1028584/648544K bytes of memory.
Processor board ID FJC2345N018
AP Running Image     : 8.5.140.0
Primary Boot Image   : 8.5.140.0
Backup Boot Image    : 0.0.0.0
1 Gigabit Ethernet interfaces
2 802.11 Radios
Radio Driver version : 9.0.5.5-W8964
Radio FW version : 9.1.8.1
NSS FW version : 2.4.25

Base ethernet MAC Address            : 7C:21:0E:72:F1:06
Part Number                          : 73-100839-07
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  :
PCB Serial Number                    : FOC2339109Q
Top Assembly Part Number             : 068-100610-03
Top Assembly Serial Number           : FJC2345N018
Top Revision Number                  : A0
Product/Model Number                 : AIR-AP1562E-B-K9

Re: WLC 3504 Unable to see AP 1560

Leo Laohoo — Mon, 09 Dec 2019 21:04:46 GMT

Is the AP configured for on MESH or "local"?

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Mon, 09 Dec 2019 22:33:33 GMT

They are set to local

capwap ap mode local

I tried them on mesh as well

Re: WLC 3504 Unable to see AP 1560

Haydn Andrews — Mon, 09 Dec 2019 22:42:31 GMT

can you share a:

show AP summary to confirm the AP has registered to the WLC.

Also a show WLAN summary

The SSID you have configured what WLAN number is it? if its over 16 you need to add the AP to an AP group with that WLAN on it.

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Mon, 09 Dec 2019 22:51:30 GMT

show AP Summary

(Cisco Controller) >show AP Summary

Number of APs.................................... 0

Global AP User Name.............................. admin
Global AP Dot1x User Name........................ Not Configured

show WLAN Summary

(Cisco Controller) >show wlan summary

Number of WLANs.................................. 1

WLAN ID  WLAN Profile Name / SSID                                                 Status    Interface Name        PMIPv6 Mobility
-------  -----------------------------------------------------------------------  --------  --------------------  ---------------
1        Plant Network / CISCO2_Test                                              Enabled   plant network vlan    none

Re: WLC 3504 Unable to see AP 1560

Haydn Andrews — Mon, 09 Dec 2019 23:25:57 GMT

looks like the AP hasn't joined the WLC

Can you share the console output of when the AP attempts to join the WLC.

Also try adding the AP ethernet mac address to the WLC:

Security > AP Policies

Add as MIC

Then run these debug commands - and reboot the AP and share the output of the debug and the console logs from the AP:

(Cisco Controller) >debug capwap events enable
(Cisco Controller) >debug capwap errors enable

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Mon, 09 Dec 2019 23:36:03 GMT

Already had the MAC added to AP Policy registered as MIC.

Ran the debug commands you mentioned, power cycled (I'm VPN'd into work, so I disabled PoE on the port the AP is on. Assuming that worked), and didn't see anything show up on the shell window. Is there a command to see the logs? or should the pop up as they come?

Re: WLC 3504 Unable to see AP 1560

Haydn Andrews — Tue, 10 Dec 2019 00:15:51 GMT

really need to see the AP console logs as well.

Is the AP on the same subnet as the WLC.

What version of code is the WLC running?

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Tue, 10 Dec 2019 00:32:33 GMT

Sure, I'll do it first thing when I get back to the office. Does the management IP and interface need to be on the network we are going to be broadcasting?

We have 3 networks (Management 10.1.99.0/24, Local Plant 199.8.0.0/16, and Comcast 10.1.10.0/24). I put WLC management Interface to a trunked port on the switch, put the IP to 10.1.99.2, and set the management vlan to 99. The plant network interface is being passed vlan 1, for our plant network.

At the moment, though, the AP is hardwired into the WLC.

Here's what show sysinfo has to say.

Product Version.................................. 8.5.140.0
RTOS Version..................................... 8.5.140.0

Re: WLC 3504 Unable to see AP 1560

Leo Laohoo — Tue, 10 Dec 2019 00:37:38 GMT

Post the complete output to the following commands:
1. WLC: sh sysinfo;
2. WLC: sh time;
3. AP: sh version

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Tue, 10 Dec 2019 00:48:21 GMT

show sysinfo

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Build Info....................................... Engineering Special
Product Version.................................. 8.5.140.0
RTOS Version..................................... 8.5.140.0
Bootloader Version............................... 8.5.103.0
Emergency Image Version.......................... 8.5.103.0

OUI File Last Update Time........................ N/A
Build Type....................................... DATA + WPS

System Name...................................... WLC-1
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.2427
Redundancy Mode.................................. Disabled
IP Address....................................... 10.1.99.2
IPv6 Address..................................... ::
Last Reset....................................... Soft reset due to RST_SOFT_RST write
System Up Time................................... 0 days 4 hrs 20 mins 13 secs
System Timezone Location.........................

--More-- or (q)uit
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... US  - United States
Operating Environment............................ Commercial (10 to 35 C)
Internal Temp Alarm Limits....................... -10 to 80 C
Internal Temperature............................. +62 C
Mgig Temp Alarm Limits........................... -10 to 78 C
Mgig Temperature................................. +49 C
External Temp Alarm Limits....................... -10 to 71 C
External Temperature............................. +42 C
Fan Status....................................... OK
Fan Speed Mode................................... Disable

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

OUI Classification Failure Count................. 0

Memory Current Usage............................. 34
Memory Average Usage............................. 34

--More-- or (q)uit
CPU Current Usage................................ 0
CPU Average Usage................................ 0

Flash Type....................................... Compact Flash Card
Flash Size....................................... 1073741824

Burned-in MAC Address............................ 30:8B:B2:8C:33:2A
Maximum number of APs supported.................. 150
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1/SHA2
Licensing Type................................... RTU

show time

(Cisco Controller) >show time

Time............................................. Tue Dec 10 00:45:43 2019

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
    NTP Version..................................     3
    NTP Polling Interval.........................     100000

     Index     NTP Key Index                  NTP Server                Status          NTP Msg Auth Status
    -------  ---------------------------------------------------------------------
       1              0                                  199.8.1.14     In Progress          AUTH DISABLED

show version - note this was taken almost 6 hours ago.

             Restricted Rights Legend

Use, duplication, or disclosure by the Government is subject to
restrictions as set forth in subparagraph (c) of the Commercial
Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and
subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

            Cisco Systems, Inc.
            170 West Tasman Drive
            San Jose, California 95134-1706

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

This product contains some software licensed under the
"GNU General Public License, version 2" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

This product contains some software licensed under the
"GNU Library General Public License, version 2" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Library
General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html

This product contains some software licensed under the
"GNU Lesser General Public License, version 2.1" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser
General Public License, version 2.1", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

This product contains some software licensed under the
"GNU General Public License, version 3" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, Version 3", available here:
http://www.gnu.org/licenses/gpl.html.

This product contains some software licensed under the
"GNU Affero General Public License, version 3" provided
with ABSOLUTELY NO WARRANTY under the terms of
"GNU Affero General Public License, version 3", available here:
http://www.gnu.org/licenses/agpl-3.0.html.

Cisco AP Software, (ap3g3), C1562, RELEASE SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Sat Nov 24 22:06:45 PST 2018

ROM: Bootstrap program is U-Boot boot loader
BOOTLDR: U-Boot boot loader Version 2013.01-gf899470 (Aug 16 2018 - 15:50:45)

AP7C21.0E72.F106 uptime is 0 days, 0 hours, 23 minutes
Last reload time   : Fri Oct 18 02:02:43 UTC 2019
Last reload reason : unknown

--More-- [*10/18/2019 02:25:13.0657] Resetting wired0 and[10/18/2019 02:25:13.1000] wired0: stopped
 restart DHCP client
cisco AIR-AP1562E-B-K9 ARMv7 Processor rev 1 (v7l) with 1028584/648544K bytes of memory.
Processor board ID FJC2345N018
AP Running Image     : 8.5.140.0
Primary Boot Image   : 8.5.140.0
Backup Boot Image    : 0.0.0.0
1 Gigabit Ethernet interfaces
2 802.11 Radios
Radio Driver version : 9.0.5.5-W8964
Radio FW version : 9.1.8.1
NSS FW version : 2.4.25

Base ethernet MAC Address            : 7C:21:0E:72:F1:06
Part Number                          : 73-100839-07
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  :
PCB Serial Number                    : FOC2339109Q
Top Assembly Part Number             : 068-100610-03
Top Assembly Serial Number           : FJC2345N018
Top Revision Number                  : A0
Product/Model Number                 : AIR-AP1562E-B-K9

Re: WLC 3504 Unable to see AP 1560

Leo Laohoo — Tue, 10 Dec 2019 01:12:40 GMT

@HunterMathews2967 wrote:
In Progress 

NTP state is "In Progress"?

This'll probably be the cause why the AP isn't joining the controller: The WLC's time and date is incorrect.

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Tue, 10 Dec 2019 01:28:50 GMT

Okay, I'm assuming its because I don't have NTP authentication checked. When I select that, what does "Key Index" mean?

Turns out the WLC is only reading from the management network (can't ping anything else on the network from the WLC CLI)

Re: WLC 3504 Unable to see AP 1560

Rps-Cheers — Tue, 10 Dec 2019 01:35:11 GMT

Could you check whether WLAN set broadcast and 802.11a/b enable status ?

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Tue, 10 Dec 2019 01:37:35 GMT

WLAN Identifier.................................. 1
Profile Name..................................... Plant Network
Network Name (SSID).............................. CISCO2_Test
Status........................................... Enabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled

802.11a Network.................................. Enabled
802.11b Network.................................. Enabled

Re: WLC 3504 Unable to see AP 1560

Leo Laohoo — Tue, 10 Dec 2019 02:07:16 GMT

Ok, so set the time and date as correct as possible and reboot the AP.
See if this gets the AP going.

Re: WLC 3504 Unable to see AP 1560

Rps-Cheers — Tue, 10 Dec 2019 02:37:09 GMT

OK, and is the power status full of ap?
In addtion, AP can join wlc,just cannot broadcast ssid,right?

Re: WLC 3504 Unable to see AP 1560

HunterMathews2967 — Tue, 10 Dec 2019 02:42:13 GMT

It cannot join the WLC

Re: WLC 3504 Unable to see AP 1560

Rps-Cheers — Tue, 10 Dec 2019 03:28:53 GMT

I have saw this info:
1\AP Running Image : 8.5.140.0
2\capwap ap mode local
3\WLC time setting.

If it still cannot register to wlc,Could you please collect debug info:
WLC debugs:
WLC> debug mac addr < AP MAC address >
WLC> debug capwap errors enable
WLC> debug capwap events enable
WLC> debug dtls all enable
WLC> debug pm pki enable
To disable debugs: debug disable-all

AP debugs:
AP# debug capwap client event
AP# debug capwap client error
AP# debug capwap client detail
AP# debug dtls client error
AP# debug dtls client event
To disable debugs: u all

BR