topic Re: AP 3802 can't join WLC 2504 in Wireless

AP 3802 can't join WLC 2504

G3000LEE — Thu, 24 Mar 2022 14:01:28 GMT

Currently, the WLC currently has 2702 AP already joined, but the 3802 will not join the WLC.

This is a Lab setup with basic config and no security enhancement like ACLs.

If someone who has worked on the 2504 or is very skilled in wireless can help me out, that would be very helpful.

WLC software: 8.5.171

WLC SWITCH CONFIG:

LAB-CORE#show run int gi1/0/37

interface GigabitEthernet1/0/37

switchport mode trunk

spanning-tree portfast trunk

AP SWITCH CONFIG:

interface GigabitEthernet1/0/1

switchport access vlan 103

switchport mode access

spanning-tree portfast edge

WLC CLI OUTPUTS:

(Cisco Controller) >show ap join stats summary all

Number of APs.............................................. 3

Base Mac AP EthernetMac AP Name IP Address Status

00:3a:7d:a2:6b:40 00:42:68:fc:02:20 USS_LAB-AP1 172.16.103.62 Joined

78:72:5d:f9:0f:c0 N A AP7872.5DF7.030E 172.16.103.48 Not Joined

(Cisco Controller) >show ap join stats detailed 78:72:5d:f9:0f:c0

Sync phase statistics

- Time at sync request received............................ Not applicable

- Time at sync completed................................... Not applicable

Discovery phase statistics

- Discovery requests received.............................. 7

- Successful discovery responses sent...................... 7

- Unsuccessful discovery request processing................ 0

- Reason for last unsuccessful discovery attempt........... Not applicable

- Time at last successful discovery attempt................ Mar 24 13:43:09.011

- Time at last unsuccessful discovery attempt.............. Not applicable

Join phase statistics

- Join requests received................................... 0

- Successful join responses sent........................... 0

- Unsuccessful join request processing..................... 0

- Reason for last unsuccessful join attempt................ Not applicable

- Time at last successful join attempt..................... Not applicable

- Time at last unsuccessful join attempt................... Not applicable

Configuration phase statistics

--More-- or (q)uit

- Configuration requests received.......................... 0

- Successful configuration responses sent.................. 0

- Unsuccessful configuration request processing............ 0

- Reason for last unsuccessful configuration attempt....... Not applicable

- Time at last successful configuration attempt............ Not applicable

- Time at last unsuccessful configuration attempt.......... Not applicable

Last AP message decryption failure details

- Reason for last message decryption failure............... Not applicable

Last AP disconnect details

- Reason for last AP connection failure.................... Not applicable

- Last AP disconnect reason................................ Not applicable

Last join error summary

- Type of error that occurred last......................... None

- Reason for error that occurred last...................... Not applicable

- Time at which the last join error occurred............... Not applicable

AP disconnect details

- Reason for last AP connection failure.................... Not applicable

On a side note.

I have another post open for the same WLC where I am having issues with accessing the WLC from another network. If you work with WLC and know about the 2504 please take a look and see if you can help me out.

https://community.cisco.com/t5/wireless/wlc-2504-can-t-access-cli-or-gui-from-a-different-subnet/m-p/4577838#M239997

Re: AP 3802 can't join WLC 2504

Flavio Miranda — Thu, 24 Mar 2022 14:41:26 GMT

Factory reset the AP and try to join with a console cable on it just to see the logs. I´d say the problem may be on the Access Point as it seems that the join request is comming and the join response is being sending plus you already have access point on it.

On the switch, let the config for the access point port as simple as possible. Only switchport mode access and switchport access vlan 103

Re: AP 3802 can't join WLC 2504

Ambuj M — Thu, 24 Mar 2022 15:02:40 GMT

Agree with Flavio, also make sure you have enough license and on dhcp you don’t have option 60, vendor class identifier set for 2700 only.

Re: AP 3802 can't join WLC 2504

G3000LEE — Thu, 24 Mar 2022 15:08:33 GMT

This is a brand new AP out of a sealed box that I opened today.

Re: AP 3802 can't join WLC 2504

G3000LEE — Thu, 24 Mar 2022 15:12:53 GMT

I have access to just about every hardware possible due to the company I work for. I have added other AP 2702 and they all join so it's not a licence issue, also I know how to check for that.

I am mainly a route and switch guy but I have deployed vWLC, the old 2106 and recently for a customer a 9800 WLC. I am only having issues with this 2504 model.

Re: AP 3802 can't join WLC 2504

G3000LEE — Thu, 24 Mar 2022 15:31:09 GMT

[*03/24/2022 15:28:41.2069] CAPWAP State: DTLS Teardown
[*03/24/2022 15:28:41.2122] DTLS: Error while processing DTLS packet 0x22af000.
[*03/24/2022 15:28:45.9429]
[*03/24/2022 15:28:45.9429] CAPWAP State: Discovery
[*03/24/2022 15:28:45.9446] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*03/24/2022 15:28:45.9454] Discovery Response from 172.16.103.100
[*03/24/2022 15:28:55.0000]
[*03/24/2022 15:28:55.0000] CAPWAP State: DTLS Setup
[*03/24/2022 15:28:55.0004] dtls_connectionDB_add_connection: Number of DTLS connections exceeded two
[*03/24/2022 15:28:55.1965] dtls_load_ca_certs: LSC Root Certificate not present
[*03/24/2022 15:28:55.1965]
[*03/24/2022 15:28:55.1983] dtls_verify_con_cert: Controller certificate verification error
[*03/24/2022 15:28:55.1983] dtls_process_packet: controller cert verification failed
[*03/24/2022 15:28:55.1995] DTLS: Received packet 0x22af000 caused DTLS to close connection
[*03/24/2022 15:28:55.1995] sendPacketToDtls: DTLS: Closing connection 0x226fa00.
[*03/24/2022 15:28:55.1995]
[*03/24/2022 15:28:55.1995] Lost connection to the controller, going to restart CAPWAP...
[*03/24/2022 15:28:55.1995]
[*03/24/2022 15:28:55.1997] DTLS: Error while processing DTLS packet 0x22b1000.
[*03/24/2022 15:28:55.1997] Restarting CAPWAP State Machine.
[*03/24/2022 15:28:55.2043] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Setup(3).
[*03/24/2022 15:28:55.2049] Failed to disconnect DTLS-CTRL session.

Re: AP 3802 can't join WLC 2504

Haydn Andrews — Thu, 24 Mar 2022 23:58:08 GMT

believe you are hitting this issue

https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html

For the 3800 look at this bug

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb93909