Problems with new 9120 APs

derek.small — Wed, 30 Aug 2023 19:54:40 GMT

I have a 3504 HA pair of controllers which have 100 registered APs on them currently and they are licensed for 150 APs. They are a mix of 2800/3800 and a few 9120s. Recently we purchased a few more 9120s. They are all being added to the same Vlan as all the current APs. They get IPs via DHCP, with option 43. I see the new APs trying to register on the controller, however they never do. Most of them are on the same Vlan as the mgmt interface of the controllers, so there is no firewall between them. The controllers are running fairly recent code and the APs brand new, so I don't see how it could be a cert issue. The APs were all installed about 40 feet off the floor and I don't have access to try to console into one of them, but they also are not responding to telnet or ssh, though I can ping them.

Here is a CDP neighborhood for one of them:

Device ID: AP588B.1C01.8A48
Entry address(es):
IP address: 10.187.14.31
Platform: cisco C9120AXE-B, Capabilities: Router Trans-Bridge
Interface: GigabitEthernet2/0/41, Port ID (outgoing port): GigabitEthernet0
Holdtime : 140 sec

Version :
Cisco AP Software, ap1g7-k9w8 Version: 17.6.4.56
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2014-2015 by Cisco Systems, Inc.

advertisement version: 2
Power drawn: 23.200 Watts
Power request id: 40929, Power management id: 2
Power request levels are:23200 15400 0 0 0
Management address(es):
IP address: 10.187.14.31

Here is some of the debug output on the controller for one of the new APs

(Cisco Controller) >
(Cisco Controller) >*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Discovery Request from 10.187.1.224:5258

*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 150, MaxLicense=150 joined Aps =100
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 apType = 87 apModel: C9120AXE-B

*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 apType: Ox57 bundleApImageVer: 8.10.171.0
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 version:8 release:10 maint:171 build:0
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224 port 5258

*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224:5258

*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Request from 10.187.1.224:5258

*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 150, MaxLicense=150 joined Aps =100
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 apType = 87 apModel: C9120AXE-B

*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 apType: Ox57 bundleApImageVer: 8.10.171.0
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 version:8 release:10 maint:171 build:0
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224 port 5258

*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224:5258

*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Request from 10.187.1.224:5258

*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 150, MaxLicense=150 joined Aps =100

It doesn't seem to be that they aren't getting the DHCP option 43 correctly since they talk to the controller. It doesn't seem to be a cert issue as I'm not seeing any pki errors. These APs are on the same Vlan and DHCP scope as all the ones that are working...

Any suggestions on where to look for an issue?

Re: Problems with new 9120 APs

RoadRunner4k — Wed, 30 Aug 2023 20:26:07 GMT

Which software are you running on the WLC ?

Be aware of this Field notice on 9120.

C9105/C9120/C9130 Access Points Manufactured Starting in September 2022 May Require Code Upgrades - Cisco

Re: Problems with new 9120 APs

RoadRunner4k — Wed, 30 Aug 2023 20:31:08 GMT

From logs it looks like you are on 8.10.171 you should go for recommended 8.10.185.3 / 8.10.185.0

Field notice from above is fixed from 8.10.181 (183) and onwards.

Re: Problems with new 9120 APs

Leo Laohoo — Thu, 31 Aug 2023 00:30:22 GMT

@derek.small wrote:
Cisco AP Software, ap1g7-k9w8 Version: 17.6.4.56

@RoadRunner4k is correct.

The AP came with 17.6.4 (just like ours) and I suspect the manufacturing date of the 9120 is later than September 2022.

topic Re: Problems with new 9120 APs in Wireless

Problems with new 9120 APs

Re: Problems with new 9120 APs

Re: Problems with new 9120 APs

Re: Problems with new 9120 APs