topic Re: DTLS Handshake Expired on Cisco Access Point C9130AXI-F 17.6.4.56 in Wireless

DTLS Handshake Expired on Cisco Access Point C9130AXI-F 17.6.4.56

farih-kurniawan — Thu, 13 Nov 2025 06:11:53 GMT

Greetings everyone, i'm new with Cisco WLC. i had an issue with access point disjoint with WLC. WLC that we use is Cisco Catalyst 9800-L with 17.6.4 version. my customer reports that suddenly, an access point shows green light and when i check it, the reason is DTLS handshake expired. But it's not first time that access point had behaviour like that. it's always repeated in a week or couple days and it's short issue. in couple of minutes, access point comes to joint again with WLC.

- i check the physical interface, there is no counters error

- i execute command like "TDR", but finds good

i wonder why only 1 access point that had this issue, my customer had around hundred of access point in that area, which connected to WLC

if anyone had an similliar issue, maybe can share the experience. What workaround that must be done, so it's not happen again in the future. Thank you

Re: DTLS Handshake Expired on Cisco Access Point C9130AXI-F 17.6.4.56

Kasun Bandara — Thu, 13 Nov 2025 06:54:32 GMT

@farih-kurniawan hi, this can happen due to connectivity issues or delays. is this access point have proper stable connection to WLC? check if there is any pattern which this happen, so you can use that pattern to co-relate if there is any activity.

Re: DTLS Handshake Expired on Cisco Access Point C9130AXI-F 17.6.4.56

Mark Elsen — Thu, 13 Nov 2025 06:58:17 GMT

- @farih-kurniawan Try a power cycle of the access point

Re: DTLS Handshake Expired on Cisco Access Point C9130AXI-F 17.6.4.56

farih-kurniawan — Thu, 27 Nov 2025 06:54:29 GMT

Hi @Mark Elsen , i already did that, but still access point sometimes disjoint WLC

i check an access point in catalyst center, like the pictures below. an access point had a random behaviour, it's not everyday to disjoint. it is recorded from date 13, 21, 25 november. and we can see orange color on that graph. noise score is bad it's 6 and had in the issue explanation it's says high utilization

we still use 2 band connection 2,4 and 5. this is the tshoot step that i do

- check interface errors on switch, there is no counters error

- apply TDR check, cable pair is normal

- capwap ap restart, still not working

- reboot an access point, still not working

- change channel from 1 to 11 and change it back from 11 to 1 in 2,4 bands

i wonder what causing this access point to randomly disjoint WLC, it is because high utilization ? but it's look fine if we see from catalyst center map

Re: DTLS Handshake Expired on Cisco Access Point C9130AXI-F 17.6.4.56

Mark Elsen — Thu, 27 Nov 2025 07:04:39 GMT

- @farih-kurniawan The software version on the controller is also very old 17.6.4
Upgrade to one of the latest advisory releases : 17.12.6a or 17.15.4b