topic hola buen dia, los in Wireless

DTLS_CLIENT_ERROR, AP doesnt Join with the WLC

pwc_mexico — Mon, 05 Jul 2021 09:58:53 GMT

hi Everybody

Some weeks ago i have been had some issues with some APs and in all case i ve seen the same next message error

DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x86B4AE4!

I think that maybe the issue is on the WLC because i have some ap´s with the same message,

We have implemented WLC 5508 and AIR CAP 3600 and 3700 access points

The WLC version is 8.0.110.0

In advance , thanks for your help

Post the complete output to

Leo Laohoo — Tue, 21 Apr 2015 21:40:12 GMT

Post the complete output to the following commands:

1. WLC: sh sysinfo;

2. WLC: sh time;

3. AP: sh version; and

4. AP: sh ip interface brief

Hola que tal Pwc_mexico,

Mike Vzz — Tue, 21 Apr 2015 23:31:00 GMT

Hola que tal Pwc_mexico,

Estos Ap's que comentas se registran en la controladora o solo te muestra el mensaje que comentas.

Generalmente no se registran,

pwc_mexico — Thu, 23 Apr 2015 00:28:41 GMT

Generalmente no se registran, solo he visto pocos casos en los cuales acceso por consola a ellos si les cambio que busquen otro de nuestros WLC, a veces se registran a veces no

ya me ha pasado con varios AP´s , no se si valga la pena comentar que estos APs estan como flexconnect

De antemano gracias

Saludos

hola buen dia, los

Mike Vzz — Thu, 23 Apr 2015 17:30:19 GMT

hola buen dia,

los puertos de tu switch que van hacia los ap's en modo Flexconnect como están configurados?

hola buen dia, los

Mike Vzz — Thu, 23 Apr 2015 17:44:33 GMT

hola buen dia,

los puertos de tu switch que van hacia los ap's en modo Flexconnect como están configurados?

los puertos de tus ap's que

Mike Vzz — Thu, 23 Apr 2015 18:25:03 GMT

Generalmente existe una vlan

pwc_mexico — Fri, 24 Apr 2015 17:30:22 GMT

Generalmente existe una vlan en cada oficina para la wireless, el puerto esta configurado como modo acceso y esta en la vlan de wireless

un ejemplo

interface GigabitEthernet1/0/22
description *** AP ***
switchport access vlan 8
switchport mode access

No se si deba llevar algun otro tipo de configuracion.

Gracias

Saludos

ya realizaste la prueba

Mike Vzz — Mon, 27 Apr 2015 17:26:18 GMT

ya realizaste la prueba forzando al ap que se regsitre a la controladora

Te refieres a forzarlo por

pwc_mexico — Mon, 27 Apr 2015 19:54:59 GMT

Te refieres a forzarlo por CLI con el siguiente comando

capwap ap controller ip add x.x.x.x ?? , si es asi, si ya lo intente y aun asi no funciona, lo curioso es que el viernes revise el equipo, y ya se encuentra ligado al controller.

La falla es aleatoria, cuando sucede, pasa un buen tiempo sin ligarse, y de repente se firma al controller.

puedes compartir los

Mike Vzz — Mon, 27 Apr 2015 20:38:06 GMT

puedes compartir los siguientes loggs

- show msglog

- show traplog

WLC: sh sysinfo show msglog

Mike Vzz — Mon, 27 Apr 2015 20:54:11 GMT

WLC: sh sysinfo

show msglog

show traplog

Seeing DTLS_CLIENT_ERROR: in

mohanak — Wed, 29 Apr 2015 09:49:33 GMT

Seeing DTLS_CLIENT_ERROR: in ap console during regression run

CSCut38353

Description

Symptom:
Seeing DTLS_CLIENT_ERROR: in ap console during regression run

Conditions:

seeing dtls client error messages flooded in the ap console

platform used: ct5500,ap1532

Mar 16 01:36:15.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x67E891E0!

*Mar 16 01:36:45.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 50.50.44.10:5246
*Mar 16 01:36:46.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 50.50.44.10 peer_port: 5246
*Mar 16 01:37:15.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x655A1CA0!

*Mar 16 01:37:45.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 50.50.44.10:5246

hola, buen dia Ayer tuve un

Mike Vzz — Wed, 29 Apr 2015 13:18:36 GMT

hola, buen dia

Ayer tuve un problema similar como el que comentaste, de que no se registraban los ap que estaban en flexconnect, los ap's con los que tenia el problema eran modelo 1532

la solucion fue la siguiente: agrege la mac-addres de los ap en la controladora como si los fueras a colocar en mesh.

el puerto que va hacia el ap (FlexConnect) como trunk y la vlan nativa

y de esa manera se registraban los ap's sin nigun problema, una vez que estaban registrados los colocaba como FlexConnect en la Wlc.

Saludos.

(Cisco Controller) >show

pwc_mexico — Tue, 19 May 2015 17:13:07 GMT

(Cisco Controller) >show msglog

Message Log Severity Level ...................... CRITICAL
*apfMsConnTask_2: Feb 13 11:08:22.476: #APF-1-CONFLICT_IN_ASS_REQ: apf_80211.c:9042 Conflicting Supported Rates in Association Request from1c:99:4c:80:41:ed

(Cisco Controller) >show traplog

Number of Traps Since Last Reset ............ 7204382
Number of Traps Since Log Last Displayed .... 11

Client Traps Statistics

Client Association Traps .................... 0
Client Disassociation Traps ................. 260709
Client Authentication Traps ................. 1806660
Client Deauthentication Traps ............... 1596784
Client Association Fail Traps ............... 368221
Client Authnetication Fail Traps ............ 303141
Station Authnetication Fail Traps ........... 0
Client Excluded Traps ....................... 59547
Client Static IP Fail Traps ................. 0
Association Fail Traps ...................... 0
Associate Fail Traps ........................ 343785
Client Association Data Stats Traps ......... 0
Client Disassociation Data Stats Traps ...... 0
Client Association NAC Alert Traps .......... 0
Client Web Auth User Login Traps ............ 782
Client Web Auth User Logout Traps ........... 2

--More-- or (q)uit
Client Enhanced Traps Sent Since Reset ............. 0
Client Association Enhanced Traps .................. 0
Client Association Enhanced Traps Send Fail ........ 0
Client Deauthentication Enhanced Traps ............. 0
Client Deauthentication Enhanced Traps Send Fail ... 0
Client Authentication Enhanced Traps ............... 0
Client Authentication Enhanced Traps Send Fail ..... 0
Client Stats Enhanced Traps ........................ 0
Client Stats Enhanced Traps Send Fail .............. 0

AP Traps Statistics

AP Interface Up Traps ............. 7916
AP Interface Down Traps ........... 8182
AP Associated Traps ............... 2209
AP Disassociated Traps ............ 2330

Log System Time Trap
--- ------------------------ -------------------------------------------------
0 Tue May 19 12:17:23 2015 RADIUS server 10.30.11.235:1813 failed to respond
to request (ID 66) for client f4:37:b7:22:17:28 /
user 'mlawrence009'
1 Tue May 19 12:17:23 2015 Client Deauthenticated: MACAddress:a0:ed:cd:85:fc

--More-- or (q)uit
:fd Base Radio MAC:50:17:ff:b3:40:e0 Slot: 1 User
Name: jwhite005 Ip Address: 10.30.251.205 Reason:
Unknown ReasonCode: 23
2 Tue May 19 12:17:23 2015 Client Authenticated: MAC Address:5c:8d:4e:75:e4:
aa base Radio MAC:f4:cf:e2:c6:a8:70 Slot: 1 User
Name:jhe064 IP Addr:10.30.250.71 SSID:WitAr3bLe3T
s
3 Tue May 19 12:17:22 2015 Client Authenticated: MAC Address:e8:80:2e:ba:79:
ed base Radio MAC:f4:cf:e2:c9:3f:e0 Slot: 1 User
Name:bcordova001 IP Addr:10.30.250.136 SSID:WitAr
3bLe3Ts

Would you like to display more entries? (y/n)

Re: Seeing DTLS_CLIENT_ERROR: in

Gustavo Novais — Wed, 25 Sep 2019 15:24:55 GMT

go to the WLC

Management

Logs

message logs

and carefully look for this error

*spamApTask3: Sep 25 16:24:22.587: %LWAPP-3-LICENSE_ACQUIRE_ERR: spam_lrad.c:489 Failed to acquire license from the licensing module, maximum APs Joined 55/55.

it worked for me the maximum number of AP was reached.