topic Re: AIR-CAP1532I-E-K9 unable to join WLC5508 in Wireless

AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Mon, 05 Jul 2021 06:57:28 GMT

Hello,

I have a problem with our new APs AIR-CAP1532. The AP don't join our WLC5508. The AP is supported from WLC Version 7.6.100.

So I've updated the WLC Version at the weekend. However the AP don't join the WLC.

At the "debug capwap client event" I can see, that the AP sends a join request to the WLC. But the WLC don't answer.

We will use the AP as a CAPWAP/LWAPP AP and don't as a Mesh AP.

*Jan 14 07:39:00.495: %CAPWAP-5-SENDJOIN: sending Join Request to xxx.xxx.xxx.xxx

*Jan 14 07:39:54.999: %CAPWAP-3-EVENTLOG: Wait DTLS timer has expired

*Jan 14 07:39:54.999: %CAPWAP-3-EVENTLOG: Did not get join response

Any suggestions how to join our AP the WLC?

Your sincerly

Markus

AIR-CAP1532I-E-K9 unable to join WLC5508

Leo Laohoo — Tue, 14 Jan 2014 07:54:58 GMT

Post the following command outputs:

1. WLC: sh sysinfo; and

2. AP: sh version

AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Tue, 14 Jan 2014 08:18:18 GMT

Hi Leo,

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.100.0
Bootloader Version............................... 1.0.16
Field Recovery Image Version..................... 7.0.112.21
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS

System Name...................................... wlc01
System Location.................................. 0815

System Contact................................... LAN
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. SSO (Both AP and Client SSO)
IP Address....................................... xx.xx.xx.xx (I don't post our offiziell IP's)

Last Reset....................................... Software reset
System Up Time................................... 1 days 18 hrs 50 mins 30 secs
System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... Multiple Countries:DE,US

--More-- or (q)uit
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +40 C
External Temperature............................. +17 C
Fan Status....................................... OK

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 12
Number of Active Clients......................... 147

Burned-in MAC Address............................ CC:EF:48:B3:96:20
Power Supply 1................................... Present, OK
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 250

(Cisco Controller) >

AP78da.6e59.aa84#sh version
Cisco IOS Software, C1530 Software (ap1g3-K9W8-M), Version 15.2(4)JB, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Wed 06-Nov-13 02:30 by prod_rel_team

ROM: Bootstrap program is C1530 boot loader
BOOTLDR: C1530 Boot Loader (ap1g3-BOOT-M), Version 15.2 [wnbubld 101]

AP78da.6e59.aa84 uptime is 15 minutes
System returned to ROM by power-on
System image file is "flash:/ap1g3-k9w8-mx.152-4.JB/ap1g3-k9w8-mx.152-4.JB"
Last reload reason: Reload

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP1532I-E-K9 (MIPS74k) processor (revision 24) with 204800K/57344K bytes of memory.
Processor board ID FCZ1751H01M
MIPS74k CPU at 700Mhz, revision number 0x0000
Last reset from power-on
LWAPP image version 7.6.1.118
2 Gigabit Ethernet interfaces
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 78:DA:6E:59:AA:84
Part Number                          : 74-11942-01
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  :
PCB Serial Number                    : FOC174549BA
Top Assembly Part Number             : 000-00000-00
Top Assembly Serial Number           : FCZ1751H01M
Top Revision Number                  : 23
Product/Model Number                 : AIR-CAP1532I-E-K9

Configuration register is 0xF
AP78da.6e59.aa84#

AIR-CAP1532I-E-K9 unable to join WLC5508

Sandeep Choudhary — Tue, 14 Jan 2014 08:36:50 GMT

Hi Markus,

Did u entered the mac address of AP in Mac filter list.

add this and let us know the result.

Choose Security > AAA> MAC Filtering

Regards

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Rasika Nayanajith — Tue, 14 Jan 2014 08:48:15 GMT

Post the complete AP console output when it is booting up & trying to register to your WLC

Rasika

AIR-CAP1532I-E-K9 unable to join WLC5508

Leo Laohoo — Tue, 14 Jan 2014 08:51:25 GMT

Configured Country............................... Multiple Countries:DE,US

Thanks for the output. Your AP will join the WLC, however, because you have two conflicting regulatory domain, there's a significant chance one of your radios (I believe 802.11a radio) will be down.

AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Tue, 14 Jan 2014 10:00:54 GMT

Hey,

i've already add the mac to the mac filter list.

And it's the same problem, that the ap don't join the wlc...

AIR-CAP1532I-E-K9 unable to join WLC5508

Sandeep Choudhary — Tue, 14 Jan 2014 10:09:23 GMT

HI Markus.

as rasika also aked that ..connect console cable to AP then reboot it. Then please paste the entire bootup process here.

Grüsse

AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Tue, 14 Jan 2014 10:20:04 GMT

@leo laohoo:

We have a few US-AP's and many European AP's so we have 2 Countries configured. We don't need 802.1a Radio so it is disabled.

@rasikanayanajith:

I change the IP's because i want post our offiziell IP's!!!

*Mar 1 00:00:46.975: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar 1 00:00:46.975: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:00:49.399: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C3560-8PC (b414.89a5.bd02)
*Mar 1 00:01:40.971: %MESH-6-ADJACENCY_STATE_MACHINE_STARTED: Mesh adjacency state machine started
*Mar 1 00:01:45.971: Mesh setting the ethernet port 0 state to 2
*Mar 1 00:01:45.971: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Mar 1 00:01:47.971: %LINK-6-UPDOWN: Interface BVI1, changed state to up
*Mar 1 00:01:48.971: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:01:51.031: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Mar 1 00:01:51.115: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C3560-8PC (b414.89a5.bd02)
*Mar 1 00:02:00.159: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:02:03.171: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Mar 1 00:02:03.231: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 140.180.140.175, mask 255.255.224.0, hostname AP78da.6e59.aa84

*Mar 1 00:02:03.231: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
Translating "CISCO-CAPWAP-CONTROLLER.test.de"...domain server (140.180.129.10)
*Mar 1 00:02:08.263: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255

*Mar 1 00:02:09.311: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Mar 1 00:02:10.311: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER.test.de
*Mar 1 00:02:20.311: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 14 10:10:12.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:10:12.495: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:10:12.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:10:12.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 14 10:10:12.499: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 14 10:10:12.499: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 14 10:10:12.499: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.10.10.20
*Jan 14 10:10:17.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:11:17.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan 14 10:11:27.079: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 14 10:11:25.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:11:25.495: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:11:25.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:11:25.499: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 14 10:11:25.499: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 14 10:11:25.499: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 14 10:11:25.499: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.10.10.20
*Jan 14 10:11:30.495: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:12:05.579: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
*Jan 14 10:12:05.579: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
*Jan 14 10:12:05.579: Mesh setting the ethernet port 0 state to 0
*Jan 14 10:12:05.579: %MESH-6-LINK_UPDOWN: Mesh station 78da.6e59.aa84 link Down
*Jan 14 10:12:13.579: Mesh setting the ethernet port 0 state to 2
*Jan 14 10:12:14.579: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Jan 14 10:12:19.611: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan 14 10:12:29.659: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 14 10:12:28.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:12:28.503: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:12:28.503: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:12:28.507: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 14 10:12:28.507: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 14 10:12:28.507: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 14 10:12:28.507: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.10.10.20
*Jan 14 10:12:33.503: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:13:33.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan 14 10:13:43.079: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 14 10:13:41.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:13:41.503: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:13:41.503: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:13:41.503: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 14 10:13:41.503: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 14 10:13:41.503: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 14 10:13:41.503: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.10.10.20
*Jan 14 10:13:46.503: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:14:40.839: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
*Jan 14 10:14:40.839: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
*Jan 14 10:14:40.839: Mesh setting the ethernet port 0 state to 0
*Jan 14 10:14:40.839: %MESH-6-LINK_UPDOWN: Mesh station 78da.6e59.aa84 link Down
*Jan 14 10:14:46.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan 14 10:14:48.839: Mesh setting the ethernet port 0 state to 2
*Jan 14 10:14:49.839: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Jan 14 10:14:54.871: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan 14 10:15:04.919: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 14 10:15:03.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:15:03.499: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.10.20 peer_port: 5246
*Jan 14 10:15:03.503: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20
*Jan 14 10:15:03.503: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 14 10:15:03.503: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 14 10:15:03.503: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 14 10:15:03.503: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.10.10.20
*Jan 14 10:15:08.499: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.20

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Sandeep Choudhary — Tue, 14 Jan 2014 10:24:06 GMT

Markus Heckmann wrote:

*Mar 1 00:00:49.399: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C3560-8PC (b414.89a5.bd02)

*Mar 1 00:01:51.115: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C3560-8PC (b414.89a5.bd02)
*

Hi,

When the %CDP_PD-2-POWER_LOW: All radios disabled -LOW_POWER_CLASSIC inline power source platform=platform name> MAC address=xxxx.xxxx.xxxx> error message is received on the Cisco Access Point (AP), it indicates that the AP is in low power mode with all radios disabled. It also signifies that a Cisco switch that is unable to supply sufficient power to the AP has been detected

https://supportforums.cisco.com/docs/DOC-2315

Use proper power source.

Regards

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Tue, 14 Jan 2014 10:58:36 GMT

When I use power injector the power is correct, but the messages and errors are the same 😞

AIR-CAP1532I-E-K9 unable to join WLC5508

Sandeep Choudhary — Tue, 14 Jan 2014 11:02:57 GMT

Hi Markus,

1. Is this AP is in Germany or in US ?

2. Connect Power Injector , add mac to WLC and paste the boot process here.

Reagrds

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Tue, 14 Jan 2014 11:06:53 GMT

Hi Sandeepchoudhard,

the AP is in Germany.

I've already add the MAC to the WLC and connected a power injector. The boot process is the same...only without

%CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C3560-8PC (b414.89a5.bd02)

Thanks!

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Sandeep Choudhary — Tue, 14 Jan 2014 11:48:18 GMT

HI Markus,

Log into your Wireless LAN Controller.
Select the Security tab.
Expand AAA and select AP Policies.
Click the Add button in the far right.
Under Add AP to Authorization List enter the MAC Address of the Access Point in the MAC Address text box.(The MAC Address can be found either on the bottom of the Access Point on the serial number sticker, or, by starting a console session to the Access Point. When in the console session the default host name is the MAC Address of the AP).

Click the Add button.
Click the Apply button.
Click the Wireless tab.
Under the Wireless>All APs the select then go to General tab, click the AP Mode drop down box and select ‘Local’.

Try this und zuruckinfo geben

Regards

Dont forget to rate helpful posts

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Tue, 14 Jan 2014 12:38:41 GMT

Hi,

now I've add the APs MAC to the AP Policy List. But I have to delete it from the MAC Filtering List:

Which Gerneral tab do you mean? I don't find the tab...

Thanks. The most suggestions i've tried...but i don't know the problem.

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Sandeep Choudhary — Tue, 14 Jan 2014 12:43:27 GMT

Hi Markus,

Note from cisco recommands: Mesh APs do not support multicountry controllers. You need to configure your controller for only one country if you want mesh AP to successfully join this controller.

If you want to try this then use another controller(Because i think you also have APs in US so dont do with this controller ) and put that wlc in country "DE" and try to join this mesh AP.

Regards

AIR-CAP1532I-E-K9 unable to join WLC5508

Scott Fella — Tue, 14 Jan 2014 12:57:58 GMT

You already have that mac address listed as a mac filter somewhere. For MESH and AP mac filters, you should put them in the Security > AAA > Mac Filtering

If you have the mac address there you should be fine:

Adding the Access Point MAC Address to the Wireless LAN Controller

Filter List

The wireless LAN controller maintains an access point authorization MAC address list and responds to discovery requests from access points on that list. To add the access point MAC address (or MAC addresses) to the Wireless LAN controller filter list, follow these steps:

Step 1 If you are not logged onto the wireless LAN controller, log on now. The Summary page appears.

Step 2 On the menu bar, click SECURITY. The Security RADIUS Authentication Server page appears.

Step 3 Under AAA in the left frame, click MAC Filtering. The Security MAC Filtering page appears.

Step 4 Click New. The MAC Filters New page appears.

Step 5 Enter the MAC address of the access point in the MAC Address field. You can also use the config macfilter add command to add a MAC filter entry to the controller.

Step 6 Select a WLAN ID or Any WLAN from the WLAN ID pop-up menu.

Step 7 Enter a description (32 characters maximum) of the access point in the Description field.

Step 8 Choose an interface from the Interface Name pop-up menu.

Step 9 Click Apply.

Step 10 Repeat this process to add other access points to the list.

Note You can also use the controller CLI command config macfilter add to add a MAC filter entry on the controller.

Step 11 On the menu bar, click Monitor to return to the Monitor Summary page.

http://www.cisco.com/en/US/docs/wireless/access_point/1530/quick/guide/ap1532qsg.html#wp45556

Also, are you using the powerinjector that is specific for the 1532?

AIR-PWRADPT-1530=

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Rasika Nayanajith — Tue, 14 Jan 2014 20:31:48 GMT

Good pick up Sandeep +5

Markus, Unless you can configure this WLC as single country, then your option is to change the 1532i image to Normal Local mode by uploading a standard recovery image.

1. Download "ap1g3-k9w8-tar.152-4.JB3.tar" this from CCO

2. Rename it as ap1g3-k9w7-tar.default

3. Directly connect AP ethernet to your laptop where laptop configured as 10.0.0.2/8 (with GW 10.0.0.1) & run a TFTP server on your PC.

4. Power the AP using injector while hold the RESET button for 20-30s

5. Release the RESET button & monitor the console output of your AP, you should see AP load the new image & deleting the existing one.

6. Then connect it to your network, it should register as a local mode AP.

Below explain usage of RESET button

http://www.cisco.com/en/US/docs/wireless/access_point/1530/installation/guide/1530_ch3.html#wp1112590

This post also shoud help you on this process.

http://mrncciew.com/2013/12/13/ap-conversion-using-mode-button/

HTH

Rasika

**** Pls rate all useful responses ****

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Wed, 15 Jan 2014 07:42:44 GMT

@Sandeep: +5 too

@Rasikana:

The same idea i have had yesterday evening, so i try it today an give a feedback when the ap join the wlc.

Re: AIR-CAP1532I-E-K9 unable to join WLC5508

Markus Heckmann — Wed, 15 Jan 2014 12:18:57 GMT

It works!!!

@Sandeep and rasikana: Thanks a lot. With your help the AP join the WLC.