cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7178
Views
5
Helpful
10
Replies

ISR 4351 AppNav-XE registration - SSL Handshake failed

jeremy.t
Level 1
Level 1

Hi, I'm trying to setup a new ISR 4351 router with vWAAS running on UCS-E but having trouble with registering the router for AppNav. The vWAAS install on UCS-E appears to be ok and is registered with the WAAS Central Manager. But when I try to register the IOS router on the WAAS Central Manager I get a 'Successfully processed the registration request' message on the Cisco IOS Router Registration page however when I go to the Devices page I get Device Status of Pending for ages and then eventually get status of Offline and error 'SSL Handshake failed while communicating with AppNav-XE Controller device.' Also, on the router if I have debug ip http running I get the following errors every 5 minutes;

 

Aug 24 16:10:59.175: %HTTPS: SSL handshake fail (-6992)
Aug 24 16:10:59.175: HTTP: ssl handshake failed (-40404)

 

I'm running Cisco IOS XE Software, Version 03.15.01.S Version 15.5(2)S1

 

Has anyone got any ideas why this would happen?

 

Thanks

10 Replies 10

Sean Alexander
Level 1
Level 1

Did you solve this? something to do with the trustpoint used for the SSL handshake but cant figure out what needs changing.

Hi Sean, the SSL handshake issue was down to a bug in Central Manager v5.5.1, upgrading it to 5.5.5 resolved that issue. I then had further problems due to ACS authorisation but that's another story.

Thanks Jeremy.

 

Been racking my brian on this for the past 2 days. Tried CA certificates etc with no joy.

We are on WAASCM 5.5.1 so am upgrading now to see if this resolves.

Running ACS too and now hoping the WAASCM is the last stumbling block.

 

Cheers,

Thanks Jeremy!

 

I feel I ou you one! the upgrade resolved the issue!

Thanks so much for the reply or I would still be sitting here scratching my head.

 

Thanks,

Hi All,

 

Just for your information, the issue you had was due to CSCus70116 and this is why your issue got solved after upgrade to 5.5.5.

 

Regards,

Nicolas

hi jeremy,

anyway i have some issue SSL Handshake failed while communicating with AppNav-XE Controller device in ASR,so how to upgrade vWaas ver. 5.5.1 to ver. 5.5.5 ?

thanks 

neidlein.p
Level 1
Level 1

Same issue here with 6.1.1a and ISR4331 on bootflash:isr4300-universalk9.03.15.02.S.155-2.S2-std.SPA.bin

Hey neidlein,

Did you fix device registration? I got the same message 'SSL Handshake failed while communicating with AppNav-XE controller device'. CM is running 'waas-universal-6.1.1.26-k9.bin '.

Ian Waddell
Level 1
Level 1

I have the same issue. I'm running WCM version 6.2.3e.  I'm trying to register a ASR1004 RP2 as an AppNav XE controller.

I am having the same issue with ISR AppNav-XE Controllers 4351 and 4451; after a successful registration the units transition from Pending to Offline Status with an Error of " Socket connect timed out while communicating with AppNav-XE Controller device."

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: