DNAC Version 2.1.2.5 troubleshooting AP connectivity

[densto]

Hello,

We have DNA 2.1.2.5 configured with 9800 WLC and 4800 AP's.  DNAC is reporting that at one of the sites AP's are not reach able.  I was able to ping them from DNAC node and from the AP I could reach DNAC. Ap's configured to use Flex connect.

What is the best way to troubleshoot this issue?

Delete them from DNAC and reset and to try P and P?

Thank you,

Denis

[densto · Accepted solution]

This issue was caused by expired WLC Trustpoint.  Capwap tunnel would not initiate.

To fix this issue log in to WLC and run:

WLC# show crypto pki certificates

WLC# wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0 WORD