LWAPP cannot join WLC2504 controller

[mjalloulgdne]

Hello. 

I have WLC5204 controller and AIR-CAP1602 access points. 

I have the latest software version on the wlc. 

I connect the wlc to a trunk port. i have internal dhcp server enabled in wlc. 

when i connect the ap to access port same vlan as management interface vlan, the ap cannot join the controller. 

the ap is assigned an ip address from the dhcp server but the following error logs are displayed:

did not get log server setting from dhcp

invalid event 10 and state 5 combination

failed to process message type 10 state 5

failed to handle capwap control message form controller

failed to process encrypted capwap packet from 192.168.1.10

I would really appreciate your help in this matter. 

Regards. 

[Leo Laohoo]

Post the following output: 

1.  WLC:  sh sysinfo; 

2.  WLC:  sh time; 

3.  AP:  sh version; and 

4.  AP:  sh ip interface brief

[mjalloulgdne]

1. WLC sh sysinfo 
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.6.130.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 16.0

Build Type....................................... DATA + WPS

System Name...................................... GDNE test
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
IP Address....................................... 20.20.20.10
Last Reset....................................... Power on reset
System Up Time................................... 0 days 0 hrs 38 mins 46 secs
System Timezone Location......................... (GMT +2:00) Jerusalem
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

--More-- or (q)uit
Configured Country............................... US  - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +27 C
External Temperature............................. +31 C
Fan Status....................................... 3700 rpm

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

Burned-in MAC Address............................ 1C:DE:A7:06:A5:40
Maximum number of APs supported.................. 10

2. WLC sh time
Time............................................. Thu Dec  4 13:26:30 2014

Timezone delta................................... 0:0
Timezone location................................ (GMT +2:00) Jerusalem

NTP Servers
    NTP Polling Interval.........................     86400

     Index     NTP Key Index                  NTP Server                  NTP Msg Auth Status
    -------  ----------------------------------------------------------------------------------
       1              0                                                   AUTH DISABLED

3. AP show version

Cisco IOS Software, C1600 Software (AP1G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2014 by Cisco Systems, Inc.
Compiled Fri 22-Aug-14 10:56 by prod_rel_team

ROM: Bootstrap program is C1600 boot loader
BOOTLDR: C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)

AP7c0e.ce85.5e74 uptime is 1 minute
System returned to ROM by power-on
System image file is "flash:/ap1g2-k9w8-mx.152-4.JB6/ap1g2-k9w8-mx.152-4.JB6"
Last reload reason:

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP1602I-E-K9 (PowerPC) processor (revision B0) with 229366K/32768K bytes of memory.
Processor board ID FGL1833X71G
PowerPC CPU at 533MHz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.6.130.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 7C:0E:CE:85:5E:74
Part Number                          : 73-14671-04
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  :
PCB Serial Number                    : FOC1832800C
Top Assembly Part Number             : 800-38552-01
Top Assembly Serial Number           : FGL1833X71G
Top Revision Number                  : A0
Product/Model Number                 : AIR-CAP1602I-E-K9

Configuration register is 0xF

4. AP show ip interface brief
Interface                  IP-Address      OK? Method Status                Protocol
BVI1                       20.20.20.101    YES DHCP   up                    up
Dot11Radio0                unassigned      NO  unset  up                    up
Dot11Radio1                unassigned      NO  unset  up                    up
GigabitEthernet0           unassigned      NO  unset  up                    up
GigabitEthernet0.1         unassigned      YES unset  up                    up

[Leo Laohoo]

Configured Country............................... US  - United States

This line says the WLC is configured for USA regulatory domain.

Product/Model Number                 : AIR-CAP1602I-E-K9

This line says the AP is meant to be used for countries with "-E" regulatory domain, like countries in EUROPE.   And this is why the AP will never join the WLC.  

Go HERE for more information and/or details.

[mjalloulgdne]

This access point was working fine with the controller at the beginning. It joined the controller and everything was fine.

I am afraid that the problem appeared after i attempted to restore the wlc to factory settings and i was asked if i want to save the configuration on the flash before i restore, i answered no. 

Could this be the case ? 

if yes, how can i fix it ? 

[Leo Laohoo · Accepted solution]

It joined the controller and everything was fine.

It will initially join the WLC to download the full IOS but after that, because of incorrect regulatory domain, won't join the controller to provide service. 

I am afraid that the problem appeared after i attempted to restore the wlc to factory settings and i was asked if i want to save the configuration on the flash before i restore, i answered no. 

If the AP is to be installed somewhere in Europe, then change the Country settings (Wireless > Country) to the correct country and un-tick "USA".    

[mjalloulgdne]

Thank you very much. 

Changing the country settings on the wlc fixed the problem. 

However, i am facing a small issue in this matter. 

I want to use the wlc and the aps in an environment where i have a hotspot server at vlan 1. 

I have the guest network on the wlc configured on vlan 1. 

However, guests cannot connect to the hotspot server when it is on vlan 1. 

They can only connect when i change the hotspot server to any vlan other than vlan 1. 

I would appreciate your help in this matter. 

Thanks.