Wireless LAN Controller- How to Disable DTLS Encryption

[cgutierrezc1]

Hi everybody.

How to disabled DTLS Control Packets encryption on WLC release 8.6.101.0 or 8.5.120.0 for troubleshooting purposes?

[Mark Elsen]

                    Step1) Logon to your controller

Step 2 Choose Wireless > Access Points > All APs to open the All APs page.

Step 3 Click the name of the access point for which you want to enable data encryption.

Step 4 Choose the Advanced tab to open the All APs > Details for (Advanced) page (see Figure 8-1).

Figure 8-1 All APs > Details for (Advanced) Page

Step 5 Select the Data Encryption check box to enable data encryption for this access point or unselect it to disable this feature. The default value is unselected.

[cgutierrezc1]

Thanks for your reply.
The Data Encryption Checkbox involve the Control CAPWAP message? Capwap Data + Capwap Ctrl message?

[Mark Elsen]

 - I tend to think it's only capwap-data; but check the document below (read it completely) ; it may clarify this :

https://supportforums.cisco.com/t5/wireless-mobility-documents/capwap-encryption-using-dtls/ta-p/3148917

M.

[cgutierrezc1]

Thank you, I had already read it. And I also read these other two links:
https://mrncciew.com/2013/03/17/ap-registration/

http://what-when-how.com/deploying-and-troubleshooting-cisco-wireless-lan-controllers/capwap-communication-control-and-data-encryption-cisco-wireless-lan-controllers/

in those links, the authors talk about the command: "test capwap encr APNAME", and that is why I consult if there is an equivalent command in version 8.6 or 8.5...