1142 access point not joining the controller

[Abinaya R]

Hi,

I have a 1142 access point and the controller is 5508 running the ios version 7.0.

When i try to make the access point join the controller, i get the follwing error message.

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
*Mar  1 00:13:41.963: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTROLL
ER

*Mar  1 00:13:50.963: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROL
LER
*Mar  1 00:14:00.963: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Mar  6 01:49:22.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
p: 172.22.255.70 peer_port: 5246
*Mar  6 01:49:22.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Mar  6 01:49:22.696: %DTLS-5-ALERT: Received FATAL : Certificate unknown alert
from 172.22.255.70
*Mar  6 01:49:22.696: %CAPWAP-3-ERRORLOG: Bad certificate alert received from pe
er.
*Mar  6 01:49:22.697: %DTLS-5-PEER_DISCONNECT: Peer 172.22.255.70 has closed con
nection.
*Mar  6 01:49:22.697: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 1
72.22.255.70:5246
*Mar  6 01:49:22.697: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination
.Mar  6 01:49:22.697: %DTLS-5-PEER_DISCONNECT: Peer 172.22.255.70 has closed con
nection.
*Mar  6 01:49:22.697: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 1
72.22.255.70:5246
*Mar  6 01:49:22.697: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination
.
Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)
*Mar  6 01:50:26.999: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar  6 01:50:27.000: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
*Mar  6 01:50:36.005: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTROLL
ER

*Mar  6 01:50:45.005: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROL
LER
*Mar  6 01:50:55.005: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Mar  6 01:50:55.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
p: 172.22.255.70 peer_port: 5246.

Please let me know the procedure to make the AP join the WLC. I have attached the version of the Access point

[Surendra BG]

Hi,

Please make sure the AP and the WLC are on the same time and date.. (set the date and time on the WLC and AP to be the same)

if this still does not fix, then convert the AP to autonomous and then reconvert the AP back to LWAPP imane and see if this helps..

lemme know how this works!!

Regards

Surendra

[Abinaya R]

Hi,

I tried converting to autonomous and back to lwapp, checked the time on access point and controller,

checked the regulatory domains, accepted self signed certificates in AP policies. Its not working.

Please let me know if any solution is there for this.

I have attached the debug logs from the controller

[Surendra BG]

Wats the WLC model?? software running on the same?? is LAG enabled?? if not, enable and reboot the WLC.

paste the output "show capwap client rcb" or "show lwapp client rcb"

if the AP is getting the IP address and able to reach the WLC management int ip, then try the below command

test capwap controller ip

Lemme know if this helps

Regards
Surendra

[Leo Laohoo]

*Mar  1 00:14:00.963: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Mar  6 01:49:22.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i

Time and date on the WLC is possibly incorrect (as Surendra's initial post).

How many APs can your WLC support and how many APs are currently joined?

1.  Power down the AP.

2.  Attach a console cable into the AP.

3.  Power up the AP.

Post EVERYTHING from power up all the way to the joining request/denied process.

[Abinaya R]

Hi..

Thankyou for the replies..

Its now working when i enabled the accept self signed certificate in the AP policies.

[dmantill]

1142 uses MIC or SSC? :-s

I think is MIC isnt it? so how should it affect on accepting SSC ?