Solved: Re: AP not Joining WLC 2106

ManafAlKadhar71884 · ‎11-14-2019

Greetings all,

I have WLC 2106 8x ports with POE (2x ports only) and AP1142, both are US domain, and the AP is not joining although I can see on the loges (both nodes) hence, there is communication between them and from the AP I see the following logs:

NOTE: WLC IP 192.168.1.240 and AP .241 (LWAPP ) then I set static IP address for CAPWAP .241 all IP's on /24.

*Nov 13 22:48:00.041: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov 13 22:48:00.042: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov 13 22:48:00.063: %CAPWAP-5-STATIC_TO_DHCP_IP: Could not discover WLC using static IP. Forcing AP to use DHCP.

*Nov 13 22:48:13.078: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Nov 13 22:48:13.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.240 peer_port: 5246

*Nov 13 22:48:13.000: %CAPWAP-5-CHANGED: CAPWAP changed state to

APc84c.75a9.a095#

*Nov 13 22:48:42.999: DTLS_CLIENT_ERROR: ../dtls/dtls_connection_db.c:2015 Max retransmission count reached!

*Nov 13 22:48:42.999: %DTLS-3-HANDSHAKE_RETRANSMIT: Max retransmit count for 192.168.1.240 is reached.

*Nov 13 22:49:12.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.1.240:5246

*Nov 13 22:49:13.042: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov 13 22:49:23.065: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Nov 13 22:49:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.240 peer_port: 5246

*Nov 13 22:49:23.000: %CAPWAP-5-CHANGED: CAPWAP changed state to

*Nov 13 22:49:52.999: DTLS_CLIENT_ERROR: ../dtls/dtls_connection_db.c:2015 Max retransmission count reached!

*Nov 13 22:49:52.999: %DTLS-3-HANDSHAKE_RETRANSMIT: Max retransmit count for 192.168.1.240 is reached.

*Nov 13 22:50:22.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.1.240:5246

*Nov 13 22:50:23.043: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov 13 22:50:33.067: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Nov 13 22:50:33.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.240 peer_port: 5246

*Nov 13 22:50:33.000: %CAPWAP-5-CHANGED: CAPWAP changed state to

*Nov 13 22:51:02.999: DTLS_CLIENT_ERROR: ../dtls/dtls_connection_db.c:2015 Max retransmission count reached!

*Nov 13 22:51:02.999: %DTLS-3-HANDSHAKE_RETRANSMIT: Max retransmit count for 192.168.1.240 is reached.

*Nov 13 22:51:32.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.1.240:5246

*Nov 13 22:51:33.042: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov 13 22:51:43.065: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Nov 13 22:51:43.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.240 peer_port: 5246

I tried the following on the controller:

(Cisco Controller) config>ap lifetime-check mic enable

(Cisco Controller) config>ap lifetime-check ssc enable

still same issue. any ideas how do I get red of this issue ?

Thanks in advance.

Rasika Nayanajith · ‎11-14-2019

Pls "show time" "show sysinfo" from your WLC. Also "show ver" from your AP

HTH

Rasika

View solution in original post

Rasika Nayanajith · ‎11-14-2019

Try below command as explained in given Field Notice

https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html

(WLC)>config ap lifetime-check {mic|ssc} enable

HTH

Rasika

View solution in original post

Rasika Nayanajith · ‎11-14-2019

Pls "show time" "show sysinfo" from your WLC. Also "show ver" from your AP

HTH

Rasika

ManafAlKadhar71884 · ‎11-14-2019

Hello, Thanks for taking the time to look into this, please see the output here:

(Cisco Controller) >show time

Time............................................. Thu Nov 14 16:44:48 2019

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
NTP Polling Interval......................... 3600

Index NTP Key Index NTP Server NTP Msg Auth Status
------- ---------------------------------------------------------------
2 0 216.239.35.12 AUTH DISABLED

(Cisco Controller) >

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.0.252.0
RTOS Version..................................... 7.0.252.0
Bootloader Version............................... 4.0.191.0
Emergency Image Version.......................... 7.0.252.0
Build Type....................................... DATA + WPS

System Name...................................... WLC-Home
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.828
IP Address....................................... 192.168.1.230
System Up Time................................... 0 days 0 hrs 5 mins 56 secs
System Timezone Location.........................

Configured Country............................... US - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +37 C

--More-- or (q)uit
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 2
Number of Active Clients......................... 0

Burned-in MAC Address............................ 00:1E:13:50:DA:00
Maximum number of APs supported.................. 6

(Cisco Controller) >

APc84c.75a9.a095#sh ver
Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 12.4(21a)JHB1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Wed 11-Aug-10 15:45 by prod_rel_team

ROM: Bootstrap program is C1140 boot loader
BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(18a)JA3, RELEASE SOFTWARE (fc1)

APc84c.75a9.a095 uptime is 1 minute
System returned to ROM by power-on
System image file is "flash:/c1140-k9w8-mx.124-21a.JHB1/c1140-k9w8-mx.124-21a.JHB1"

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-LAP1142N-A-K9 (PowerPC405ex) processor (revision B0) with 98294K/32768K bytes of memory.
Processor board ID FTX1426K3AG
PowerPC405ex CPU at 586Mhz, revision number 0x147E
Last reset from power-on
LWAPP image version 6.0.199.4
1 Gigabit Ethernet interface
2 802.11 Radio(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: C8:4C:75:A9:A0:95
Part Number : 73-11451-08
PCA Assembly Number : 800-30554-06
PCA Revision Number : A0
PCB Serial Number : FOC14242M56
Top Assembly Part Number : 800-31273-04
Top Assembly Serial Number : FTX1426K3AG
Top Revision Number : A0
Product/Model Number : AIR-LAP1142N-A-K9

Configuration register is 0xF

Rasika Nayanajith · ‎11-14-2019

Try below command as explained in given Field Notice

https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html

(WLC)>config ap lifetime-check {mic|ssc} enable

HTH

Rasika

ManafAlKadhar71884 · ‎11-14-2019

Thanks for your help from the show commands, I can see its time related issue, the WLC running ver 7.0 (its old WLC and cant be upgraded to 8.x), the other issue the AP running ver 15 (Latest), so I had two issues software compatibility and the time, I set the WLC to 2018 and the ap to 2018 (by factory reset) then the ap joined the wlc and downgraded the software to v12.

Thanks again.

Regards,

Manaf

Rasika Nayanajith · ‎11-14-2019

Good to hear that issue got resolve with time update.

Rasika