cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1864
Views
0
Helpful
5
Replies

New AP Unable to Join Controller - Invalid License in configuration request error

jasonrule
Level 1
Level 1

We have two WLC 2504s in production with software version 8.2.170.0.  We just purchased an addition 2702 AP and I successfully joined it to the one WLC. However, I needed to install the AP on a different subnet then the one I configured it on (the WLC is available to both subnets).  However, once I moved the AP to the other subnet it would not join the controller.  I reset the AP several times. I even tried to join it again on the subnet I originally configured it on but it will not join.  It will download the updated software but when it tries to join I just keep getting the error "Invalid License in configuration request".  

 

The Country code is correct and the time on the WLC is current.

 

Any other ideas as to what is wrong here?

1 Accepted Solution

Accepted Solutions

The solution was to reset the controller using the cli:  I ran the following commands.

debug capwap console cli

erase /all nvram:

undebug all

reload

clear capwap private-config

 

Using the MODE button or just erasing/reloading the nvram would not fix it.  It was only after I also ran clear capwap private-config was the AP able to join the controller.

 

Thanks for your help!

View solution in original post

5 Replies 5

balaji.bandi
Hall of Fame
Hall of Fame

So the question here is you mentioned that the first subnet always works on your both AP join Controller?

Seconds subnet you having issue joining controller? 

 

1. i would look the DHCP Option for both the subnet/

2. connect console cable and post complete boot process here to understand what is wrong.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Thank you for the reply. I am using DHCP option 43 and that seems to work fine. The AP finds the WLC. Here is the boot process and how it just keeps failing to join. 

 

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.11.05 16:38:15 =~=~=~=~=~=~=~=~=~=~=~=

 

IOS Bootloader - Starting system.

flash is writable

Antigua Board

40MB format

Tide XL MB - 40MB of flash

Xmodem file system is available.

flashfs[0]: 80 files, 9 directories

flashfs[0]: 0 orphaned files, 0 orphaned directories

flashfs[0]: Total bytes: 41158656

flashfs[0]: Bytes used: 20222976

flashfs[0]: Bytes available: 20935680

flashfs[0]: flashfs fsck took 10 seconds.

Base Ethernet MAC address: e4:aa:5d:1a:bc:f4

Ethernet speed is 1000 Mb - FULL Duplex

Loading "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-mx.153-3.JC15"...#########################
 

File "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-mx.153-3.JC15" uncompressed and installed, entry point: 0x2003000

executing...
 

Secondary Bootloader - Starting system.

Antigua Board Pre-Pilot

40MB format

Tide XL MB - 40MB of flash

Xmodem file system is available.

flashfs[0]: 80 files, 9 directories

flashfs[0]: 0 orphaned files, 0 orphaned directories

flashfs[0]: Total bytes: 41158656

flashfs[0]: Bytes used: 20222976

flashfs[0]: Bytes available: 20935680

flashfs[0]: flashfs fsck took 11 seconds.

flashfs[1]: 0 files, 1 directories

flashfs[1]: 0 orphaned files, 0 orphaned directories

flashfs[1]: Total bytes: 12257280

flashfs[1]: Bytes used: 1024

flashfs[1]: Bytes available: 12256256

flashfs[1]: flashfs fsck took 0 seconds.

Base Ethernet MAC address: e4:aa:5d:1a:bc:f4

Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-xx.153-3.JC15;flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx'

Loading "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-xx.153-3.JC15"...################################################

File "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-xx.153-3.JC15" uncompressed and installed, entry point: 0x1003000

executing...
 

 

              Restricted Rights Legend

 

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph

(c) of the Commercial Computer Software - Restricted

Rights clause at FAR sec. 52.227-19 and subparagraph

(c) (1) (ii) of the Rights in Technical Data and Computer

Software clause at DFARS sec. 252.227-7013.

 

           cisco Systems, Inc.

           170 West Tasman Drive

           San Jose, California 95134-1706

 

 

 

Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JC15, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2018 by Cisco Systems, Inc.

Compiled Thu 07-Jun-18 16:43 by prod_rel_team

 

Antigua Board Pre-Pilot

40MB format

Tide XL MB - 40MB of flash

Initializing flashfs...

 

flashfs[2]: 80 files, 9 directories

flashfs[2]: 0 orphaned files, 0 orphaned directories

flashfs[2]: Total bytes: 40900608

flashfs[2]: Bytes used: 20222976

flashfs[2]: Bytes available: 20677632

flashfs[2]: flashfs fsck took 12 seconds.

flashfs[2]: Initialization complete.

flashfs[4]: 0 files, 1 directories

flashfs[4]: 0 orphaned files, 0 orphaned directories

flashfs[4]: Total bytes: 11999232

flashfs[4]: Bytes used: 1024

flashfs[4]: Bytes available: 11998208

flashfs[4]: flashfs fsck took 0 seconds.

flashfs[4]: Initialization complete.

Copying radio files from flash: to ram:

Copy in progress...CCCCC

Copy in progress...CCC

Copy in progress...CCCC

Copy in progress...CCCC

Copy in progress...CC

Copy in progress...CC

Copy in progress...CCCC

Copy in progress...CC

Copy in progress...CCCCCC

Copy in progress...CCCC

Copy in progress...CC

Uncompressing radio files...

...done Initializing flashfs.

 

Radio0  present 8764 8000 0 A8000000 A8010000 0

Rate table has 650 entries (20 legacy/224 11n/406 11ac)

 

POWER TABLE FILENAME = ram:/U2.bin

 

Radio1  present 8864 8000 0 80000000 80100000 4

POWER TABLE FILENAME = ram:/U5.bin

 

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

 

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

 

If you require further assistance please contact us by sending email to

export@cisco.com.

 

cisco AIR-AP2702I-UXK9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.

Processor board ID FCW1939NA33

PowerPC CPU at 800Mhz, revision number 0x2151

Last reset from power-on

LWAPP image version 8.2.170.0

Access Point Type: World Mode

1 Gigabit Ethernet interface

2 802.11 Radios

 

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: E4:AA:5D:1A:BC:F4

Part Number                          : 73-15824-03

PCB Serial Number                    : @@@@@@@@@@@

Top Assembly Part Number             : 068-100395-01

Top Assembly Serial Number           :@@@@@@@@@@@

Top Revision Number                  : A0

Product/Model Number                 : AIR-AP2702I-UXK9   

% Please define a domain-name first.

 

 

Press RETURN to get started!

 

 

*Mar  1 00:00:17.079: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)

*Mar  1 00:00:17.543: Registering HW DTLS

 

*Mar  1 00:00:17.547: APAVC: Initial WLAN Buffers Given to System is  2500

 

*Mar  1 00:00:17.595: APAVC:  WlanPAKs 42878 RadioPaks  42270

 

*Mar  1 00:00:17.595: Starting Ethernet promiscuous mode

*Mar  1 00:00:19.915: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up

*Mar  1 00:00:19.915: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up

*Mar  1 00:00:22.419: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)

*Mar  1 00:00:22.531: loading Power Tables from ram:/U2.bin. Class = A

*Mar  1 00:00:22.535:  record size of 3ss: 1168 read_ptr: 4DE257E

 

*Mar  1 00:00:27.695: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)

*Mar  1 00:00:27.743: loading Power Tables from ram:/U5.bin. Class = B

*Mar  1 00:00:27.775:  record size of vht: 2904 read_ptr: 4DE257E

 

*Mar  1 00:00:27.899: Wait until the stile protocol list is initialized.

 

*Mar  1 00:00:29.147: Start STILE Activation

 

*Mar  1 00:00:30.919: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down

*Mar  1 00:00:30.919: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to down

*Mar  1 00:00:31.951: %SYS-5-RESTART: System restarted --

Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JC15, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2018 by Cisco Systems, Inc.

Compiled Thu 07-Jun-18 16:43 by prod_rel_team

*Mar  1 00:00:31.955: %SNMP-5-COLDSTART: SNMP agent on host Penpub-AP01 is undergoing a cold start

*Mar  1 00:00:33.139: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up

*Mar  1 00:00:33.967: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source

*Mar  1 00:00:34.179: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable statelwapp_crypto_init: MIC Present and Parsed Successfully

 

*Mar  1 00:00:34.339: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Mar  1 00:00:34.339: %SSH-5-ENABLED: SSH 2.0 has been enabled

*Mar  1 00:00:35.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Mar  1 00:00:36.027: %LINK-5-CHANGED: Interface GigabitEthernet1, changed state to administratively down

*Mar  1 00:00:44.187: %LINK-6-UPDOWN: Interface BVI1, changed state to down

*Mar  1 00:00:45.187: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down

*Mar  1 00:00:46.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up

*Mar  1 00:00:46.947: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)

*Mar  1 00:00:46.947: DPAA Initialization Complete

*Mar  1 00:00:46.947: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited

*Mar  1 00:00:48.951: %LINK-6-UPDOWN: Interface BVI1, changed state to up

*Mar  1 00:00:49.959: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up

*Mar  1 00:00:50.399: Currently running a Release Image

 

*Mar  1 00:00:50.619: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.40.1.145, mask 255.255.255.0, hostname Penpub-AP01

 

*Mar  1 00:00:50.819: Using SHA-2 signed certificate for image signing validation.

*Mar  1 00:00:57.631: APAVC: Succeeded to activate all the STILE protocols.

 

*Mar  1 00:00:57.631: APAVC: Registering with CFT

 

*Mar  1 00:00:57.631: APAVC: CFT registration of delete callback succeeded

 

*Mar  1 00:00:57.631: APAVC: Reattaching  Original Buffer pool for system use

 

*Mar  1 00:00:57.631: Pool-ReAtach: paks 42878 radio42270

%Default route without gateway, if not a point-to-point interface, may impact performance

*Mar  1 00:01:05.387: AP image integrity check PASSED

 

*Mar  1 00:01:05.395: Non-recovery image. PNP Not required.

 

*Mar  1 00:01:05.403: Cert ISSUER (39): cn=Cisco Manufacturing CA SHA2,o=Cisco

 

*Mar  1 00:01:05.427: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Mar  1 00:01:05.427: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset

*Mar  1 00:01:06.427: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down

%Error opening flash:/capwap-saved-config (No such file or directory)

capwap ap unencrypted_data_keep_alive enable

          ^

% Invalid input detected at '^' marker.

 

capwap ap ble-adv-power 0

          ^

% Invalid input detected at '^' marker.

 

*Mar  1 00:01:15.439: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 0 CLI Request Triggered

*Mar  1 00:01:16.439: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 started - CLI initiated%No matching route to delete

*Mar  1 00:01:23.635: %CDP_PD-4-POWER_OK: 15.4 W power - INJECTOR_DETECTED_PD inline power source

Translating "CISCO-CAPWAP-CONTROLLER.@@@@@@@@.com"...domain server (10.40.1.40)

*Mar  1 00:01:24.747: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Mar  1 00:01:25.747: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

 

*Mar  1 00:01:26.443: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.40.1.50 obtained through DHCP

*Mar  1 00:01:37.447: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

 

*Nov  5 22:40:27.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.40.1.50 peer_port: 5246

*Nov  5 22:40:27.347: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.40.1.50 peer_port: 5246

*Nov  5 22:40:27.347: %CAPWAP-5-SENDJOIN: sending Join Request to 10.40.1.50

*Nov  5 22:40:45.699: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.40.1.50:5246

*Nov  5 22:40:45.827: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source

*Nov  5 22:40:45.839: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Nov  5 22:40:45.839: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down

*Nov  5 22:40:45.839: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state

*Nov  5 22:40:45.867: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Nov  5 22:40:46.851: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Nov  5 22:40:47.871: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Nov  5 22:40:47.879: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down

*Nov  5 22:40:47.887: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Nov  5 22:40:48.879: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Nov  5 22:40:48.907: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Nov  5 22:40:49.907: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Nov  5 22:40:55.867: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

 

*Nov  5 22:40:55.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.40.1.50 peer_port: 5246

*Nov  5 22:40:55.347: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.40.1.50 peer_port: 5246

*Nov  5 22:40:55.347: %CAPWAP-5-SENDJOIN: sending Join Request to 10.40.1.50

*Nov  5 22:41:13.431: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.40.1.50:5246

*Nov  5 22:41:13.555: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source

*Nov  5 22:41:13.567: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Nov  5 22:41:13.567: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state

*Nov  5 22:41:13.591: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Nov  5 22:41:14.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Nov  5 22:41:15.591: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Nov  5 22:41:15.599: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down

*Nov  5 22:41:15.607: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Nov  5 22:41:16.599: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Nov  5 22:41:16.627: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Nov  5 22:41:17.627: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Nov  5 22:41:23.587: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

 

*Nov  5 22:41:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.40.1.50 peer_port: 5246

*Nov  5 22:41:24.347: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.40.1.50 peer_port: 5246

*Nov  5 22:41:24.347: %CAPWAP-5-SENDJOIN: sending Join Request to 10.40.1.50

*Nov  5 22:41:42.431: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.40.1.50:5246

*Nov  5 22:41:42.555: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source

*Nov  5 22:41:42.567: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Nov  5 22:41:42.571: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state

*Nov  5 22:41:42.591: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Nov  5 22:41:43.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Nov  5 22:41:44.591: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Nov  5 22:41:44.599: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down

 

HaifengLi
Cisco Employee
Cisco Employee

I think this is related to the country code.

The Country Code is set to United States on both WLCs.  The strange thing is that the AP initially joined. I configured it in my office which is in a different building and a different subnet.  I then took it over to the building to install it and when I installed it it wouldn't join.  So I reset it several times and still cannot get it to join in my office or the other building.

The solution was to reset the controller using the cli:  I ran the following commands.

debug capwap console cli

erase /all nvram:

undebug all

reload

clear capwap private-config

 

Using the MODE button or just erasing/reloading the nvram would not fix it.  It was only after I also ran clear capwap private-config was the AP able to join the controller.

 

Thanks for your help!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: