We have installed the related patches. We see the issue happens when the user perform a login it use MSCHAP instead of the TLS ... View more

Ensure that under: Security -> AAA -> AP Policies you do not have any MAC addresses of your APs defined. If you are using Prime to manage your environment ensure that there is only a MIC for Prime defined.   Ok, I will try.   By default you CAPWAP configuration is set to local for all APs? Correct ... View more

Hi Scott, Thank you for the replay.   Yes we are using power-injectors.   Regarding the WLC and the AP in the same segment will try it tomorrow.   I didn't deleted the old images, just performed archive sw-update /reload tftp://<tftp>/<software. I will try to delete it.   Thanks! ... View more

Hi, Yes it a brand new AP. I've downloaded the software and didn't helped.   ap3g3-k9w8-tar.153-3.JF4.tar for WLC: 8.5.110.0   Do you mean the authorization? ... View more

Thanks, Did it, didn't helped.   Here is the AP logs: BootROM - 1.78 Booting from SPI flash, Secure mode BootROM: RSA Public key verification PASSED BootROM: CSK block signature verification PASSED BootROM: Boot header signature verification PASSED BootROM: Box ID verification PASSED BootROM: JTAG is disabled General initialization - Version: 1.0.0 Detected Device ID 6920 Master bootloder version 1.1e High speed PHY - Version: 2.0 BoardId = 0x23board SerDes lanes topology details:  | Lane # | Speed|    Type     |  ------------------------------|  |   1    |  0   |  SGMII1     |  |   2    |  5   |  PCIe1      |  |   4    |  5   |  PCIe2      |  ------------------------------- :** Link is Gen1, check the EP capability PCIe, Idx 1: Link upgraded to Gen2 based on client cpabilities :** Link is Gen1, check the EP capability PCIe, Idx 2: Link upgraded to Gen2 based on client cpabilities High speed PHY - Ended Successfully DDR4 Training Sequence - Ver TIP-0.23.(Sublib 0.8)0 DDR4 Training Sequence - Switching XBAR Window to FastPath Window DDR4 Training Sequence - Ended Successfully BootROM: Image checksum verification PASSED BootROM: Boot image signature verification PASSED   ____  _  / ___|(_) ___   ___  ___ | |    | |/ __| / __|/ _ \ | |___ | |\__ \| (__| (_) |  \____||_||___/ \___|\___/          _   _     ____              _         | | | |   | __ )  ___   ___ | |_         | | | |___|  _ \ / _ \ / _ \| __|         | |_| |___| |_) | (_) | (_) | |_          \___/    |____/ \___/ \___/ \__|  ** LOADER ** U-Boot 2013.01-gad8bd06 (Sep 28 2017 - 17:03:04) SDK version: 2015_T2.0p10 Board: Milos SoC:   MV88F6920 Rev A1        running 2 CPUs CPU:   ARM Cortex A9 MPCore (Rev 1) LE        CPU 0        CPU    @ 1800 [MHz]        L2     @ 900 [MHz]        TClock @ 250 [MHz]        DDR4    @ 900 [MHz]        DDR4 32 Bit Width,FastPath Memory Access, DLB Enabled, ECC Disabled DRAM:  1 GiB NAND:  256 MiB SF: Detected N25Q32A with page size 64 KiB, total 4 MiB PCI-e 1 (IF 0 - bus 0) Root Complex Interface, Detected Link X1, GEN 2.0 PCI-e 2 (IF 1 - bus 1) Root Complex Interface, Detected Link X1, GEN 2.0 Map:   Code:                    0x3feda000:0x3ffae0f4        BSS:                     0x3ffefb9c        Stack:                   0x3f9c9f20        Heap:                    0x3f9ca000:0x3feda000        U-Boot Environment:      0x00100000:0x00110000 (SPI) Board configuration: |  port  | Interface  | PHY address  | |--------|------------|--------------| | egiga1 |   SGMII    |     0x01     | SFP not detected, enable RJ45 Net:   , egiga1 [PRIME] Hit ESC key to stop autoboot:  0 Creating 1 MTD partitions on "nand0": 0x000000200000-0x000010000000 : "mtd=2" UBI: attaching mtd1 to ubi0 UBIFS: mounted UBI device 0, volume 0, name "part1" Loading file 'part1/part.bin' to addr 0x02000000 with size 40517505 (0x026a3f81)... Done SF: Detected N25Q32A with page size 64 KiB, total 4 MiB Checking image signing. Image signing verification success, continue to run... ## Booting kernel from Legacy Image at 02000000 ...    Image Name:   Barbados Firmware Image    Created:      2017-12-10   0:11:33 UTC    Image Type:   ARM Linux Multi-File Image (uncompressed)    Data Size:    40516497 Bytes = 38.6 MiB    Load Address: 00008000    Entry Point:  00008000    Contents:       Image 0: 4039952 Bytes = 3.9 MiB       Image 1: 36460764 Bytes = 34.8 MiB       Image 2: 15765 Bytes = 15.4 KiB    Verifying Checksum ... OK ## Loading init Ramdisk from multi component Legacy Image at 02000000 ... ## Flattened Device Tree from multi component Image at 02000000    Booting using the fdt at 0x0469fe3c    Loading Multi-File Image ... OK OK    reserving fdt memory region: addr=0 size=4000    Loading Device Tree to 01ff9000, end 01fffd94 ... OK    Starting Device Tree update ('fdt_skip_update' = no) Limit DDR size at 3GB due to power of 2 requirement of Address decoding Updating device tree successful Starting kernel ... [01/01/1970 00:00:00.0000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 260096 [01/01/1970 00:00:00.0000] Memory: 992572K/1048576K available (5460K kernel code, 398K rwdata, 2508K rodata, 351K init, 465K bss, 56004K reserved) [01/01/1970 00:00:00.1200] CPU1: Booted secondary processor [01/01/1970 00:00:09.0900] buginf tty flushing thread started, ttyport=bf321400 [01/01/1970 00:00:09.2100] m25p80 spi1.0: found n25q032a, expected n25q032 [01/01/1970 00:00:09.5400] lp5521 0-0030: device detection err: -6 [01/01/1970 00:00:10.3900] UBI warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling, reserved 20, need 32 [*01/01/1970 00:00:10.5380] buginf() enabled. [*01/01/1970 00:00:10.5466] Made it into bootsh: Dec  9 2017 16:06:11 [*01/01/1970 00:00:10.5468] bootsh build T-118852831bb63bae45af6571e695356c7ed45a15-g11885283-vipendya [*01/01/1970 00:00:10.5468] bootsh mini ramfs booted [*01/01/1970 00:00:17.9698] 250402 blocks Welcome to Cisco. Usage of this device is governed by Cisco's End User License Agreement, available at: http://www.cisco.com/c/en/us/td/docs/general/warranty/English/EU1KEN_.html.              Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.             Cisco Systems, Inc.             170 West Tasman Drive             San Jose, California 95134-1706 This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. This product contains some software licensed under the "GNU General Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/gpl-2.0.html This product contains some software licensed under the "GNU Library General Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Library General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html This product contains some software licensed under the "GNU Lesser General Public License, version 2.1" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser General Public License, version 2.1", available here: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html This product contains some software licensed under the "GNU General Public License, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of   "GNU General Public License, Version 3", available here: http://www.gnu.org/licenses/gpl.html. This product contains some software licensed under the "GNU Affero General Public License, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Affero General Public License, version 3", available here: http://www.gnu.org/licenses/agpl-3.0.html. init started: BusyBox v1.23.2 (2017-12-09 15:41:24 PST) Jan  1 00:00:21 FIPS[1268]: *** shell: FIPS Mode = disabled *** User Access Verification Username: [*01/01/1970 00:00:23.9716] [*01/01/1970 00:00:23.9716] [*01/01/1970 00:00:23.9716] [*01/01/1970 00:00:23.9716] [*01/01/1970 00:00:23.9716] Authenticating ACT2 ID:AP1560               [*01/01/1970 00:00:23.9716] Authenticating SN:FOC21472TCQ [*01/01/1970 00:00:23.9721] [*01/01/1970 00:00:23.9721] (ACT2Boot) Hardware is Cisco (c) authentic :-) [*01/01/1970 00:00:23.9721] [*01/01/1970 00:00:23.9753] Seeding /dev/urandom from ACT2 [*01/01/1970 00:00:25.4877] Reading ACT2 SUDI certificates [*12/08/2017 23:59:59.0066] Last reload time: Dec 9 03:23:24 2017 [*12/09/2017 16:06:52.0001] Setting system time Sat Dec  9 16:06:52 UTC 2017 [*12/09/2017 16:06:52.1156] Loading kernel crypto modules [*12/09/2017 16:06:52.2402] GCM-128 POST passed [*12/09/2017 16:06:52.2404] GCM-256 POST passed [*12/09/2017 16:06:52.4145] Active version: 8.5.110.0 [*12/09/2017 16:06:52.4158] Backup version: 8.3.133.0 [*12/09/2017 16:[12/09/2017 16:06:52.5700] PCI: enabling device 0000:00:02.0 (0140 -> 0143) 06:52.5624] devi[12/09/2017 16:06:52.6500] PCI: enabling device 0000:02:00.0 (0140 -> 0142) ce wired0 entered promiscuous mode [*12/09/2017 16:06:54.0564] 0;0;0;0;0;0;0; [*12/09/2017 16:06:55.6174] Firmware download complete [*12/09/2017 16:06:55.6183] FIPS enc aes-ccmp Verified [*12/09/2017 16:06:55.6184] FIPS dec aes-ccmp [12/09/2017 16:06:55.7600] PCI: enabling device 0000:00:03.0 (0140 -> 0143) Verified [*12/0[12/09/2017 16:06:55.8600] PCI: enabling device 0000:03:00.0 (0140 -> 0142) 9/2017 16:06:55.6185] FIPS enc aes-ccmp-256 Verified [*12/09/2017 16:06:55.6186] FIPS dec aes-ccmp-256 Verified [*12/09/2017 16:06:55.6187] FIPS enc aes-gcmp Verified [*12/09/2017 16:06:55.6188] FIPS dec aes-gcmp Verified [*12/09/2017 16:06:55.6189] FIPS enc aes-gcmp-256 Verified [*12/09/2017 16:06:55.6190] FIPS dec aes-gcmp-256 Verified [*12/09/2017 16:06:57.2604] 0;0;0;0;0;0;0;0;0;0;0;0;0;0;0;0;0; [*12/09/2017 16:07:01.5566] Firmware download complete [*12/09/2017 16:07:01.5573] FIPS enc aes-ccmp Verified [*12/09/2017 16:07:01.5575] FIPS dec aes-ccmp Verified [*12/09/2017 16:07:01.5576] FIPS enc aes-ccmp-256 Verified [*12/09/2017 16:07:01.5577] FIPS dec aes-ccmp-256 Verified [*12/09/2017 16:07:01.5578] FIPS enc aes-gcmp Verified [*12/09/2017 16:07:01.5579] FIPS dec aes-gcmp Verified [*12/09/2017 16:07:01.5580] FIPS enc aes-gcmp-256 Verified [*12/09/2017 16:07:01.5581] FIPS dec aes-gcmp-256 Verified [*12/09/2017 16:07:02.0387] ifconfig: SIOCGIFFLAGS: No such device [*12/09/2017 16:07:02.1570] Initializing NSS Firmware [12/09/2017 16:07:05.3100] Disabling lock debugging due to kernel taint [*12/09/2017 16:07:05.4092] stile module dp init successfully [*12/09/2017 16:07:05.4093] NBAR Label:BLD_MCP_DEV_LATEST_20150424_123021 NBAR VERSION:module build date: Dec  9 2017 at 16:02:45 [*12/09/2017 16:07:06.9241] Loading nf_conntrack... [*12/09/2017 16:07:06.9429] Loading nf_conntrack_ftp... [*12/09/2017 16:07:06.9545] Loading nf_defrag_ipv4... [*12/09/2017 16:07:06.9661] Loading nf_defrag_ipv6... [*12/09/2017 16:07:06.9776] Loading nf_conntrack_ipv4... [*12/09/2017 16:07:06.9891] Loading nf_conntrack_ipv6... [*12/09/2017 16:07:07.0008] Loading nf_conntrack_irc... [*12/09/2017 16:07:07.0122] Loading nfnetlink... [*12/09/2017 16:07:07.0239] Loading nf_conntrack_netlink... [*12/09/2017 16:07:07.0357] Loading nf_conntrack_sip... [*12/09/2017 16:07:07.0477] Loading nf_nat... [*12/09/2017 16:07:07.0593] Loading nf_nat_ftp... [*12/09/2017 16:07:07.0709] Loading nf_nat_ipv4... [*12/09/2017 16:07:07.0823] Loading nf_nat_irc... [*12/09/2017 16:07:07.0939] Loading nf_nat_sip... [*12/09/2017 16:07:07.1053] Loading x_tables... [*12/09/2017 16:07:07.1171] Loading xt_conntrack... [*12/09/2017 16:07:07.1286] Loading xt_state... [*12/09/2017 16:07:07.1402] Loading xt_nat... [*12/09/2017 16:07:07.1519] Loading xt_tcpudp... [*12/09/2017 16:07:07.1636] Loading ip_tables... [*12/09/2017 16:07:07.1755] Loading iptable_filter... [*12/09/2017 16:07:07.1871] Loading iptable_mangle... [*12/09/2017 16:07:07.1985] Loading iptable_nat... [*12/09/2017 16:07:07.2101] Loading ip6_tables... [*12/09/2017 16:07:07.2220] Loading ip6t_REJECT... [*12/09/2017 16:07:07.2337] Loading ip6t_ipv6header... [*12/09/2017 16:07:07.2454] Loading ip6table_filter... [*12/09/2017 16:07:07.2571] Loading ip6table_mangle... [*12/09/2017 16:07:07.2688] Loading ipt_MASQUERADE... [*12/09/2017 16:07:07.2806] Loading ipt_REJECT... [*12/09/2017 16:07:07.2922] Loading iptable_raw... [*12/09/2017 16:07:07.3040] Loading ip6table_raw... [*12/09/2017 16:07:07.3157] Loading bridge... [*12/09/2017 16:07:07.3319] Loading nfnetlink_log... [*12/09/2017 16:07:07.3437] Loading xt_mark... [*12/09/2017 16:07:07.3555] Loading xt_policy... [*12/09/2017 16:07:07.3673] xt_tcpudp is already loaded [*12/09/2017 16:07:07.3673] Loading ebtables... [*12/09/2017 16:07:07.3791] Loading ebt_ip... [*12/09/2017 16:07:07.3911] Loading ebt_ip6... [*12/09/2017 16:07:07[12/09/2017 16:07:09.1800] wired0 emac 1: link up .4027] Loading i[12/09/2017 16:07:09.2400] wired0: link up pt_ULOG... [*12/09/2017 16:07:07.5544] [*12/09/2017 16:07:07.5583] boot 27 build T-118852831bb63bae45af6571e695356c7ed45a15-g11885283-vipendya board barbados mac A0:23:9F:A9:E0:FA [*12/09/2017 16:07:07.5618] Module: act2_driver  .text=0x7f000000        data=0x7f000770        bss=0x7f000a04 [*12/09/2017 16:07:07.5618] Module: aes_generic  .text=0x7f004000        data=0x7f00a460        bss= [*12/09/2017 16:07:07.5618] Module: sha256_generic  .text=0x7f00e000        data=0x7f00fbdc        bss= [*12/09/2017 16:07:07.5618] Module: sha512_generic  .text=0x7f014000        data=0x7f0158c8        bss= [*12/09/2017 16:07:07.5618] Module: hmac  .text=0x7f019000        data=0x7f0195e8        bss= [*12/09/2017 16:07:07.5618] Module: sha1_generic  .text=0x7f01d000        data=0x7f01d2cc        bss= [*12/09/2017 16:07:07.5618] Module: sha1_arm  .text=0x7f021000        data=0x7f021850        bss= [*12/09/2017 16:07:07.5618] Module: gf128mul  .text=0x7f025000        data=        bss= [*12/09/2017 16:07:07.5618] Module: cbc  .text=0x7f02a000        data=0x7f02a4f4        bss= [*12/09/2017 16:07:07.5618] Module: ctr  .text=0x7f02e000        data=0x7f02e7c8        bss= [*12/09/2017 16:07:07.5618] Module: ghash_generic  .text=0x7f032000        data=0x7f032268        bss= [*12/09/2017 16:07:07.5618] Module: seqiv  .text=0x7f036000        data=0x7f036654        bss= [*12/09/2017 16:07:07.5618] Module: mbedtls  .text=0x7f03a000        data=0x7f0415e0        bss=0x7f041850 [*12/09/2017 16:07:07.5618] Module: aptrace  .text=0x7f046000        data=0x7f051f84        bss=0x7f052470 [*12/09/2017 16:07:07.5619] Module: ap8x  .text=0x7f05a000        data=0x7f10b074        bss=0x7f1129b4 [*12/09/2017 16:07:07.5619] Module: mv_nss_api  .text=0x7f303000        data=0x7f351cd8        bss=0x7f3530e8 [*12/09/2017 16:07:07.5619] Module: proclikefs  .text=0x7f364000        data=        bss=0x7f364b80 [*12/09/2017 16:07:07.5619] Module: stile_lm_ft  .text=        data=        bss= [*12/09/2017 16:07:07.5619] Module: stile_lm_dp  .text=        data=        bss= [*12/09/2017 16:07:07.5619] Module: mtdoops  .text=0x7fe6c000        data=0x7fe6ce34        bss=0x7fe6cfa8 [*12/09/2017 16:07:07.5619] Module: ipv6  .text=0x7fe71000        data=0x7fea6a40        bss=0x7fea8600 [*12/09/2017 16:07:07.5619] Module: llc  .text=0x7fecf000        data=0x7fecf84c        bss=0x7fecf9e8 [*12/09/2017 16:07:07.5619] Module: stp  .text=0x7fed4000        data=0x7fed4280        bss=0x7fed443c [*12/09/2017 16:07:07.5619] Module: nf_conntrack  .text=0x7fed8000        data=0x7fee1b38        bss=0x7fee2844 [*12/09/2017 16:07:07.5619] Module: nf_conntrack_ftp  .text=0x7fef2000        data=        bss=0x7fef3380 [*12/09/2017 16:07:07.5619] Module: nf_defrag_ipv4  .text=0x7fef7000        data=0x7fef7188        bss= [*12/09/2017 16:07:07.5619] Module: nf_defrag_ipv6  .text=0x7fefb000        data=0x7fefc058        bss=0x7fefc2c0 [*12/09/2017 16:07:07.5619] Module: nf_conntrack_ipv4  .text=0x7ff02000        data=0x7ff03d88        bss=0x7ff04218 [*12/09/2017 16:07:07.5619] Module: nf_conntrack_ipv6  .text=0x7ff0a000        data=0x7ff0b1bc        bss= [*12/09/2017 16:07:07.5619] Module: nf_conntrack_irc  .text=0x7ff10000        data=0x7ff1057c        bss=0x7ff10a24 [*12/09/2017 16:07:07.5619] Module: nfnetlink  .text=0x7ff14000        data=0x7ff14a34        bss=0x7ff14bac [*12/09/2017 16:07:07.5620] Module: nf_conntrack_netlink  .text=0x7ff19000        data=0x7ff1ca5c        bss= [*12/09/2017 16:07:07.5620] Module: nf_conntrack_sip  .text=0x7ff22000        data=        bss=0x7ff25f44 [*12/09/2017 16:07:07.5620] Module: nf_nat  .text=0x7ff2b000        data=0x7ff2cf60        bss=0x7ff2d180 [*12/09/2017 16:07:07.5620] Module: nf_nat_ftp  .text=0x7ff33000        data=0x7ff33320        bss= [*12/09/2017 16:07:07.5620] Module: nf_nat_ipv4  .text=0x7ff37000        data=        bss=0x7ff3791c [*12/09/2017 16:07:07.5620] Module: nf_nat_irc  .text=0x7ff3b000        data=0x7ff3b254        bss= [*12/09/2017 16:07:07.5620] Module: nf_nat_sip  .text=0x7ff3f000        data=0x7ff407d8        bss= [*12/09/2017 16:07:07.5620] Module: x_tables  .text=0x7ff44000        data=0x7ff46184        bss=0x7ff462fc [*12/09/2017 16:07:07.5620] Module: xt_conntrack  .text=0x7ff4d000        data=        bss= [*12/09/2017 16:07:07.5620] Module: xt_state  .text=0x7ff51000        data=        bss= [*12/09/2017 16:07:07.5620] Module: xt_nat  .text=0x7ff55000        data=        bss= [*12/09/2017 16:07:07.5620] Module: xt_tcpudp  .text=0x7ff59000        data=        bss= [*12/09/2017 16:07:07.5620] Module: ip_tables  .text=0x7ff5d000        data=0x7ff5eeb4        bss=0x7ff5f12c [*12/09/2017 16:07:07.5620] Module: iptable_filter  .text=0x7ff63000        data=0x7ff631b0        bss= [*12/09/2017 16:07:07.5620] Module: iptable_mangle  .text=0x7ff67000        data=0x7ff67210        bss= [*12/09/2017 16:07:07.5620] Module: iptable_nat  .text=0x7ff6b000        data=0x7ff6b5bc        bss= [*12/09/2017 16:07:07.5620] Module: ip6_tables  .text=0x7ff6f000        data=0x7ff70f50        bss=0x7ff711c8 [*12/09/2017 16:07:07.5620] Module: ip6t_REJECT  .text=0x7ff75000        data=        bss= [*12/09/2017 16:07:07.5620] Module: ip6t_ipv6header  .text=0x7ff79000        data=        bss= [*12/09/2017 16:07:07.5621] Module: ip6table_filter  .text=0x7ff7d000        data=0x7ff7d174        bss= [*12/09/2017 16:07:07.5621] Module: ip6table_mangle  .text=0x7ff81000        data=0x7f[12/09/2017 16:07:15.0300] wired0 emac 1: link up f81284        bs[12/09/2017 16:07:15.0900] wired0: link up s= [*12/09/2017 16:07:07.5621] Module: ipt_MASQUERADE  .text=0x7ff85000        data=0x7ff852a8        bss= [*12/09/2017 16:07:07.5621] Module: ipt_REJECT  .text=0x7ff89000        data=        bss= [*12/09/2017 16:07:07.5621] Module: iptable_raw  .text=0x7ff8d000        data=0x7ff8d17c        bss= [*12/09/2017 16:07:07.5621] Module: ip6table_raw  .text=0x7ff91000        data=0x7ff91140        bss= [*12/09/2017 16:07:07.5622] Module: bridge  .text=0x7ff95000        data=0x7ffa204c        bss=0x7ffa25a0 [*12/09/2017 16:07:07.5622] Module: nfnetlink_log  .text=0x7ffb1000        data=0x7ffb25e8        bss=0x7ffb27f4 [*12/09/2017 16:07:07.5622] Module: xt_mark  .text=0x7ffb8000        data=        bss= [*12/09/2017 16:07:07.5622] Module: xt_policy  .text=0x7ffbc000        data=        bss= [*12/09/2017 16:07:07.5622] Module: ebtables  .text=0x7ffc0000        data=0x7ffc35ec        bss= [*12/09/2017 16:07:07.5622] Module: ebt_ip  .text=0x7ffc7000        data=        bss= [*12/09/2017 16:07:07.5622] Module: ebt_ip6  .text=0x7ffcb000        data=        bss= [*12/09/2017 16:07:07.5622] Module: ipt_ULOG  .text=0x7ffcf000        data=0x7ffcf8a0        bss= [*12/09/2017 16:07:07.5622] Module: crc_itu_t  .text=0x7ffd3000        data=        bss= [*12/09/2017 16:07:07.5622] Module: lowmemorykiller  .text=0x7ffd7000        data=0x7ffd72f4        bss=0x7ffd74a0 [*12/09/2017 16:07:07.5622] Module: p8022  .text=0x7ffdb000        data=        bss= [*12/09/2017 16:07:07.5622] Module: psnap  .text=0x7ffdf000        data=0x7ffdf344        bss=0x7ffdf4c4 [*12/09/2017 16:07:07.5622] Module: rng_core  .text=0x7ffe3000        data=0x7ffe3818        bss=0x7ffe39d8 [*12/09/2017 16:07:07.5622] Module: udf  .text=0x7ffe7000        data=0x7fff7020        bss=0x7fff719c [*12/09/2017 16:07:07.5930] [*12/09/2017 16:07:07.5930]  led pattern module start [*12/09/2017 16:07:07.6197] milos /tmp/SC4_1dbm.txt [*12/09/2017 16:07:07.7407] Last reload reason : 0: unknown [*12/09/2017 16:07:14.5180] click-config/io-real.click:131: While configuring 'todev_wired0 :: ToDevice': [*12/09/2017 16:07:14.5180]   warning: device 'wired0' is down [*12/09/2017 16:07:14.5391] click-config/io-real.click:131: While configuring 'fromdev_wired0 :: FromDevice': [*12/09/2017 16:07:14.5391]   warning: device 'wired0' is down [*12/09/2017 16:07:15.0008] click-config/io-real.click:131: While initializing 'tohost_wired0 :: ToHost': [*12/09/2017 16:07:15.0008]   warning: device 'wired0' is down [*12/09/2017 16:07:15.1580] aptrace_register_sysproc_fn: duplicate registeration for 'wired' [*12/09/2017 16:07:15.3103] [*12/09/2017 16:07:15.3103] Click sched monitor: schedulers = 1 [*12/09/2017 16:07:15.9765] chatter: tohost_srcr6 :: ToHost: device 'srcr6' went down [*12/09/2017 16:07:15.9856] chatter: tohost_srcr6 :: ToHost: device 'srcr6' came up [*12/09/2017 16:07:15.9861] ip6_port srcr6, ip6local fe80::a223:9fff:fea9:e0fa, ip6 ::, plen 0, gw6 ::, gw6_mac 00:00:00:00:00:00, mtu 1500, vid 0, mode6 3(slaac) [*12/09/2017 16:07:16.2760] SYS-COND: Set radio wifi0 power 6 antenna chain 2 of 3 [*12/09/2017 16:07:16.2760] Error: Socket open failed [*12/09/2017 16:07:16.2760] SYS-COND: Set radio wifi1 power 6 antenna chain 2 of 3 [*12/09/2017 16:07:16.2760] Error: Socket open failed [*12/09/2017 16:07:16.2760] SYS-COND: AP is in fair condition [*12/09/2017 16:07:30.2687]  Create symlink /dev/mic_cert result 0 [*12/09/2017 16:07:30.2687] Loading certificates from storage... [*12/09/2017 16:07:30.2827] SKU to radio FW [*12/09/2017 16:07:30.5820] Generating key, this may take a while... [*12/09/2017 16:07:31.5049] Public key portion is: [*12/09/2017 16:07:31.5049] ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPVycih3qF1PlBl7/cbOXWyd9qVUkjLY2oTVU0Iz9XSPZGCMmZpH55iU4W6m8SNM66BZtFbjXDzIqjxhhaLB1O+QOtG+1OMoL8vi4PptIY9H2GBdPCBFO6jpML08+hhPxGwjRqGh/F15heAxGZlRd3RSDnkdrsRCWJNZe3YhbfFRKmG+bgxvpMiyZCQF2o9p7q9kKlIuGEE5RRqP7jzT7D04C8fUux2VlOl4lTR8Dxdcq+dEm72y29Cu5pEpKbnomNWhFyy3GprhQUiMATcSvlCJgYyMBrQ5tmNaYXtHhbdRgSVr8XHJK5gMMo3D7MD5iHNBdxci72b9ng/OBEbh01 root@mA0239FA9E0FA [*12/09/2017 16:07:31.5049] Fingerprint: md5 30:70:17:18:38:ff:57:10:fb:ee:26:df:02:6c:ba:f1 [*12/09/2017 16:07:31.5164] Starting monit [*12/09/2017 16:07:31.7815]  New Monit id: 786613f80402fc54c6e086f9a54a6b7f [*12/09/2017 16:07:31.7815]  Stored in '/var/.monit.id' [*12/09/2017 16:07:31.7817] Starting Monit 5.18 daemon with http interface at [*]:2812 [*12/09/2017 16:07:35.1735] starting tam services using ACT2... [*12/09/2017 16:07:35.6011] Password for 'Cisco' changed [*12/09/2017 16:07:35.6400] gzip -dc /etc/wcp.usermodule.template.gz | sed -e 's/__TX_POWER_XOR_5G_FILE__/\/radio_fw\/X5.csv/g' -e 's/__EVM_POWER_XOR_5G_FILE__/\/radio_fw\/EVM_X5.csv/g' -e 's/__TX_POWER_2G_FILE__/\/radio_fw\/R2.csv/g' -e 's/__TX_POWER_5G_FILE__/\/radio_fw\/R5.csv/g' -e 's/__EVM_POWER_2G_FILE__/\/radio_fw\/EVM_2.csv/g' -e 's/__EVM_POWER_5G_FILE__/\/radio_fw\/EVM_5.csv/g' -e 's/__DOMAIN_2G__/1/g' -e 's/__DOMAIN_5G__/26/g' -e 's/__PWR_TABLE_49G__/0/g' -e 's/__PRODUCT_ID__/AIR-AP1562I-I-K9/g' -e 's/__AP_TYPE__/68/g' -e 's/__WIRELESS_MAC__/4C:77:6D:B8:BF:40/g' -e 's/__WIRED_MAC__/A0:23:9F:A9:E0:FA/g' -e 's/__WIRED1_MAC__/A0:23:9F:A9:E0:FA/g' | DMALLOC_OPTIONS=debug=0x400003,inter=1000,log=/tmp/wcp.dmalloc.log,limit=40000000 wcpd & [*12/09/2017 16:07:37.3899] Stopped Radio 0 [*12/09/2017 16:07:37.4027] DOT11_DRV[0]: set_channel Channel set to 6 [*12/09/2017 16:07:37.6508] CRIT-MeshControl: [*12/09/2017 16:07:37.6509] Mesh Control: skipped adding wired1 backhaul [*12/09/2017 16:07:42.0318] [*12/09/2017 16:07:42.0318] Total STA List Count 0 [*12/09/2017 16:07:42.0318] | NO|              MAC|STATE| [*12/09/2017 16:07:42.0318] ----------------------------- [*12/09/2017 16:07:42.0330] [*12/09/2017 16:07:42.0330] Total STA List Count 0 [*12/09/2017 16:07:42.0330] | NO|              MAC|STATE| [*12/09/2017 16:07:42.0330] ----------------------------- [*12/09/2017 16:07:45.3635] ethernet_port wired0, ip 10.1.2.29, netmask 255.255.255.0, gw 10.1.2.250, mtu 1500, bcast 10.1.2.255, dns1 10.1.1.200, dns2 10.1.1.102, domain carasso.netAP IPv4 Address updated from 0.0.0.0 to 10.1.2.29 [*12/09/2017 16:08:07.1895] [*12/09/2017 16:08:07.1895] !!!!! {watchdogd} Process wcpd gone for 60s [*12/09/2017 16:08:07.1898] [*12/09/2017 16:08:07.1898] !!!!! {watchdogd} Process capwapd no heartbeat for 60s [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8191] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] waiting for WCP to initialize [*12/09/2017 16:08:37.8192] Socket Invalid Element wcp/wcp_db Handler has_rlan Data 0 Length 10 [*12/09/2017 16:08:37.9601] /usr/bin/cisco_core.sh: Corefile /storage/cores//APA023.9FA9.E0FA__core-wcpd.8.3.133.0.2017-12-09-02-52-57.tgz deleted. [*12/09/2017 16:08:37.9699] dtls_init: Use MIC device cert [*12/09/2017 16:08:37.9702] dtls_init: Use MIC device cert private key [*12/09/2017 16:08:37.9704] [*12/09/2017 16:08:37.9704] CAPWAP State: Init [*12/09/2017 16:08:37.9705] [*12/09/2017 16:08:37.9705] Config not found, PNP is required, Starting PNP [*12/09/2017 16:08:37.9706] [*12/09/2017 16:08:41.7360] PNP:Server not reachable, Start CAPWAP Discovery [*12/09/2017 16:08:41.7362] [*12/09/2017 16:08:41.7362] CAPWAP State: Discovery [*12/09/2017 16:08:41.7365] Got WLC address 10.10.214.245 from DHCP. [*12/09/2017 16:08:41.7365] IP DNS query for CISCO-CAPWAP-CONTROLLER.carasso.net [*12/09/2017 16:08:41.7395] Discovery Request sent to 10.10.214.245, discovery type DHCP(2) [*12/09/2017 16:08:41.7396] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*12/09/2017 16:08:41.7396] [*12/09/2017 16:08:41.7396] CAPWAP State: Discovery [*12/09/2017 16:08:41.7403] Discovery Response from 10.10.214.245 [*12/09/2017 16:08:41.7404] Discovery response from MWAR ''running version 0.0.0.0 is rejected. [*12/09/2017 16:08:41.7404] Failed to decode discovery response. [*12/09/2017 16:08:41.7404] CAPWAP SM handler: Failed to process message type 2 state 2. [*12/09/2017 16:08:41.7404] Failed to handle capwap control message from controller - status 4 [*12/09/2017 16:08:41.7404] Failed to process unencrypted capwap packet 0xfa5000 from 10.10.214.245 [*12/09/2017 16:08:41.7405] Failed to send message to CAPWAP state machine, msgId 0 [*12/09/2017 16:08:41.7405] Failed to send capwap message 0 to the state machine. Packet already freed. [*12/09/2017 16:08:41.7405] IPv4 wtpProcessPacketFromSocket returned 4 [*12/09/2017 16:08:51.2910] [*12/09/2017 16:08:51.2910] CAPWAP State: Discovery [*12/09/2017 16:08:51.2912] Got WLC address 10.10.214.245 from DHCP. [*12/09/2017 16:08:51.2913] IP DNS query for CISCO-CAPWAP-CONTROLLER.carasso.net [*12/09/2017 16:08:51.2957] Discovery Request sent to 10.10.214.245, discovery type DHCP(2) [*12/09/2017 16:08:51.2959] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*12/09/2017 16:08:51.2965] Discovery Response from 10.10.214.245 [*12/09/2017 16:08:51.2965] Discovery response from MWAR ''running version 0.0.0.0 is rejected. [*12/09/2017 16:08:51.2965] Failed to decode discovery response. [*12/09/2017 16:08:51.2966] CAPWAP SM handler: Failed to process message type 2 state 2. [*12/09/2017 16:08:51.2966] Failed to handle capwap control message from controller - status 4 [*12/09/2017 16:08:51.2966] Failed to process unencrypted capwap packet 0xfa7000 from 10.10.214.245 [*12/09/2017 16:08:51.2966] Failed to send message to CAPWAP state machine, msgId 0 [*12/09/2017 16:08:51.2966] Failed to send capwap message 0 to the state machine. Packet already freed. [*12/09/2017 16:08:51.2966] IPv4 wtpProcessPacketFromSocket returned 4 [*12/09/2017 16:09:00.9839] [*12/09/2017 16:09:00.9839] CAPWAP State: Discovery [*12/09/2017 16:09:00.9841] Got WLC address 10.10.214.245 from DHCP. [*12/09/2017 16:09:00.9841] IP DNS query for CISCO-CAPWAP-CONTROLLER.carasso.net [*12/09/2017 16:09:00.9881] Discovery Request sent to 10.10.214.245, discovery type DHCP(2) [*12/09/2017 16:09:00.9882] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*12/09/2017 16:09:00.9887] Discovery Response from 10.10.214.245 [*12/09/2017 16:09:00.9888] Discovery response from MWAR ''running version 0.0.0.0 is rejected. [*12/09/2017 16:09:00.9888] Failed to decode discovery response. [*12/09/2017 16:09:00.9888] CAPWAP SM handler: Failed to process message type 2 state 2. [*12/09/2017 16:09:00.9888] Failed to handle capwap control message from controller - status 4 [*12/09/2017 16:09:00.9888] Failed to process unencrypted capwap packet 0xfaa000 from 10.10.214.245 [*12/09/2017 16:09:00.9888] Failed to send message to CAPWAP state machine, msgId 0 [*12/09/2017 16:09:00.9889] Failed to send capwap message 0 to the state machine. Packet already freed. [*12/09/2017 16:09:00.9889] IPv4 wtpProcessPacketFromSocket returned 4 [*12/09/2017 16:09:10.6777] [*12/09/2017 16:09:10.6777] CAPWAP State: Discovery [*12/09/2017 16:09:10.6780] Got WLC address 10.10.214.245 from DHCP. [*12/09/2017 16:09:10.6780] IP DNS query for CISCO-CAPWAP-CONTROLLER.carasso.net [*12/09/2017 16:09:10.6816] Discovery Request sent to 10.10.214.245, discovery type DHCP(2) [*12/09/2017 16:09:10.6817] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0) [*12/09/2017 16:09:10.6829] Discovery Response from 10.10.214.245 [*12/09/2017 16:09:10.6830] Discovery response from MWAR ''running version 0.0.0.0 is rejected. [*12/09/2017 16:09:10.6830] Failed to decode discovery response. [*12/09/2017 16:09:10.6830] CAPWAP SM handler: Failed to process message type 2 state 2. [*12/09/2017 16:09:10.6830] Failed to handle capwap control message from controller - status 4 [*12/09/2017 16:09:10.6830] Failed to process unencrypted capwap packet 0xfa5000 from 10.10.214.245 [*12/09/2017 16:09:10.6830] Failed to send message to CAPWAP state machine, msgId 0 [*12/09/2017 16:09:10.6830] Failed to send capwap message 0 to the state machine. Packet already freed. [*12/09/2017 16:09:10.6830] IPv4 wtpProcessPacketFromSocket returned 4 [*12/09/2017 16:09:12.2099] [*12/09/2017 16:09:12.2099] !!!!! {watchdogd} Process wcpd gone for 120s     And AP version: APA023.9FA9.E0FA#show ver              Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7013.             Cisco Systems, Inc.             170 West Tasman Drive             San Jose, California 95134-1706 This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable to comply with U.S. and local laws, return this product immediately. A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. This product contains some software licensed under the "GNU General Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/gpl-2.0.html This product contains some software licensed under the "GNU Library General Public License, version 2" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Library General Public License, version 2", available here: http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html This product contains some software licensed under the "GNU Lesser General Public License, version 2.1" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser General Public License, version 2.1", available here: http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html This product contains some software licensed under the "GNU General Public License, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of   "GNU General Public License, Version 3", available here: http://www.gnu.org/licenses/gpl.html. This product contains some software licensed under the "GNU Affero General Public License, version 3" provided with ABSOLUTELY NO WARRANTY under the terms of "GNU Affero General Public License, version 3", available here: http://www.gnu.org/licenses/agpl-3.0.html. Cisco AP Software, (ap3g3), C1562, RELEASE SOFTWARE Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Sat Dec  9 16:06:52 PST 2017 ROM: Bootstrap program is U-Boot boot loader BOOTLDR: U-Boot boot loader Version 2013.01-gad8bd06 (Sep 28 2017 - 17:03:04) APA023.9FA9.E0FA uptime is 0 days, 0 hours, 6 minutes Last reload time   : Sat Dec 9 03:23:24 UTC 2017 Last reload reason : unknown   cisco AIR-AP1562I-I-K9 ARMv7 Processor rev 1 (v7l) with 1028520/662980K bytes of memory. Processor board ID FCZ2151Z09K AP Running Image     : 8.5.110.0 Primary Boot Image   : 8.5.110.0 Backup Boot Image    : 8.3.133.0 1 Gigabit Ethernet interfaces 2 802.11 Radios Radio Driver version : 9.0.5.5-W8964 Radio FW version : 9.1.8.1 NSS FW version : 2.4.18 Base ethernet MAC Address            : A0:23:9F:A9:E0:FA Part Number                          : 73-100839-04 PCA Assembly Number                  : 000-00000-00 PCA Revision Number                  : PCB Serial Number                    : FOC21472TCQ Top Assembly Part Number             : 068-100609-01 Top Assembly Serial Number           : FCZ2151Z09K Top Revision Number                  : A0 Product/Model Number                 : AIR-AP1562I-I-K9 ... View more

BTW From the 8.3.133 release notes: Cisco Aironet 1560 Series Access Points   ... View more

Thanks, Just finished to upgrade, the AP is disconnected will check tomorrow.   In the Wireless compatibility matrix the AP is supported in 8.3.133.0 someone at Cisco shall really correct it if it's true. ... View more

Thanks for the replay:   did you add the mac address of AP in Authorization list? Yes, added it to the authorization (the wired interface) using MIC didn't helped.   country code configuredon WLC? IL, IO The AP model is 1562I-I   sh version form AP  complete bootup process from AP console. Will post tomorrow I'm not on site now. ... View more

Hi, Thanks for the replay: 1. How many controllers you have? What firmware version they are running? just that one, and just finished to upgrade it to 8.5.110 2. How you setup a WLC discovery? Through option 43? Or manually on WLC? Option 43 3. What firmware version your AP is running? 8.3.133.0 4. Was an AP working before? If yes - with what WLCs and how it has been configured? Nope, new deployment ... View more