Connect Acces Point with Controller Wifi WS-C3650

[mikael lelouch]

Hi Everybody,

I try connect two access point AIR-CAP1602E with WCM( Controller Wifi) on switch WS-C3650-48FPS.

My AP doesn't connect with my controller and i have a error in software log (see Attachment)

My config wlan on switch is :

wlan ASPDTBSP 2 ASPDTBSP
 no broadcast-ssid
 client vlan USER
 ip dhcp server 10.99.2.22
 radio dot11bg
 no security wpa
 no security wpa akm dot1x
 no security wpa wpa2
 no security wpa wpa2 ciphers aes
 security static-wep-key encryption 104 hex 0 XXXXXXXX
 session-timeout 1800
 no shutdown

the interfaces wireless terminals are configured in access mode vlan 910

interface GigabitEthernet1/0/10
 description MANWFI170
 switchport access vlan 910
 switchport mode access
 switchport voice vlan 20
 spanning-tree portfast
end

The Vlan910 is  reserved on vlan wifi .

Why i have a error " *%DTLS-3-HANDSHAKE_FAILURE: 1 wcm:  Failed to complete DTLS handshake with peer "

Thank you for answer.

Best Regard,

Mikael

[Rasika Nayanajith]

Hi

Follow this reference link & make sure you follow all the steps (3650 configured as Mobility Controller & wireless management interface defined as vlan 910, Time is set correctly & correct country code configured & license available for AP registration). 

http://mrncciew.com/2013/09/29/getting-started-with-3850/

Also remove the voice vlan config under the switchport.

HTH

Rasika

**** Pls rate all useful responses ****

[mikael lelouch]

HI,

I check my configuration :

interface GigabitEthernet1/0/10
 description MANWFI170
 switchport access vlan 910
 switchport mode access
 spanning-tree portfast
end

( delete voice vlan )

sh run int vlan 910
Building configuration...

Current configuration : 98 bytes
!
interface Vlan910
 ip address 10.150.232.174 255.255.255.240
 ip helper-address 10.99.2.21

show clock:
22:20:07.719 GMT Wed Nov 19 2014

IS OK  ;)

#show wireless country configured

 Configured Country.............................: FR  - France
 Configured Country Codes
        FR  - France : 802.11a Indoor,Outdoor/ 802.11b / 802.11g

#sh license right-to-use
 Slot#  License name   Type     Count   Period left
----------------------------------------------------------
 1      ipbase       permanent     N/A   Lifetime
 1      apcount      adder         15    Lifetime

License Level on Reboot: ipbase

 Slot#  License name   Type     Count   Period left
----------------------------------------------------------
 2      ipbase       permanent     N/A   Lifetime
 2      apcount      adder         8     Lifetime

License Level on Reboot: ipbase

 Slot#  License name   Type     Count   Period left
----------------------------------------------------------
 3      ipbase       permanent     N/A   Lifetime

License Level on Reboot: ipbase

sh run all | sect wlan :

no wireless wlancc
wlan ASPDTBSP 2 ASPDTBSP
 accounting-list
 no assisted-roaming dual-list
 no assisted-roaming neighbor-list
 no broadcast-ssid
 ccx aironet-iesupport
 channel-scan defer-priority 4
 channel-scan defer-priority 5
 channel-scan defer-priority 6
 channel-scan defer-time 100
 chd
 client association limit ap 0
 client association limit radio 0
 client association limit 0
 client vlan 300
 no device-classification
 dtim dot11 24ghz 1
 dtim dot11 5ghz 1
 exclusionlist
 exclusionlist timeout 60
 ip access-group web
 ip access-group
 ip dhcp server 10.99.2.22
 ipv6 traffic-filter web none
 ipv6 traffic-filter none
 mac-filtering
 mfp client
 mfp infrastructure-protection
 mobility anchor sticky
 no profiling local http
 no profiling radius http
 radio dot11bg
 no security wpa
 no security wpa akm dot1x
 no security wpa wpa1
 no security wpa wpa2
 no security wpa wpa2 ciphers aes
 security dot1x authentication-list
 security dot1x encryption 104
 security ft over-the-ds
 security ft reassociation-timeout 20
 security pmf association-comeback 1
 security pmf saquery-retry-time 200
 security static-wep-key authentication open
 security static-wep-key encryption 104 hex 0 0AEF56D421ABE77F23C649CA13 1
 security tkip hold-down 60
 security web-auth authentication-list
 security web-auth parameter-map
 service-policy client input unknown
 service-policy client output unknown
 service-policy input unknown
 service-policy output unknown
 service-policy type control subscriber
 session-timeout 1800
 wmm allowed
 no shutdown
 shutdown

And i have the same problem

[Rasika Nayanajith]

Pls provide "show wireless mobility summary" output as well

HTH

Rasika