1131 AP's failing to connect to 7.5.102.0 5508

[Steve Wood]

1131 AP's attach to a 7.0.240.0 5508 with no issues. We have now upgraded to 7.5.102.0 and 1131 AP's fail to connect and just loop.1602 AP's join ok Tried resets on 1131 AP's and now they fail to even register as "downloadng"

The APLOAD attachment shows a console connection on the AP and the other file the WLC config

[Rasika Nayanajith]

Hi Steve,

Please check whether MAC entries are there for these APs if you already configured any AP policies(Security -> AP Policy section). Also make sure "Accept MIC" is checked. Pls provide "show auth-list" output of your controller if you are not sure.

*Dec 17 20:39:21.501: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.7.10.205 peer_port: 5246

*Dec 17 20:39:21.502: %CAPWAP-5-SENDJOIN: sending Join Request to 10.7.10.205

*Dec14 bytes) 17 20:39:21.502: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN

*Dec 17 20:39:21.504: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.

*Dec 17 20:39:21.504: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.

*Dec 17 20:39:21.504: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

HTH

Rasika

*** Pls rate all useful responses ****

[Steve Wood]

Rasika

I did what you said and the AP policies sheet displays the following. The addresses displayed are old 1231 AP addresses. An 1131 address for example should be 44:2b:03:eb:6e:f4.I tried searching by MAC whilst the AP is stuck in download mode but no luck

[Sandeep Choudhary]

HI Steev,

did u upgrade the FUS ?????

*Dec 17 20:40:38.817: %DTLS-3-BAD_RECORD: Erroneous record received from 10.7.10.205: Duplicate (replayed) record

It could be that access points are not on the same subnet as the WLC subnet ?

1. Check your links between the WLC and the APs.  you don't have a half duplex link in between.

2. adding the mac address of the AP to the AP policies access list

3. delete this subdirectory using the command "delete /f /r flash:c1130-k9w8-mx.124-23c.JA7"

If the issue continues try to open a case with TAC.

Regards

Dont forget to rate helpful posts.

[Steve Wood]

Sandeep

The WLC is on 10.7.10.x and 1131 APs are on 10.7.20.x. 1602 AP's all register. option 43 is correct.

1. All 1131's registered fine with 7.0.240.0 this issue has happened since the upgrade to 7.5. So i believe I can eliminate duplex issues

2. I am sorry but where do i add the macs to the AP policies access list .

3. I have doen a reset. (Hold mode button and power on ) This resets to the rcv image and then it downloads a new image the continually loops under Wireless>Access Points>All AP's

[Sandeep Choudhary]

Hi Steve,

As per my idea:

cisco AIR-LAP1131AG-E-K9   (PowerPCElvis) processor (revision B0) with 27638K/5120K bytes of memory.

Processor board ID FCZ1636Q0GE

PowerPCElvis CPU at 262Mhz, revision number 0x0950

Last reset from power-on

LWAPP image version 7.0.240.0

1 FastEthernet interface

2 802.11 Radio(s)

1. Sometimes you just have to install the recovery image back onto the AP.

2. I feel 1131 AP still pulling the image from old code(7.0.240.0)

Hope it helps.

Try to update ur wlc with7.0.240.0 and then agin to  7.5 version again.

Regards

[Rasika Nayanajith]

Hi Steve,

Thanks for that output. since you are not doing any AP authorization (since 4th checkbox is not ticked), you do not require AP MAC entries in this list. If you are not doing LSC & all these 1231 are gone, then you can untick SSC & LSC as well.

How many 1131 having this behaviour ? Only 1 or many ?

I would try temporarly put AP on to the WLC management vlan & see if AP get registered

HTH

Rasika

**** Pls rate all useful responses ****

[Steve Wood]

Rasika

All 1131's display the same error (apart from the 2 which are now dead due to issueing a clear config ). Tried holding the reset as you will see from the logs provided to wipe config. No luck

[Rasika Nayanajith]

Hi Steve,

For a test can you put a AP on to WLC mgt vlan and do this factory reset and see the AP console output.

Do not worry, AP won't go dead due to this process, you should be able to recover all of them.

Sent from Cisco Technical Support iPad App

[Rasika Nayanajith]

Hi Steve,

Follow this process with one of 1131 AP which you termed as "DEAD"

1. Power that AP via a external power adapter & directly connect AP ethernet to your laptop

2. Configure Laptop with IP- 10.0.0.2 Mask- 255.0.0.0 - GW-10.0.0.1

3. Download c1130-rcvk9w8-tar.124-25e.JAN1.tar image onto your TFTP server on this PC & renamed it as c1130-rcvk9w8-tar.default

4. Disconnect the power of the AP & power it back while holding (~20s) the mode button, when LED become solid RED release the mode button.Refer this for deteail.

http://mrncciew.com/2013/12/13/ap-conversion-using-mode-button/

5. Watch the AP console & make sure this recovery image get installed.

6. Then connect this AP to your switchport which is configured for WLC mgt vlan (I believe it is vlan 100)

7. If it is not DHCP, then assign a static IP & gateway like below

capwap ap ip address

capwap ap ip default-gateway

8. Watch the AP console & see whether it get registered to your 5508 & stay as registered.

9. If step 8 success, then connect your AP to a normal AP vlan switchport & see it got DHCP address with option 43 & AP get registered with your 5508.

If no success, attach step5, 8 & 9 AP console output as step1.txt, step8.txt, step9.txt so we can refer them easily.

HTH

Rasika

**** Pls rate all useful responses ****

[Steve Wood]

Rasika

I know your solution would work and have marked it appropriately however we managed to get all AP's registered by using the following method

Took the AP's which were failing to even register on-site back to the office and attached to a 2504 running 7.5.102.0.with a backend switch running a dhcp server Both AP's downloaded c1130-k9w8-mx.124-25e.JAN1 and joined the 2500 no problems at all

Took the newly imaged AP's back to site along with the 2504 and connected up the AP's to the 5508 and they registered no problem. All existing APs were then put in a vlan which the 2504 was in. configured a DHCP scope on the switch. Shut no shut all associated AP ports and then waited until sh cdp nei det showed the new image installed. Once complete placed the AP's back in their vlan and watched them register.

Still dont see why the 5508 wants to load the  c1130-k9w8-mx.124-23c.JA7 image. Only difference between the the 2504 and the 5508 was that the 5508 AP's are on a different vlan and subnet than the management interface. The 2504 is in the same vlan.

Would like to proove it with the 5508 with APs and WLC in the same vlan but it is a working system so cannot

[Rasika Nayanajith]

Hi Steve,

Glad you got this working somehow..

Still dont see why the 5508 wants to load the  c1130-k9w8-mx.124-23c.JA7 image. Only difference between the the 2504 and the 5508 was that the 5508 AP's are on a different vlan and subnet than the management interface. The 2504 is in the same vlan.

When you do this AP reset to factory default, it is trying to load an image using local broadcast, so if your WLC is on the same subenet as AP then it would be success & load the correct image.

when you do the AP factory reset keeping 5508 in different vlan, image won't be loaded using that method. In that way since AP knew 5508 trying to get register, & download the image. But in your case it may not copy the image correctly & hence some complication of joining process.

HTH

Rasika

***** Pls rate all useful responses ****

[Saravanan Lakshmanan]

hi steve

from 5500, get show tech or display ap bundle info. check if 1130 image is present.

Thanks

Saravanan