1562I won't join 2504 controller

[Nettech98]

We just purchased a 1562I (AIR-AP-1562I-B-K9) and it won't join our 2504 controller.  The AP has version 8.4.100 and our controller is 8.3.111.  I have also installed the matching AP bundle (hopefully correctly).  This is our first outdoor access point.  Following is an extract from the console (domain info changed to XXX):

===========================

[*08/24/2017 20:30:37.7119] CRIT-MeshLink: Set Root port Mac: 2C:33:11:0E:4B:60 BH Id: 0 Port:0 Device:DEVNO_WIRED0
[*08/24/2017 20:30:37.7123] CRIT-MeshLink: Notify Capwap Link Up: mac: 2C:33:11:0E:4B:60 BH Id: 0 GW_reachable: No Roam: false
[*08/24/2017 20:30:37.7136] driver_wpas:  - wpa_driver_wpas_init
[*08/24/2017 20:30:50.8858] ethernet_port wired0, ip 192.168.3.124, netmask 255.255.255.0, gw 192.168.3.1, mtu 1500, bcast 192.168.3.255, dns1 192.168.3.10, domain XXX.localDOT11_CFG[0] Radio Mode is changed from Bridge to Bridge
[*08/24/2017 20:30:52.4254] DOT11_CFG[1] Radio Mode is changed from Bridge to Bridge
[*08/24/2017 20:30:52.4453] AP IPv4 Address updated from 0.0.0.0 to 192.168.3.124
[*08/24/2017 20:30:52.4585] dtls_init: Use MIC device cert
[*08/24/2017 20:30:52.4589] dtls_init: Use MIC device cert private key
[*08/24/2017 20:30:52.4591]
[*08/24/2017 20:30:52.4591] CAPWAP State: Init
[*08/24/2017 20:30:52.4597]
[*08/24/2017 20:30:52.4597] PNP is not required, Starting CAPWAP discovery
[*08/24/2017 20:30:52.4597]
[*08/24/2017 20:30:52.4599]
[*08/24/2017 20:30:52.4599] CAPWAP State: Discovery
[*08/24/2017 20:30:52.4606] IP DNS query for CISCO-CAPWAP-CONTROLLER.XXX.local
[*08/24/2017 20:30:52.4972] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*08/24/2017 20:30:52.4973]
[*08/24/2017 20:30:52.4973] CAPWAP State: Discovery
[*08/24/2017 20:30:52.4990] Discovery Response from 192.168.3.70
[*08/24/2017 20:56:37.0002] Discovery response from MWAR 'XXX'running version 8.3.111.0 is rejected.
[*08/24/2017 20:56:37.0002] Failed to decode discovery response.
[*08/24/2017 20:56:37.0002] CAPWAP SM handler: Failed to process message type 2 state 2.
[*08/24/2017 20:56:37.0002] Failed to handle capwap control message from controller - status 4
[*08/24/2017 20:56:37.0003] Failed to process unencrypted capwap packet 0x15ca000 from 192.168.3.70
[*08/24/2017 20:56:37.0003] Failed to send capwap message 0 to the state machine. Packet already freed.
[*08/24/2017 20:56:37.0003] IPv4 wtpProcessPacketFromSocket returned 4
[*08/24/2017 20:56:37.1977] set led_patteren 12

=================================

Any help is appreciated!

[Leo Laohoo]

---

@Nettech98 wrote:

[*08/24/2017 20:56:37.0002] Discovery response from MWAR 'XXX'running version 8.3.111.0 is rejected.

---

Upgrade the firmware of the controller to, say, 8.3.122.0.

[Philip D'Ath]

8.3.111 is a deferred release due to serious defects. I'm with Leo. Upgrade to 8.3.122.0.

[Nettech98]

As long as I'm upgrading, is there a reason I shouldn't go to 8.4.x or 8.5.x?

Is the AP bundle file required for this AP?

Thanks!

[Leo Laohoo]

I'm running 8.5 in production. So far so good.
8.4 is not a good idea because it's just a "one-off" special release.

[Francesco Molino]

Hi 

There're several things that can block an app to join your wlc. 

Under security tab, ap policy, have you activated mic cert to join your wlc? Otherwise you'll need to add the ap mac address. 

Did you validate the country code? 

Thanks

PS: Please don't forget to rate helpful answers and mark as accepted answer if this solves your issue

[Nettech98]

MIC cert was already activated, but I had also tried adding the AP to the MAC filtering list, with no change in outcome.

I didn't 'validate country code', but it is a B model.  How would one validate that?

Thanks.

[Francesco Molino]

Is it your first universal ap?

Have you already done the priming?

If not, take a look here: 

https://www.cisco.com/c/en/us/td/docs/wireless/access_point/ux-ap/guide/uxap-mobapp-g.html#52524

Thanks 

PS: Please don't forget to rate helpful answers and select add correct answers if this solved your issue

[Leo Laohoo]

---

@Francesco Molino wrote:

Is it your first universal ap?

---

There is no such thing as a "universal AP" or "universal Regulatory Domain" for the 1800/2800/3800 and 1540/1560/1570.  

The "universal AP" or "universal Regulatory Domain" has temporarily been suspended after 1700/2700/3700 APs.  

[Francesco Molino]

OK sorry I wasn't aware.
Not installed any new ap since 1 year now :-)

Then let's focus on country codes for now

[Nettech98]

I don't think it needs priming as it's a B model - AIR-AP1562I-B-K9.  Right?

[Leo Laohoo]

---

@Nettech98 wrote:

I didn't 'validate country code', but it is a B model.  How would one validate that?

---

Post the complete output to the command "sh sysinfo".  

[Nettech98]

On the AP or the controller?  I only seem to have access to the GUI on the controller remotely now....

[Leo Laohoo]

---

@Nettech98 wrote:

On the AP or the controller?  I only seem to have access to the GUI on the controller remotely now....

---

The controller.  I want to see what country codes are enabled on the WLC.

[Nettech98]

Based on the GUI, the only country code enabled is US