3702i and 9800 WLC AP join issues

georgehewittuk1 · ‎05-05-2023

Hi All,

Just running into a few issues with a lab and wondered if anyone had seen this before. The AP is trying to join the 9800 WLC but is getting the following message.

*May 5 12:19:28.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.100.0.22 peer_port: 5246

*May 5 12:19:28.299: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.100.0.22 peer_port: 5246

*May 5 12:19:28.299: %CAPWAP-5-SENDJOIN: sending Join Request to 10.100.0.22

*May 5 12:19:33.299: %CAPWAP-5-SENDJOIN: sending Join Request to 10.100.0.22

*May 5 12:19:33.319: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.100.0.22

*May 5 12:19:33.319: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.100.0.22:5246

Not in Bound state.

The AP is running the latest code for the 3702i and the WLC is running the last supported code 17.3.5a (to my knowledge).

Thanks

George

docjb0221 · ‎05-05-2023

17.3.5 was very buggy. I’d try 17.3.6.

georgehewittuk1 · ‎05-05-2023

17.3.6 solved that problem but unfortunately hit another issue this - https://community.cisco.com/t5/wireless/ios-xe-17-9-3-has-been-released/td-p/4795844

https://quickview.cloudapps.cisco.com/quickview/bug/CSCwd80290

So anyone that googles this worth just going to 17.9.3

Leo Laohoo · ‎05-05-2023

I would not be wasting any more time with 17.3.X (for 1700/2700/3700/1570 support).

Upgrade to 17.9.3 and start testing that.

Rich R · ‎05-06-2023

Absolutely second that - avoid 17.3, go direct to 17.9.3 (or later) for wave 1 AC APs.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

ISEe · ‎03-07-2025

Compatibility matrix shows Cisco IOS XE Amsterdam 17.3.x is the last support for 2700/3700 series. I see you mentioned 17.9.3, do you know if the AP works with it?

Leo Laohoo · ‎03-07-2025

I have >4k x 3700 still hanging around 9800 controllers on 17.12.4.

NOTE:

Due to "pressures" from some big customers, 2700/3700 support was re-introduced from 17.9.3 and the last firmware will be 17.12.X. 2700/3700 will not be supported from 17.13.X onwards. However, IW3700 will still be supported from 17.13.X onwards.

ISEe · ‎03-07-2025

Appreciate your quick feedback. Will give 17.12.4 a try with my 3702i.

Thank you sir!