3802i will not joint WLC even on same subnet

[tdennehy]

The controller and access points are on same subnet. I can plug my laptop into same subnet and browse the controller. I can SSH into controller. Country code is US. Time appears to be accurate. I don't see anything in log about an AP trying to join WLC. AP can ping controller while on same subnet from the console. Controller running 8.3.122.0 I have another controller at another site with APs on the controller. What could I be doing wrong? [*10/18/2017 20:51:56.7897] Discovery Response from 10.23.50.4 [*10/18/2017 20:52:06.0002] Discovery Response from 10.23.50.5 [*10/18/2017 20:52:06.0001] Discovery Response from 10.23.50.4 [*10/18/2017 20:52:06.0000] Discovery Response from 10.23.50.5 [*10/18/2017 20:52:06.0000] CAPWAP State: DTLS Setup [*10/18/2017 20:52:07.6141] CAPWAP State: Join [*10/18/2017 20:52:07.6151] Sending Join request to 10.23.50.4 through port 5 264 [*10/18/2017 20:53:03.0169] CAPWAP State: DTLS Teardown [*10/18/2017 20:53:03.0204] Dropping dtls packet since session is not establi shed. a173204, 147e, a17322a, 1490, (nil) [*10/18/2017 20:53:07.7689] CAPWAP State: Discovery [*10/18/2017 20:53:07.7690] Got WLC settings(10.23.50.4) from DHCP. [*10/18/2017 20:53:07.7691] Got WLC settings(10.23.50.5) from DHCP. [*10/18/2017 20:53:07.7862] Discovery Request sent to 10.23.50.4 with discove ry type set to CAPWAP_DISCOVERY_TYPE_DHCP(2) [*10/18/2017 20:53:07.7873] Discovery Request sent to 10.23.50.5 with discove ry type set to CAPWAP_DISCOVERY_TYPE_DHCP(2) [*10/18/2017 20:53:07.7906] Discovery Request sent to 255.255.255.255 with di scovery type set to CAPWAP_DISCOVERY_TYPE_UNKNOWN(0) [*10/18/2017 20:53:07.7909] Discovery Response from 10.23.50.4 [*10/18/2017 20:53:18.0002] Discovery Response from 10.23.50.5 [*10/18/2017 20:53:17.0001] Discovery Response from 10.23.50.5 [*10/18/2017 20:53:17.0000] Discovery Response from 10.23.50.4 [*10/18/2017 20:53:18.0000] CAPWAP State: DTLS Setup [*10/18/2017 20:53:19.6096] CAPWAP State: Join [*10/18/2017 20:53:19.6106] Sending Join request to 10.23.50.4 through port 5 264 [*10/18/2017 20:54:15.0166] CAPWAP State: DTLS Teardown [*10/18/2017 20:54:15.0201] Dropping dtls packet since session is not establi shed. a173204, 147e, a17322a, 1490, (nil) [*10/18/2017 20:54:19.7689] CAPWAP State: Discovery [*10/18/2017 20:54:19.7690] Got WLC settings(10.23.50.4) from DHCP. [*10/18/2017 20:54:19.7690] Got WLC settings(10.23.50.5) from DHCP. [*10/18/2017 20:54:19.7844] Discovery Request sent to 10.23.50.4 with discove ry type set to CAPWAP_DISCOVERY_TYPE_DHCP(2) [*10/18/2017 20:54:19.7878] Discovery Request sent to 10.23.50.5 with discove ry type set to CAPWAP_DISCOVERY_TYPE_DHCP(2) [*10/18/2017 20:54:19.7889] Discovery Request sent to 255.255.255.255 with di scovery type set to CAPWAP_DISCOVERY_TYPE_UNKNOWN(0) [*10/18/2017 20:54:19.7891] Discovery Response from 10.23.50.4 [*10/18/2017 20:54:29.0002] Discovery Response from 10.23.50.5 [*10/18/2017 20:54:29.0001] Discovery Response from 10.23.50.4 [*10/18/2017 20:54:29.0000] Discovery Response from 10.23.50.5 Username: Cisco Password: [*10/18/2017 20:54:29.0000] CAPWAP State: DTLS Setup >[*10/18/2017 20:54:30.6119] CAPWAP State: Join [*10/18/2017 20:54:30.6129] Sending Join request to 10.23.50.4 through port 5 264 > > > >ena Password: #sh interfaces wired 0 wired0 Link encap:Ethernet HWaddr 28:6F:7F:CF:4E:00 eMac Status: UP inet addr:10.23.50.42 Bcast:10.255.255.255 Mask:255.255.255.255 UP BROADCAST RUNNING PROMISC MULTICAST MTU:2400 Metric:1 RX packets:9543 errors:0 dropped:0 overruns:0 frame:0 TX packets:7910 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:80 RX bytes:1192876 (1.1 MiB) TX bytes:1816878 (1.7 MiB) # #ping 10.23.50.4 Sending 5, 100-byte ICMP Echos to 10.23.50.4, timeout is 2 seconds !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 0.327/0.369/0.418 ms #

[akumarka]

you can specify controller ip address:
capwap ap controller ip address <ip>

[tdennehy]

That command does not work: MDF-AP-01#capwap ap erase Erase CAPWAP config hostname Configure AP hostname ip Static IP/DNS config lag CAPWAP lag config primary-base Configuring AP's primary controller restart Restart CAPWAP Protocol secondary-base Configuring AP's secondary controller teritary-base Configuring AP's teritary controller I tried this: capwap ap secondary-base SFO010-011-WC02 10.23.50.5 capwap ap primary-base SFO010-011-WC01 10.23.50.4 It still does not work.

[akumarka]

as per logs ap is getting wlcs ips 10.23.50.4 and 10.23.50.5
silly question
have u checked license in wlc's ..

[tdennehy]

They are licensed to 1500

[akumarka]

whether ap regulator domain is "-B"?

[Leo Laohoo]

When a 5520/8540 comes out fresh from the factory, it has "0" AP license.  

You'll need to activate the license (CLI is better) using the "license" command.  

[Flavio Miranda]

Hello @tdennehy

If you look at MONITOR tab > Statistics > AP Join . Is there any log there? if does, what did this say?

-If I helped you somehow, please, rate it as useful.-

[tdennehy]

It states "not joined" Base MAC Address f8:0b:cb:a7:89:00 AP Name MDF-AP-01 Ethernet MAC Address 00:00:00:00:00:00 IP Address(Ipv4/Ipv6) 10.23.50.100 Status Not joined Last AP Join Timestamp Message Oct 18 14:32:18.021 Received Discovery request and sent response Discovery Phase Statistics Requests Received 176 Responses Sent 176 Unsuccessful Request Processed 0 Reason For Last Unsuccessful Attempt - Last Successful Attempt Time Oct 18 14:32:18.021 Last Unsuccessful Attempt Time - Join Phase Statistics Requests Received 5 Responses Sent 0 Unsuccessful Request Processed 5 Reason For Last Unsuccessful Attempt Failed to delete database entry Last Successful Attempt Time - Last Unsuccessful Attempt Time Oct 18 14:27:48.398 Configuration Phase Statistics Requests Received 0 Responses Sent 0 Unsuccessful Request Processed 0 Reason For Last Unsuccessful Attempt - Last Successful Attempt Time - Last Unsuccessful Attempt Time Oct 18 14:27:48.398 Last Error Summary Last AP Message Decryption Failure - Last AP Connection Failure - Last AP Disconnect Reason - Last Error Occurred Unsuccessful Lwapp join response sent Last Error Occurred Reason Failed to delete database entry Last Join Error Timestamp

[Flavio Miranda]

Do you have an active license ? Please check in:

MANAGEMENT > Software Activation > License.

If the status is Inactive, activate it.

Also, double check if time is ok.

In SECURITY > AP Policy make sure "Accept Manufactured Installed Certificate (MIC)" is checked.

Please, informe the AP Part number and the command "show country supported" from the WLC.

-If I helped you somehow, please, rate it as useful.-