Access Point 1702I cannot join WLC 2504

[Fachroky Wiratama]

Please help

I have Access Point cisco 1702I and wlc 2504

i have configure each other and also dhcp for access i have given option 43 with hexa

but access point cannot join wlc when i console it, the log is like this

*Oct 11 20:33:55.579: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Oct 11 20:33:55.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.10.253 peer_port: 5246
*Oct 11 20:33:55.463: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.10.253 peer_port: 5246
*Oct 11 20:33:55.463: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.10.253
*Oct 11 20:34:13.683: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.10.253:5246
*Oct 11 20:34:13.763: %LWAPP-4-CLIENTEVENTLOG: Not sending change state post as the radio admin is down, lrad state = 5

and looping continously.

FYI the WLC running software version 8.0.115.0

is there any other configuration in Access Point or WLC or what should I do ? 😞

Thanks,

Rocky

[Leo Laohoo]

Post the complete output to the following commands: 

1.  WLC:  sh sysinfo; 

2.  AP:  sh version

[Fachroky Wiratama]

here the sysinfo for wlc and sh ver for AP

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.0.115.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 20.0

Build Type....................................... DATA + WPS

System Name...................................... WLC-CEDRUS
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
IP Address....................................... 192.168.10.253
IPv6 Address..................................... ::
Last Reset....................................... Power on reset
System Up Time................................... 0 days 0 hrs 46 mins 15 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

--More-- or (q)uit

Configured Country............................... US  - United States
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +28 C
External Temperature............................. +32 C
Fan Status....................................... 3200 rpm

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

Burned-in MAC Address............................ F0:78:16:71:F4:60
Maximum number of APs supported.................. 75
System Nas-Id.................................... Cisco_71:f4:64
WLC MIC Certificate Types........................ SHA1/SHA2

===============================================================================

AP#sh ver
Cisco IOS Software, C1700 Software (AP3G2-K9W8-M), Version 15.3(3)JA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Thu 19-Feb-15 10:21 by prod_rel_team

ROM: Bootstrap program is C1700 boot loader
BOOTLDR: C1700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.3() [ TRUE]

AP54a2.74d1.c0c0 uptime is 34 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-k9w8-mx.153-3.JA3/ap3g2-k9w8-xx.153-3.JA3"
Last reload reason:

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP1702I-C-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
Processor board ID FJC1931F0ET
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 8.0.115.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 54:A2:74:D1:C0:C0
Part Number                          : 73-16776-01
PCA Assembly Number                  : 000-00000-00
PCA Revision Number                  :
PCB Serial Number                    : FOC192131BA
Top Assembly Part Number             : 068-05568-02
Top Assembly Serial Number           : FJC1931F0ET
Top Revision Number                  : A0
Product/Model Number                 : AIR-CAP1702I-C-K9   

Configuration register is 0xF

thanks

[Leo Laohoo · Accepted solution]

Configured Country............................... US  - United States

This is the country code allowed on the WLC. 

AIR-CAP1702I-C-K9   

The AP has the wrong Regulatory Compliance and is NOT compatible with a country code of "US".  "-C" is for a country code of Pakistan, China, Indonesia, Macau & Malaysia.

[Fachroky Wiratama]

ooh thanks you Leo the access point has joined WLC now (y)

[Leo Laohoo]

Thanks for taking the time to rate our posts.  🙂