add new AP in EWC

[datin]

how to add new Accest Point in EWC ?,

[marce1000]

   - Use standard methodologies to let APs discover a controller , 

 M.

[datin]

i have been config ip
capwap ap ip xx.xx.xx.xx. xxx.xxx.xxx.xxx xx.xx.xx.xx

but this is not added automatically in EWC

AP-TEST#sh run
AP Name : AP-TEST
Admin State : Enabled
AP Mode : Local
AP Submode : Not Configured
Location : default location
Primary controller name :
Secondary controller name :
Tertiary controller name :
AP join priority : 1
IP Prefer-mode : Unconfigured
CAPWAP UDP-Lite : Unconfigured
Last Joined Controller name:
DTLS Encryption State : Disabled
Discovery Timer : 10
Heartbeat Timer : 30
CDP State : Enabled
Watchdog monitoring : Enabled
IOX : Disabled
RRM State : Enabled
LSC State : Disabled
SSH State : Disabled
AP Username : Cisco
Session Timeout : 300
Extlog Host : 255.255.255.255
Extlog Flags : 0
Extlog Status Interval : 0
Syslog Host : 255.255.255.255
Syslog Facility : 0
Syslog Level : errors
Core Dump File Compression : Disabled
Core Dump Filename :
Client Trace Status : Enabled(All)
Client Trace All Clients : Enabled
Client Trace Filter : 0x0000000E
Client Trace Out ConsoleLog: Disabled
AP WSA Mode : Disabled
Auxiliary-client Interface : Disabled

[jagan.chowdam]

The command "capwap ap ip xx.xx.xx " will configure static IP address and DNS for the CAPWAP AP.

If the EWC and AP are not in same VLAN, You can run the following command on the AP CLI to statically assign WLC information.

AP#capwap ap primary-base <WLCName> <WLCIP>

 Also, refer the following document to understand the AP WLC discovery process and troubleshoot AP join issues.

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/119286-lap-notjoin-wlc-tshoot.html

Jagan Chowdam

/**Pls rate useful responses**/ 

[datin]

yes vlan same with the WLC, rigth now show message 
[*07/16/2023 09:11:56.0000] CAPWAP State: DTLS Setup
[*07/16/2023 09:11:56.5780] sudi99_request_check_and_load: Use HARSA SUDI certificate
[*07/16/2023 09:11:57.2620] dtls_process_packet: DTLS Error: 1046
[*07/16/2023 09:11:57.2620] dtls_process_packet: The controller shut down the DTLS connection.
[*07/16/2023 09:11:57.2620] dtls_process_packet: Please verify that the AP certificate is valid and has not expired.
[*07/16/2023 09:11:57.2620] dtls_process_packet: HARSA certificate retry count 1
[*07/16/2023 09:12:53.0230]
[*07/16/2023 09:12:53.0230] CAPWAP State: DTLS Teardown
[*07/16/2023 09:12:53.0980] upgrade.sh: Script called with args:[ABORT]
[*07/16/2023 09:12:53.1380] do ABORT, part1 is active part
[*07/16/2023 09:12:53.1540] upgrade.sh: Cleanup tmp files ...
[*07/16/2023 09:12:53.1710] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*07/16/2023 09:12:53.1720] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*07/16/2023 09:13:07.7690]
[*07/16/2023 09:13:07.7690] CAPWAP State: Discovery
[*07/16/2023 09:13:07.7910] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*07/16/2023 09:13:07.7940] Discovery Response from 10.140.60.2

[jagan.chowdam]

Have you verified the AP compatibility with EWC?

Check "Table 5. Cisco Embedded Wireless Controller and Supported Access Points" from the compatibility matrix given below.

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#c9800-embed-ctr-ap_support

If it is listed as supported AP model, then have you configured correct time & proper country code in WLC?

Also, verify Wireless Management Trustpoint on EWC - 

show wireless management trustpoint

Jagan Chowdam

/**Pl rate useful responses**/

[datin]

yes my AP is compatibility witch EWC my ap  9115AX
I've only just configured the IP and hostname, nothing else

[marce1000]

     >... Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
               - What is the AP model ? What software version is the EWC based controller running ?

 M.

[datin]

ap model 9115AXE-F
version EWC 17.9.4

[marce1000]

  - Check if the particular country code is available and configured in the EWC , 

 M.

[datin]

my EWC is 

Configured Country.......................... ID - Indonesia
Configured Country Codes
ID - Indonesia 802.11a Indoor,Outdoor/ 802.11b Indoor,Outdoor/ 802.11g Indoor,Outdoor

[marce1000]

                 >...Configured Country.......................... ID - Indonesia
  - Check controller logs too when the AP tries to join
  - Have a checkup of the EWC controller configuration using the CLI command show tech wireless and feed the output into :
                                                                                                                                                   Wireless Config Analyzer

 - Further analyze the problem according to instructions found in : https://logadvisor.cisco.com/logadvisor/wireless/9800/9800APJoin

 M.

[datin]

when i plug in the cable the log is 

DISJOIN: Chassis 2 R0/0: wncd: AP Event: AP Name: AP6871.619E.C7A4 Mac: Session-IP: 192.168.1.13 [5258] 192.168.1.2 [5246] Disjoined Certificate verify failed

[marce1000]

  - Check if EWC controller has correct time (set) and or use an NTP server for time synchronization , 

 M.

[jagan.chowdam]

EWC AP Model: ?

EWC AP Version: 17.9.4

Subordinate AP Model: 9115AXE-F

Subordinate AP Version: ?

Reboot Subordinate AP and share complete boot log: