Air-Cap1532E-E-K9 at WLC 2504 failed

[Hans Juergen Guenter]

Hello,
I currently have the following problem. In my test environment
I was able to successfully test the following AP. However, now
at the customer, this AP cannot connect to the WLC.
It is an AIR-CAP1532E-E-K9. The other APs are AIR-AP3802I-E-K9.
Can someone help me and tell me what I can do so that the AP
can also be managed by the WLC?
Here are the error messages I get in the WLC under log:

Spoiler

*spamApTask4: Apr 21 16:00:39.083: %CAPWAP-3-POST_DECODE_ERR: capwap_ac_sm.c:6548 Post decode processing failed for Config status from AP 70:61:7b:c5:40:e0
*spamApTask4: Apr 21 16:00:39.082: %CAPWAP-3-DTLS_CLOSED_ERR: capwap_ac_sm.c:7130 70:61:7b:c5:40:e0: DTLS connection closed forAP 192:168:10:66 (5248), Controller: 192:168:10:20 (5246) Regulatory Domain Mismatch
*spamApTask4: Apr 21 16:00:39.082: %LWAPP-3-RD_ERR4: capwap_ac_sm.c:3460 The system detects an invalid regulatory domain 802.11bg:-E 802.11a:-E for AP 70:61:7b:c5:40:e0
*spamApTask4: Apr 21 16:00:39.082: %LOG-3-Q_IND: spam_lrad.c:12263 Country code (US) not configured for AP 70:61:7b:c5:40:e0[...It occurred 2 times.!]
*spamApTask4: Apr 21 16:00:39.080: %LWAPP-3-RD_ERR8: spam_lrad.c:12263 Country code (US) not configured for AP 70:61:7b:c5:40:e0
*spamApTask2: Apr 21 16:00:30.050: %CAPWAP-3-POST_DECODE_ERR: capwap_ac_sm.c:6548 Post decode processing failed for Config status from AP 70:61:7b:b1:20:80

[Flavio Miranda]

Hello

 As per the logs, the AP have one regulatory domain and the WLC is in another regulatory domain.

The AP AIR-CAP1532E-E and AIR-AP3802I-E-K9. must be some place around Albania or Algeria and the WLC  need to have this regulatory domain selected.

 On the WLC, go to WIRELESS tal,  Then Country and Select the Country you are.

[Hans Juergen Guenter]

Hello Flavio Miranda,
as at the WLC I chose the country I am in. It is DE for Germany.

The 3802 can also connect. Only the 1532 does not want to
connect. Then he gets this error message.

What do I have to configure so that this external AP can also connect?

[Scott Fella]

Like what @Flavio Miranda mentioned, do you have the "Country Code" for that access point enabled on the controller?  Also, you need to make sure the supplemental image has been installed.

[Hans Juergen Guenter]

Hi,

So do I have to set the country code US in addition to DE
for Germany?

The IOS is already the right thing you just posted. This is
already running on the WLC and the 3802.

Then I have to wait until all clients are disconnected before
I can set the second country code remotely

[Scott Fella]

In order for the ap to join, you need to add the country code.  Now you also have to make sure that the ap that was purchased is legal for that country.  You should not install an access point manufactured for a specific regulatory domain in the wrong country.

Also, the screen shot shows that there are two different images, you need to install both.

[Hans Juergen Guenter]

Hi Scott Fella,

I had already connected the 1532 to an identical WLC. However,
that was still in my test environment. Then the AP and the WLC
were sent to the customer and now the 1532 no longer wants to
connect. But that can not be a problem too little POE power
isn't it?

[Flavio Miranda]

For external AP, you need to allow the mac address on the WLC.  On the SECURITY Tab, under AP Policies

[Hans Juergen Guenter]

Hi,

On the Security Tab under AP Policies I just can seach for a mac address. Can
you tell me how to allow the mac address there. Can you maybe make a picture.

[Flavio Miranda]

You may have an Add button above

[Hans Juergen Guenter]

Ok I see it, but I still don`t get the AP get access to the WLC.

I just have contact the TAC Support, so I can get the AES File that I don`t have.

AIR-CT2500-AP_BUNDLE-K9-8-5-182-0.aes

[Scott Fella]

Who knows, but maybe your controller has the bundle and the customer controller doesn't.  

[Hans Juergen Guenter]

Hi Scott Fella,

I just see that I don`t have tha smal file:

AIR-CT2500-AP_BUNDLE-K9-8-5-182-0.aes

I just get the other File from the Support. Because I dont have
a Service Contract.

[Hans Juergen Guenter]

Hi Scott Fella,

I'm currently waiting for the TAC support that I can get
the two files:

- AS_5500_8_5_182_7.aes
- AP_BUNDLE_5500_8_5_182_7.aes

from Cisco without having a service contract.

As long as I can wait there, maybe you can explain to me
how I can get the bundle file loaded onto the WLC without
being on site and not having a TFTP server there at the
moment.

I would be happy if you could give me a small, understandable
guide. Oh yes, I'm native German and my English isn't quite
perfect.

Best Regards

[Hans Juergen Guenter]

Hello,

I got the following image now:

AP_BUNDLE_5500_8_5_182_7.aes

Now I have to wait because the customer sends us the
AP1532. As soon as I have it with me, I can test whether
it still works on my test environment.

I still have one question, is the AP_BUNDLE_5500_8_5_182_7.aes
installed in the same way as the image AS_5500_8_5_182_7.aes?
Will all APs then restart or does this have no effect on the WLAN
network?