02-04-2015 04:39 AM - edited 07-05-2021 02:26 AM
Hello,
I am looking into a migration issue where an AIR-LAP1142N-T-K9 will not associate to a 7500 controller. Here are some details:
Source 5508 - 7.4.121.0 - Sao Paolo
Destination 7500 - 7.4.121.0 - Miami
AP - AIR-LAP1142N-T-K9 - LWAPP image version 7.4.121.0
AP - System image file is "flash:/c1140-k9w8-mx.152-2.JB3/c1140-k9w8-mx.152-2.JB3"
I have confirmed the following as clear:
Time, Licence, Latency, Errors, Packet Loss, Country Code, MTU:
ping 172.21.31.164 repeat 10000 source 172.21.33.78 size 576
Type escape sequence to abort.
Sending 10000, 576-byte ICMP Echos to 172.21.31.164, timeout is 2 seconds:
Packet sent with a source address of 172.21.33.78
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Success rate is 100 percent (3245/3245), round-trip min/avg/max = 141/143/189 ms
Debugging:
saopaAP9-1582787#show debug
DTLS:
DTLS ERROR debugging is on
LWAPP:
LWAPP Client ERROR display debugging is on
CAPWAP:
CAPWAP Client ERROR display debugging is on
CAPWAP console CLI allow/disallow debugging is on
In the logs I see:
*Mar 1 00:01:12.407: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Feb 4 03:56:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.21.31.164 peer_port: 5246
*Feb 4 03:56:54.149: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2051 Max retransmission count reached!
*Feb 4 03:57:23.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.21.31.164:5246
*Feb 4 03:59:50.855: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Feb 4 03:59:45.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.21.31.164 peer_port: 5246
*Feb 4 03:59:45.293: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_handshake.c:90 First fragment for seq 2 is missing
*Feb 4 03:59:45.293: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_handshake.c:90 First fragment for seq 2 is missing
*Feb 4 04:00:15.149: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2051 Max retransmission count reached!
*Feb 4 04:00:44.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.21.31.164:5246
The only odd thing I have noticed is the TX load on the AP is at 255/255 yet there is very little traffic:
MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
reliability 255/255, txload 255/255, rxload 2/255
Encapsulation ARPA, loopback not set
Keepalive not set
Full Duplex, 100Mbps, media type is T
5 minute input rate 1170000 bits/sec, 217 packets/sec
5 minute output rate 215000 bits/sec, 97 packets/sec
Other than that, I have not uncovered the issue.
Has anyone seen this before and may be able to offer some guidance?
Thanks
Dave
02-04-2015 04:51 AM
Old scenario:
WLC 5508 in Brazil...
AP : AIR-LAP1142N-T-K9...works fine
New Scenario:
WLC 7500 in USA
AP :AIR-LAP1142N-T-K9
As per USA regulation AP must be in -A- domain.
It can be the reason.
paste this info from new WLC(7500): sh sysinfo
Regards
Don't forget to rate helpful posts
02-04-2015 05:00 AM
Hi Sandeep,
Strangely, we can migrate 12 out of 18, then get this type of msg above and start searching or failing back to local wlc.
Old scenario (local LAN - both Sao Paolo):
WLC 5508 in Brazil...
AP : AIR-LAP1142N-T-K9...works fine
New Scenario:
WLC 7500 in USA
AP :AIR-LAP1142N-T-K9
7500 Support:
Configured Country............................... Multiple Countries:AR,BR,CA,CO,GB,JM,MX,US,VE
02-04-2015 05:11 AM
If you configured both country code(BR and US) then its not a problem of regulatory domain.
I am not sure but it can be a bug....
https://tools.cisco.com/bugsearch/bug/CSCul08933/?referring_site=bugqvinvisibleredir
https://tools.cisco.com/bugsearch/bug/CSCum50960/?referring_site=bugqvinvisibleredir
Regards
02-04-2015 05:16 AM
Hi, I don't think it relates to those, first is MTU and I have checked that, second is about re-joining, but this is just moving AP's. But thanks for the input.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide