AP 1602E LWAPP registration issues

[Morcos Magdy]

Hello Everybody

I have an Issue with vWLC 8.3 and AP 1602E registration, it gave me the output, is it certificate issue and what shall I do to solve it ?

*Jan 11 11:44:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.14.200.100 peer_port: 5246
*Jan 11 11:45:13.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x7E2528C!

*Jan 11 11:45:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.14.200.100:5246
*Jan 11 11:45:44.067: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

Thanks

Morcos Magdy

[balaji.bandi]

is this only AP that model not working or any other working models on vWLC

i also see some bug here ? not sure is this effeting you.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCur43050/?rfs=iqvred

[Morcos Magdy]

have you any idea how to download the iOS on the AP by using WLC 

[Morcos Magdy]

i tried your solution but still the same, here are all my case from the begining

here I'm going to explain all the case, the AP 1602E can registered to the vWLC 8.3 in local mode but the Radio Slot#1 is down (attached a snapshot named local mode) and I can't see the broadcasted SSID and the vWLC gave me below logs:

*spamApTask3: Jan 12 11:14:52.291: %LWAPP-3-AP_MODE_NOT_SUPPORTED: spam_api.c:49297 AP f0:b2:e5:2a:8d:c0 is not in supported mode. Convert ap mode to flexconnect to allow Wireless client service.
*spamApTask3: Jan 12 11:14:52.291: %LOG-3-Q_IND: spam_lrad.c:11514 APs (f0:b2:e5:2a:8d:c0) regulatory domain (-E) is not supported in country (EG ), slot 80211a (1) supports -I
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR6: spam_lrad.c:11514 APs (f0:b2:e5:2a:8d:c0) regulatory domain (-E) is not supported in country (EG ), slot 80211a (1) supports -I
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR9: spam_lrad.c:12708 APs f0:b2:e5:2a:8d:c0 country code changed from () to (EG )
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR7: spam_lrad.c:11571 The system detects an invalid country code () for AP f0:b2:e5:2a:8d:c0

So I converted it to flexconnect as logs say but when it converted the AP refuses to register to the vWLC and the AP gave me below logs

*Jan 11 11:44:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.14.200.100 peer_port: 5246
*Jan 11 11:45:13.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x7E2528C!

*Jan 11 11:45:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.14.200.100:5246
*Jan 11 11:45:44.067: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

here is the output of the CMD < show ap join stats detailed > when the AP is registered in local mode (attached a snapshot named stats)

Thanks

Morcos Magdy

[marce1000]

 - Post the output of 

show ap bundle primary

                    Also make sure that  the configured country code(s) on the controller and the AP have a match.

 M.

[Morcos Magdy]

i have cisco APs 1602E and it's not compatible with my regulatory domain the compatible should be 1602I, have you any idea how to overcome this situation ?

[craig.beck]

There's not enough info in the log to determine that it's a regulatory domain issue. The E and I in the part code you posted relate to the antennas, not the domain.

Could you post a longer log for an AP join attempt please?

[Morcos Magdy]

here I'm going to explain all the case, the AP 1602E can registered to the vWLC 8.3 in local mode but the Radio Slot#1 is down (attached s snapshot named local mode) and I can't see the broadcasted SSID and it gave me below logs:

*spamApTask3: Jan 12 11:14:52.291: %LWAPP-3-AP_MODE_NOT_SUPPORTED: spam_api.c:49297 AP f0:b2:e5:2a:8d:c0 is not in supported mode. Convert ap mode to flexconnect to allow Wireless client service.
*spamApTask3: Jan 12 11:14:52.291: %LOG-3-Q_IND: spam_lrad.c:11514 APs (f0:b2:e5:2a:8d:c0) regulatory domain (-E) is not supported in country (EG ), slot 80211a (1) supports -I
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR6: spam_lrad.c:11514 APs (f0:b2:e5:2a:8d:c0) regulatory domain (-E) is not supported in country (EG ), slot 80211a (1) supports -I
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR9: spam_lrad.c:12708 APs f0:b2:e5:2a:8d:c0 country code changed from () to (EG )
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR7: spam_lrad.c:11571 The system detects an invalid country code () for AP f0:b2:e5:2a:8d:c0

So I converted it to flexconnect as logs say but when it converted the AP refuses to register to the vWLC and gave me below logs

*Jan 11 11:44:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.14.200.100 peer_port: 5246
*Jan 11 11:45:13.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x7E2528C!

*Jan 11 11:45:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.14.200.100:5246
*Jan 11 11:45:44.067: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

Thanks

Morcos Magdy

[Morcos Magdy]

(Cisco Controller) >show ap bundle primary

Error in opening Supported AP file
Supported AP's will not be displayed

Primary AP Image Size Supported AP's
---------------- ---- ------------
ap1g1 12820
ap1g2 12872
ap1g3 14872
ap1g4 21068
ap3g1 9768
ap3g2 14712
ap3g3 25252
ap801 8104
ap802 9588
c1140 8668
c1520 7384
c1550 10656
c1570 12672
c602i 3864

[Morcos Magdy]

(Cisco Controller) >show ap bundle primary

Error in opening Supported AP file
Supported AP's will not be displayed

Primary AP Image Size Supported AP's
---------------- ---- ------------
ap1g1 12820
ap1g2 12872
ap1g3 14872
ap1g4 21068
ap3g1 9768
ap3g2 14712
ap3g3 25252
ap801 8104
ap802 9588
c1140 8668
c1520 7384
c1550 10656
c1570 12672
c602i 3864

[Leo Laohoo]

Post the complete output to the following command: 

show ap join stats detailed <AP NAME>

[Morcos Magdy]

here I'm going to explain all the case, the AP 1602E can registered to the vWLC 8.3 in local mode but the Radio Slot#1 is down (attached a snapshot named local mode) and I can't see the broadcasted SSID and it gave me below logs:

*spamApTask3: Jan 12 11:14:52.291: %LWAPP-3-AP_MODE_NOT_SUPPORTED: spam_api.c:49297 AP f0:b2:e5:2a:8d:c0 is not in supported mode. Convert ap mode to flexconnect to allow Wireless client service.
*spamApTask3: Jan 12 11:14:52.291: %LOG-3-Q_IND: spam_lrad.c:11514 APs (f0:b2:e5:2a:8d:c0) regulatory domain (-E) is not supported in country (EG ), slot 80211a (1) supports -I
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR6: spam_lrad.c:11514 APs (f0:b2:e5:2a:8d:c0) regulatory domain (-E) is not supported in country (EG ), slot 80211a (1) supports -I
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR9: spam_lrad.c:12708 APs f0:b2:e5:2a:8d:c0 country code changed from () to (EG )
*spamApTask3: Jan 12 11:14:51.463: %LWAPP-3-RD_ERR7: spam_lrad.c:11571 The system detects an invalid country code () for AP f0:b2:e5:2a:8d:c0

So I converted it to flexconnect as logs say but when it converted the AP refuses to register to the vWLC and gave me below logs

*Jan 11 11:44:44.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.14.200.100 peer_port: 5246
*Jan 11 11:45:13.999: DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2214 Max retransmission count reached for Connection 0x7E2528C!

*Jan 11 11:45:43.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.14.200.100:5246
*Jan 11 11:45:44.067: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

here is the output of the CMD < show ap join stats detailed > when the AP is registered in local mode (attached a snapshot named stats)

Thanks

Morcos Magdy

[craig.beck]

You do have an invalid country code for the AP. You'll need to add the relevant country to the WLC config...

The system detects an invalid country code () for AP f0:b2:e5:2a:8d:c0

What is the full part-code for the AP?

[Morcos Magdy]

AIR-CAP1602E-E-K9

[craig.beck]

Thanks. Could you post the output from "show sysinfo" too please? Omit any sensitive info.