cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2003
Views
0
Helpful
6
Replies

AP 3802 can't join WLC 2504

G3000LEE
Level 1
Level 1

Currently, the WLC currently has 2702 AP already joined, but the 3802 will not join the WLC. 

 

This is a Lab setup with basic config and no security enhancement like ACLs.

If someone who has worked on the 2504 or is very skilled in wireless can help me out, that would be very helpful.

 

WLC software: 8.5.171

 

WLC SWITCH CONFIG:

LAB-CORE#show run int gi1/0/37

interface GigabitEthernet1/0/37

 switchport mode trunk

 spanning-tree portfast trunk

 

AP SWITCH CONFIG:

interface GigabitEthernet1/0/1

 switchport access vlan 103

 switchport mode access

 spanning-tree portfast edge

 

WLC CLI OUTPUTS:

(Cisco Controller) >show ap join stats summary all

Number of APs.............................................. 3

Base Mac             AP EthernetMac       AP Name                 IP Address         Status

00:3a:7d:a2:6b:40    00:42:68:fc:02:20    USS_LAB-AP1             172.16.103.62      Joined   

78:72:5d:f9:0f:c0    N A                  AP7872.5DF7.030E        172.16.103.48      Not Joined

 

 

(Cisco Controller) >show ap join stats detailed 78:72:5d:f9:0f:c0

Sync phase statistics

- Time at sync request received............................ Not applicable

- Time at sync completed................................... Not applicable

 

Discovery phase statistics

- Discovery requests received.............................. 7

- Successful discovery responses sent...................... 7

- Unsuccessful discovery request processing................ 0

- Reason for last unsuccessful discovery attempt........... Not applicable

- Time at last successful discovery attempt................ Mar 24 13:43:09.011

- Time at last unsuccessful discovery attempt.............. Not applicable

 

Join phase statistics

- Join requests received................................... 0

- Successful join responses sent........................... 0

- Unsuccessful join request processing..................... 0

- Reason for last unsuccessful join attempt................ Not applicable

- Time at last successful join attempt..................... Not applicable

- Time at last unsuccessful join attempt................... Not applicable

 

Configuration phase statistics

 

--More-- or (q)uit

- Configuration requests received.......................... 0

- Successful configuration responses sent.................. 0

- Unsuccessful configuration request processing............ 0

- Reason for last unsuccessful configuration attempt....... Not applicable

- Time at last successful configuration attempt............ Not applicable

- Time at last unsuccessful configuration attempt.......... Not applicable

 

Last AP message decryption failure details

- Reason for last message decryption failure............... Not applicable

 

Last AP disconnect details

- Reason for last AP connection failure.................... Not applicable

- Last AP disconnect reason................................ Not applicable

 

Last join error summary

- Type of error that occurred last......................... None

- Reason for error that occurred last...................... Not applicable

- Time at which the last join error occurred............... Not applicable

 

AP disconnect details

- Reason for last AP connection failure.................... Not applicable

 

 

On a side note.

I have another post open for the same WLC where I am having issues with accessing the WLC from another network. If you work with WLC and know about the 2504 please take a look and see if you can help me out.

https://community.cisco.com/t5/wireless/wlc-2504-can-t-access-cli-or-gui-from-a-different-subnet/m-p/4577838#M239997

6 Replies 6

Factory reset the AP and try to join with a console cable on it just to see the logs. I´d say the problem may be on the Access Point as it seems that the join request is comming and the join response is being sending plus you already have access point on it.

On the switch, let the config for the access point port as simple as possible. Only switchport mode access and switchport access vlan 103

 

 

Agree with Flavio, also make sure you have enough license and on dhcp you don’t have option 60, vendor class identifier set for 2700 only. 

-hope this helps-

This is a brand new AP out of a sealed box that I opened today.

I have access to just about every hardware possible due to the company I work for.  I have added other AP 2702 and they all join so it's not a licence issue, also I know how to check for that.

 

I am mainly a route and switch guy but I have deployed vWLC, the old 2106 and recently for a customer a 9800 WLC. I am only having issues with this 2504 model.

[*03/24/2022 15:28:41.2069] CAPWAP State: DTLS Teardown
[*03/24/2022 15:28:41.2122] DTLS: Error while processing DTLS packet 0x22af000.
[*03/24/2022 15:28:45.9429]
[*03/24/2022 15:28:45.9429] CAPWAP State: Discovery
[*03/24/2022 15:28:45.9446] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*03/24/2022 15:28:45.9454] Discovery Response from 172.16.103.100
[*03/24/2022 15:28:55.0000]
[*03/24/2022 15:28:55.0000] CAPWAP State: DTLS Setup
[*03/24/2022 15:28:55.0004] dtls_connectionDB_add_connection: Number of DTLS connections exceeded two
[*03/24/2022 15:28:55.1965] dtls_load_ca_certs: LSC Root Certificate not present
[*03/24/2022 15:28:55.1965]
[*03/24/2022 15:28:55.1983] dtls_verify_con_cert: Controller certificate verification error
[*03/24/2022 15:28:55.1983] dtls_process_packet: controller cert verification failed
[*03/24/2022 15:28:55.1995] DTLS: Received packet 0x22af000 caused DTLS to close connection
[*03/24/2022 15:28:55.1995] sendPacketToDtls: DTLS: Closing connection 0x226fa00.
[*03/24/2022 15:28:55.1995]
[*03/24/2022 15:28:55.1995] Lost connection to the controller, going to restart CAPWAP...
[*03/24/2022 15:28:55.1995]
[*03/24/2022 15:28:55.1997] DTLS: Error while processing DTLS packet 0x22b1000.
[*03/24/2022 15:28:55.1997] Restarting CAPWAP State Machine.
[*03/24/2022 15:28:55.2043] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Setup(3).
[*03/24/2022 15:28:55.2049] Failed to disconnect DTLS-CTRL session.

believe you are hitting this issue

https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html 

For the 3800 look at this bug

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb93909 

*****Help out other by using the rating system and marking answered questions as "Answered"*****
*** Please rate helpful posts ***
Review Cisco Networking for a $25 gift card