AP 9120 axi Regulatory domain validation failed during configuration

[shlomoi]

Hi 

We recently purchased 13 9120AXI units, they do not join the controller for the following reason.
wncd: Error in 5c64.f16a.b580 AP will be disconnected. Regulatory domain validation failed during configuration phase.

Under regulatory domain appears IL+IO and the units still do not join.

Thanks

[Kasun Bandara]

@shlomoi hi, what is the exact AP model number of your Access point? such as C9120AXI-x

[shlomoi]

Hi,

Thanks 

[Kasun Bandara]

@shlomoi what is the WLC OS version?

according to country in capture, you need -I at end of your AP. not ROW. but according to the domain list https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html , Israel listed under ROW too. you can try check with ROW domain. use below link for more details

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217734-connect-and-join-a-row-domain-access-po.html

[shlomoi]

Hi,

This is the version, it supports ROW ?

Cisco IOS XE Software, Version 17.03.05b
Cisco IOS Software [Amsterdam], C9800 Software (C9800_IOSXE-K9), Version 17.3.5b, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2022 by Cisco Systems, Inc.
Compiled Fri 15-Jul-22 06:36 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2022 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: 16.12(3r)

WLC_Wifi_JR uptime is 1 year, 4 weeks, 4 days, 1 hour, 45 minutes
Uptime for this control processor is 1 year, 4 weeks, 4 days, 1 hour, 47 minutes
System returned to ROM by IntelResetRequest
System image file is "bootflash:C9800-L-universalk9_wlc.17.03.05b.SPA.bin"
Last reload reason: IntelResetRequest

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

License Type: Smart License is permanent
License Level: adventerprise
Next reload license Level: adventerprise
AIR License Level: AIR DNA Advantage
Next reload AIR license Level: AIR DNA Advantage

The current crypto throughput level is 0 kbps

Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco C9800-L-F-K9 (KATAR) processor (revision KATAR) with 1702734K/6147K bytes of memory.
Processor board ID FCL25510070
Router operating mode: Autonomous
4 Virtual Ethernet interfaces
4 2.5 Gigabit Ethernet interfaces
2 Ten Gigabit Ethernet interfaces
32768K bytes of non-volatile configuration memory.
16777216K bytes of physical memory.
26251263K bytes of eUSB flash at bootflash:.
26251263K bytes of eUSB flash at bootflash-1:.

Base Ethernet MAC Address : F0:1D:2D:39:28:60

Installation mode is BUNDLE

Configuration register is 0x2102

[Leo Laohoo]

Upgrade the WLC firmware to 17.9.4a.

[Kasun Bandara · Accepted solution]

@shlomoi upgrade WLC to recommended 17.9.4a

[shlomoi]

Hi, I upgraded and the AP joined the controller, but it does not broadcast the networks, which country code (IL)
suitable for (-RW)

Error in AP: 5c64.f16a.b580: country code (IL ) and regulatory domain (-RW) mismatch for slot 1

Thanks 

[Rich R]

According to the documentation the 5GHz radio is currently not supported for ROW APs in Israel.
Refer to table 3 Power Table and Supported Channels of Countries in RoW Domain:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-13/config-guide/b_wl_17_13_cg/m_country_codes.html#Cisco_Concept.dita_5017bc96-0a9f-4a0a-8f6f-344f08826671
More generally refer to https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217734-connect-and-join-a-row-domain-access-po.html#toc-hId--2068680011

If you want to know when 5GHz will be supported on ROW for Israel talk to your Cisco account team.

Also just me being picky but you started this thread saying you were using 9120AXI APs but once you shared the photo of the AP model we see it is actually a C9124AXI-ROW which is quite different because it's ROW and it's an outdoor AP model.
It's really important when starting a thread to specify the exact model of WLC and AP(s) you're using along with the software version they're running for folks to be able to help you with accurate answers.

[shlomoi]

Ok, thanks for the information, I understood that I can't use frequency 5 in Israel, but I can use 2.4? Which country code can I use to run 2.4 on this model?

[Scott Fella]

It's interesting what the spec sheet shows for supported code.  -B is supported on earlier versions and all other regulatory domains are supported 17.162. or later.

[Rich R]

You can still use Israel for 2.4 and it should already be working if you have it configured correctly.
> Error in AP: 5c64.f16a.b580: country code (IL ) and regulatory domain (-RW) mismatch for slot 1
Slot 1 is the 5GHz radio.  Slot 0 (the 2.4 GHz radio) should be fine.

You can check your WLC config using the Config Analyzer - see the link below.