cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6194
Views
17
Helpful
11
Replies

AP C9800-CL doesn't join

Hello,

Setup a new C9800-CL and no AP join

I try a 2802I and a 9115

Nothing in the log

But regarding a wirshark trace from the C9800 the CAPWAP request are there

I try several setup with one or more interfaces, Trunk or native, dhcp or external dhcp

Really don't have more idea

Michel

1 Accepted Solution

Accepted Solutions

Scott Fella
Hall of Fame
Hall of Fame
Did you create the certificate? It is mandatory for the 9800-CL.

Step 11
A certificate is needed for the AP to join the virtual C9800. This can be created automatically via the DAY 0 flow or manually using the following commands.
Specify the interface to be the wireless management interface
C9800(config)#wireless management interface vlan 122
In exec mode, issue the following command:
C9800(#wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0
Configuring vWLC-SSC…
Script is completed
This is a script the automates the whole certificate creation:
Verifying Certificate Installation:
C9800#show wireless management trustpoint
Trustpoint Name : ewlc-default-tp
Certificate Info : Available
Certificate Type : SSC
Certificate Hash : e55e61b683181ff0999ef317bb5ec7950ab86c9e
Private key Info : Available
Note
You can skip the certificate/trustpoint configuration but if you do it, APs will not able to join. You would need to go to the GUI and configure it from there by importing the desired certificate.
-Scott
*** Please rate helpful posts ***

View solution in original post

11 Replies 11

Oleg Volkov
Spotlight
Spotlight

Can You connect to console port on AP and watch log on it?

--------------------------------------------------------------------------

Helping seriously ill children, all together. All information about this, is posted on my blog

Not yet, I'm not on my office

But I remember that I see several attempt that send the join process

Do AP obtain IP address from DHCP?

Can You ping AP from WLC?

--------------------------------------------------------------------------

Helping seriously ill children, all together. All information about this, is posted on my blog

Yes, I have an IP received from an external dhcp and I can ping my AP from the WLC

 

Also, if I make a packet dump with the C9800, I can see with Wireshhark that the CAPWAP request are received by the WLC

But log on WLC is not show any message?

--------------------------------------------------------------------------

Helping seriously ill children, all together. All information about this, is posted on my blog

I have not worked with a 9800, but when I have seen stuff like this, it can be a mis-match of the regulatory domain of the AP vs the controller. It could also be a date/time mis-match.

Scott Fella
Hall of Fame
Hall of Fame
Did you create the certificate? It is mandatory for the 9800-CL.

Step 11
A certificate is needed for the AP to join the virtual C9800. This can be created automatically via the DAY 0 flow or manually using the following commands.
Specify the interface to be the wireless management interface
C9800(config)#wireless management interface vlan 122
In exec mode, issue the following command:
C9800(#wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0
Configuring vWLC-SSC…
Script is completed
This is a script the automates the whole certificate creation:
Verifying Certificate Installation:
C9800#show wireless management trustpoint
Trustpoint Name : ewlc-default-tp
Certificate Info : Available
Certificate Type : SSC
Certificate Hash : e55e61b683181ff0999ef317bb5ec7950ab86c9e
Private key Info : Available
Note
You can skip the certificate/trustpoint configuration but if you do it, APs will not able to join. You would need to go to the GUI and configure it from there by importing the desired certificate.
-Scott
*** Please rate helpful posts ***

Thank you for your help

 

I apply both last reply to this post and it is now working

 

I will scratch my config and redo a full install to be able to know witch one help to solve my issue

 

Michel

Hi All,

I'm also facing an issue where the APs are not connecting to the controller. Although the certificate is configured correctly, and I have set up the DHCP scope within the controller, two APs are assigned with IPs according to the DHCP binding. Despite being able to ping the APs from the controller, they can still not join the controller. Additionally, I haven't registered the controller with a license yet, so I'm uncertain whether it's necessary to do so for the APs to join. The AP model I'm using is C9115X.

In the logs, I cannot see any CAPWAP log.

@Allan001 You are better off opening up a new thread including your controller model, code version and any logs or screen shots.  

-Scott
*** Please rate helpful posts ***

Hi Scott, 

 

Thank you, I will do that.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: