AP C9800-CL doesn't join

[michel.koenig@ncc-info.com]

Hello,

Setup a new C9800-CL and no AP join

I try a 2802I and a 9115

Nothing in the log

But regarding a wirshark trace from the C9800 the CAPWAP request are there

I try several setup with one or more interfaces, Trunk or native, dhcp or external dhcp

Really don't have more idea

Michel

[Oleg Volkov]

Can You connect to console port on AP and watch log on it?

[michel.koenig@ncc-info.com]

Not yet, I'm not on my office

But I remember that I see several attempt that send the join process

[Oleg Volkov]

Do AP obtain IP address from DHCP?

Can You ping AP from WLC?

[michel.koenig@ncc-info.com]

Yes, I have an IP received from an external dhcp and I can ping my AP from the WLC

Also, if I make a packet dump with the C9800, I can see with Wireshhark that the CAPWAP request are received by the WLC

[Oleg Volkov]

But log on WLC is not show any message?

[Dustin Anderson]

I have not worked with a 9800, but when I have seen stuff like this, it can be a mis-match of the regulatory domain of the AP vs the controller. It could also be a date/time mis-match.

[Scott Fella · Accepted solution]

Did you create the certificate? It is mandatory for the 9800-CL.

Step 11
A certificate is needed for the AP to join the virtual C9800. This can be created automatically via the DAY 0 flow or manually using the following commands.
Specify the interface to be the wireless management interface
C9800(config)#wireless management interface vlan 122
In exec mode, issue the following command:
C9800(#wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0
Configuring vWLC-SSC…
Script is completed
This is a script the automates the whole certificate creation:
Verifying Certificate Installation:
C9800#show wireless management trustpoint
Trustpoint Name : ewlc-default-tp
Certificate Info : Available
Certificate Type : SSC
Certificate Hash : e55e61b683181ff0999ef317bb5ec7950ab86c9e
Private key Info : Available
Note
You can skip the certificate/trustpoint configuration but if you do it, APs will not able to join. You would need to go to the GUI and configure it from there by importing the desired certificate.

[michel.koenig@ncc-info.com]

Thank you for your help

I apply both last reply to this post and it is now working

I will scratch my config and redo a full install to be able to know witch one help to solve my issue

Michel