AP does not join WLC.

[JustTakeTheFirstStep]

Hi.

AP does not join WLC.

The AP tries to join the WLC, but the session does not appear to be established.

Attach debug content.

May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8076] CAPWAP State: Discovery
May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8076] Discovery Request sent to 172.29.22.12, discovery type STATIC_CONFIG(1)
May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8176] Discovery Request sent to 172.29.22.12, discovery type STATIC_CONFIG(1)
May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8575] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8575] Discovery Response from 172.29.22.12
May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8575] Discovery Response from 172.29.22.12
May 11 08:13:09 kernel: [*05/11/2021 08:13:09.8575] Discovery Response from 172.29.22.12
May 11 08:13:10 kernel: [*05/11/2021 08:13:10.0575] systemd[1]: Starting dhcpv6 client watcher...
May 11 08:13:10 kernel: [*05/11/2021 08:13:10.0775] systemd[1]: Stopping DHCPv6 client...
May 11 08:13:10 kernel: [*05/11/2021 08:13:10.1475] systemd[1]: Starting DHCPv6 client...
May 11 08:13:10 kernel: [*05/11/2021 08:13:10.2474] systemd[1]: Started DHCPv6 client.
May 11 08:13:10 kernel: [*05/11/2021 08:13:10.3974] systemd[1]: Started dhcpv6 client watcher.
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] CAPWAP State: DTLS Setup
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 00ac] ClientHello
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_connectionDB_add_connection: Added Connection 0x2b4e2c00 Server [172.29.22.12]:5246 Client [172.29.22.158]:5248
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] create_dtls_connection: Creating DTLS Ctrl Connection 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 002f] HelloVerifyRequest
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 00cc] ClientHello
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_process_packet: SSL get error rc 5
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 005e] ServerHello
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_process_packet: SSL get error rc 5
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_process_packet: SSL get error rc 5
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 048a] Certificate
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 0067] CertificateRequest
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 000c] ServerHelloDone
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 0485] Certificate
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0099] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0099] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 010e] ClientKeyExchange
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 0110] CertificateVerify
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Received >>> DTLS 1.2 ChangeCipherSpec [Length 0001]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 0018] Finished
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_process_packet: SSL get error rc 5
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 ChangeCipherSpec [Length 0001]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0199] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 0018] Finished
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0699] dtls_load_ca_certs: LSC not enabled
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0699]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0799] dtls_verify_con_cert: serverAuth not set in Controller certificate!
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0799] dtls_verify_con_cert: Certificate Subject Name: /C=US/ST=California/L=San Jose/O=Cisco Systems/CN=AIR-CT5520-K9-a8b456ff51fb/emailAddress=support@cisco.com
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0799] dtls_verify_con_cert: Subject CN: AIR-CT5520-K9-a8b456ff51fb
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0799] dtls_connection_established: Connection established!
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0799]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0799] CAPWAP State: Join
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0899] Sending Join request to 172.29.22.12 through port 5248
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0899] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0899] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0899] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0899] wtpDtlsCallback: DTLS-Ctrl Connection 0x2b4e2c00 established
May 11 08:13:19 kernel: [*05/11/2021 08:13:19.0899] dtls_process_packet: dtls connection established, reset harsa_retry_count
May 11 08:13:23 kernel: [*05/11/2021 08:13:23.7485] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:13:23 kernel: [*05/11/2021 08:13:23.7485] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:13:23 kernel: [*05/11/2021 08:13:23.7485] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] wtpCloseAllDtlsConnections: Closing DTLS-CTRL connection 0x2b4e2c00.
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Alert [Length 0002] Warning Close notify
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] wtpDtlsCallback: DTLS-Ctrl Connection 0x2b4e2c00 closed
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] dtls_free_connection: Free done... for connection 0x2b4e2c00
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] dtls_connectionDB_del_connection: Deleted Connection 0x2b4e2c00, Server [172.29.22.12]:5246, Client [172.29.22.158]:5248, Count 0, rc_return 2
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622]
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5247, result (nil)
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622]
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.0622] CAPWAP State: DTLS Teardown
May 11 08:14:16 upgrade: Script called with args:[ABORT]
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.1921] upgrade.sh: Script called with args:[ABORT]
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.2321] do ABORT, part1 is active part
May 11 08:14:16 upgrade: Cleanup tmp files ...
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.2521] upgrade.sh: Cleanup tmp files ...
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.2821] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result (nil)
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.2821] Dropping dtls packet since session is not established. Peer 172.29.22.12-5246, Local 172.29.22.158-5248, conn (nil)
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.2821] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
May 11 08:14:16 kernel: [*05/11/2021 08:14:16.2821] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8076]
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8076] CAPWAP State: Discovery
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8076] Discovery Request sent to 172.29.22.12, discovery type STATIC_CONFIG(1)
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8076] Discovery Request sent to 172.29.22.12, discovery type STATIC_CONFIG(1)
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8176] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8276] Discovery Response from 172.29.22.12
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8276] Discovery Response from 172.29.22.12
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.8276] Discovery Response from 172.29.22.12
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.9475] systemd[1]: Starting dhcpv6 client watcher...
May 11 08:14:30 kernel: [*05/11/2021 08:14:30.9675] systemd[1]: Stopping DHCPv6 client...
May 11 08:14:31 kernel: [*05/11/2021 08:14:31.0375] systemd[1]: Starting DHCPv6 client...
May 11 08:14:31 kernel: [*05/11/2021 08:14:31.1574] systemd[1]: Started DHCPv6 client.
May 11 08:14:31 kernel: [*05/11/2021 08:14:31.2974] systemd[1]: Started dhcpv6 client watcher.
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] CAPWAP State: DTLS Setup
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 00ac] ClientHello
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_connectionDB_add_connection: Added Connection 0x2b4e2c00 Server [172.29.22.12]:5246 Client [172.29.22.158]:5248
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] create_dtls_connection: Creating DTLS Ctrl Connection 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 002f] HelloVerifyRequest
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 00cc] ClientHello
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_process_packet: SSL get error rc 5
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 005e] ServerHello
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_process_packet: SSL get error rc 5
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_process_packet: SSL get error rc 5
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(0)--[172.29.22.12]:5246(0) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 048a] Certificate
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 0067] CertificateRequest
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 000c] ServerHelloDone
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 0485] Certificate
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0000] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 010e] ClientKeyExchange
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0199] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0199] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 0110] CertificateVerify
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0199] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0199] dtls_cssl_msg_cb: Received >>> DTLS 1.2 ChangeCipherSpec [Length 0001]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0299] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0299] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Handshake [Length 0018] Finished
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0299] dtls_process_packet: SSL get error rc 5
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0399] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0399] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0399] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0399] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 ChangeCipherSpec [Length 0001]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0399] dtls_cssl_msg_cb: Sent <<< DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.0399] dtls_cssl_msg_cb: Sent <<< DTLS 1.2 Handshake [Length 0018] Finished
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1399] dtls_load_ca_certs: LSC not enabled
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1399]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1399] dtls_verify_con_cert: serverAuth not set in Controller certificate!
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1399] dtls_verify_con_cert: Certificate Subject Name: /C=US/ST=California/L=San Jose/O=Cisco Systems/CN=AIR-CT5520-K9-a8b456ff51fb/emailAddress=support@cisco.com
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1399] dtls_verify_con_cert: Subject CN: AIR-CT5520-K9-a8b456ff51fb
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] dtls_connection_established: Connection established!
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] CAPWAP State: Join
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] Sending Join request to 172.29.22.12 through port 5248
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] wtpDtlsCallback: DTLS-Ctrl Connection 0x2b4e2c00 established
May 11 08:14:41 kernel: [*05/11/2021 08:14:41.1599] dtls_process_packet: dtls connection established, reset harsa_retry_count
May 11 08:14:45 kernel: [*05/11/2021 08:14:45.7485] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:14:45 kernel: [*05/11/2021 08:14:45.7485] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:14:45 kernel: [*05/11/2021 08:14:45.7485] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result 0x2b4e2c00
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] wtpCloseAllDtlsConnections: Closing DTLS-CTRL connection 0x2b4e2c00.
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] dtls_cssl_msg_cb: Received >>> DTLS Header [Length 000d]
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] dtls_cssl_msg_cb: Received >>> DTLS 1.2 Alert [Length 0002] Warning Close notify
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] local_in_addr_comp: Client and server addresses/port/version of 2 nodes are [172.29.22.158]:5248(65277)--[172.29.22.12]:5246(65277) [172.29.22.158]:5248--[172.29.22.12]:5246
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] wtpDtlsCallback: DTLS-Ctrl Connection 0x2b4e2c00 closed
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0522] dtls_free_connection: Free done... for connection 0x2b4e2c00
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0622] dtls_connectionDB_del_connection: Deleted Connection 0x2b4e2c00, Server [172.29.22.12]:5246, Client [172.29.22.158]:5248, Count 0, rc_return 2
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0622]
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0622] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5247, result (nil)
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0622]
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.0622] CAPWAP State: DTLS Teardown
May 11 08:15:38 upgrade: Script called with args:[ABORT]
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.1921] upgrade.sh: Script called with args:[ABORT]
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.2321] do ABORT, part1 is active part
May 11 08:15:38 upgrade: Cleanup tmp files ...
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.2521] upgrade.sh: Cleanup tmp files ...
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.2821] dtls_connection_find_using_link_info: Searching connection [172.29.22.158]:5248--[172.29.22.12]:5246, result (nil)
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.2821] Dropping dtls packet since session is not established. Peer 172.29.22.12-5246, Local 172.29.22.158-5248, conn (nil)
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.2821] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
May 11 08:15:38 kernel: [*05/11/2021 08:15:38.2821] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).

[marce1000]

 - You are not including ap-model , neither controller-model , for compatibility info's go here :

                           https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html

 M.

[saravlak · Accepted solution]

what's wlc code version, does it run AP supported version.

are correct country code enabled in wlc.
are time correct on wlc.
are license enabled in WLC and EULA accepted.

[JustTakeTheFirstStep · Accepted solution]

evaluation license has expired.

I added a license and fixed the issue.

Have a nice day.

[Leo Laohoo]

---

@JustTakeTheFirstStep wrote:

dtls_process_packet: SSL get error rc 5

---

Post the complete output to the following commands: 

1. WLC:  sh sysinfo
2. WLC:  sh time
3. WLC:  sh ap join detain <AP MAC ADDRESS>
4. AP:  sh version