AP Failed to complete DTLS handshake

[OSMANMOH]

Dear all,

I have AIR-CT5508-K9 wireless controller - OS 7.4.100.60

Without any notice, all APs Air-cap26 are disconnected !

Logs error message : spamApTask4: Apr 06 15:09:16.301: #DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:681 Failed to complete DTLS handshake with peer

I tried

config auth-list ap-policy ssc enable
config certificate ssc hash validation disable

But nothing worked ! any idea how to solve this ?

Thanks,

[balaji.bandi]

Is this new Setup - working one failing ? (any upgrades ?) Is this only one AP - any other AP working as expected ? Post complete boot logs of AP

or check FN - https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html

try some troubleshooting methods :

https://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/119286-lap-notjoin-wlc-tshoot.html

[Wilferson Cabreja Del Rosario]

Hi @OSMANMOH ,
I have experienced this several times and most of the cases it was a Certificate issue. Have you installed a third party Certificate in the WLC?

I almost always fixed the problem by changing the Date in the WLC to 1 or two months in the past (Example: February 01, 2023). After the APs connect again. you can change the date to the correct date for Troubleshooting reasons with Syslog and other tools.

[Daniel Ordóñez Flores]

Hi @OSMANMOH 

Can you share the output from the AP, we need to know what's going in in that side.

If you. can shared the complete boot and haunting process for WLC it will help