AP fetal error

[Amr Ibrahim Ali Henedi]

HI 

I have WLC 2405 and access point AIR-CAP1602I-E-K9

when the access point  trying  to join to the controller i got the below log

*Jul 21 15:26:11.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.77.10.100 peer_port: 5246
*Jul 21 15:26:11.467: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.77.10.100 peer_port: 5246
*Jul 21 15:26:11.467: %CAPWAP-5-SENDJOIN: sending Join Request to 10.77.10.100
*Jul 21 15:26:29.659: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.77.10.100:5246
*Jul 21 15:26:29.711: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jul 21 15:26:29.739: %LWAPP-4-CLIENTEVENTLOG: Not sending change state post as the radio admin is down, lrad state = 5
*Jul 21 15:26:29.739: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jul 21 15:26:29.739: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Jul 21 15:26:29.743: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 21 15:26:29.775: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 21 15:26:30.743: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 21 15:26:30.771: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jul 21 15:26:30.779: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jul 21 15:26:31.763: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 21 15:26:31.771: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jul 21 15:26:31.799: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 21 15:26:31.807: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jul 21 15:26:31.815: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jul 21 15:26:32.799: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jul 21 15:26:32.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 21 15:26:32.835: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 21 15:26:33.835: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 21 15:26:39.843: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

[Rasika Nayanajith · Accepted solution]

What software code running on your 2504 ?

Pls attach "show sysinfo" from your WLC and complete console output.

[Amr Ibrahim Ali Henedi]

Dear rasika 

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.0.100.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 16.0

Build Type....................................... DATA + WPS

System Name...................................... Controller-DXB
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
IP Address....................................... 10.77.10.100
IPv6 Address..................................... ::
Last Reset....................................... Software reset
System Up Time................................... 6 days 19 hrs 1 mins 23 secs
System Timezone Location......................... (GMT +2:00) Jerusalem
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

--More or (q)uit current module or <ctrl-z> to abort

Configured Country............................... BO  - Bolivia
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +35 C
External Temperature............................. +38 C
Fan Status....................................... 4400 rpm

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 2
Number of Active Clients......................... 0

Burned-in MAC Address............................ 1C:DE:A7:07:3A:60
Maximum number of APs supported.................. 75
System Nas-Id.................................... Cisco_07:3a:64

[Sandeep Choudhary]

Hi Amr,

Check this post:

https://rscciew.wordpress.com/2014/11/29/ap-joining-issue-to-wlc-running-8-0-100-0/

Use this command on the controller: config ap dtls-wlc-mic sha1

If still not work then i would recommend to downgrade WLC to 7.6.130.0.

Regards

Don't forget to rate helpful posts

[Amr Ibrahim Ali Henedi]

After the downgrade i saw the AP1s downloading the files from the WLC after that got the below

*Jul 22 14:25:06.231: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jul 22 14:25:07.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.77.10.100 peer_port: 5246
*Jul 22 14:25:07.431: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.77.10.100 peer_port: 5246
*Jul 22 14:25:07.435: %CAPWAP-5-SENDJOIN: sending Join Request to 10.77.10.100
*Jul 22 14:25:07.435: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jul 22 14:25:07.435: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jul 22 14:25:07.435: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jul 22 14:25:07.435: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.77.10.100
*Jul 22 14:25:12.435: %CAPWAP-5-SENDJOIN: sending Join Request to 10.77.10.100

[Amr Ibrahim Ali Henedi]

The problem still exist and there is no any steps above and still can not find the AP on WLC after Download the image 

From AP

*Jul 28 09:54:41.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.77.10.100 peer_port: 5246
*Jul 28 09:54:41.463: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.77.10.100 peer_port: 5246
*Jul 28 09:54:41.463: %CAPWAP-5-SENDJOIN: sending Join Request to 10.77.10.100
*Jul 28 09:54:59.871: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.77.10.100:5246
*Jul 28 09:54:59.951: %LWAPP-4-CLIENTEVENTLOG: Not sending change state post as the radio admin is down, lrad state = 5
*Jul 28 09:54:59.951: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jul 28 09:54:59.951: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Jul 28 09:54:59.955: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 28 09:54:59.987: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 28 09:55:00.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 28 09:55:00.991: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jul 28 09:55:00.999: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jul 28 09:55:01.983: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 28 09:55:01.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jul 28 09:55:02.019: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 28 09:55:02.027: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jul 28 09:55:02.035: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jul 28 09:55:03.019: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jul 28 09:55:03.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 28 09:55:03.063: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 28 09:55:04.063: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 28 09:55:10.055: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Jul 28 09:55:10.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.77.10.100 peer_port: 5246

[Amr Ibrahim Ali Henedi]

The problem still exist and there is no any stepsfix the issue  still can not find the AP on WLC after Download the image 

From AP

*Jul 28 09:54:41.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.77.10.100 peer_port: 5246
*Jul 28 09:54:41.463: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.77.10.100 peer_port: 5246
*Jul 28 09:54:41.463: %CAPWAP-5-SENDJOIN: sending Join Request to 10.77.10.100
*Jul 28 09:54:59.871: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.77.10.100:5246
*Jul 28 09:54:59.951: %LWAPP-4-CLIENTEVENTLOG: Not sending change state post as the radio admin is down, lrad state = 5
*Jul 28 09:54:59.951: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jul 28 09:54:59.951: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Jul 28 09:54:59.955: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 28 09:54:59.987: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 28 09:55:00.955: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 28 09:55:00.991: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jul 28 09:55:00.999: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jul 28 09:55:01.983: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 28 09:55:01.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jul 28 09:55:02.019: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul 28 09:55:02.027: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jul 28 09:55:02.035: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jul 28 09:55:03.019: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jul 28 09:55:03.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul 28 09:55:03.063: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul 28 09:55:04.063: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul 28 09:55:10.055: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Jul 28 09:55:10.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.77.10.100 peer_port: 5246

[Amr Ibrahim Ali Henedi]

The problem solved by change the country WIRELESS--> country and changed to FR ,AB