AP join is not successful by "ap auth pending" on new C9800

[k-baba]

I am firstly setting up C9800 , but AP join is not working and stays in "ap auth pending".

DTLS session is established by checking "Monitoring -> Wireless AP statistics -> Join statistics".

I tried adding AP mac address in "Tags-> AP -> Static" , but it did not solve the issue.

Can anyone tell me why AP joining does not proceed ?

Concerning license,

I installed 50 Aironet DNA and AP perpetual license on it.

Best Regards,

[k-baba]

I missed several information.

IOS version of C9800 is 17.3.3

AP model is AP1562I

I am not using meshing feature, and connection between AP and C9800 is wired.

[marce1000]

 - Start by reviewing the C9800 configuration for that use (CLI) : show tech wireless , have the output reviewed by : https://cway.cisco.com/tools/WirelessAnalyzer/

   If Mesh is being used too then review this document : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215100-join-mesh-aps-to-catalyst-9800-wireless.html

 M.

 M.

[k-baba]

Hello Marce,

Thank you for suggestion.

I used the tool to analyze output of "show tech wireless", but could not find cause of the issue in config.

I attach current config with masking pre-shared keys.

If there is sample config which works properly, it would be very helpful by comparing with mine.

[marce1000]

          - Did you also notice my remarks  concerning Mesh ?

 M.

[k-baba]

Since there is only one AP, I cannot utilize mesh solution.

Do you mean only meshing is the solution of this issue?

AP and WLC are wired to switch.

[Scott Fella]

If the ap is shipped in mesh mode, then there are processes you need to follow in order for the ap to join.  This is the issue many have faced when they purchase an outdoor access point.  The ap just doesn't join if you don't follow the guide.  Also, if this is a new setup, then there are also processes you need to follow in order for indoor ap's to join.

Here is a guide to review for the outdoor ap you have.

Cisco Aironet 1560 Series Outdoor Access Point Hardware Installation Guide - Troubleshooting [Cisco Aironet 1560 Series] - Cisco

[Scott Fella]

What @marce1000 was explaining to you is that your ap is configured for mesh.  You noticed this because your ap is in bridged mode which is known as mesh.  These are the same thing and requires additional steps in order for the ap to join, like you found out.

[jagan.chowdam · Accepted solution]

Console into the AP and issue the following command -

show capwap client rcp

If the ApMode shows as Bridge, then you can do one of the following

If the AP meant to be a Bridge/Mesh, then Follow the link mentioned Add AP MAC address to Configuration > Security > AAA > AAA Advanced > Device Authentication > MAC Address > + Add

If not, console into the AP and enter the following command to convert it to local mode

capwap ap mode local

CJ

/** Please rate useful responses **/

[k-baba]

Thank you CJ,

I found ap mode was bridge, and after making it local mode, AP could be joined to WLC.

[Mandu]

Exactly the answer I needed, thank you!

[PatilChandan]

Hello jagan,

i have converted ap to local mode first and then without applying any tang i have changed the mode to bridge and ap got disappear on wlc again . Do i need to apply tag and then change the mode  bridge ? Is my understanding  is correct? I refer the belwo link but they not stated when to apply tag...

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215100-join-mesh-aps-to-catalyst-9800-wireless.html