AP not join controller

[athan1234]

Hello

This AP was working fine a week ago. For some reason, the Ap is not JOIN to the controller.

Do you have any ideas?

(Cisco Controller) show> sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.0.133.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.95.16
Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
Build Type....................................... DATA + WPS

[Flavio Miranda]

Hi  @athan1234 

 This can be due certificate expired. Did you try the command ?

config ap cert-expiry-ignore mic enable

[athan1234]

 Hi @Flavio Miranda On the AP ?

[Flavio Miranda]

On the WLC.

[athan1234]

 @Flavio Miranda  This command has an effect on either the controller or the clients.

[Flavio Miranda]

@athan1234  What´s is that? Sorry did not follow you here.

 this command aims to not refuse the AP in case the certificate is expired. The AP and the WLC use a x509 certificate in order to validate each other. But the certicate expired after 10 years and that can be the case for this AP.

[sufee]

study!Think you!

[athan1234]

Hi @Flavio Miranda  thanks

[Flavio Miranda]

 It was a good try. Which WLC model is it?

[athan1234]

yes, it is  WLC 5508

[Flavio Miranda]

Make sure the AP is permited on the WLC. 2702E requires that the mac address is permited.

In SECURITY> AP Poilcy

If not, add the mac address of the AP there. There is a button on the top right side "add"

[athan1234]

ok

[Flavio Miranda]

It seems you dont as the option "Authorize MIC APs against auth-list or AAA." is not checked.

The last thing I would recommend is factory reset the AP and see if it join.

You can use the mode button for that or use the command "capwap ap erase all" on the AP.

[athan1234]

What happend if i check  the opcion Authorize MIC APs against auth-list or AAA the AP was registred?

for the other hand

For this AP, I only have a control remote. I can now access the Ip by using the command "capwap ap erase all." after of that i will have remote access as well

[Flavio Miranda]

Dont check this option if you do not use it before. This can cause all your working AP to drop from the WLC.

If you have remote access to the AP you can run the command. The worst case scenarion the AP will stay out of the WLC anyway.