AP not Joined

[hs08]

HI..

We have one AP 3500 series which not joined to the WLC. On the AP there are error 

*Jan 7 13:01:42.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.103.255.135 peer_port: 5246
*Jan 7 13:01:42.229: %DTLS-5-ALERT: Received FATAL : Certificate unknown alert from 10.103.255.135
*Jan 7 13:01:42.229: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.103.255.135:5246
*Jan 7 13:02:47.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.103.255.135 peer_port: 5246

This mean certificate on the AP is expired? 

[Leo Laohoo]

FN - 63942 - Wireless Lightweight Access Points and WLAN Controllers Fail to Create CAPWAP Connections Due to Certificate Expiration

[hs08]

Hi @Leo Laohoo 

this mean certificate in AP side is expired right, not on WLC side? How i can make sure the certificate expiry?

[Leo Laohoo]

---

@hs08 wrote:
this mean certificate in AP side is expired right, not on WLC side? How i can make sure the certificate expiry?

---

Kindly read the Field Notice first.  

[hs08]

Hi @Leo Laohoo 

How we can see the expiry of AP certificate? I see on some forum we can check by issuing show crypto pki certificates, but in y 3500 there are no show crypto command.

[Leo Laohoo]

Because you typed "crypto" wrong.  

[hs08]

Hi @Leo Laohoo 

Sorry i have typo, but actually there is no crypto command.

[Leo Laohoo]

What is the serial number of the AP?

[hs08]

SN is FOC1642297R

[Leo Laohoo]

---

@hs08 wrote:
SN is FOC1642297R

---

If no one is going to properly read the Field Notice, there is nothing I can do.  

[hs08]

The time and date is correct, we still have 24 APs joined to this WLC. Only 1 AP with that SN which not joined.