AP not joining WLC - Invalid country code

berembert64 · ‎05-27-2015

Hi to everyone,

I have problems to join an AP on the controller.

AP model is: AIR-AP1242G-E-K9 (They all are the same model, already 15APs on the controller)

AP is reseted to factory default.

DEBUG OUTPUT on AP

*May 27 14:35:14.631: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*May 27 14:35:24.577: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*May 27 14:35:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.100.11 peer_port: 5246

*May 27 14:35:24.001: %CAPWAP-5-CHANGED: CAPWAP changed state to

*May 27 14:35:25.386: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.100.11 peer_port: 5246

*May 27 14:35:25.388: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.100.11

*May 27 14:35:25.388: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN

*May 27 14:35:25.498: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG

*May 27 14:35:25.498: %CAPWAP-3-ERRORLOG: Starting config timer

*May 27 14:35:25.503: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.1.100.11

*May 27 14:35:25.503: %DTLS-5-PEER_DISCONNECT: Peer 10.1.100.11 has closed connection.

*May 27 14:35:25.503: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.1.100.11:5246

*May 27 14:35:25.549: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*May 27 14:35:25.552: bsnInitRcbSlot: slot 1 has NO radio

*May 27 14:35:25.559: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*May 27 14:35:25.571: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*May 27 14:35:25.574: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down

*May 27 14:35:25.575: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

DEBUG OUTPUT on controller

(Cisco Controller) >debug capwap errors enable

(Cisco Controller) >

*May 27 16:33:04.596: 00:24:50:10:d2:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 25, joined Aps =15

*May 27 16:33:04.597: 00:24:50:10:d2:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 25, joined Aps =15

*May 27 16:33:05.741: 00:26:99:d7:56:b0 Duplicate sequence number in request message

*May 27 16:33:16.103: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

*May 27 16:33:16.104: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

*May 27 16:33:16.104: 00:24:50:10:d2:a0 Regulatory Domain Mismatch: AP 00:24:50:10:d2:a0 not allowed to join. Regulatory Domain check failed.

Allow

*May 27 16:33:16.107: 00:24:50:10:d2:a0 Failed post decode processing of config status from 10.1.100.205:57808

*May 27 16:33:16.107: 00:24:50:10:d2:a0 State machine handler: Failed to process msg type = 5 state = 5 from 10.1.100.205:57808

*May 27 16:33:16.107: 00:24:50:10:d2:a0 Unable to release lock on AP database entry

*May 27 16:33:16.107: 00:24:50:10:d2:a0 Failed to parse CAPWAP packet from 10.1.100.205:57808

*May 27 16:33:16.109: Discarding non-ClientHello Handshake OR DTLS encrypted packet from 10.1.100.205:57808)since DTLS session is not established

If anyone could help, it would be wonderfull! If you need mote informations please let me know.

Thanks,

Scott Fella · ‎05-27-2015

*May 27 16:33:16.104: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

The error shows the wrong country domain. Are you sure that the other AP's are the E-K9?

-Scott

-Scott
*** Please rate helpful posts ***

berembert64 · ‎05-27-2015

Thanks for your reply, Yes absolutely sure,

We have a total of 15 APs.

Some are AIR-AP1242AG-E-K9

And some (less) others are AIR-AP1242G-E-K9

But I'm 100% sure about the E-K9. This is why i'm asking on the forum because everything seems to be correct. And I was able to properly import one AP yesterday, but the three others I have left are not working... They all are the same model.

Scott Fella · ‎05-27-2015

Stupid question, the other are all lightweight with the correct image? If you console into the AP and power cycle, what is being shown on the output?

-Scott

-Scott
*** Please rate helpful posts ***

berembert64 · ‎05-27-2015

Yes, they all are lightweight with same image.

flashfs[0]: 10 files, 3 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 15998976
flashfs[0]: Bytes used: 7424512
flashfs[0]: Bytes available: 8574464
flashfs[0]: flashfs fsck took 31 seconds.
Base ethernet MAC Address: 00:23:5e:03:1d:20
Initializing ethernet port 0...
Reset ethernet port 0...
Reset done!
ethernet link up, 100 mbps, full-duplex
Ethernet port 0 initialized: link is up
Loading "flash:/c1240-k9w8-mx.124-21a.JA/c1240-k9w8-mx.124-21a.JA"...#################################################################################################################################################################################################################################################################################################################################################################################################################################################################

File "flash:/c1240-k9w8-mx.124-21a.JA/c1240-k9w8-mx.124-21a.JA" uncompressed and installed, entry point: 0x3000
executing...

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(21a)JA, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 08-Jun-09 16:34 by prod_rel_team

Proceeding with system init

Proceeding to unmask interrupts
Initializing flashfs...

flashfs[1]: 10 files, 3 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 15998976
flashfs[1]: Bytes used: 7424512
flashfs[1]: Bytes available: 8574464
flashfs[1]: flashfs fsck took 6 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.

Radio0 present A506 7100 E8000000 A0000000 80000000 3
Radio1 not present 0 0 0 0 0 2
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-AP1242G-E-K9 (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
Processor board ID FCW1303U0B0
PowerPCElvis CPU at 262Mhz, revision number 0x0950
Last reset from power-on
LWAPP image version 6.0.182.0
1 FastEthernet interface
1 802.11 Radio(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:23:5E:03:1D:20
Part Number : 73-11479-01
PCA Assembly Number : 800-30493-01
PCA Revision Number : A0
PCB Serial Number : FOC125007KK
Top Assembly Part Number : 800-29586-03
Top Assembly Serial Number : FCW1303U0B0
Top Revision Number : A0
Product/Model Number : AIR-AP1242G-E-K9
% Please define a domain-name first.

Press RETURN to get started!

*Mar 1 00:00:07.797: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar 1 00:00:09.410: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar 1 00:00:09.540: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 75 messages)

*Mar 1 00:00:11.677: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:00:11.744: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(21a)JA, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 08-Jun-09 16:34 by prod_rel_team
*Mar 1 00:00:11.744: %SNMP-5-COLDSTART: SNMP agent on host AP0023.5e03.1d20 is undergoing a cold start
*Mar 1 00:00:11.803: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

Scott Fella · ‎05-27-2015

Did the AP get an IP address? Can you put the AP on the same subnet as the WLC and see if it will join. Also provide the show sysinfo and show ap summary from the WLC CLI.

-Scott

-Scott
*** Please rate helpful posts ***

berembert64 · ‎05-27-2015

Yep, by DHCP. I configured the same VLAN on the switch for both controller and all APs. It join for some minuts after a reset. But after image download it disappears.

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 6.0.182.0
RTOS Version..................................... 6.0.182.0
Bootloader Version............................... 7.0.220.0
Emergency Image Version.......................... N/A
Build Type....................................... DATA + WPS

System Name...................................... FRWLC
System Location.................................. France, Anglet
System Contact................................... EU Helpdesk
System ObjectID.................................. 1.3.6.1.4.1.14179.1.1.4.3
IP Address....................................... 10.1.100.10
System Up Time................................... 37 days 4 hrs 2 mins 17 secs
System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna

Configured Country............................... FR - France
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +34 C

--More-- or (q)uit
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 5
3rd Party Access Point Support................... Disabled
Number of Active Clients......................... 80

Burned-in MAC Address............................ 00:26:0B:05:02:60
Crypto Accelerator 1............................. Absent
Crypto Accelerator 2............................. Absent
Power Supply 1................................... Absent
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 25

(Cisco Controller) >show ap summary

Number of APs.................................... 15

Global AP User Name.............................. Not Configured
Global AP Dot1x User Name........................ Not Configured

AP Name Slots AP Model Ethernet MAC Location Port Country Priority
------------------ ----- ------------------- ----------------- ---------------- ---- ------- ------
volcom_ap37 2 AIR-AP1242AG-E-K9 00:07:0e:6b:aa:68 default location LAG FR 1
volcom_ap36 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:c4 default location LAG FR 1
volcom_ap38 2 AIR-AP1232AG-E-K9 00:1a:6c:17:9e:9f default location LAG FR 1
volcom_ap30 2 AIR-AP1232AG-E-K9 00:1a:6c:17:9e:a6 default location LAG FR 2
volcom_ap31 2 AIR-AP1232AG-E-K9 00:1a:6c:17:9e:a8 default location LAG FR 2
FRAP01 2 AIR-AP1242AG-E-K9 28:94:0f:a8:d7:4c Marketing Office LAG FR 1
FRAP03 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:be Stock Marketing LAG FR 1
ESAP01 2 AIR-AP1242AG-E-K9 58:8d:09:8e:36:18 Spain - next to LAG FR 1
FRAP04 2 AIR-AP1242G-E-K9 e0:2f:6d:e6:e3:46 Marketing LAG FR 1
BCNAP01 2 AIR-AP1242G-E-K9 00:26:99:d7:98:f0 Barcelona Retail LAG FR 1
FRAP05 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:62 showroom LAG FR 2
FRELAP01 2 AIR-AP1242G-E-K9 00:1d:70:96:b3:d6 default location LAG FR 1
LYSAP01 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:ba Retail Lyon LAG FR 1
CHXAP01 2 AIR-AP1242AG-E-K9 28:94:0f:a8:d7:e2 Retail Chamonix LAG FR 1

--More-- or (q)uit
NTEAP01 2 AIR-AP1242AG-E-K9 00:19:e7:d5:6b:a0 Nantes Retail LAG FR 1

Marco Gonzalez · ‎05-28-2015

Hello

Since you are using a 1242 AP that means that your access point have two radios but I notice you are having this message:

bsnInitRcbSlot: slot 1 has NO radio

Which tells me that the access point might be having a problem recognizing a radio and a hardware issue causing and explaining the whole problem.

The output from the "show controllers" on the AP should tell you some hints about this.

Please attach the output from the show controllers command from the access point and I will let you know.

bsnInitRcbSlot: slot 1 has NO radio

Stephen Rodriguez · ‎05-28-2015

Marco,

So long as the AP isn't single 5GHz radio, it should work. That has been that way since 4.x code.

Steve

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

berembert64 · ‎06-01-2015

!

interface Dot11Radio0
Radio AIR-AP1242GR, Base Address 003a.9919.3940, BBlock version 0.00, Software version 6.30.12
Serial number: GAM14391ZWP
Number of supported simultaneous BSSID on Dot11Radio0: 16
Carrier Set: Americas (US) (-A) ????????????????????????? On the sticker, it's -E-K9
Uniform Spreading Required: No
Configured Frequency: 2462 MHz Channel 11
Allowed Frequencies: 2412(1) 2417(2) 2422(3) 2427(4) 2432(5) 2437(6) 2442(7) 2447(8) 2452(9) 2457(10) 2462(11)
Listen Frequencies: 2412(1) 2417(2) 2422(3) 2427(4) 2432(5) 2437(6) 2442(7) 2447(8) 2452(9) 2457(10) 2462(11) 2467(12) 2472(13) 2484(14)
Beacon Flags: 0, Interface Flags 20105; Beacons are enabled; Probes are enabled
High Density mode disabled
Local Rx sensitivity (Config -80, Max -60, Min -11) dBm
CCA Sensitivity -60 dBm
Cell Rx sensitivity -80 dBm, CCA Sensitivity -60 dBm
Configured CCK Power: -1 dBm (level 0)
Configured OFDM Power: -1 dBm
Active power levels by rate
1.0 to 54.0 , -1 dBm
OffChnl Power: 20, Rate 1.0
Allowed CCK Power Levels: -1 2 5 8 11 14 17 20
Allowed OFDM Power Levels: -1 2 5 8 11 14 17 20
Allowed Client Power Levels: 2 5 8 11 14 17 20
Receive Antennas : right-a left-b
Transmit Antennas : right-a left-b
Antenna: external, Gain: Allowed 20, Reported 20, In Use 20
Active Rates: basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Current Rates: basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Allowed Rates: 1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
All Rates: 1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Default Rates: basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Best Range Rates: basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Best Throughput Rates: basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
Current Voice Rates: basic-5.5 basic-11.0 6.0 12.0 24.0 [disabled until voice packet-discard enabled]
Default Voice Rates: basic-5.5 basic-11.0 6.0 12.0 24.0
Managment Rates: basic-1.0
Multicast Rates: basic-1.0 basic-2.0 basic-5.5 basic-11.0
Data Rate Sensitivity (rate, SNR dB, Contention dBm)
( 1.0, 10, -93) ( 2.0, 10, -92) ( 5.5, 11, -90) (11.0, 14, -90)
( 6.0, 15, -89) ( 9.0, 16, -88) (12.0, 18, -88) (18.0, 19, -86)
(24.0, 20, -85) (36.0, 24, -81) (48.0, 27, -78) (54.0, 31, -77)
ERP settings: short slot time.
Neighbors in non-erp mode:

Number of MFP Indices: 10
RFID Tag Detection: Disabled
Multicast Address filtered: 010b.8500.0000 0140.9600.0004
Packet type filtered:
Probe limit: active off, filter on, count 0, time 0
Assoc limit: active off, count 0, time 0
Radio Management (RM) Configuration: Regular AP, Mode 1, Disabled

MCST RSCs: [0]0x0 [1]0x0 [2]0x0 [3]0x0 [4]0x0
TKIP Cum Stats: STA MIC-L-Errs MIC-R-Errs Replay C-Measure
0000.0000.0000 00000000 00000000 00000000 00000000
AES-CCMP Cum Stats: 00000000 replays discarded
QBSS Load: 0x2B, Policing Stats: Rx downgrades 0, Tx downgrades 0
Classifier Stats tx_on_up6 0, tx_on_up4 0
Configured Local Access Class Parameters
Back : cw-min 4 cw-max 10 fixed-slot 7 admission-control Off txop 0
Best : cw-min 4 cw-max 6 fixed-slot 3 admission-control Off txop 0
Video : cw-min 3 cw-max 4 fixed-slot 1 admission-control Off txop 3008
Voice : cw-min 2 cw-max 3 fixed-slot 1 admission-control Off txop 1504
SIP stats sip_udp_rx_pkt 0, sip_tcp_rx_pkt 0,

*Jun 1 10:12:40.602: %CAPWAP-3-ERRORLOG: Go join a capwap controller downlink classified_pkt 0,
uplink classified_pkt 0,
num_processed_SIP_Calls 0
Transmit queues: In Progress 0
---- Active --- In-Progress --------------- Counts --------------
Cnt Quo Bas Max Cnt Quo Bas Sent Discard Fail Retry Multi
Uplink 0 0 0 0 0 0 0 0 0 0 0 0
Voice 0 0 0 0 0 0 0 0 0 0 0 0
Video 0 0 0 0 0 0 0 0 0 0 0 0
Best 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0
*Jun 1 10:12:41.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.100.11 peer_port: 5246
*Jun 1 10:12:41.001: %CAPWAP-5-CHANGED: CAPWAP changed state to 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0
*Jun 1 10:12:42.399: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.100.11 peer_port: 5246
*Jun 1 10:12:42.401: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.100.11
*Jun 1 10:12:42.401: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
*Jun 1 10:12:42.513: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Jun 1 10:12:42.513: %CAPWAP-3-ERRORLOG: S 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Mcast 0 0 0 0 0 0 0 0 0 0 0 0
Back 0 0 0 0 0 0 0 0 0 0 0 0
BSSIDS Index Flags State tarting config timer
*Jun 1 10:12:42.518: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.1.100.11
*Jun 1 10:12:42.518: %DTLS-5-PEER_DISCONNECT: Peer 10.1.100.11 has closed connection.
*Jun 1 10:12:42.518: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.1.100.11:5246
*Jun 1 10:12:42.565: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun 1 Next Held Defer NonDefer Clients Tsf Dtim Txq
3940 0 20 0 0 0 0 0 0 0 2 0
3941 1 20 0 0 0 0 0 0 148 2 1
3942 2 20 0 0 0 0 0 0 24 2 2
3943 3 20 0 0 0 0 0 0 172 2 3
3944 4 20 0 0 0 0 0 0 12 2 4
3945 5 20 0 0 0 0 0 0 160 2 5
3946 6 20 0 0 10:12:42.566: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun 1 10:12:42.568: bsnInitRcbSlot: slot 1 has NO radio
*Jun 1 10:12:42.576: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jun 1 10:12:42.588: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 1 1 0 0 0 0 36 2 6
3947 7 20 0 0 0 0 0 0 184 2 7
3948 8 20 0 0 0 0 0 0 6 2 8
3949 9 20 0 0 0 0 0 0 118 2 9
394A 10 20 0 0 0 0 0 0 30 2 10
394B 11 20 0 0 0 0 0 0 142 2 11
394C 12 20 0 0 0 0 0 0 54 2 12
394D 13 20 0 0 0 0:12:42.619: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 1 10:12:42.620: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Jun 1 10:12:42.651: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up0 0 0 166 2 13
394E 14 20 0 0 0 0 0 0 78 2 14
394F 15 20 0 0 0 0 0 0 190 2 15
Driver TX blocks: in use 0, high 0, at reset 0, fail 0 drop 0
---Clients AID VLAN Status Age Tx Mode Enc Key Rate
RxPkts KBytes Dup Dec Mic TxPkts KBytes Retry RSSI SNR
IP Address RSC
8021x auth in prog 0 allowed 0
Vlan BSSID Clients PSP Pri HT Encr Key0 Key1 Key2 Key3 SSIDs MFP
0n 3940 0 0 0 0 0 0
17 0 flags 1 match 4
Protocol 55
Registers: io E8000000 mem 80000000 aux A0000000
0000 FF50 0000 0000 0021 0000 0000 0000
0001 0000 0000 0000 0000 0000 0000 0000
0000 0000 0000 0000 0000 0000 0000 0000
0100 0407 0000 0000 0020 0B88 F38C 0504
0000 0000 0000 0000 0223 0070 0000 AD28
00000000 73200522 13800224 7FFFDFB7 A7EF7D6D 00000000 10062880 0824E048
EEF7F7E2 00002FFF 2A68AC56 00001200 00000000 00000000 0000800C 00008041
00000000 00000000 00000000 00000000 00009AC8 00001D9C 00000000 00009754
Radio running: temp 0 C tx_power 65535 bb_code 0x0
rssi_threshold 0x0 gain offset 0 platform 2
PCI sys_id: 0xA506 subsys_id 0x7100 (0x7101)

Unicast ciphers 0x0 mcast ciphers 0x0
Rid Ring:
A0000970: 006A8000 21C6A1BC * n
Rx Ring:
A0000950: 89380000 21AF5420 * v, 89380000 21AFD310 v
A0000960: 89380000 21B01288 v, 89380000 21AF3464 v
Tx Ring:
A0000800: 00000000 00000000 * n, 00000000 00000000 n
A0000810: 00000000 00000000 n, 00000000 00000000 n
A0000820: 00000000 00000000 n, 00000000 00000000 n
A0000830: 00000000 00000000 n, 00000000 00000000 n
A0000840: 00000000 00000000 n, 00000000 00000000 n
A0000850: 00000000 00000000 n, 00000000 00000000 n
A0000860: 00000000 00000000 n, 00000000 00000000 n
A0000870: 00000000 00000000 n, 00000000 00000000 n
A0000880: 00000000 00000000 n, 00000000 00000000 n
A0000890: 00000000 00000000 n, 00000000 00000000 n
TxDn Ring:
A0000930: 802C0000 21C6A9C4 * v, 802C0000 21C6AAA4 v
A0000940: 802C0000 21C6AB84 v, 802C0000 21C6AC64 v
Multicast counters:
Internal MC counts:
0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0)

-Channel Range- -------Rates------ Max Power Allowed
1 to 11 by 1 1.0 to 11.0 20 -1 2 5 8 11 14 17 20
6.0 to 54.0 17
DOT11 Statistics (Cumulative Total/Last 5 Seconds):
RECEIVER TRANSMITTER
Host Rx K Bytes: 10360 / 90 Host Tx K Bytes: 0 / 0
Unicasts Rx: 22 / 0 Unicasts Tx: 0 / 0
Unicasts to host: 22 / 0 Unicasts by host: 0 / 0
Broadcasts Rx: 102384 / 842 Broadcasts Tx: 0 / 0
Beacons Rx: 49925 / 410 Beacons Tx: 0 / 0
Broadcasts to host: 51192 / 421 Broadcasts by host: 0 / 0
Multicasts Rx: 40 / 1 Multicasts Tx: 0 / 0
Multicasts to host: 0 / 0 Multicasts by host: 0 / 0
Mgmt Packets Rx: 1289 / 11 Mgmt Packets Tx: 0 / 0
RTS received: 0 / 0 RTS transmitted: 0 / 0
Duplicate frames: 0 / 0 CTS not received: 0 / 0
CRC errors: 49915 / 361 Unicast Fragments Tx: 0 / 0
WEP errors: 0 / 0 Retries: 0 / 0
Buffer full: 0 / 0 Packets one retry: 0 / 0
Host buffer full: 0 / 0 Packets > 1 retry: 0 / 0
Header CRC errors: 0 / 0 Protocol defers: 0 / 0
Invalid header: 1989 / 17 Energy detect defers: 0 / 0
Length invalid: 0 / 0 Jammer detected: 0 / 0
Incomplete fragments: 0 / 0 Packets aged: 0 / 0
Rx Concats: 0 / 0 Tx Concats: 0 / 0

RATE 1.0
Rx Packets: 51130 / 421 Tx Packets: 0 / 0
Rx Bytes: 9483204 / 77879 Tx Bytes: 0 / 0
RTS Retries: 0 / 0 Data Retries: 0 / 0

RATE 12.0
Rx Packets: 84 / 0 Tx Packets: 0 / 0
Rx Bytes: 12534 / 0 Tx Bytes: 0 / 0
RTS Retries: 0 / 0 Data Retries: 0 / 0

Radio resets - total:0 retries:0 failed:0
Log Buffer:

PowerPCElvis Ethernet unit 0
PHY Hardware is Broadcom BCM5914 rev. 2 (id_register: 0x40, 0x6322)

rx_intr: 0 tx_intr: 0 mac_err_isr: 0 phy_link_isr:0
Current station address 588d.0955.3dd0, default address 588d.0955.3dd0
MAL register dump:
malcr 0x0007C082 0x180
malesr 0x00000000 0x181
malier 0x0000000F 0x182
maltxcasr 0x80000000 0x184
maltxcarr 0x80000000 0x185
maltxeobisr 0x00000000 0x186
maltxdeir 0x00000000 0x187
malrxcasr 0x80000000 0x190
malrxcarr 0x80000000 0x191
malrxeobisr 0x00000000 0x192
malrxdeir 0x00000000 0x193
maltxctp0r 0x01C6AEA0 0x1A0
malrxctp0r 0x01C6ADA0 0x1C0
malrcbs0 0x00000060 0x1E0

EMAC register dump:
emacmr0 0x18000000 0x00
emacmr1 0xA1788000 0x04
emactmr0 0x00000000 0x08
emactmr1 0x380F0000 0x0C
emacrmr 0x7D180000 0x10
emacisr 0x00000002 0x14
emacier 0x00000001 0x18
emaciah 0x0000588D 0x1C
emacial 0x09553DD0 0x20
emacptr 0x0000FFFF 0x2C
emaclsah 0x0000001A 0x50
emaclsal 0xA22E1409 0x54
emacipgr 0x00000004 0x58
emacstacr 0x002F8018 0x5C
emactrtr 0x18000000 0x60
emacrwmr 0x0F002000 0x64
emacoctx 0x000623F0 0x68
emacocrx 0x00062B25 0x6C

UIC register dump:
uicsr 0x00009FA0 0xC0
uicer 0x803F0048 0xC2
uicmsr
*Jun 1 10:12:52.596: %CAPWAP-3-ERRORLOG: Go join a capwap controller 0x00000000 0xC6

PHY register dump:
3000 782D 0040 6322 05E1 C3E1 000D 2001 0000 0000 0000 0000 0000 0000 0000 0000
1000 0300 0000 0000 0200 0138 0500 0000 002F 851F 4400 008A 002F 0000 80A0
RX ring with 16 entries at 0x1C6ADA0, Buffer size 1524
Rxhead = 0x1C6ADA8 (1), Rxp = 0xE822F8 (1)
00 pak=0x1116DD4 buf=0x1B01280 status=9C00 pak_size=0
01 pak=0x1145724 buf=0x1B8D510 status=9C00 pak_size=0
02 pak=0x11305A4 buf=0x1B4DD90 status=9C00 pak_size=0
03 pak=0x11712C0 buf=0x1C10E1C status=9C00 pak_
*Jun 1 10:12:53.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.100.11 peer_port: 5246
*Jun 1 10:12:53.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Jun 1 10:12:54.402: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.100.11 peer_port: 5246
*Jun 1 10:12:54.403: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.100.11
*Jun 1 10:12:54.404: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIsize=0
04 pak=0x1115FC4 buf=0x1AFE830 status=9C00 pak_size=0
05 pak=0x112ADC0 buf=0x1B3D51C status=9C00 pak_size=0
06 pak=0x1155ED0 buf=0x1BBEE6C status=9C00 pak_size=0
07 pak=0x1156254 buf=0x1BBF900 status=9C00 pak_size=0
08 pak=0x1127C88 buf=0x1B34104 status=9C00 pak_size=0
09 pak=0x1113918 buf=0x1AF73D4 status=9C00 pak_size=0
10 pak=0x112D0E8 buf=0x1B43EE4 status=9C00 pak_size=0
11 pak=0x1151F88 buf=0x1BB3004 status=9C00 pak_size=0
12 pak=0x111E1D8 buf=0x1B16F94 status=9C00 pak_size=0
13 pak=0N
*Jun 1 10:12:54.517: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Jun 1 10:12:54.517: %CAPWAP-3-ERRORLOG: Starting config timer
*Jun 1 10:12:54.523: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.1.100.11
*Jun 1 10:12:54.523: %DTLS-5-PEER_DISCONNECT: Peer 10.1.100.11 has closed connection.
*x115FD04 buf=0x1BDCA70 status=9C00 pak_size=0
14 pak=0x1133358 buf=0x1B56714 status=9C00 pak_size=0
15 pak=0x1115C40 buf=0x1AFDD9C status=DC00 pak_size=0

TX ring with 8 entries at 0x1C6AEA0, tx_count = 0
tx_head = 0x1C6AEB0 (2), head_txp = 0xE82358 (2)
tx_tail = 0x1C6AEB0 (2), tail_txp = 0xE82358 (2)
00 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
01 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
02 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
03 pak=0x0000000 buf=0x0000000 statuJun 1 10:12:54.523: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.1.100.11:5246
*Jun 1 10:12:54.569: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun 1 10:12:54.570: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun 1 10:12:54.572: bsnInitRcbSlot: slot 1 has NO radio
*Jun 1 10:12:54.580: %LINK-5-CHANGED: Interface Dot11Radio0, changed state ts=1400 pak_size=0
04 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
05 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
06 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
07 pak=0x0000000 buf=0x0000000 status=5400 pak_size=0
0 missed datagrams, 0 overruns
0 transmitter underruns, 0 excessive collisions
0 single collisions, 0 multiple collisions
0 dma memory errors, 0 CRC errors

0 alignment errors, 0 runts, 0 giants
emac/mal specific errors:
0 rx in range, 0 rx out range
0 mal_rx_serro administratively down
*Jun 1 10:12:54.592: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 1 10:12:54.623: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 1 10:12:54.654: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up, 0 mal_tx_serr
0 mal_rx_de, 0 mal_tx_de
0 emac_int
0 mal_err_isr
0 SQE errors, 0 tx CRC errors
0 output queue fail

gohussai · ‎05-27-2015

check if the AP country matches the regulatory domain allowed on your controller. - Sometimes the issue comes from a bad communication between the AP and the controller. I would try to change the cable, or to test the AP on a small subnet close to the controller...

Also Make sure your running the latest code version on the controller. NOte: You can also manual upgrade LAP and test in LAB before moving it into production.

berembert64 · ‎05-28-2015

All are the same : E regulatory domain. And others are working very well.

Abhishek Abhishek · ‎05-27-2015

You see this message in the debug lwapp events enable command output:

Note: Some lines of the output has been moved to the second line due to space constraints.

Wed Oct 24 17:13:20 2007: 00:0b:85:91:c3:c0 Received LWAPP DISCOVERY REQUEST 
from AP 00:0b:85:91:c3:c0 to 00:0b:85:33:52:80 on port '2'
Wed Oct 24 17:13:20 2007: 00:0e:83:4e:67:00 Successful transmission of 
LWAPP Discovery-Response to AP 00:0b:85:91:c3:c0 on Port 2
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Received LWAPP JOIN REQUEST 
from AP 00:0b:85:91:c3:c0 to 00:0b:85:33:52:81 on  port '2'
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 AP ap:91:c3:c0: 
txNonce  00:0B:85:33:52:80 rxNonce  00:0B:85:91:C3:C0 
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 LWAPP Join-Request MTU path 
from AP 00:0b:85:91:c3:c0 is 1500, remote debug mode is 0
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Successfully added NPU Entry 
for AP 00:0b:85:91:c3:c0 (index 48)
Switch IP: 10.77.244.211, Switch Port: 12223, intIfNum 2, vlanId 0
AP IP: 10.77.246.18, AP Port: 7228, next hop MAC: 00:17:94:06:62:88
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Successfully transmission 
of LWAPP Join-Reply to AP 00:0b:85:91:c3:c0
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Register LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 0
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Register LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 1
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Received LWAPP CONFIGURE REQUEST 
from AP 00:0b:85:91:c3:c0 to  00:0b:85:33:52:81
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Updating IP info for AP 00:0b:85:91:c3:c0 -- 
static 0, 10.77.246.18/255.255.255.224, gtw 10.77.246.1
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Updating IP 10.77.246.18 ===> 10.77.246.18 
for AP 00:0b:85:91:c3:c0
Wed Oct 24 17:13:47 2007: spamVerifyRegDomain RegDomain set for 
slot 0 code 21 regstring -N regDfromCb -AB
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 AP 00:0b:85:91:c3:c0: 80211a Regulatory Domain 
(-N) does not match with country (US )  reg. domain -AB for the slot 0 
Wed Oct 24 17:13:47 2007: spamVerifyRegDomain RegDomain set for 
slot 1 code 21 regstring -N regDfromCb -AB
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 AP 00:0b:85:91:c3:c0: 80211bg Regulatory 
Domain (-N) does not match with country (US )  reg. domain -AB for the slot 1 
Wed Oct 24 17:13:47 2007: spamVerifyRegDomain AP RegDomain check for the country US failed
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 AP 00:0b:85:91:c3:c0: Regulatory Domain 
check Completely FAILED The AP will not be allowed to join
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 apfSpamProcessStateChangeInSpamContext: 
Deregister LWAPP event for AP 00:0b:85:91:c3:c0 slot 0
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 apfSpamProcessStateChangeInSpamContext: 
Deregister LWAPP event for AP 00:0b:85:91:c3:c0 slot 1
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Deregister LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 0
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Deregister LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 1

The message clearly indicates that there is a mismatch in the regulatory domain of the LAP and the WLC. The WLC supports multiple regulatory domains but each regulatory domain must be selected before an LAP can join from that domain. For example, the WLC that uses regulatory domain -A can only be used with APs that use regulatory domain -A (and so on). When you purchase APs and WLCs, ensure that they share the same regulatory domain. Only then can the LAPs register with the WLC.

Note: Both 802.1b/g and 802.11a radios must be in the same regulatory domain for a single LAP.

berembert64 · ‎05-28-2015

All my APs are E-Regulatory Domain. And they all are working perfectly. This is why I'm asking for help !

Here is my AP summary on the controller. All are E

(Cisco Controller) >show ap summary

Number of APs.................................... 15

Global AP User Name.............................. Not Configured
Global AP Dot1x User Name........................ Not Configured

AP Name Slots AP Model Ethernet MAC Location Port Country Priority
------------------ ----- ------------------- ----------------- ---------------- ---- ------- ------
volcom_ap37 2 AIR-AP1242AG-E-K9 00:07:0e:6b:aa:68 default location LAG FR 1
volcom_ap36 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:c4 default location LAG FR 1
volcom_ap38 2 AIR-AP1232AG-E-K9 00:1a:6c:17:9e:9f default location LAG FR 1
volcom_ap30 2 AIR-AP1232AG-E-K9 00:1a:6c:17:9e:a6 default location LAG FR 2
volcom_ap31 2 AIR-AP1232AG-E-K9 00:1a:6c:17:9e:a8 default location LAG FR 2
FRAP01 2 AIR-AP1242AG-E-K9 28:94:0f:a8:d7:4c Marketing Office LAG FR 1
FRAP03 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:be Stock Marketing LAG FR 1
ESAP01 2 AIR-AP1242AG-E-K9 58:8d:09:8e:36:18 Spain - next to LAG FR 1
FRAP04 2 AIR-AP1242G-E-K9 e0:2f:6d:e6:e3:46 Marketing LAG FR 1
BCNAP01 2 AIR-AP1242G-E-K9 00:26:99:d7:98:f0 Barcelona Retail LAG FR 1
FRAP05 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:62 showroom LAG FR 2
FRELAP01 2 AIR-AP1242G-E-K9 00:1d:70:96:b3:d6 default location LAG FR 1
LYSAP01 2 AIR-AP1242AG-E-K9 00:1b:d4:e9:41:ba Retail Lyon LAG FR 1
CHXAP01 2 AIR-AP1242AG-E-K9 28:94:0f:a8:d7:e2 Retail Chamonix LAG FR 1

--More-- or (q)uit
NTEAP01 2 AIR-AP1242AG-E-K9 00:19:e7:d5:6b:a0 Nantes Retail LAG FR 1

- See more at: https://supportforums.cisco.com/discussion/12518186/ap-not-joining-wlc-invalid-country-code#comment-10533861

mohanak · ‎05-28-2015

These errors clearly show that there is a mismatch in the regulatory domain of the LAP and the WLC. To resolve this issue, add the country for which the AP was built to the list of countries supported on the controller from Wireless > Country. We have to disable all 802.11b/g and 802.11a radios to change the controller country codes list.

In my example, configured DE, this Country supports -E- regulatory domain on AP:

The WLC can supports multiple regulatory domains but each regulatory domain must be selected before an LAP can join from that domain. When you purchase APs and WLCs, ensure that they share the same regulatory domain. Only then can the LAPs register with the WLC.

http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1300-series/product_data_sheet0900aecd80537b6a.html