AP NOT JOINING WLC

[isaaco001]

Dear community, 

I have an AP 1542 outdoor and wlc 3504. The Ap can't join the controller. I keep on getting this error. On the GUI i see radius authorization of the ap has failed. But no Ap policies is enabled!

[*10/22/2021 14:09:42.0499] GOING BACK TO DISCOVER MODE
[*10/22/2021 14:09:42.0499]
[*10/22/2021 14:09:42.0499] CAPWAP State: DTLS Teardown
[*10/22/2021 14:09:46.9199]
[*10/22/2021 14:09:46.9199] CAPWAP State: Discovery
[*10/22/2021 14:09:46.9399] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*10/22/2021 14:09:46.9399] Discovery Response from 10.1.9.2
[*10/22/2021 14:09:57.0000] can't find the Ip from discoveryRequest array
[*10/22/2021 14:09:57.0000]
[*10/22/2021 14:09:57.0000]
[*10/22/2021 14:09:57.0000] CAPWAP State: DTLS Setup
[*10/22/2021 14:09:57.6799]
[*10/22/2021 14:09:57.6799] CAPWAP State: Join
[*10/22/2021 14:09:57.6899] Sending Join request to 10.1.9.2 through port 5248
[*10/22/2021 14:09:57.6899] Join Response from 10.1.9.2
[*10/22/2021 14:09:57.6899] AC rejected join request[10], try again later.
[*10/22/2021 14:09:57.6999]
[*10/22/2021 14:09:57.8199]
[*10/22/2021 14:09:57.8199] CAPWAP State: Image Data
[*10/22/2021 14:09:57.8999] do NO_UPGRADE, part2 is active part
[*10/22/2021 14:09:57.8999]
[*10/22/2021 14:09:57.8999] CAPWAP State: Configure
[*10/22/2021 14:09:57.9099] DOT11_CFG[0] Radio Mode is changed from Bridge to Bridge
[*10/22/2021 14:09:57.9099] DOT11_CFG[1] Radio Mode is changed from Bridge to Bridge
[*10/22/2021 14:10:00.7999]

AP show version

---------------

AP045F.B984.59A8 uptime is 0 days, 0 hours, 11 minutes
Last reload time : Fri Oct 22 09:21:53 UTC 2021
Last reload reason : unknown

cisco AIR-AP1542I-E-K9 ARMv7 Processor rev 5 (v7l) with 1016204/826552K bytes of memory.
Processor board ID FGL2441L99M
AP Running Image : 8.5.140.0
Primary Boot Image : 8.5.140.0
Backup Boot Image : 0.0.0.0
1 Gigabit Ethernet interfaces
2 802.11 Radios
Radio FW version : 1fdd5a71aaea29d5ce69b095bba594c5
NSS FW version : not available

Base ethernet MAC Address : 04:5F:B9:84:59:A8
Part Number : 0-0000-00
PCA Assembly Number : 074-112276-02
PCA Revision Number : A2
PCB Serial Number : FOC243917B1
Top Assembly Part Number : 068-101149-01
Top Assembly Serial Number : FGL2441L99M
Top Revision Number : A0
Product/Model Number : AIR-AP1542I-E-K9

AP045F.B984.59A8> [*10/22/2021 14:11:20.9499] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Setup(3).
[*10/22/2021 14:11:25.9699] dtls_disconnect: ERROR shutting down dtls connection ...
[*10/22/2021 14:11:25.9699]
[*10/22/2021 14:11:25.9699]
[*10/22/2021 14:11:25.9

WLC SHOW VERSION

--------------------

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Build Info....................................... Engineering Special
Product Version.................................. 8.5.140.0
RTOS Version..................................... 8.5.140.0
Bootloader Version............................... 8.5.103.0
Emergency Image Version.......................... 8.5.103.0

OUI File Last Update Time........................ N/A
Build Type....................................... DATA + WPS

System Name...................................... 
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.2427

--show time---

Cisco Controller) >show time

Time............................................. Fri Oct 22 14:16:03 2021

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
NTP Version.................................. 3
NTP Polling Interval......................... 600

Index NTP Key Index NTP Server Status NTP Msg Auth Status
------- ---------------------------------------------------------------------

Redundancy Mode.................................. Disabled
IP Address....................................... 10.1.9.2
IPv6 Address..................................... ::
Last Reset....................................... Soft reset due to RST_SOFT_RST write
System Up Time................................... 0 days 0 hrs 21 mins 28 secs
System Timezone Location.........................

--More-- or (q)uit
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... KN - Kenya
Operating Environment............................ Commercial (10 to 35 C)
Internal Temp Alarm Limits....................... -10 to 80 C
Internal Temperature............................. +64 C
Mgig Temp Alarm Limits........................... -10 to 78 C
Mgig Temperature................................. +49 C
External Temp Alarm Limits....................... -10 to 71 C
External Temperature............................. +42 C
Fan Status....................................... OK
Fan Speed Mode................................... Disable

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

OUI Classification Failure Count................. 0

Memory Current Usage............................. 34
Memory Average Usage............................. 34

--More-- or (q)uit
CPU Current Usage................................ 0
CPU Average Usage................................ 0

Flash Type....................................... Compact Flash Card
Flash Size....................................... 1073741824

Burned-in MAC Address............................ AC:4A:56:6A:9E:00
Maximum number of APs supported.................. 150
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1/SHA2
Licensing Type................................... RTU

[marce1000]

 - Check if this thread can help :

            https://community.cisco.com/t5/wireless/ap-not-able-join-to-wlc/td-p/2375539

 M.

[isaaco001]

Hi Marce1000,

I have been through the thread and didn't see any issue as I have not
enabled Ap policy. Thanks for the prompt response!

[Leo Laohoo]

On the WLC, post the complete output to the command "sh capwap client rcb". 

Is the MAC address in the WLC GUI > Secuirty > AAA > AP policies

[isaaco001]

Leo,

Thanks for your response! 

Please see the output below as requested. I have added the MAC to the Ap policies just to see if it will work but no luck!

UEST(type 9) in CAPWAP state: Discovery(2).
show capwap client rcb
AdminState : ADMIN_ENABLED
OperationState : DISCOVERY
Name : AP045F.B984.59A8
SwVer : 8.5.140.0
HwVer : 1.0.0.0
MwarApMgrIp : 10.1.9.2
MwarName : ABC-WLC
MwarHwVer : 0.0.0.0
Location : default location
ApMode : Bridge
ApSubMode : Not Configured
CAPWAP Path MTU : 1485
CAPWAP UDP-Lite : Enabled
IP Prefer-mode : IPv4
AP Link DTLS Encryption : OFF
AP TCP MSS Adjust : Disabled
LinkAuditing : disabled
AP Group Name : default-group
Cisco Trustsec Config
AP Inline Tagging Mode : Disabled
AP Sgacl Enforcement : Disabled
AP Override Status : Disabled
AP045F.B984.59A8#[*10/22/2021 15:59:24.0000] can't find the Ip from discoveryRequest array
[*10/22/2021 15:59:24.0000]
[*10/22/2021 15:59:24.0000]
[*10/22/2021 15:59:24.0000] CAPWAP State: DTLS Setup
[*10/22/2021 15:59:24.6799]
[*10/22/2021 15:59:24.6799] CAPWAP State: Join
[*10/22/2021 15:59:24.6999] Sending Join request to 10.1.9.2 through port 5272
[*10/22/2021 15:59:24.6999] Join Response from 10.1.9.2
[*10/22/2021 15:59:24.6999] AC rejected join request[10], try again later.
[*10/22/2021 15:59:24.6999]
[*10/22/2021 15:59:24.8299]

Regards,

Isaac.

[isaaco001]

Leo,

Please see attached AP policy setting

Regards,

Isaac.

[Leo Laohoo · Accepted solution]

---

@isaaco001 wrote:

ApMode : Bridge

---

What mode is the AP meant to be?  A bridge, MESH or local?

If this is local, enter the following commands:  ap mode local

[isaaco001]

Leo,

The Ap is on the same LAN as the WLC. So it's local? Where is it configured?

Thanks!

[Scott Fella]

That command is entered on the ap itself, so you need a console.

[isaaco001]

Scott,

Thanks for the reply.

I will make the change when I access the Ap. However, what indicates that
the Ap mode should be changed from the logs I shared?

[Scott Fella]

The logs are not complete and typically these outdoor ap's are shipped in bridge mode.  You can search the internet or the forums on "how to add a mesh ap to a wlc".  There are many posts here on the forum with the same issue.  You options are to follow those guides to change the mode to local.