Solved: Re: AP not joining WLC

Majlo97 · ‎12-18-2023

Hello to everyone,
I am basically just a beginner in networking, currently i am trying to join Cisco 3702 to joing WLC 2504
I have reseted it to rommon mode, uploaded rcvk image, it booted, after booting, it joined WLC, downloaded new image from WLC, when it rebooted after that, it cannot join WLC

Here is WLC output:

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.5.120.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 15.0

OUI File Last Update Time........................ Sun Sep 07 10:44:07 IST 2014

Build Type....................................... DATA + WPS

System Name...................................... Cisco_d7:05:35
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
IP Address....................................... 10.0.0.5
IPv6 Address..................................... ::
Last Reset....................................... Software reset
System Up Time................................... 3 days 1 hrs 34 mins 30 secs
System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna

--More-- or (q)uit
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... RS - Serbia
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +30 C
External Temperature............................. +34 C
Fan Status....................................... 4664 rpm

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 2
Number of Active Clients......................... 15

OUI Classification Failure Count................. 0

Burned-in MAC Address............................ D0:C2:82:D7:05:30
Maximum number of APs supported.................. 75
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1
Here is AP output:

APd072.dc2b.0dfc#show version
Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JF5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Tue 30-Jan-18 00:57 by prod_rel_team

ROM: Bootstrap program is C3700 boot loader
BOOTLDR: C3700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB, RELEASE SOFTWARE (fc1)

APd072.dc2b.0dfc uptime is 10 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-k9w8-mx.153-3.JF5/ap3g2-k9w8-xx.153-3.JF5"
Last reload reason: Invalid config file.

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP3702I-E-K9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID FCZ1811D0M4
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 8.5.120.0
1 Gigabit Ethernet interface

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: D0:72:DC:2B:0D:FC
Part Number : 73-15243-01
PCB Serial Number : FOC180827KX
Top Assembly Part Number : 068-05054-01
Top Assembly Serial Number : FCZ1811D0M4
Top Revision Number : A0
Product/Model Number : AIR-CAP3702I-E-K9

Configuration register is 0xF

APd072.dc2b.0dfc#show log
Syslog logging: enabled (0 messages dropped, 2 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)

No Active Message Discriminator.

No Inactive Message Discriminator.

Console logging: level debugging, 163 messages logged, xml disabled,
filtering disabled
Monitor logging: level debugging, 0 messages logged, xml disabled,
filtering disabled
Buffer logging: level debugging, 165 messages logged, xml disabled,
filtering disabled
Exception Logging: size (4096 bytes)
Count and timestamp logging messages: disabled
Persistent logging: disabled
Trap logging: level informational, 142 message lines logged
Logging to 255.255.255.255 (udp port 514, audit disabled,
link up),
120 message lines logged,
0 message lines rate-limited,
0 message lines dropped-by-MD,
xml disabled, sequence number disabled
filtering disabled
Logging Source-Interface: VRF Name:

Log Buffer (1048576 bytes):

*Mar 1 00:00:17.199: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
*Mar 1 00:00:17.655: Registering HW DTLS
set_radio_pwr_mode: bad radio unit# 0
set_radio_pwr_mode: bad radio unit# 1

*Mar 1 00:00:18.675: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
*Mar 1 00:00:18.679: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...APAVC Registering AVC licences on the AP to make sure we enable advanced PP

*Mar 1 00:00:20.011: SCHED: Ethernet Bridge Process: install watched boolean System Initialized(5D68374), os:1 ah:0APAVC Protocol list already initialized.

*Mar 1 00:00:20.011: Start STILE Activation
APAVC: Succeeded to activate all the STILE protocols.
APAVC: Registering with CFT

*Mar 1 00:00:20.255: APAVC: CFT registration of delete callback succeeded
APAVC: Reattaching Original Buffer pool for system use

*Mar 1 00:00:20.255: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:21.275: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Dec 18 14:29:19.067: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JF5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Tue 30-Jan-18 00:57 by prod_rel_team
*Dec 18 14:29:19.067: %SNMP-5-COLDSTART: SNMP agent on host ap is undergoing a cold start
*Dec 18 14:29:19.131: SCHED: Ethernet Bridge Process: remove watched boolean System Initialized(5D68374)
*Dec 18 14:29:19.131: SCHED: Ethernet Bridge Process: install watched queue Soap BVI input queue(AA6ED60), os:0 ah:0
*Dec 18 14:29:19.203: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
--More--
*Dec 18 14:40:44.339: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 18 14:40:44.403: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 18 14:40:44.403: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 18 14:40:55.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:40:55.279: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:40:55.279: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 18 14:41:13.319: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 18 14:41:13.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 18 14:41:13.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 18 14:41:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:41:23.303: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:41:23.303: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 18 14:41:41.343: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 18 14:41:41.407: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 18 14:41:41.407: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 18 14:41:51.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:41:51.279: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:41:51.283: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 18 14:42:09.323: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 18 14:42:09.387: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 18 14:42:09.387: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 18 14:42:20.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:42:20.275: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:42:20.279: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 18 14:42:38.319: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 18 14:42:38.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 18 14:42:38.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 18 14:42:48.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:42:48.279: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:42:48.279: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 18 14:43:06.319: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 18 14:43:06.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 18 14:43:06.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 18 14:43:17.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:43:17.279: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 18 14:43:17.279: %CAPWAP-5-SENDJOIN: sending Join Request t*Dec 18 14:29:19.207: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...
*Dec 18 14:29:19.211: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

I have googled this %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246 and did ap cert expire command on wlc and other command, it didn't help
10 previous AP-s have succesfully joined this WLC, but this one, nope

Thanks in advance

Leo Laohoo · ‎12-20-2023

@Majlo97 wrote:

APd072.dc2b.0dfc>set_radio_pwr_mode: bad radio unit# 0
set_radio_pwr_mode: bad radio unit# 1

Raise a TAC Case and get the AP RMAed.

The 5.0 Ghz radio is dead.

This is a very common thing. I have RMAed about 20 APs with dead 5.0 Ghz radios in the last 5 years.

View solution in original post

marce1000 · ‎12-18-2023

- Do you have sufficient licenses (for this AP (too)) ?

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Majlo97 · ‎12-18-2023

Yeah, there are 2 AP-s which are permanently there, and WLC has 6 licenses

Leo Laohoo · ‎12-18-2023

Power down the AP.

Roll back the YEAR of the WLC to 2015.

Power the AP back up.

Majlo97 · ‎12-18-2023

I will try that when i get back to equipment.
Although, wlc has been set to 2014. year

Leo Laohoo · ‎12-18-2023

And factory-reset the AP.

debug capwap console cli
clear capwap private
delete /f /r nvram:startup-config

Majlo97 · ‎12-19-2023

Hello again, i have tried this, it didn't work

Leo Laohoo · ‎12-19-2023

Console into the AP and reboot the AP.

Post the entire boot-up process.

Majlo97 · ‎12-19-2023

*Dec 20 07:30:21.303: %SYS-5-RELOAD: Reload requested by Cisco on console. Reload Reason: Reload Command.
*Dec 20 07:30:21.307: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN
Write of event.log done

*Dec 20 07:30:31.035: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 20 07:30:32.227: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 20 07:30:32.227: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

IOS Bootloader - Starting system.
flash is writable
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 50 files, 4 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 22040064
flashfs[0]: Bytes available: 19118592
flashfs[0]: flashfs fsck took 10 seconds.
Base Ethernet MAC address: d0:72:dc:2b:0d:fc
Ethernet speed is 1000 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.153-3.JF5/ap3g2-k9w8-mx.153-3.JF5"...########################

File "flash:/ap3g2-k9w8-mx.153-3.JF5/ap3g2-k9w8-mx.153-3.JF5" uncompressed and installed, entry point: 0x2003000
executing...

Secondary Bootloader - Starting system.
Montserrat Board
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.

flashfs[0]: 50 files, 4 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 22040064
flashfs[0]: Bytes available: 19118592
flashfs[0]: flashfs fsck took 11 seconds.
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 12257280
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 12256256
flashfs[1]: flashfs fsck took 0 seconds.
Base Ethernet MAC address: d0:72:dc:2b:0d:fc
Boot CMD: 'boot flash:/ap3g2-k9w8-mx.153-3.JF5/ap3g2-k9w8-xx.153-3.JF5;flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx'
Loading "flash:/ap3g2-k9w8-mx.153-3.JF5/ap3g2-k9w8-xx.153-3.JF5"...#################################################
File "flash:/ap3g2-k9w8-mx.153-3.JF5/ap3g2-k9w8-xx.153-3.JF5" uncompressed and installed, entry point: 0x1003000
executing...

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JF5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Tue 30-Jan-18 00:57 by prod_rel_team

Montserrat Board
40MB format
Tide XL MB - 40MB of flash
Initializing flashfs...

flashfs[2]: 50 files, 4 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 40900608
flashfs[2]: Bytes used: 22040064
flashfs[2]: Bytes available: 18860544
flashfs[2]: flashfs fsck took 12 seconds.
flashfs[2]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 0 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCCCC
Copy in progress...CCC
Copy in progress...CCCC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...CC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...CCCCCCCC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...C
Uncompressing radio files...
...done Initializing flashfs.

Radio0 not present 0 0 0 0 0 0
Radio1 not present 0 0 0 0 0 4
Radio2 not present 0 0 0 0 0 8
No radios initialized!
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP3702I-E-K9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID FCZ1811D0M4
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 8.5.120.0
1 Gigabit Ethernet interface

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: D0:72:DC:2B:0D:FC
Part Number : 73-15243-01
PCB Serial Number : FOC180827KX
Top Assembly Part Number : 068-05054-01
Top Assembly Serial Number : FCZ1811D0M4
Top Revision Number : A0
Product/Model Number : AIR-CAP3702I-E-K9

% : install watched boolean System Initialized(63D894C), os:1 ah:0APAVC Protocol list already initialized.

*Mar 1 00:00:20.035: Start STILE Activation
APAVC: Succeeded to activate all the STILE protocols.
APAVC: Registering with CFT

*Mar 1 00:00:20.279: APAVC: CFT registration of delete callback succeeded
APAVC: Reattaching Original Buffer pool for system use

*Mar 1 00:00:20.755: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Dec 20 07:30:21.079: %SYS-CHED: Ethernet Bridge Process: install watched queue Soap BVI input queue(C8FED94), os:0 ah:0
*Dec 20 07:30:21.223: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 20 07:30:21.223: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!
lwapp_crypto_init: MIC Present and Parsed Successfully

*Dec 20 07:30:21.411: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Dec 20 07:30:22.515: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Dec 20 07:30:27.455: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
*Dec 20 07:30:27.455: DPAA Initialization Complete
*Dec 20 07:30:27.455: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Dec 20 07:30:28.351: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Dec 20 07:30:35.371: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.0.0.137, mask 255.255.255.0, hostname APd072.dc2b.0dfc

%Default route without gateway, if not a point-to-point interface, may impact performance
*Dec 20 07:30:46.439: AP image integrity check PASSED

*Dec 20 07:30:46.447: Non-recovery image. PNP Not required.

*Dec 20 07:30:46.455: validate_sha2_block:No SHA2 Block present on this AP.

%Error opening flash:/capwap-saved-config (No such file or directory)
%Error opening flash:/capwap-saved-config-bak (No such file or directory)
*Dec 20 07:30:56.491: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 0 CLI Request Triggered
*Dec 20 07:30:57.491: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 started - CLI initiated%No matching route to delete
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (8.8.8.8)

User Access Verification

Username: Cisco
Password:
*Dec 20 07:32:35.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246

APd072.dc2b.0dfc>
*Dec 20 07:32:36.283: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:32:36.283: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
APd072.dc2b.0dfc>set_radio_pwr_mode: bad radio unit# 0
set_radio_pwr_mode: bad radio unit# 1

*Dec 20 07:32:47.363: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
*Dec 20 07:32:54.323: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 20 07:32:54.387: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 20 07:32:54.387: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 20 07:33:04.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:33:04.279: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:33:04.279: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 20 07:33:22.323: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 20 07:33:22.391: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 20 07:33:22.391: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 20 07:33:32.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:33:32.275: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:33:32.275: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
APd072.dc2b.0dfc>
*Dec 20 07:33:50.319: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 20 07:33:50.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 20 07:33:50.383: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 20 07:34:01.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:34:01.299: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.0.5 peer_port: 5246
*Dec 20 07:34:01.303: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.0.5
*Dec 20 07:34:19.343: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 20 07:34:19.407: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - EASY_ADMIN is not set, turn off easy admin service!

*Dec 20 07:34:19.407: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

Rich R · ‎12-19-2023

And to permanently fix your issues read all the field notices below carefully then upgrade your WLC to 8.5.182.11 (link below).

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

Majlo97 · ‎12-19-2023

I am going to look into this, but i am confused on how 10 previous APs didn't have this problem, and this one, oh god, it gives me headache

MHM Cisco World · ‎12-19-2023

https://wifision.nl/2018/06/05/understanding-various-ap-ios-flash-corruption-issues/

Config and image is push by wlc to AP' here Ap show error so check link to learn more about this issue

MHM

Rich R · ‎12-19-2023

Good point flash corruption was very common on the IOS APs on older versions of code.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

MHM Cisco World · ‎12-19-2023

Thanks

I do my best here to help him identify Problemsl.

MHM

Majlo97 · ‎12-19-2023

I have run fsck command, it seems like my flash aint corrupted

APd072.dc2b.0dfc#fsck flash:
Fsck operation may take a while. Continue? [confirm]
nv_done: unable to open "flash:/private-multiple-fs.new"Failed to open flash:/config.txt

nv_done: unable to open "flash:/private-multiple-fs.new"Failed to open flash:/config.txt

nv_done: unable to open "flash:/private-multiple-fs.new"
nv_done: unable to open "flash:/private-multiple-fs.new"
*Dec 20 07:40:57.439: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.0.5:5246
*Dec 20 07:40:57.639: Write of the Private File nvram:/lwapp_ap.cfg Failed on load, RCA needed
*Dec 20 07:40:57.639: Write of the Private File nvram:/lwapp_ap.cfg Failed on load, RCA needed
*Dec 20 07:40:57.643: Write of the Private File nvram:/lwapp_ap.cfg Failed on load, RCA needed
*Dec 20 07:40:57.643: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
*Dec 20 07:40:57.643: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...
*Dec 20 07:40:57.643: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - apEasyAdminConfig: there is no full image exists, continue anyway!

*Dec 20 07:40:57.643: %CAPWAP-5-AP_EASYADMIN_INFO: AP Easy Admin information - Easy Admin is not enabled, turn it off!

*Dec 20 07:40:57.651: Write of the Private File nvram:/lwapp_ap.cfg Failed on load, RCA needed
*Dec 20 07:40:57.651:
Write of the Private File nvram:/lwapp_ap.cfg Failed
*Dec 20 07:40:57.651:
Write of the Private File nvram:/lwapp_ap.cfg Failed
*Dec 20 07:40:57.651: %LWAPP-3-CLIENTERRORLOG: Save LWAPP Config: error saving config file
*Dec 20 07:40:57.651: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
*Dec 20 07:40:57.651: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...
flashfs[2]: 50 files, 4 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 40900608
flashfs[2]: Bytes used: 22019584
flashfs[2]: Bytes available: 18881024
flashfs[2]: flashfs fsck took 11 seconds.
Fsck of flash: complete

And this:

APd072.dc2b.0dfc#show file system
File Systems:

Size(b) Free(b) Type Flags Prefixes
* 40900608 18860544 flash rw flash:
- - opaque rw arch:
11999232 5703168 flash rw ram:
- - opaque rw bs:
40900608 18860544 unknown rw zflash:
- - opaque rw archive:
- - opaque rw system:
32768 6092 nvram rw nvram:
- - opaque rw tmpsys:
- - network rw tftp:
- - opaque rw null:
- - network ro capwap:
- - network ro lwapp:
- - network rw rcp:
- - network rw scp:
- - network rw ftp:
- - network rw http:
- - opaque ro tar:
- - network rw https: