Ap1142N doesn't join with 2504 wlc

[Murad*]

hi everyone 

i have this problem with my ap and wlc 

i have this log from ap console 

*Dec 17 13:21:45.435: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.222.225
*Dec 17 13:22:03.609: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.222.225:5246
*Dec 17 13:22:03.691: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Dec 17 13:22:03.692: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Dec 17 13:22:03.696: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 17 13:22:03.745: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 17 13:22:04.691: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 17 13:22:04.722: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Dec 17 13:22:04.728: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Dec 17 13:22:05.718: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 17 13:22:05.723: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Dec 17 13:22:05.752: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 17 13:22:05.758: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 17 13:22:05.763: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 17 13:22:06.752: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Dec 17 13:22:06.757: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 17 13:22:06.786: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 17 13:22:07.785: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 17 13:22:14.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.222.225 peer_port: 5246
*Dec 17 13:22:14.436: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.222.225 peer_port: 5246

and repeat this messges appear ?!!

and this is devices info.

sh sysinfo ...

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.2.160.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 20.0

[Flavio Miranda · Accepted solution]

Hi

 This WLC have more APs ? What about license? What about certificate?

If this is a new deployment what about WLC date and time? Country code?

Can you share the AP part number? 

And which country is permitted on WLC?

 As you can see, more information is necessary to help you. 

-If I helped you somehow, please, rate it as useful.-

[Murad*]

this is new WLC device and it config with IQ region (Iraq) and this info. about license :
(Cisco Controller) >show license capacity


Licensed Feature Max Count Current Count Remaining Count
-----------------------------------------------------------------------
AP Count 15 0 15


and this about Cert.

Certificate Name: Cisco Root CA SHA2 cert
Validity :
Start : Nov 12 13:00:18 2012 GMT
End : Nov 12 13:00:18 2037 GMT

[Leo Laohoo]

Post the complete output to the following commands:
1. WLC: sh sysinfo;
2. WLC: sh time;
3. AP: sh version; and
4. AP: sh ip interface brief

It may look like DHCP Option 43 isn't enableb.

[Murad*]

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.2.160.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 20.0

(Cisco Controller) >show time

Time............................................. Sun Dec 17 15:03:19 2017

Timezone delta................................... 0:0
Timezone location................................

NTP Servers
NTP Polling Interval......................... 600

Index NTP Key Index NTP Server Status NTP Msg Auth Status
------- ----------------------------------------------------------------------------------------------

Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 15.3(3)JC7, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Tue 25-Jul-17 13:19 by prod_rel_team

ROM: Bootstrap program is C1140 boot loader
BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(23c)JA3, RELEASE SOFTWARE (fc1)

APfc99.47df.b22d uptime is 7 minutes
System returned to ROM by power-on
System image file is "flash:/c1140-k9w8-mx.153-3.JC7/c1140-k9w8-xx.153-3.JC7

APfc99.47df.b22d#sh ip int brief
Interface IP-Address OK? Method Status Protocol
BVI1 192.168.222.48 YES DHCP up up
Dot11Radio0 unassigned NO unset up up
Dot11Radio1 unassigned NO unset up up
GigabitEthernet0 unassigned NO unset up up

But notice , the management ip of WLC with differint range of ip , try to put it in the same range but the problem still the same thing .

[Leo Laohoo]

There must be some kind of a "bug" with the controller because the output of the "sh sysinfo" is normally longer. With the output posted above, it's very, very short and some of the more important (and relevant) information not included.
Same goes with the output to the command "sh version".
However, I've noticed that there is no NTP enabled.

Post the complete output to the following commands: 

1.  WLC:  sh sysinfo; and

2.  AP:  sh version

[Murad*]

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.2.160.0
Bootloader Version............................... 1.0.20
Field Recovery Image Version..................... 7.6.101.1
Firmware Version................................. PIC 20.0

Build Type....................................... DATA + WPS

System Name...................................... Mohanad
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
IP Address....................................... 192.168.188.250
IPv6 Address..................................... ::
Last Reset....................................... Power on reset
System Up Time................................... 0 days 0 hrs 8 mins 16 secs
System Timezone Location.........................
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

--More-- or (q)uit

Configured Country............................... IQ - Iraq
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +31 C
External Temperature............................. +34 C
Fan Status....................................... 3500 rpm

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0

Burned-in MAC Address............................ F8:00:C5:00:C7:20
Maximum number of APs supported.................. 75
System Nas-Id.................................... wlc
WLC MIC Certificate Types........................ SHA1/SHA2

APfc99.47df.b22d#sh ver
APfc99.47df.b22d#sh version
Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 15.3(3)JC7, RELEASE SOFTWARE (fc4)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Tue 25-Jul-17 13:19 by prod_rel_team

ROM: Bootstrap program is C1140 boot loader
BOOTLDR: C1140 Boot Loader (C1140-BOOT-M) Version 12.4(23c)JA3, RELEASE SOFTWARE (fc1)

APfc99.47df.b22d uptime is 5 minutes
System returned to ROM by power-on
System image file is "flash:/c1140-k9w8-mx.153-3.JC7/c1140-k9w8-xx.153-3.JC7"
Last reload reason:

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-LAP1142N-E-K9 (PowerPC405ex) processor (revision A0) with 98294K/32768K bytes of memory.
Processor board ID FCZ1635W0NS
PowerPC405ex CPU at 586Mhz, revision number 0x147E
Last reset from power-on
LWAPP image version 8.2.160.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: FC:99:47:DF:B2:2D
Part Number : 73-12836-05
PCB Serial Number : FOC1634FWXS
Top Assembly Part Number : 800-33775-04
Top Assembly Serial Number : FCZ1635W0NS
Top Revision Number : A0
Product/Model Number : AIR-LAP1142N-E-K9

Configuration register is 0xF

[Leo Laohoo]

Ok, please attach a console cable and reboot the AP. Post the complete boot-up process.

[Murad*]

using eeprom values

WRDTR,CLKTR: 0x85000800 0x40000000
RQDC ,RFDC : 0x80000036 0x0000020b

using ▒▒▒▒ ddr static values from serial eeprom
ddr init done

Running Normal Memtest...
Passed.
IOS Bootloader - Starting system.
FLASH CHIP: Numonyx P33
Checking for Over Erased blocks
......................................................................................................................................................................................................................................................
Xmodem file system is available.

DDR values used from system serial eeprom.
WRDTR,CLKTR: 0x85000800, 0x40000000
RQDC, RFDC : 0x80000036, 0x0000020b

PCIE0: link is up.
PCIE0: VC0 is active
PCIE1: link is up.
PCIE1: VC0 is active
PCIEx: initialization done
flashfs[0]: 34 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 32385024
flashfs[0]: Bytes used: 15714304
flashfs[0]: Bytes available: 16670720
flashfs[0]: flashfs fsck took 23 seconds.
Reading cookie from system serial eeprom...Done
Base Ethernet MAC address: fc:99:47:df:b2:2d
Ethernet speed is 100 Mb - FULL duplex
Loading "flash:/c1140-k9w8-mx.153-3.JD4/c1140-k9w8-mx.153-3.JD4"...############

File "flash:/c1140-k9w8-mx.153-3.JD4/c1140-k9w8-mx.153-3.JD4" uncompressed and installed, entry point: 0x4000
executing...
enet halted

Secondary Bootloader - Starting system.
FLASH CHIP: Numonyx P33
Checking for Over Erased blocks
......................................................................................................................................................................................................................................................
Xmodem file system is available.
flashfs[0]: 34 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 32385024
flashfs[0]: Bytes used: 15714304
flashfs[0]: Bytes available: 16670720
flashfs[0]: flashfs fsck took 6 seconds.
Reading cookie from system serial eeprom...Done
Base Ethernet MAC address: fc:99:47:df:b2:2d

Secondary bootloader Ethernet not enabled, skip ether_init
Boot CMD: 'boot flash:/c1140-k9w8-mx.153-3.JD4/c1140-k9w8-xx.153-3.JD4;flash:/c1140-k9w8-mx.153-3.JD4/c1140-k9w8-xx.153-3.JD4'
Loading "flash:/c1140-k9w8-mx.153-3.JD4/c1140-k9w8-xx.153-3.JD4"...#####################################
File "flash:/c1140-k9w8-mx.153-3.JD4/c1140-k9w8-xx.153-3.JD4" uncompressed and installed, entry point: 0x4000
executing...

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 15.3(3)JD4, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Fri 17-Mar-17 14:10 by prod_rel_team

Initializing flashfs...
FLASH CHIP: Numonyx P33
Checking for Over Erased blocks
......................................................................................................................................................................................................................................................

flashfs[2]: 34 files, 9 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 32126976
flashfs[2]: Bytes used: 15714304
flashfs[2]: Bytes available: 16412672
flashfs[2]: flashfs fsck took 8 seconds.
flashfs[2]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 1 seconds.
flashfs[4]: Initialization complete....done Initializing flashfs.

Ethernet speed is 100 Mb - FULL duplex

Radio0 present 8363 8000 90020000 0 90030000 B
Rate table has 300 entries (16 legacy/64 11n/220 11ac)

POWER TABLE FILENAME = flash:/c1140-k9w8-mx.153-3.JD4/T2.bin

Radio1 present 8363 8000 98020000 0 98030000 0
POWER TABLE FILENAME = flash:/c1140-k9w8-mx.153-3.JD4/T5.bin

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-LAP1142N-E-K9 (PowerPC405ex) processor (revision A0) with 98294K/32768K bytes of memory.
Processor board ID FCZ1635W0NS
PowerPC405ex CPU at 586Mhz, revision number 0x147E
Last reset from power-on
LWAPP image version 8.3.112.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: FC:99:47:DF:B2:2D
Part Number : 73-12836-05
PCB Serial Number : FOC1634FWXS
Top Assembly Part Number : 800-33775-04
Top Assembly Serial Number : FCZ1635W0NS
Top Revision Number : A0
Product/Model Number : AIR-LAP1142N-E-K9
% Please define a domain-name first.

Press RETURN to get started!

*Mar 1 00:00:12.141: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
*Mar 1 00:00:12.143: *** CRASH_LOG = YES

*Mar 1 00:00:13.250: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (1-6)
*Mar 1 00:00:13.251: Security Core found.

*Mar 1 00:00:13.263: Registering HW DTLS
Base Ethernet MAC address: FC:99:47:DF:B2:2D

*Mar 1 00:00:15.168: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
*Mar 1 00:00:15.345: loading Power Tables from flash:/c1140-k9w8-mx.153-3.JD4/T2.bin. Class = A
*Mar 1 00:00:15.345: record size of 2ss: 404 read_ptr: 26482A0

*Mar 1 00:00:15.418: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:16.207: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
*Mar 1 00:00:16.291: loading Power Tables from flash:/c1140-k9w8-mx.153-3.JD4/T5.bin. Class = A
*Mar 1 00:00:16.291: record size of 2ss: 404 read_ptr: 26482A0

*Mar 1 00:00:16.450: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Mar 1 00:11:08.291: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to hostname change
*Mar 1 00:11:08.292: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to hostname change
*Mar 1 00:11:08.317: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1140 Software (C1140-K9W8-M), Version 15.3(3)JD4, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Fri 17-Mar-17 14:10 by prod_rel_team
*Mar 1 00:11:08.317: %SNMP-5-COLDSTART: SNMP agent on host APfc99.47df.b22d is undergoing a cold start
*Mar 1 00:11:08.980: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface reset
*Mar 1 00:11:08.982: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:11:09.382: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:11:09.481: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to interface reset
*Mar 1 00:11:09.684: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar 1 00:11:09.684: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully

*Mar 1 00:11:16.606: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.222.48, mask 255.255.255.0, hostname APfc99.47df.b22d

*Mar 1 00:11:25.433: Currently running a Release Image
validate_sha2_block: Failed to get certificate chain
*Mar 1 00:11:25.452: Using SHA-1 signed certificate for image signing validation.%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar 1 00:11:30.336: AP image integrity check PASSED

*Mar 1 00:11:30.349: Non-recovery image. PNP Not required.

*Mar 1 00:11:30.415: validate_sha2_block:No SHA2 Block present on this AP.

*Mar 1 00:11:30.454: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:11:30.454: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
%Error opening flash:/capwap-saved-config (No such file or directory)
%Error opening flash:/capwap-saved-config-bak (No such file or directory)
*Mar 1 00:11:40.502: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 0 CLI Request Triggered
*Mar 1 00:11:41.502: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 started - CLI initiated
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (192.168.255.201)

*Dec 18 12:46:04.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:46:05.429: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:46:05.430: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.222.10
*Dec 18 12:46:10.996: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface reset
*Dec 18 12:46:10.996: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to interface reset
*Dec 18 12:46:10.997: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
*Dec 18 12:46:12.021: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:46:13.021: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:46:13.051: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 18 12:46:14.052: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Dec 18 12:46:23.614: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.222.10:5246
*Dec 18 12:46:23.664: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface is getting down
*Dec 18 12:46:23.665: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to interface is getting down
*Dec 18 12:46:23.687: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to hostname change
*Dec 18 12:46:23.687: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to hostname change
*Dec 18 12:46:23.708: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Dec 18 12:46:23.708: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Dec 18 12:46:23.711: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface reset
*Dec 18 12:46:23.712: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:46:24.708: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 18 12:46:24.738: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Dec 18 12:46:24.744: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Dec 18 12:46:25.734: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:46:25.738: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Dec 18 12:46:25.768: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 18 12:46:25.774: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 18 12:46:25.778: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 18 12:46:26.768: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Dec 18 12:46:26.773: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 18 12:46:26.802: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:46:27.801: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:46:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:46:34.432: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:46:34.433: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.222.10
*Dec 18 12:46:52.613: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.222.10:5246
*Dec 18 12:46:52.659: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface is getting down
*Dec 18 12:46:52.660: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to interface is getting down
*Dec 18 12:46:52.680: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to hostname change
*Dec 18 12:46:52.680: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to hostname change
*Dec 18 12:46:52.694: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Dec 18 12:46:52.694: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Dec 18 12:46:52.697: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface reset
*Dec 18 12:46:52.698: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:46:53.694: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 18 12:46:53.724: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Dec 18 12:46:53.730: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Dec 18 12:46:54.720: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:46:54.725: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Dec 18 12:46:54.754: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 18 12:46:54.759: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 18 12:46:54.765: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 18 12:46:55.753: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Dec 18 12:46:55.759: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 18 12:46:55.787: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:46:56.787: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:47:03.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:47:03.435: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:47:03.436: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.222.10
*Dec 18 12:47:21.616: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.222.10:5246
*Dec 18 12:47:21.661: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface is getting down
*Dec 18 12:47:21.662: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to interface is getting down
*Dec 18 12:47:21.682: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to hostname change
*Dec 18 12:47:21.682: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio1 due to hostname change
*Dec 18 12:47:21.696: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Dec 18 12:47:21.696: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Dec 18 12:47:21.699: %DOT11-5-EXPECTED_RADIO_RESET: Restarting Radio interface Dot11Radio0 due to interface reset
*Dec 18 12:47:21.700: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:47:22.697: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 18 12:47:22.726: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Dec 18 12:47:22.731: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Dec 18 12:47:23.721: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:47:23.727: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Dec 18 12:47:23.754: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Dec 18 12:47:23.761: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec 18 12:47:23.766: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec 18 12:47:24.754: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Dec 18 12:47:24.760: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec 18 12:47:24.789: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec 18 12:47:25.789: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec 18 12:47:31.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:47:31.425: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.222.10 peer_port: 5246
*Dec 18 12:47:31.426: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.222.10

[Leo Laohoo]

Can the AP ping 192.168.222.10? If yes, then what is the result with the command: capwap ap primary <WLC name> 192.168.222.10

[Murad*]

yes there are ping on the wlc and i did this config : capwap ap primary <WLC name> 192.168.222.10

but every thing still the same ?!!

[Leo Laohoo]

Firewall?

[Murad*]

no there isn't firewall in this topology 

[Murad*]

this msgs appear if this help you 

*Mar 1 00:11:25.291: Currently running a Release Image
validate_sha2_block: Failed to get certificate chain
*Mar 1 00:11:25.310: Using SHA-1 signed certificate for image signing validation.%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar 1 00:11:30.189: AP image integrity check PASSED

*Mar 1 00:11:30.203: Non-recovery image. PNP Not required.

*Mar 1 00:11:30.269: validate_sha2_block:No SHA2 Block present on this AP.

[Murad*]

and another question plz

i didn't put any config in the AP just

CAPWAP AP CONTROLLER IP ADDRESS X.X.X.X 

is this enough to join with WLC ?