APs do not broadcast any SSID.

[Wilferson Cabreja Del Rosario]

The client has a Catalyst 9800 WLC with software version 17.9.4a. Until now, 3 C9120AXI-E APs are joined to the controller. The APs are configured with the proper tag, the tag is configured with the proper SSIDs, the SSIDs are all enabled and also the policy are enabled. All is configured as it should be. However the SSIDs are not seen by the clients in that location.

The only thing that caught my attention was that all SSIDs hat "Fast Transition Enabled" and not "Fast transition Adaptive Enable" but I dont think this will prevent the clients from seen the SSIDs.

I checked also if the 2.4GHz and 5GHz Radios are in the "UP" state and they are.

Does anyone has an Idea of what can cause this?

[marce1000]

 - Start with checking the output from CLI :

    wireless config validate

 + Also have a complete checkup of the 9800 controller configuration using the CLI command: 

   show tech wireless

 and feed the output from that into https://cway.cisco.com/wireless-config-analyzer/

 - Use the full command , do not use a simple 'show tech' for this procedure.

 - All errors red-flagged in the wlc-checkresults tab from the Excell must always be corrected. Visit all the other tabs too and take care of warnings and errors after deliberation, 

 M.

[Simon Blomqvist]

FT/802.11r configuration shouldn't make the SSID visable or not, but it could be good to make sure that AKM for both FT and non-FT are enabled so all clients would be able to connect (for example both 802.1x and 802.1x+FT). 

• Does the SSID have broadcasting enabled?
• Do the APs receive enough power?
• If the SSID is set to do local switching, are the APs configured in flex mode?
• Is the SSID itself configured to be enabled on all bands?
• Are the APs administratively enabled?

[Leo Laohoo]

Pick any random AP having this issue and post the complete output to the following commands: 

sh ap name <NAME> tag detail

I have a suspicion this is due to the tags configured and the tags assigned to the AP do not match in "caps", i.  e.  one has capital letter(s) and the other does not, however, the spelling is correct.

[Wilferson Cabreja Del Rosario]

Hallo @Leo Laohoo  here is the output of one of the APs

AP Name : GBPOF-AP-O2I150
AP Mac : e4a4.1c73.1150

Tag Type Tag Name
-----------------------------
Policy Tag PT_Ponte_Offic_3_c9291
RF Tag Office
Site Tag ST_Ponte_Office_9a42c_0

Policy tag mapping
------------------
WLAN Profile Name Policy Name VLAN Flex Central Switching IPv4 ACL IPv6 ACL
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
WL-HBMD_ac0a617b67_profile WL-HBMD_ac0a617b67_profile 1 DISABLED Not Configured Not Configured
WL-HGPR_8d8acde496_profile WL-HGPR_8d8acde496_profile 1 DISABLED Not Configured Not Configured
WL-HGSC_d89c919943_profile WL-HGSC_d89c919943_profile 1 DISABLED Not Configured Not Configured
WL-HBINTMA_8d1f1a0675_profile WL-HBINTMA_8d1f1a0675_profile 1 DISABLED Not Configured Not Configured
WL-HGEXTMA_c9585fa1e1_profile WL-HGEXTMA_c9585fa1e1_profile 1 DISABLED Not Configured Not Configured

Site tag mapping
----------------
Flex Profile : default-flex-profile
AP Profile : default-ap-profile
Local-site : Yes

RF tag mapping
--------------
6ghz RF Policy : Office_6
5ghz RF Policy : Office_a
2.4ghz RF Policy : Office_b
2.4ghz slot 0 Radio Policy : Not Configured
5ghz slot 1 Radio Policy : Not Configured
5ghz slot 2 Radio Policy : Not Configured
6ghz slot 2 Radio Policy : Not Configured
6ghz slot 3 Radio Policy : Not Configured

[Leo Laohoo]

From the AP, does any of the SSID appear with the command "sh dot11 wlan"?

[marce1000]

  @Wilferson Cabreja Del Rosario   May I stress that you execute these tasks too , because they are of utmost importance

                      - Start with checking the output from CLI :
                              wireless config validate

-  Have an overall checkup of the  9800 controller's configuration with the CLI command
       show tech wireless and feed the output from that into Wireless Config Analyzer
      use the full command as denoted in green , do not use a simple show tech as input for this procedure

 - All errors red-flagged in the wlc-checkresults tab from the Excell must always be corrected. Visit all the other tabs too and take care of warnings and errors after deliberation, 

 M.

[MHM Cisco World]

Policy Tag PT_Ponte_Offic_3_c9291 <<- this policy Tag, check it WLAN policy after that check WLAN policy see if SSID is broadcast or not 

MHM

[Wilferson Cabreja Del Rosario · Accepted solution]

UPDATE!

Sorry that it took me so long to repost the source of the issue. The client was using SD-Access. There was an ACL in the firewall that was bloking the comunication between WLC and the APs. After the ACL was modified, the APs got all information from the WLC including the SSIDs.

[fabio daitx]

Same issue here, we also have SD-Access. How do I check if there is any ACL between WLC and the APs?

Here the outputs:

Fri Apr 11 2025 16:55:36 GMT-0300 (Horário Padrão de Brasília)
===================================================================================
#sh ap name PA208CAN tag detail
AP Name : PA208CAN
AP Mac : e462.c466.7878
Tag Type Tag Name
-----------------------------
Policy Tag PT_RS_CAN-Externo-_cf126
RF Tag default-rf-tag
Site Tag Mesh2_AP_tag
Policy tag mapping
------------------
WLAN Profile Name Policy Name VLAN Flex Central Switching IPv4 ACL IPv6 ACL
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
WPAR_86ab0a4d61_profile WPAR_86ab0a4d61_profile 1 DISABLED SSDP Not Configured
WIOTK_d31ed1d43e_profile WIOTK_d31ed1d43e_profile 1 DISABLED SSDP Not Configured
Site tag mapping
----------------
Flex Profile : default-flex-profile
AP Profile : Mesh2_AP_Join_Profile
Local-site : Yes
RF tag mapping
--------------
6ghz RF Policy : default-rf-profile-6ghz
5ghz RF Policy : Global Config
2.4ghz RF Policy : Global Config
2.4ghz slot 0 Radio Policy : Not Configured
5ghz slot 1 Radio Policy : Not Configured
5ghz slot 2 Radio Policy : Not Configured
6ghz slot 2 Radio Policy : Not Configured
6ghz slot 3 Radio Policy : Not Configured

Fri Apr 11 2025 16:55:06 GMT-0300 (Horário Padrão de Brasília)
===================================================================================
#sh ap name PA310CAN tag detail
AP Name : PA310CAN
AP Mac : 4006.d5e0.2180
Tag Type Tag Name
-----------------------------
Policy Tag PT_RS_CAN-Externo-_cf126
RF Tag TIPICO
Site Tag Mesh_AP_tag
Policy tag mapping
------------------
WLAN Profile Name Policy Name VLAN Flex Central Switching IPv4 ACL IPv6 ACL
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
WPAR_86ab0a4d61_profile WPAR_86ab0a4d61_profile 1 DISABLED SSDP Not Configured
WIOTK_d31ed1d43e_profile WIOTK_d31ed1d43e_profile 1 DISABLED SSDP Not Configured
Site tag mapping
----------------
Flex Profile : default-flex-profile
AP Profile : Mesh_AP_Join_Profile
Local-site : Yes
RF tag mapping
--------------
6ghz RF Policy : TIPICO_6
5ghz RF Policy : TIPICO_a
2.4ghz RF Policy : TIPICO_b
2.4ghz slot 0 Radio Policy : Not Configured
5ghz slot 1 Radio Policy : Not Configured
5ghz slot 2 Radio Policy : Not Configured
6ghz slot 2 Radio Policy : Not Configured
6ghz slot 3 Radio Policy : Not Configured