C9120AXI EWC Day 0 configuration issues

[Tagop]

I am working on C9120AXI in a lab at school, so this will not be used in production but for education purposes. I followed this link https://www.cisco.com/c/en/us/support/docs/wireless/embedded-wireless-controller-on-catalyst-access-points/215303-embedded-wireless-controller-conversion.html to convert the AP to EWC. The EWC is connected to a layer 3 switch for POE. I can ping from my PC to the layer 3 switch but I cannot ping the EWC. I was able to give the G0 interface a static IP address but was still not able to ping or get to the web UI. The EWC is also not broadcasting CiscoAirProvision SSID to try and connect to it and access the web UI. I tried to create a WLAN using ewc_day0_device_provisioning_guide to try and connect to the WLAN and access the web UI that way, but even after creating the WLAN, it's not broadcasting any SSIDs.  

Here's part of the config file: 

interface GigabitEthernet0
mac-address 0000.5e00.0101
ip dhcp client client-id GigabitEthernet0
ip dhcp client broadcast-flag clear
ip address 192.168.1.15 255.255.255.0
no negotiation auto
!
ip default-gateway 192.168.1.1
ip http server
ip http authentication local
ip http secure-server
ip http client source-interface GigabitEthernet0
ip forward-protocol nd
ip tftp source-interface GigabitEthernet0
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 250

My PC has the address 192.168.1.3/24 .

I would appreciate any insight on how to get this solved.

[ammahend]

share show version, show run from EWC AP and switchport configuration from switch where the AP is connected as well as show cdp nei <port where AP is ocnnected> detail.

[Tagop]

Here are the requested configurations. I have tried Trunk as well as Access on the switchport connected to the WLC, right now I left it as access but neither worked.

[ammahend · Accepted solution]

sorry for late reply..

your config seems good for most part, few changes will be needed like

your trust point for https does not exist, so might use self signed certificate for trust point, but this shouldn't effect ability to ping.

ip http secure-trustpoint TP-self-signed-3201826811

your cdp neighbor does not show gig0 IP and also your hostname is CDP is different from hostname in show run, so something is not right .. don't know if you changed hostname after running cdp command, if not then for whatever reason config you did on EWC does not seem to have taken effect. Try a reset and follow this link to setup again.

[Tagop]

Thank you for confirming my configurations. All I needed was to do a factory reset as suggested and it worked! Without the factory reset it wasn't doing the auto install after booting so that's why I'm guessing my configurations didn't work. But now it does thanks to you

[Finn Rud Laursen]

Try adding this line.
ip http secure-trustpoint CISCO_IDEVID_SUDI
I think you are missing a trustpoint

[Tagop]

I have added the command. Still doesn't work . Thank you

[Rich R]

What version of software did you use? Refer to TAC recommended link below.

We've had a few similar questions recently - did you read those?

Try:
interface GigabitEthernet0
 negotiation auto

ip default-gateway 192.168.1.1 is ignored when "ip routing" is enabled.
"ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 250" can cause unpredictable behaviour on a LAN interface (should only be used on point to point interfaces)- you'll see a warning about this in the logs. Do:
no ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 250
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0 192.168.1.1

And provide the info @ammahend has requested.

[Tagop]

I'm using Cisco IOS XE Software, Version 17.09.04. I have tried to adjust my configurations as requested. Still doesn't work. Thank you for the suggestions, I have gone through a lot of topics in the Cisco community on WLC. Unfortunately, I can't seem to make it work.

[Finn Rud Laursen]

Arnt you missing the

wireless management interface GigabitEthernet0

Or am I missing, you are not missing it?

[Tagop]

It was configured but it wasn't saving the configuration. Now it works after a factory reset. Thank you for taking the time to help me!