C9124AXI AP can not associate to C9800 WLC

[Mitch23]

Hi Everyone,

I have an issue with some C9124AXI APs. Some of them can associate well but a couple of them are stuck in provisioning procedure.

Image download went well in both case, but after that it shows "Response build failed".

Here is the log:

%CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/1: wncd: AP Event: AP Name: APC828-E536-5F3C Mac: 5c64.f16c.ef60 Session-IP: x.x.x.x[5256] x.x.x.x[5246] Disjoined Response build failed

%APMGR_TRACE_MESSAGE-4-WLC_APMGR_WARNING_MSG: Chassis 1 R0/1: wncd: Warning, 5c64.f16c.ef60 AP Name : APC828-E536-5F3C country changed from DE to HU

I've added it's mac to AAA device authentication of course and the correct country code is HU.

WLC: C9800-40 17.12.4

Fun fact, we have two pair of WLC, one stack is for production and one is for office networks.

The APs with this issue can easily associate to the production one (it is the same as office one, version too), but it can not associate to the office one.

We are using the same staging switch for configuring them in both case.

Any idea? I haven't found anything with google...

Thanks in advance!

Best regards, Misi

[Scott Fella]

Can you log the console output on the ap to a text file and post that?  Since one works and the other doesn't per say, I would take a backup of the configuration on both and run a diff to see if there is something on the production that is not on the office controller.  Seems like as long as you have enough license and the country code, that ap should join, especially if you have other ap with the same model joined.

What happens if you have it joined with the production and then you manually set the high availability on that ap to use the office controller.

[Mitch23]

Thanks! I will collect the logs asap.
The last thing you wrote, I did it. So i've set the primary controller on production WLC gui to move to the office WLC.

[Scott Fella]

So you changed it on just that specific ap, can you look at the ap console output when you do that?  You have other ap's on that same switch that are joined to the office controller?  Just wanted to verify that the discovery is working between where the ap is attached to on a switch to the office controller that the ap is unable to join.  Or if you have other ap's on that same switch that can also join the office controller.  It's process of elimination which helps us rule out certain things.

The diff between the controller configs is something to also look at.  Might be a pain, but maybe something will jump out.

[Mitch23]

Both working and not working APs are brand new and they are both connected to the same staging switch with the same VLAN / Subnet. So it shouldn't be the source of the issue. Discovery is working, it wants to communicate with the controller. As i said the image was downloaded successfully from that office controller. The MAC was added to AAA device authentication as in case of the other APs.

[Leo Laohoo]

Connect a console to the AP and reboot the AP. 

Post the entire boot-up process.

[Mitch23]

And it didn't work.

[marce1000]

  - @Mitch23           >.... but it can not associate to the office one.
                       For starters : have a checkup of this controller's configuration using the CLI command
                      show  tech wireless and feed the output from that into : Wireless Config Analyzer

                                     By the way ; always very useful for your working controller too!

 M.

[Mitch23]

Unfortunately, it doesn't work for me. I've upload the output and after pressing "Run", i get back the same "blank" page like before uploading.

[marce1000]

@Mitch23   Please note that the procedure for using WirelessAnalyzer as mentioned needs the input from
                  show tech wireless , not a simple show  tech-support 

  M.

[Mitch23]

Here is a part from AP's CLI:

[*04/11/2025 07:32:54.2110] CAPWAP State: Join

[*04/11/2025 07:32:54.2390] shared_setenv PART_BOOTCNT 0 &> /dev/null

[*04/11/2025 07:32:54.6721] Sending Join request to CORRECT_WLC_IP through port 5248, packet size 1376

[*04/11/2025 07:32:59.5167] Sending Join request to CORRECT_WLC_IP through port 5248, packet size 1376

[*04/11/2025 07:32:59.5206] Join Response from CORRECT_WLC_IP, packet size 1397

[*04/11/2025 07:32:59.5206] AC accepted previous sent request with result code: 0

[*04/11/2025 07:32:59.5207] Received wlcType 0, timer 30

[*04/11/2025 07:32:59.6128]

[*04/11/2025 07:32:59.6128] CAPWAP State: Image Data

[*04/11/2025 07:32:59.6137] AP image version 17.12.4.204 backup 17.6.1.13, Controller 17.12.4.204

[*04/11/2025 07:32:59.6138] Version is the same, do not need update.

[*04/11/2025 07:32:59.6590] status 'upgrade.sh: Script called with args:[NO_UPGRADE]'

[*04/11/2025 07:32:59.6991] do NO_UPGRADE, part2 is active part

[*04/11/2025 07:32:59.7227]

[*04/11/2025 07:32:59.7227] CAPWAP State: Configure

[*04/11/2025 07:32:59.7293] Telnet is not supported by AP, should not encode this payload

[*04/11/2025 07:33:02.7160] Re-Tx Count=1, Max Re-Tx Value=5, SendSeqNum=1, NumofPendingMsgs=1

[*04/11/2025 07:33:02.7160]

[*04/11/2025 07:33:05.7171] Re-Tx Count=2, Max Re-Tx Value=5, SendSeqNum=1, NumofPendingMsgs=1

[*04/11/2025 07:33:05.7171]

[*04/11/2025 07:33:08.7184] Re-Tx Count=3, Max Re-Tx Value=5, SendSeqNum=1, NumofPendingMsgs=1

[*04/11/2025 07:33:08.7184]

[*04/11/2025 07:33:11.7194] Re-Tx Count=4, Max Re-Tx Value=5, SendSeqNum=1, NumofPendingMsgs=1

[*04/11/2025 07:33:11.7194]

[*04/11/2025 07:33:14.7205] Re-Tx Count=5, Max Re-Tx Value=5, SendSeqNum=1, NumofPendingMsgs=1

[*04/11/2025 07:33:14.7205]

[*04/11/2025 07:33:17.7216] Max retransmission count exceeded, going back to DISCOVER mode.

[*04/11/2025 07:33:17.7216] Dropping msg CAPWAP_CONFIGURATION_STATUS, type = 4, len = 2482, eleLen = 2490, sendSeqNum = 1

[*04/11/2025 07:33:17.7219] GOING BACK TO DISCOVER MODE

[*04/11/2025 07:33:17.7462] OOBImageDnld: OOBImageDownloadTimer expired for image download..

[*04/11/2025 07:33:17.7462] OOBImageDnld: Do common error handler for OOB image download..

[*04/11/2025 07:33:17.7834]

[*04/11/2025 07:33:17.7834] CAPWAP State: DTLS Teardown

[*04/11/2025 07:33:17.7839] mkdir -p /tmp/ap/v1/managed-wifi-config

[*04/11/2025 07:33:17.8456] OOBImageDnld: Do common error handler for OOB image download..

[*04/11/2025 07:33:17.9397] status 'upgrade.sh: Script called with args:[CANCEL]'

[*04/11/2025 07:33:17.9792] do CANCEL, part2 is active part

[*04/11/2025 07:33:18.0030] status 'upgrade.sh: Cleanup tmp files ...'

[*04/11/2025 07:33:18.0423] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).

[*04/11/2025 07:33:18.0423] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).

[*04/11/2025 07:33:22.7463] OOBImageDnld: OOBImageDownloadTimer expired for image download..

[*04/11/2025 07:33:22.7463] OOBImageDnld: Do common error handler for OOB image download..

[*04/11/2025 07:33:22.7716] dtls_queue_first: Nothing to extract!

[*04/11/2025 07:33:22.7716]

[*04/11/2025 07:33:22.7819]

[*04/11[04/11/2025 07:33:22.1399] lp5562 0-0030: failed updating program memory
[04/11/2025 07:33:22.2099] lp5562 0-0030: failed updating program memory
[04/11/2025 07:33:22.2899] lp5562 0-0030: failed updating program memory
/2025 07:33:22.7819] CAPWAP State: Discovery

[Leo Laohoo]

CSCwk70785