Can’t to join AP 2702i to WLC 2504

niphonwan · ‎06-12-2016

*Jun 13 06:17:05.715: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Jun 13 06:17:06.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.100 peer_port: 5246
*Jun 13 06:17:06.331: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.100 peer_port: 5246
*Jun 13 06:17:06.335: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.100
*Jun 13 06:17:24.875: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.100:5246
*Jun 13 06:17:24.955: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source
*Jun 13 06:17:24.967: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jun 13 06:17:24.967: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Jun 13 06:17:24.971: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 13 06:17:24.995: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jun 13 06:17:25.971: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jun 13 06:17:25.999: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jun 13 06:17:26.007: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jun 13 06:17:26.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jun 13 06:17:26.999: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jun 13 06:17:27.027: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jun 13 06:17:27.035: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jun 13 06:17:27.043: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jun 13 06:17:28.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jun 13 06:17:28.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jun 13 06:17:28.071: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun 13 06:17:29.071: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jun 13 06:17:37.995: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

Leo Laohoo · ‎06-12-2016

Post the complete output to the following commands:

1. WLC: sh sysinfo;

2. WLC: sh time;

3. AP: sh version; &

4. AP: sh ip interface brief

niphonwan · ‎06-13-2016

WLC: sh sysinfo;

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version.................................. 8.1.102.0

Bootloader Version............................... 1.0.20

Field Recovery Image Version..................... 7.6.101.1

Firmware Version................................. PIC 20.0

Build Type....................................... DATA + WPS

System Name...................................... TANGALOY

System Location..................................

System Contact...................................

System ObjectID.................................. 1.3.6.1.4.1.9.1.1279

IP Address....................................... 192.168.0.100

IPv6 Address..................................... ::

Last Reset....................................... Power on reset

System Up Time................................... 0 days 0 hrs 46 mins 42 secs

System Timezone Location......................... (GMT +7:00) Saigon, Hanoi, Bangkok, Jakatar

System Stats Realtime Interval................... 5

System Stats Normal Interval..................... 180

--More or (q)uit current module or <ctrl-z> to abort

Configured Country............................... Multiple Countries:TH,US

Operating Environment............................ Commercial (0 to 40 C)

Internal Temp Alarm Limits....................... 0 to 65 C

Internal Temperature............................. +37 C

External Temperature............................. +41 C

Fan Status....................................... 3500 rpm

State of 802.11b Network......................... Disabled

State of 802.11a Network......................... Disabled

Number of WLANs.................................. 1

Number of Active Clients......................... 0

Burned-in MAC Address............................ 00:9E:1E:06:74:A0

Maximum number of APs supported.................. 75

System Nas-Id.................................... TANGALOY

WLC MIC Certificate Types........................ SHA1/SHA2

WLC: sh time;

(Cisco Controller) >show time

Time............................................. Mon Jun 13 13:43:26 2016

Timezone delta................................... 0:0

Timezone location................................ (GMT +7:00) Saigon, Hanoi, Bangkok, Jakatar

NTP Servers

NTP Polling Interval......................... 86400

Index NTP Key Index NTP Server NTP Msg Auth Status

------- ----------------------------------------------------------------------------------

AP: sh version; &

AP0062.ecf1.2508#sh ver

Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JBB, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Compiled Mon 04-May-15 17:26 by prod_rel_team

ROM: Bootstrap program is C2700 boot loader

BOOTLDR: C2700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB5m, RELEASE SOFTWARE (fc2)

AP0062.ecf1.2508 uptime is 42 minutes

System returned to ROM by power-on

System image file is "flash:/ap3g2-k9w8-mx.153-3.JBB/ap3g2-k9w8-xx.153-3.JBB"

Last reload reason:

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

cisco AIR-AP2702I-UXK9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.

Processor board ID FCW2020NCG8

PowerPC CPU at 800Mhz, revision number 0x2151

Last reset from power-on

LWAPP image version 8.1.102.0

Access Point Type: World Mode

1 Gigabit Ethernet interface

2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: 00:62:EC:F1:25:08

Part Number : 73-15824-03

PCA Assembly Number : 000-00000-00

PCA Revision Number :

PCB Serial Number : FOC20196MPF

Top Assembly Part Number : 068-100395-01

Top Assembly Serial Number : FCW2020NCG8

Top Revision Number : A0

Product/Model Number : AIR-AP2702I-UXK9

Configuration register is 0xF

AP: sh ip interface brief

AP0062.ecf1.2508#sh ip int br

Interface IP-Address OK? Method Status Protocol

BVI1 192.168.0.154 YES DHCP up up

Dot11Radio0 unassigned NO unset up up

Dot11Radio1 unassigned NO unset up up

GigabitEthernet0 unassigned NO unset up up

GigabitEthernet1 unassigned NO unset administratively down down

Virtual-WLAN0 unassigned NO unset up up

Virtual-WLAN0.1 unassigned NO unset up up

Virtual-WLAN0.2 unassigned NO unset up up

Virtual-WLAN0.3 unassigned NO unset up up

Virtual-WLAN0.4 unassigned NO unset up up

Virtual-WLAN0.5 unassigned NO unset up up

Virtual-WLAN0.6 unassigned NO unset up up

Virtual-WLAN0.7 unassigned NO unset up up

Virtual-WLAN0.8 unassigned NO unset up up

Virtual-WLAN0.9 unassigned NO unset up up

Virtual-WLAN0.10 unassigned NO unset up up

Virtual-WLAN0.11 unassigned NO unset up up

Virtual-WLAN0.12 unassigned NO unset up up

Virtual-WLAN0.13 unassigned NO unset up up

Virtual-WLAN0.14 unassigned NO unset up up

Virtual-WLAN0.15 unassigned NO unset up up

Virtual-WLAN0.16 unassigned NO unset up up

Leo Laohoo · ‎06-13-2016

Product/Model Number : AIR-AP2702I-UXK9

AP is not primed. Read this: Cisco Aironet Universal AP Priming and Cisco AirProvision User Guide

Controller may have the wrong time.

mohanak · ‎06-14-2016

As your AP is UX, you need to prime the access point for a particular domain.

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/ux-ap/guide/uxap-mobapp-g.html