Cisco 3850 - Wireless Controller not working (DTLS-5-SEND_ALERT error)

[jinfante_gmc]

Good afternoon everyone, 

I have a Cisco 3850 (WS-C3850-48P) with a wireless controller licensed:

The AP's connect with the controller but never start broadcasting, on the AP the following information appears them both radios state gets set as down:

%CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 3 11:48:34.959: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.10.17.253
*Sep 3 11:48:34.959: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246

Please assist.

Thank you in advance

Best Regards

José Infante

[Sandeep Choudhary]

Please chekc this posts:

https://mrncciew.com/2013/12/04/wlan-config-in-3850-part-1/

1. make sure your 3850 is configured as MC in order to act as WLC functionality.

2. Make sure you APs are connected directly to 3850.

3. If wlan ID number above 16 then you nee dto create AP group and assign the wlan to it.

Regards

Dont forget to rate helpful posts

[jinfante_gmc]

Hi Sandeep, 

Thank you for the fast reply, answers below:

1. make sure your 3850 is configured as MC in order to act as WLC functionality.

-Configured as MC

2. Make sure you APs are connected directly to 3850.

-Connected Directly

3. If wlan ID number above 16 then you nee dto create AP group and assign the wlan to it.

-WLan is under 16 but also tried to create AP Group and managed to add the AP to it, same result.

The AP talks with the controller and Switch, I have tried the sugested link and a couple of other related, from AP region code config to certifica and ACL control list. 

No luck!!

Thank you in advance

[Sandeep Choudhary]

As you wrote in first posts that both radios are down. Make sure AP/ wlc side these are enabled !!!

if still failing then paste the cmplete logs from AP console.

Regards

Dont forget to rate helpful posts

[Sandeep Choudhary]

As you wrote in first posts that both radios are down. Make sure AP/ wlc side these are enabled !!!

if still failing then paste the cmplete logs from AP console.

Regards

Dont forget to rate helpful posts

[jinfante_gmc]

Hi Sandeep, 

Yes Radio is enabled on the Wlc side, below are the complete logs from AP console.

Thank you very much for the support

Best Regards

IOS Bootloader - Starting system.
flash is writable
Antigua Board
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 83 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 22608896
flashfs[0]: Bytes available: 18549760
flashfs[0]: flashfs fsck took 24 seconds.
Base Ethernet MAC address: 78:72:5d:b0:c3:90
Ethernet speed is 1000 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.153-3.JPC7/ap3g2-k9w8-mx.153-3.JPC7"...#########################

File "flash:/ap3g2-k9w8-mx.153-3.JPC7/ap3g2-k9w8-mx.153-3.JPC7" uncompressed and installed, entry point: 0x2003000
executing...

Secondary Bootloader - Starting system.
Antigua Board Pre-Pilot
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 83 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 22608896
flashfs[0]: Bytes available: 18549760
flashfs[0]: flashfs fsck took 26 seconds.
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 12257280
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 12256256
flashfs[1]: flashfs fsck took 1 seconds.
Base Ethernet MAC address: 78:72:5d:b0:c3:90
Boot CMD: 'boot flash:/ap3g2-k9w8-mx.153-3.JPC7/ap3g2-k9w8-xx.153-3.JPC7;flash:/ap3g2-k9w8-mx.153-3.JPC7/ap3g2-k9w8-xx.153-3.JPC7'
Loading "flash:/ap3g2-k9w8-mx.153-3.JPC7/ap3g2-k9w8-xx.153-3.JPC7"...##################################################
File "flash:/ap3g2-k9w8-mx.153-3.JPC7/ap3g2-k9w8-xx.153-3.JPC7" uncompressed and installed, entry point: 0x1003000
executing...

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JPC7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Sat 24-Feb-18 08:52 by prod_rel_team

Antigua Board Pre-Pilot
40MB format
Tide XL MB - 40MB of flash
Initializing flashfs...

flashfs[2]: 83 files, 9 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 40900608
flashfs[2]: Bytes used: 22608896
flashfs[2]: Bytes available: 18291712
flashfs[2]: flashfs fsck took 17 seconds.
flashfs[2]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 0 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCCCC
Copy in progress...CCC
Copy in progress...CCCC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...CC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...CCCCCC
Copy in progress...CCCC
Copy in progress...CC
Uncompressing radio files...
...done Initializing flashfs.

Radio0 present 8764 8000 0 A8000000 A8010000 0
Rate table has 650 entries (20 legacy/224 11n/406 11ac)

POWER TABLE FILENAME = ram:/U2.bin

Radio1 present 8864 8000 0 80000000 80100000 4
POWER TABLE FILENAME = ram:/U5.bin

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP2702I-E-K9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID FCW2217NA3W
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 16.3.6.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 78:72:5D:B0:C3:90
Part Number : 73-15824-04
PCA Assembly Number : 000-00000-00
PCA Revision Number :
PCB Serial Number : FOC22165DLQ
Top Assembly Part Number : 068-100379-02
Top Assembly Serial Number : FCW2217NA3W
Top Revision Number : C0
Product/Model Number : AIR-CAP2702I-E-K9
% Please define a domain-name first.

Press RETURN to get started!

*Mar 1 00:00:21.891: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
*Mar 1 00:00:22.351: Registering HW DTLS

*Mar 1 00:00:23.203: Starting Ethernet promiscuous mode
*Mar 1 00:00:25.519: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:25.519: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
*Mar 1 00:00:28.059: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
*Mar 1 00:00:28.171: loading Power Tables from ram:/U2.bin. Class = E
*Mar 1 00:00:28.171: record size of 3ss: 1168 read_ptr: 5228446

*Mar 1 00:00:33.359: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
*Mar 1 00:00:33.407: loading Power Tables from ram:/U5.bin. Class = E
*Mar 1 00:00:33.407: record size of vht: 2904 read_ptr: 5228446
APAVC Registering AVC licences on the AP to make sure we enable advanced PP
APAVC Protocol list already initialized

*Mar 1 00:00:34.771: Start STILE Activation
APAVC: Succeeded to activate all the STILE protocols.
APAVC: Registering with CFT

*Mar 1 00:00:35.019: APAVC: CFT registration of delete callback succeeded
APAVC: Reattaching Original Buffer pool for system use

*Mar 1 00:00:36.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Mar 1 00:00:36.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to down
*Mar 1 00:00:37.751: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JPC7, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Sat 24-Feb-18 08:52 by prod_rel_team
*Mar 1 00:00:37.751: %SNMP-5-COLDSTART: SNMP agent on host AP7872.5db0.c390 is undergoing a cold start
*Sep 3 21:13:32.071: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source
*Sep 3 21:13:32.111: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully

*Sep 3 21:13:32.287: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Sep 3 21:13:32.287: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 3 21:13:33.411: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Sep 3 21:13:33.411: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 3 21:13:33.411: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Sep 3 21:13:34.111: %LINK-5-CHANGED: Interface GigabitEthernet1, changed state to administratively down
*Sep 3 21:13:38.375: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
*Sep 3 21:13:38.375: DPAA Initialization Complete
*Sep 3 21:13:38.375: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Sep 3 21:13:38.387: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Sep 3 21:13:46.007: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.10.17.13, mask 255.255.255.0, hostname AP7872.5db0.c390

*Sep 3 21:13:50.291: Currently running a Release Image

*Sep 3 21:13:50.315: Using SHA-2 signed certificate for image signing validation.%Default route without gateway, if not a point-to-point interface, may impact performance
*Sep 3 21:13:57.915: AP image integrity check PASSED

*Sep 3 21:13:57.963: Cert ISSUER (39): cn=Cisco Manufacturing CA SHA2,o=Cisco

*Sep 3 21:13:57.987: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Sep 3 21:13:57.987: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
%Error opening flash:/capwap-saved-config (No such file or directory)
*Sep 3 21:14:07.991: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 0 CLI Request Triggered
Translating "CISCO-CAPWAP-CONTROLLER.gemcorp.local"...domain server (10.10.17.254)
*Sep 3 21:14:38.011: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
*Sep 3 21:14:39.107: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 3 21:14:40.107: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 3 21:14:40.355: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 3 21:14:41.355: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up

*Sep 3 21:15:04.999: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:24:25.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:26.291: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:26.291: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:24:26.295: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:24:26.295: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:24:26.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:26.291: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:26.291: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:24:26.299: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:24:46.299: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:24:47.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:47.287: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:47.287: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:24:47.291: %DTLS-5-ALERT: Received FATAL : with unknown alert.description code 0xDA alert from 10.10.17.253
*Sep 6 18:24:47.291: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:24:47.291: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:24:47.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:47.295: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:24:47.295: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:24:47.807: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
*Sep 6 18:24:47.811: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Sep 6 18:24:47.819: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Sep 6 18:24:48.811: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:24:48.843: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:24:48.851: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Sep 6 18:24:48.859: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Sep 6 18:24:49.843: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:24:49.851: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Sep 6 18:24:49.883: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:24:50.883: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Sep 6 18:24:52.295: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:25:46.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:25:47.063: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Sep 6 18:25:47.063: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Sep 6 18:25:47.067: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:25:47.095: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:25:48.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:25:48.095: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Sep 6 18:25:48.103: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Sep 6 18:25:49.087: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:25:49.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Sep 6 18:25:49.123: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:25:49.131: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Sep 6 18:25:49.139: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Sep 6 18:25:50.123: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Sep 6 18:25:50.131: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:25:50.159: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:25:51.159: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:25:57.095: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:25:57.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:25:57.287: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:25:57.287: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:25:57.291: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:25:57.291: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:25:57.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:25:57.291: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:25:57.291: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:26:02.291: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:26:56.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:26:57.059: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Sep 6 18:26:57.059: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Sep 6 18:26:57.063: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:26:57.087: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:26:58.063: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:26:58.091: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Sep 6 18:26:58.099: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Sep 6 18:26:59.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:26:59.091: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Sep 6 18:26:59.119: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:26:59.127: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Sep 6 18:26:59.135: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Sep 6 18:27:00.119: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Sep 6 18:27:00.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:27:00.155: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:27:01.155: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:27:07.087: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:27:07.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:27:07.283: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:27:07.287: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:27:12.283: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253

[jinfante_gmc]

After the console log from previous post it repeats:

*Sep 6 18:29:28.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:29:28.287: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:29:28.287: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:29:28.291: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:29:48.291: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:29:49.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:29:49.283: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:29:49.283: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:29:54.283: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:30:48.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:30:49.059: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Sep 6 18:30:49.059: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Sep 6 18:30:49.063: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:30:49.087: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:30:50.063: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:30:50.091: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Sep 6 18:30:50.099: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Sep 6 18:30:51.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:30:51.091: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Sep 6 18:30:51.119: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:30:51.127: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Sep 6 18:30:51.135: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Sep 6 18:30:52.119: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Sep 6 18:30:52.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:30:52.155: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:30:53.155: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:30:59.087: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Sep 6 18:30:59.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:30:59.287: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.17.253 peer_port: 5246
*Sep 6 18:30:59.287: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:31:04.287: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.17.253
*Sep 6 18:31:58.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.17.253:5246
*Sep 6 18:31:59.059: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Sep 6 18:31:59.059: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Sep 6 18:31:59.063: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:31:59.087: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:32:00.063: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:32:00.091: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Sep 6 18:32:00.099: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Sep 6 18:32:01.083: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:32:01.091: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Sep 6 18:32:01.119: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Sep 6 18:32:01.127: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Sep 6 18:32:01.135: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Sep 6 18:32:02.119: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Sep 6 18:32:02.127: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Sep 6 18:32:02.155: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Sep 6 18:32:03.155: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Sep 6 18:32:09.087: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

[jinfante_gmc]

Switch Config attached.

Thank you in advance