Cisco 9800CL - AP 9124axd unable to join WLC

[syedabbasx]

Hello

I am getting this message at AP and unable to join WLC . For reference , this AP is on static IP Address . 

*** Failed to send CAPWAP message 0 to state machine .Packet already freed

[Leo Laohoo]

The same response to the deleted thread:  What is the manufacturing date of the AP? 

If the APs manufacturing date is September 2022 (and later) then read:  FN - 72424 - Later Versions of Some Wi-Fi 6 Access Points Fail to Join the WLAN Controller

[Haydn Andrews]

What software version the WLC running?

[syedabbasx]

Here is the info 

Cisco IOS XE Software, Version 17.03.04c
Cisco IOS Software [Amsterdam], C9800-CL Software (C9800-CL-K9_IOSXE), Version 1 7.3.4c, RELEASE SOFTWARE (fc2)

[Rich R]

So therefore read the field notice @Leo Laohoo  shared and then you'll probably have to update your WLC to 17.3.6.

And if it's still not working after upgrading to 17.3.6 then you need to provide the FULL console log from the AP from power-on.

[Arshad Safrulla]

Only Certain regulatory domains of 9124 is supported in 17.3. If you are using ROW then I guess it is somewhat mandatory to upgrade to 17.6.X. Connect and Join a -ROW Domain Access Point to the Catalyst 9800 WLC - Cisco

But refer the compatibility matrix as 17xx/27xx/37xx AP models are not supported in 17.6 upwards.

[marce1000]

 -  Review the 9800CL   configuration with the CLI command : show  tech   wireless , have the output analyzed by  https://cway.cisco.com/tools/WirelessAnalyzer/  , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer.               Checkout all advisories!

 M.

[syedabbasx]

Hello all 

I was using Virtual Controller and having access to both HTTPS and ssh , I recently move my controller to another VLAN and since than I have an access to ssh but lost https web page access . 
I tried to redo crypto again ,restart http server services but failed . 
Can someone help pls

[Scott Fella]

Why not just spin up another VM.  Seems like that would be a faster.  Maybe your browser has the old controller cert saved and is flagging because a new ip has the same signature.

[syedabbasx]

how can i removed old cert than ??

[Scott Fella]

Might be easier to delete the ssl certificate entry from your cert manager.

How to completely delete a certificate from a user of Windows 10. - Microsoft Q&A

How to Delete an Untrusted Certificate in a Mac (chron.com)

[Rich R]

If that doesn't work then you're going to need to be much more specific with exactly what the fault is than "but lost https web page access".  What happens when you try to access the GUI?  Do you get an error message?  Have you done a packet capture?  Have you done a browser trace (F12/CTRL+SHIFT+I - network)?  Have you enabled debug on the WLC?  As it's on a different VLAN have you checked your ACLs, firewalls etc?