Cisco AP (LAP1131AG) not joining vWLC

[bavo]

Hi,

I`m having some trouble to join the WLC.

When i hookup the AP to a console cable the folowing message apears:

*Jan  6 09:55:13.137: %CAPWAP-3-ERRORLOG: Certificate verification failed!
*Jan  6 09:55:13.137: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed!
*Jan  6 09:55:13.137: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to xxx.xxx.xxx.xxx:5246
*Jan  6 09:55:13.138: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to xxx.xxx.xxx.xxx:5246
*Jan  6 09:55:13.140: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.



*Jan  6 09:56:34.055: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan  6 09:56:34.083: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jan  6 09:56:34.083: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Jan  6 09:56:34.084: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jan  6 09:56:34.152: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jan  6 09:56:35.082: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jan  6 09:56:35.110: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jan  6 09:56:35.115: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jan  6 09:56:36.103: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jan  6 09:56:36.110: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jan  6 09:56:36.140: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jan  6 09:56:36.145: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jan  6 09:56:36.150: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jan  6 09:56:37.140: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jan  6 09:56:37.145: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jan  6 09:56:37.169: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jan  6 09:56:38.169: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jan  6 09:56:44.151: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan  6 08:56:00.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: xxx.xxx.xxx.xxx peer_port: 5246
*Jan  6 08:56:00.137: %PKI-3-CERTIFICATE_INVALID_NOT_YET_VALID: Certificate chain validation has failed.  The certificate (SN: 1000) is not yet valid   Validity period starts on 00:54:58 UTC Jan 7 2017Peer certificate verification failed 000B

*Jan  6 08:56:00.139: %CAPWAP-3-ERRORLOG: Certificate verification failed!
*Jan  6 08:56:00.139: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed!
*Jan  6 08:56:00.139: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to xxx.xxx.xxx.xxx:5246
*Jan  6 08:56:00.139: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to xxx.xxx.xxx.xxx:5246
*Jan  6 08:56:00.141: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.

Is there a way to delete the certificate? so that the AP can join to the controller.
The controller is connected to a NTP server with the time set corectly.

Ik hope someone can help me.
Thanks in advanced.

Greetings
Palermo

Tech:

vWLC  :7.4.140.0

AP       : 2x AIR-LAP1131AG-E-K9

[Leo Laohoo]

Post the complete output to the AP command:  sh version

[bavo]

Hi Leo,

Thanks for your quick reply, i really appreciate that.

If been working to late (3:00AM) on this problem. This morning if decided to post and ask for help.
If done some groceries. And when i came back i found 2 AP joined to  the controller.
I have no clue what happened. may be i had no patience. hahaha

Thanks again for posting

Greetings

Palermo

[bavo]

Ok, still having the same problem.

2 AP has been joined. Now i`f added another AP (AIR-CAP3502I-A-K9). I need to replace the 1131AG. But this one is giving a same sort of problem.

When i first connected the AP to the controller it worked fine. Is was downloading the controller software. upon it reboot it gave me this message:

 *Jan 12 18:31:34.519: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 12 18:31:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.130 peer_port: 5246
*Jan 12 18:31:34.264: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.130 peer_port: 5246
*Jan 12 18:31:34.264: %CAPWAP-5-SENDJOIN: sending Join Request to xxx.xxx.xxx.xxx
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from xxx.xxx.xxx.xxx
*Jan 12 18:31:34.390: %DTLS-5-ALERT: Received WARNING : Close notify alert from xxx.xxx.xxx.xxx
*Jan 12 18:31:35.472: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jan 12 18:31:35.491: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jan 12 18:31:35.497: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jan 12 18:31:36.485: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jan 12 18:31:36.491: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jan 12 18:31:36.513: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jan 12 18:31:36.519: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jan 12 18:31:36.526: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jan 12 18:31:37.513: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jan 12 18:31:37.520: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jan 12 18:31:37.542: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jan 12 18:31:38.542: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

All config has been cleared any idea?

Greetings

Palermo

[Leo Laohoo]

Post the complete output to the AP command:  sh version