Cisco Prime 3.9 and Cisco WLC 9800

[LAN team]

Hello,

We're installing new 9800 WLCs and we have an issue with the AP discovery feature on Prime 3.9.

The AP Discovery status stay in "Not Yet Completed", Telemetry failed and the AP count at "0" as shown below

FYI, it works fine with all other WLC model deployed 5520,  5508, 85xx., etc..

Thank you for your help.

[balaji.bandi]

what is the version WLC 9800 check the compatable with PI 3.9 first step :

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html

[LAN team]

Hello,

Already done of course

C9800-L-F with IosXE 17.3.4 is compatible with PI 3.9.

Thank you

[marce1000]

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx46784?rfs=iqvred

[LAN team]

We're using the 3.9 PI version which seems to not match this bug and no more this one : CSCvv04560

[marce1000]

 - Indeed but PI3.9 is also not mentioned as any of the resolving release ,  in fact no resolving releases are mentioned. That could mean that the bugs are still present in your current Prime version. If needed or wanted escalate with TAC and mention the bug reports too.

 M.

[LAN team]

Ok thank you.

Then I will open a case for this issue.

[Georg Pauwen]

Hello,

do you have netconf enabled on the 9800s ?

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214286-managing-catalyst-9800-wireless-controll.html

[LAN team]

Hello Georg,

I've enabled it and  checked the step described in the link you've prtovided. I thank you for that, it' susefull.

Unfortunately, issue continue. 

I will open a case.

[LAN team · Accepted solution]

The solution was to open some new firewall rules as not needed for older WLC models 

*************************************************************

Reachability is always needed from PI to WLC on Port 830

PI/admin# ssh <9800_ip_address_added_to_primeinfra> <priv15_username> port 830

And from WLC to PI on port 20830 or 20828

telnet <Prime_Infrastructure_ip_address> <20828/20830>

show telemetry internal protocol cntp-tcp manager <Prime IP> 20830/20828

***************************************************************

[atsetheodros]

I run to the same issue and I wonder how you resolved it. Please let me know.

[balaji.bandi]

you need addional ports to be open for the new WLC for the prime to establish the connection, Port 830 and 20830 20828 

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214286-managing-catalyst-9800-wireless-controll.pdf

[LAN team]

The solution was to open some new firewall rules as not needed for older WLC models 

*************************************************************

Reachability is always needed from PI to WLC on Port 830

PI/admin# ssh <9800_ip_address_added_to_primeinfra> <priv15_username> port 830

And from WLC to PI on port 20830 or 20828

telnet <Prime_Infrastructure_ip_address> <20828/20830>

show telemetry internal protocol cntp-tcp manager <Prime IP> 20830/20828

***************************************************************