conect catalys 9800 to prime 3.8

[Leo TI]

Hi, I'm adding a wlc 9800 to the prime, it joins correctly but I can't see the APs, the prime has version 3.8.0 patched to 3.8.1, the wlc 17.3.3. i am using snmp v3 and ssh for communication also enable nefconf on the wlc.
netconf yang
aaa authorization exec default local
The logs are below

[Flavio Miranda]

Hi

 When you go to Cisco Prime Cofiguration>Netwrork>Network Device, the WLC is shown on the list? it is shown as Managed? AP Discovery status is Completed?

 If you try to Edit the WLC using the 'pencil' icon....what happen if you hit "Verify Credentials" Does it turn all green?  

[Leo TI]

 in the prime web interface if everything appears fine, but I don't see the access points

[jagan.chowdam · Accepted solution]

If you see telemetry status to be "success" on Prime Infrastructure but the AP count is 0, it could be that Prime Infrastructure can reach out to the WLC on port 830 but the controller cannot reach back Prime Infrastructure on port 20830.

Make sure this port is allowed.

CJ

/** Please rate all useful responses **/

[Leo TI · Accepted solution]

the firewall administrator tells me that the passage between those two IPs (Prime and controller) is free, is there any way to test this, maybe a telnet from the controller to the Prime through port 20830 as I could test this.?

[Scott Fella]

Show a better screen shot and make sure you enable the column for telemetry.

[Scott Fella]

If your 9800's are in SSO, then make sure you are importing the device using the primary controller ip and not the redundancy interface ip.  The ap's should show when using the primary controller ip, but will not when using the redundancy port ip.

[Leo TI]

It seems that the telemetry communication from Prime to the controller is correct and it fails from the controller to the prime, so port 20830 is the problem? is it utp or tcp?

[Leo TI]

the issue was resolved by checking the nefconf port from controller to prime, thanks Scott Fella

[Scott Fella · Accepted solution]

Glad you got it working.  So there was a firewall that blocking that?

[Leo TI]

correcto el administrador del firewall no habilito el puerto

[Scott Fella]

Thanks for the information!

[Scott Fella]

What I can tell you is that PI 3.10 which I'm testing does show all the 9800's and all access points joined to that controller.  Just setup with basic snmpv2 and ssh credential profile.

[Rich R]

What model of AP?

Are they supported by that release of Prime?

https://www.cisco.com/c/en/us/support/cloud-systems-management/prime-infrastructure/products-device-support-tables-list.html

[Leo TI]

the APs appear and work correctly on the controller, they are 3802e