DTLS connection closed for AP error in 2500 controller

[balakrishnan]

Hi ,

I have 2500 controller and connected AP 3702i. But, AP not joined in WLC. i got below logs.

Kindly suggest solution for this issue.

In AP:

*Mar 29 07:32:49.391: %CAPWAP-5-DTLSREQSUCC: DTLS connection created successfully peer_ip: 172.44.1.10 peer_port: 5246
*Mar 29 07:32:49.391: %CAPWAP-5-SENDJOIN: sending Join Request to 172.44.1.10
*Mar 29 07:32:49.395: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.44.1.10
*Mar 29 07:32:49.395: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.44.1.10:5246
*Mar 29 07:32:49.395: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

IN Controller Logs:

*spamApTask5: Mar 29 13:50:44.478: %CAPWAP-3-DTLS_CLOSED_ERR: capwap_ac_sm.c:7130 a4:6c:2a:34:1c:60: DTLS connection closed forAP 172:44:1:14 (51005), Controller: 172:44:1:10 (5246) Join Request Process Failed

[marce1000]

 - Check if the regulatory domain on the AP and controller match.  Also make sure that the controller uses NTP with correct time and or working NTP server(s).

  M.

[Scott Fella]

Also check if the cert on the ap is expired.  You didn't provide a full log to check.  Also you should provide more information about the model number and firmware you are using, if there are other 3702's or other model ap's that are working, if this ap was joined successfully before, etc.

https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html

[Rich R]

What version of software on the WLC?
What version of software running on the AP?
Complete console log from AP from power on - attached as a .txt file - not pasted into the discussion.

Have you read through all the field notices below and TAC recommended software below?