Solved: DTLS handhake

CSCO11256353 · ‎02-11-2014

I am not able to get the Aps to join WLC.

i have wlc 5760 with version 03.03.01SE.

below is the error message i am getting on the controller:

*%DTLS-3-HANDSHAKE_FAILURE: 1 wcm: Failed to complete DTLS handshake with peer 10.87.1.2 for AP 0000.0000.0000Reason: sslv3 alert bad certificate

Sandeep Choudhary · ‎02-11-2014

Hi,

CSCO11256353 wrote:

i configured time settings now DTLS errors are gone. but instead i am getting these below messages:

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d9:22:90

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LWAPP-3-RD_ERR4: 1 wcm: Invalid regulatory domain 802.11bg:-A 802.11a:-A for AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

As per these logs your country code iis wrong on WLC:

You must check the country code on WLC:

As your AP says thhat you are in USA.(-A-)

Correct and try again.

Reagrds

Dont forget to rate helpful posts

View solution in original post

Sandeep Choudhary · ‎02-11-2014

paste the sh version from AP:

Reagrds

CSCO11256353 · ‎02-11-2014

i configured time settings now DTLS errors are gone. but instead i am getting these below messages:

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d9:22:90

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LWAPP-3-RD_ERR4: 1 wcm: Invalid regulatory domain 802.11bg:-A 802.11a:-A for AP 3c:08:f6:d9:22:90

*%CAPWAP-3-POST_DECODE_ERR: 1 wcm: Post decode processing failed for Config status from AP 3c08.f6d9.2290

%LINK-3-UPDOWN: Interface Capwap0, changed state to up

*%CAPWAP-3-DATA_TUNNEL_UPDATE_ERR1: 1 wcm: Failed to send CAPWAP data tunnel update for AP: 3c08.f6d9.2290 with interface id: 0x5758c00000001a. Renstallation since AP connection is being deleted!

*%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination

%LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap0, changed state to up

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d6:15:90

*%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP 3c:08:f6:d6:15:90

*%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d6:15:90

*%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d6:15:90

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d6:15:90

*%LWAPP-3-RD_ERR4: 1 wcm: Invalid regulatory domain 802.11bg:-A 802.11a:-A for AP 3c:08:f6:d6:15:90

*%CAPWAP-3-POST_DECODE_ERR: 1 wcm: Post decode processing failed for Config status from AP 3c08.f6d6.1590

%LINK-3-UPDOWN: Interface Capwap1, changed state to up

*%CAPWAP-3-DATA_TUNNEL_UPDATE_ERR1: 1 wcm: Failed to send CAPWAP data tunnel update for AP: 3c08.f6d6.1590 with interface id: 0x4572000000001b. Re

nstallation since AP connection is being deleted!

*%CAPWAP-3-INVALID_STATE_EVENT: 1 wcm: Invalid AP event (CAPWAP Configuration Update Request) and state (CAPWAP Join Response) combination

%LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap1, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap0, changed state to down

%LINEPROTO-5-UPDOWN: Line protocol on Interface Capwap1, changed state to down

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LWAPP-3-VALIDATE_ERR: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d9:22:90

*%LOG-3-Q_IND: 1 wcm: Validation of SPAM Vendor Specific Payload failed - AP 3c:08:f6:d9:22:90

*%LWAPP-3-RD_ERR7: 1 wcm: Invalid country code () for AP 3c:08:f6:d9:22:90

*%LWAPP-3-RD_ERR4: 1 wcm: Invalid regulatory domain 802.11bg:-A 802.11a:-A for AP 3c:08:f6:d9:22:90

*%CAPWAP-3-POST_DECODE_ERR: 1 wcm: Post decode processing failed for Config status from AP 3c08.f6d9.2290

%LINK-3-UPDOWN: Interface Capwap0, changed state to up

*%CAPWAP-3-DATA_TUNNEL_UPDATE_ERR1: 1 wcm: Failed to send CAPWAP data tunnel update for AP: 3c08.f6d9.2290 with interface id: 0x46ad000000001c. Re