Error loggin WLC 5508

[athan1234]

Pleas anyone knows why get this error

*spamApTask7: Jan 11 19:07:43.878: %DTLS-5-ESTABLISHED_TO_PEER: openssl_dtls.c:777 DTLS connection established to 10.24.110.247
*spamApTask7: Jan 11 19:07:43.728: %DTLS-5-ESTABLISHED_TO_PEER: openssl_dtls.c:777 DTLS connection established to 10.24.110.239
*sntpReceiveTask: Jan 11 19:07:43.454: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask2: Jan 11 19:07:43.102: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.134
*spamApTask5: Jan 11 19:07:42.457: %CAPWAP-3-TX_ERR: capwap_ac_sm.c:5380 The system has failed to transmit image data request to AP 6c:dd:30:3a:c7:80
*spamApTask5: Jan 11 19:07:42.457: %CAPWAP-3-ENCODE_ERR: capwap_ac_sm.c:3208 The system has failed to encode Image data request to AP 6c:dd:30:3a:c7:80
*spamApTask5: Jan 11 19:07:42.457: %CAPWAP-3-IMAGE_DOWNLOAD_ERR3: capwap_ac_platform.c:1052 Refusing image download request from AP 6c:dd:30:3a:c7:80 - unable to open image file /bsn/ap/ap1g4
*spamApTask5: Jan 11 19:07:42.305: %DTLS-5-ESTABLISHED_TO_PEER: openssl_dtls.c:777 DTLS connection established to 10.24.110.237
*sntpReceiveTask: Jan 11 19:07:41.454: %SNTP-7-NO_ACCEPTABLE_PKTS: sntp_main.c:983 No acceptable packets received.
*sntpReceiveTask: Jan 11 19:07:41.454: %SNTP-7-TOO_MANY_BAD_PKTS: sntp_main.c:943 Too many bad or lost packets.
*sntpReceiveTask: Jan 11 19:07:41.454: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask1: Jan 11 19:07:39.562: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.33
*sntpReceiveTask: Jan 11 19:07:39.454: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask5: Jan 11 19:07:37.698: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.130
*sntpReceiveTask: Jan 11 19:07:37.454: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask0: Jan 11 19:07:36.629: %LWAPP-6-CAPWAP_SUPP_VER: spam_lrad.c:2182 Discarding Primary discovery request in LWAPP from AP 00:1a:e2:53:31:ce supporting CAPWAP
*spamApTask0: Jan 11 19:07:36.490: %LWAPP-6-CAPWAP_SUPP_VER: spam_lrad.c:2182 Discarding Primary discovery request in LWAPP from AP 00:24:c4:9f:fd:2c supporting CAPWAP
*sntpReceiveTask: Jan 11 19:07:35.438: %SNTP-7-NO_ACCEPTABLE_PKTS: sntp_main.c:983 No acceptable packets received.
*sntpReceiveTask: Jan 11 19:07:35.438: %SNTP-7-TOO_MANY_BAD_PKTS: sntp_main.c:943 Too many bad or lost packets.
*sntpReceiveTask: Jan 11 19:07:35.438: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0

--More-- or (q)uit
(Cisco Controller) >show time

Time............................................. Sat Jan 11 19:22:32 2025

Timezone delta................................... 0:0
Timezone location................................ (GMT +1:00) Amsterdam, Berlin, Rome, Vienna

[marce1000]

     - This could point to resource exhaustion(s) ; I would advice to reboot the controller,

 M.

[athan1234]

Same errro after rebboting 

e with peer 10.24.110.21
*spamApTask5: Jan 11 19:47:59.249: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.64
*sntpReceiveTask: Jan 11 19:47:58.067: %SNTP-7-NO_ACCEPTABLE_PKTS: sntp_main.c:983 No acceptable packets received.
*sntpReceiveTask: Jan 11 19:47:58.067: %SNTP-7-TOO_MANY_BAD_PKTS: sntp_main.c:943 Too many bad or lost packets.
*sntpReceiveTask: Jan 11 19:47:58.067: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask5: Jan 11 19:47:57.380: %CAPWAP-3-TX_ERR: capwap_ac_sm.c:5380 The system has failed to transmit image data request to AP 6c:dd:30:3a:c7:80
*spamApTask5: Jan 11 19:47:57.380: %CAPWAP-3-ENCODE_ERR: capwap_ac_sm.c:3208 The system has failed to encode Image data request to AP 6c:dd:30:3a:c7:80
*spamApTask5: Jan 11 19:47:57.380: %CAPWAP-3-IMAGE_DOWNLOAD_ERR3: capwap_ac_platform.c:1052 Refusing image download request from AP 6c:dd:30:3a:c7:80 - unable to open image file /bsn/ap/ap1g4
*spamApTask5: Jan 11 19:47:57.227: %DTLS-5-ESTABLISHED_TO_PEER: openssl_dtls.c:777 DTLS connection established to 10.24.110.237
*sntpReceiveTask: Jan 11 19:47:56.067: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask2: Jan 11 19:47:55.370: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.202
*spamApTask2: Jan 11 19:47:55.333: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.25
*spamApTask1: Jan 11 19:47:54.529: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.206
*spamApTask7: Jan 11 19:47:54.527: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.129
*sntpReceiveTask: Jan 11 19:47:54.067: %SNTP-7-SELECT_FAILED: socket.c:424 The select system call failed.Error Code: 0
*spamApTask3: Jan 11 19:47:53.778: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.65
*spamApTask0: Jan 11 19:47:53.629: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:852 Failed to complete DTLS handshake with peer 10.24.110.39 

[MHM Cisco World]

Check this post 

https://community.cisco.com/t5/wireless/update-wlc-5508-8-3-102-to-8-5-110/td-p/3322189

MHM

[MHM Cisco World]

""Refusing image download request from AP"" <<- this error what ypu must looking for solution for it

MHM

[marce1000]

  - Then examine the current software version installed on the 5508 and have a look at :
     https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html

     Controller should run  8.5.182.12 (8.5.182.13 for 3504s)
     last version for these models, consider mandatory because aireos/5508 is being phased out and EOL,

 M.

[athan1234]

Software Version

8.0.152.0

[Flavio Miranda]

@athan1234 

Which access point model are you trying to Join the WLC? 

Did you check If the WLC have bundle for this AP?

As per the logs you shared, seems you are trying to join 18XX APs.

"unable to open image file /bsn/ap/ap1g4"

Each AP model Will request for one kind of image. Bundle ap1g4 represent the following APs.

• ap1g4 - 1850/1830/1810 series (AP-COS)

Those APs does not support version 8.0.152.0. They need at least version 8.1.111.0 in order to join the WLC.

You need to upgrade the WLC.

1850 Series	AIR-AP1852I-UXK9	8.1.111.0	8.10.x	Cisco IOS XE Gibraltar 16.10.1	—
	AIR-AP1852I-UXK910
	AIR-AP1852I-UXK9C
	AIR-AP1852I-UXK910C
	AIR-AP1852E-UXK9
	AIR-AP1852E-UXK910

[athan1234]

I currently have two issues:

I am trying to associate some APs with another controller (a 4400), but I notice that the APs are connecting and disconnecting intermittently over time. I’m not sure what is causing the problem, but I need to resolve this issue first.

Do you have any ideas about the cause? Before a reboot, the APs were connecting properly.

////

anufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.0.235.0
RTOS Version..................................... 7.0.235.0
Bootloader Version............................... 7.0.235.0
Emergency Image Version.......................... 7.0.235.0

ç

////

Jan 11 23:49:52.724: [WARNING] ewmain.c 2970: sslConnectionInit() refused connection
Jan 11 23:49:52.724: [WARNING] ewmain.c 6012: ewsNetSSLStart: SSL_do_handshake() failed, error = 5
*mmMobility: Jan 11 23:49:51.834: %ETHOIP-3-PING_TRANSMIT_FAILED: ethoip_ping.c:227 send_eoip_ping: Failed to tx Ethernet over IP ping rc=5.
*mmMobility: Jan 11 23:49:51.834: %LOG-3-Q_IND: rrmClient.c:954 Unable to find AP 84:f1:47:2d:8f:40 entry in the database, could not process iapp aggregated neighbor packet
*iappSocketTask: Jan 11 23:49:51.268: %RRM-3-AP_DB_ERR1: rrmClient.c:954 Unable to find AP 84:f1:47:2d:8f:40 entry in the database, could not process iapp aggregated neighbor packet
*spamReceiveTask: Jan 11 23:49:50.492: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:631 Failed to complete DTLS handshake with peer show 

[Flavio Miranda]

@athan1234 

4400 is pretty old. Which AP are you trying to join?

[athan1234]

Hello, one more thing

I have to use the CLI to configure a few APs. This IP address is the primary controller: 10.17.15.1

The AIR-LAP1242AG-E-K9 model

Is this the right command to use?

capwap ap primary-base WLC-1 10.17.15.1

[marce1000]

  - Looks good : https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/command/reference/consolidated/b_cr74_CONSOLIDATED/cr74_chapter_0111.html#wp1338642080

 M.

[Flavio Miranda]

It is. did the AP join? This model seems to be fine to work with 4400. 

[Rich R]

All your WLCs and software are end of support so at a minimum you need to update to latest available release for your WLC and APs - see the Compatibility Matrix link below.

Refer to the various Field Notices listed below.  Not much you can do for 4400 except keep dates set to within cert expiry times.

> %CAPWAP-3-IMAGE_DOWNLOAD_ERR3: capwap_ac_platform.c:1052 Refusing image download request from AP 6c:dd:30:3a:c7:80 - unable to open image file /bsn/ap/ap1g4
ap1g4 is the image used by the AP1850/1810/1830 model APs which are not supported by software version 8.0.152.0!
https://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn80mr5.html#pgfId-1142589
https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#ctrl_release-ap-support
As you can see support for those AP models only started in 8.1 and 8.2 releases.
So you cannot use those APs with the current software version.
You could, and should, update the software to 8.5.182.12 but check the Compatibility Matrix to see if the other APs you're using will be supported by the 8.5 software as many end of support models were not supported after 8.3.

Time for you to seriously consider upgrading to current hardware and software to avoid this type of problem which is only going to get worse as time goes by.