cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
611
Views
3
Helpful
2
Replies

EWC 9115 with 2700 access point do not join controller

BosePhones
Level 1
Level 1

I have some problems getting my 2700 access point to join my 9115 ewc running 17.9.3 software. I tried using a C9800-CL on a esxi and the access point got the correct software and joined that controller. 

FW is open and connectivity to tftp server is working. I have setup the tftp config on the ewc 9115 ap:

wireless profile image-download default
description "default image download profile"
image-download-mode tftp
tftp-image-path /
tftp-image-server 10.0.10.115

I have downloaded all three files for the 2700 ap here: https://software.cisco.com/download/home/286256843/type/280775090/release/15.3.3-JPN2

I unzipped the tar file and placed the content like this. What am I missing here?

help ewc.PNG

I followed the documentation of what software is correct for 2700 ap.

BosePhones_0-1693340075001.png

On the controller side these messages come all the time:

BosePhones_0-1693340308830.png

*Aug 29 20:02:13.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.20.101 peer_port: 5246
*Aug 29 20:02:13.255: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.20.101 peer_port: 5246
*Aug 29 20:02:13.255: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.20.101
*Aug 29 20:02:13.263: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.0.20.101
*Aug 29 20:02:13.263: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.20.101:5246
*Aug 29 20:02:39.263: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

I tried to have the 2700 ap join a C9800 CLoud, running 17.9.3 and the access point joined the controller. So now the AP is running the correct ap3g2-k9w8-mx.153-3.JPN2, but It will not join the 9115 EWC. 

WLCC884.A1AB.5770#wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0 Stabbestad1
Configuring vWLC-SSC...

WLCC884.A1AB.5770#show wireless management trustpoint
Trustpoint Name : CISCO_IDEVID_SUDI
Certificate Info : Available
Certificate Type : MIC
Certificate Hash : 32487782d79cb30b233c2e040663ae7f58dc0a9b
Private key Info : Available
FIPS suitability : Not Applicable

I have manually removed ntp and set the time to before 5 dec 2022.

1 Accepted Solution

Accepted Solutions

marce1000
VIP
VIP

 

 - The 2700 model is not supported on the EWC based controller(s) : https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#c9800-embed-ctr-ap_support

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

View solution in original post

2 Replies 2

marce1000
VIP
VIP

 

 - The 2700 model is not supported on the EWC based controller(s) : https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#c9800-embed-ctr-ap_support

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

I must have seen wrong, and seen the 9800 cloud version over and over again. Thanks a bunch marce, this made my day easier!

Review Cisco Networking for a $25 gift card