Failed to join controller C9800CL

[gtstech]

UEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*05/15/2025 17:52:39.0369] OOBImageDnld: OOBImageDownloadTimer expired for imag e download..
[*05/15/2025 17:52:39.0369] OOBImageDnld: Do common error handler for OOB image download..
[*05/15/2025 17:52:39.0617] No more AP manager addresses remain..
[*05/15/2025 17:52:39.0617] No valid AP manager found for controller 'WLC' (ip: 192.168.88.2)
[*05/15/2025 17:52:39.0617] Failed to join controller WLC.
[*05/15/2025 17:52:39.0617] Failed to join controller.

cisco CW9166D1-ROW 
AP Running Image : 17.12.4.22
Primary Boot Image : 17.12.4.22
Backup Boot Image : 17.12.1.5

WCL version: 17.12.4

[Mark Elsen]

 - Checkout this advisory https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217734-connect-and-join-a-row-domain-access-po.html#toc-hId--2068680011

        Summarized , make sure that have set a valid country code and or issue the command 
                         show controllers dot11Radio 1 
      to display the -ROW domain and the country to which the AP is assigned if any:

   M.

[gtstech]

I used country code: US but still not working even though US supports -row for CW9166D1

[Mark Elsen]

 - @gtstech  I can't find a match in https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html
                    for the -ROW version of the AP as such for the US

                    I could be wrong ; did you try show controllers dot11Radio 1   already ?
                    To exclude further basic configuration issues validate the controller's configuration
                    using the CLI command show tech wireless and feed the output from that
                    into Wireless Config Analyzer
                                     (Do not use a simple show tech-support for this procedure)

  M.

[gtstech]

show controllers dot11Radio 1  on thiết bị wireless CW9166D1 right?

[Mark Elsen]

 @gtstech  No  , on the 9800

 M.

[gtstech]

But AP has not joined C9800 to see country

[Mark Elsen]

 - @gtstech              >...But AP has not joined C9800 to see country
                     Yeah that is correct ,so then you need to look at my earlier arguments :==>

                     I can't find a match in https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html
                    for the -ROW version of the AP as such for the US
                                            
                    To exclude further basic configuration issues validate the controller's configuration
                    using the CLI command show tech wireless and feed the output from that
                    into Wireless Config Analyzer
                                    (Do not use a simple show tech-support for this procedure)
                                            The above procedure must be considered mandatory!

  M.

[Scott Fella]

Is that all the logs you have when you are on the console of the AP?  There is nothing else that shows up that can be an issue? How many ap's do you have joined to your 9800? What other model ap's are already joined?  If this is new and you don't have any ap's joined, it can be a setting on the VM or a miss configuration on your 9800-CL.

[Saikat Nandy]

US does not use ROW for any AP model. In US 9166D1 uses -B Regulatory domain. Mexico uses -ROW for 9166D1. So you can try adding Mexico in WLC/AP join Profile to match the country code.

The logs are not sufficient enough to draw a conclusion. So you can take WLC RA trace & AP show logging output atleast to see what exactly is happening.

[Rich R]

Agreed with @Saikat Nandy and @Mark Elsen -ROW is not a valid SKU for US.
Always refer to and check:
https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html
https://cae-cnc-prd.cisco.com/pdtcnc/#/
https://www.cisco.com/c/en/us/support/wireless/catalyst-9100ax-access-points/products-technical-reference-list.html

show controllers dot11Radio 1 is an AP not WLC command.

As others have said you should always capture the complete console log from the AP, save to a text file (.txt) for example in Notepad, and then attach it to this thread.  But no need in this case because we know you are using invalid hardware for the US country code in this case. Also remember you can enable RA trace for the AP MAC address (add both LAN and wireless base MAC to be sure you catch everything) on the WLC in the same way as you would for a client MAC to get detailed debug logs for the AP trying to join the WLC.  Also look at "show wireless stats ap join summary" and "show wireless stats ap mac-address <AP MAC> join detailed" and "show wireless stats ap history mac-address <AP MAC>" and of course the WLC log for any relevant logs.

Also you should always check your WLC config with the Config Analyzer (link and details below) because this will show many common mistakes and best practice items (also see the Best Practices link below).