10-12-2018 03:03 AM - edited 07-05-2021 09:17 AM
Hello All,
My client bought a vWLC in "small" version but today needs a "large" version as he must deal with more than 200 APs.
We have installed a new VM in version 8.2.170 (his small is in 8.2.151) and had no problem adding the configuration or migrating AP1600 or AP1700.
As for his AP 1852 and 1832, they cannot join the new WLC because of failed/expired certificate.
My colleague told me he had the same problem and had to erase the AP's config before the AP accepted to associate to the new controller.
The problem here is that the client has more than 100 18xx APs and it would be terribly complex to erase the config and modify the primary controller.
Does anyone know a way to force the APs to accept the "large"vWLC's certificate ?
Thank you for your help
Anne
L2 Support Technician
10-12-2018 05:54 AM
just for the record it'not the ap that rejects the vWLC's certificate, but the WLC that rejects the AP's certificate
try this command on the vWLC (Field Notice: FN - 63942 )
ap cert-expiry-ignore {mic|ssc} enable
10-12-2018 07:26 AM
Hi Pieterh,
Thanks for your answer.
I have tried the command but it says that it is already enabled for both mic and ssc.
Anne
10-12-2018 07:37 AM
10-14-2018 01:05 AM
Hi Anne,
Can you pls help with below two outputs from AP and WLC.
WLC: sh sysinfo
AP: sh version
10-17-2018 12:36 AM
10-17-2018 12:39 AM
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: