In cisco 3650Switch not able to add AP

[Mohamed Kabeer S]

Dear All,

We have configured cisco 3650 switch and I am not able to add the AP, once I connected the AP, I am getting below attached error. Kindly advice

*%CAPWAP-6-DTLS_CONN_ERR2:Switch 1 R0/0: wcm: DTLS connection not found for AP 192.168.30.2 (5256), Controller: 192.168.30.1 (5246) dtls payload
*Nov 28 09:19:02.596: *%DTLS-3-PKI_ERROR:Switch 1 R0/0: wcm: PKI initialization error : Certificate initialization failed
*Nov 28 09:19:02.597: *%CAPWAP-3-DTLS_DB_ERR:Switch 1 R0/0: wcm: 0000.0000.0000: Failed to create DTLS connection for AP 192:168:30:2 (5256).
*Nov 28 09:19:04.497: *%DTLS-3-PKI_ERROR:Switch 1 R0/0: wcm: PKI initialization error : Certificate initialization failed
*Nov 28 09:19:04.497: *%CAPWAP-3-DTLS_DB_ERR:Switch 1 R0/0: wcm: 0000.0000.0000: Failed to create DTLS connection for AP 192:168:30:2 (5256).

[marce1000]

 - Check wether the 3650 runs a sufficient software release which is compatible with the AP model.

M.

[Mohamed Kabeer S]

Dear Marce,

The switch has 16.3.5b software.

Regards,

kabeer

[patoberli]

You didn't write which AP model.
Here the release notes and list of supported APs:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3650/software/release/16-3/release_notes/ol-16-3-3650.html#64952

[Mohamed Kabeer S]

Hi Team,

I checked the AP and its supported that version and I am using same model in other site but it works fine but this one I am facing this issue.

Nov 28 05:39:00.216: *%DTLS-3-PKI_ERROR:Switch 1 R0/0: wcm: PKI initialization error : Certificate initialization failed
Nov 28 05:39:00.216: *%CAPWAP-3-DTLS_DB_ERR:Switch 1 R0/0: wcm: 0000.0000.0000: Failed to create DTLS connection for AP 192:168:30:8 (8451).

Regards,

Kabeer

[Mohamed Kabeer S]

Dear team,

Could you please update about the below issue.

Thanks in advance.

Regards,

Kabeer

[Mohamed Kabeer S]

Dear Team,

Any one update on my below request

DTLS-3-PKI_ERROR:Switch 1 R0/0: wcm: PKI initialization error : Certificate initialization failed
* *%CAPWAP-3-DTLS_DB_ERR:Switch 1 R0/0: wcm: 0000.0000.0000: Failed to create DTLS connection for AP

Regards,

Kabeer

[patoberli]

Sorry I don't know this error. 

Could you attach a console cable to the AP and reboot it and then please post the complete output here?

[Mohamed Kabeer S]

Dear All,

I am not able to add  any AP, I tried with different model and I am getting same error I consoled to the AP and I am getting below error 

Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Setup(3).
[*11/30/2018 15:14:58.4384] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Setup(3).
[*11/30/2018 15:15:54.0166] CAPWAP State: DTLS Teardown
[*11/30/2018 15:14:57.0000] CAPWAP State: DTLS Setup

Time is correct in the switch and Country supported also correct but still I am getting same error. Could any one advice pls.

Regards,

Kabeer

[patoberli]

Please provide the full boot log of the AP. Sometimes we can see something more further up.
But maybe the WLC has some certificate problem on the 3650, but I don't know how to troubleshoot that model.