11-05-2019 12:33 PM - edited 07-05-2021 11:14 AM
We have two WLC 2504s in production with software version 8.2.170.0. We just purchased an addition 2702 AP and I successfully joined it to the one WLC. However, I needed to install the AP on a different subnet then the one I configured it on (the WLC is available to both subnets). However, once I moved the AP to the other subnet it would not join the controller. I reset the AP several times. I even tried to join it again on the subnet I originally configured it on but it will not join. It will download the updated software but when it tries to join I just keep getting the error "Invalid License in configuration request".
The Country code is correct and the time on the WLC is current.
Any other ideas as to what is wrong here?
Solved! Go to Solution.
11-06-2019 09:24 AM
The solution was to reset the controller using the cli: I ran the following commands.
debug capwap console cli
erase /all nvram:
undebug all
reload
clear capwap private-config
Using the MODE button or just erasing/reloading the nvram would not fix it. It was only after I also ran clear capwap private-config was the AP able to join the controller.
Thanks for your help!
11-05-2019 01:06 PM
So the question here is you mentioned that the first subnet always works on your both AP join Controller?
Seconds subnet you having issue joining controller?
1. i would look the DHCP Option for both the subnet/
2. connect console cable and post complete boot process here to understand what is wrong.
11-05-2019 03:02 PM - edited 11-05-2019 03:05 PM
Thank you for the reply. I am using DHCP option 43 and that seems to work fine. The AP finds the WLC. Here is the boot process and how it just keeps failing to join.
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2019.11.05 16:38:15 =~=~=~=~=~=~=~=~=~=~=~=
IOS Bootloader - Starting system.
flash is writable
Antigua Board
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 80 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 20222976
flashfs[0]: Bytes available: 20935680
flashfs[0]: flashfs fsck took 10 seconds.
Base Ethernet MAC address: e4:aa:5d:1a:bc:f4
Ethernet speed is 1000 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-mx.153-3.JC15"...#########################
File "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-mx.153-3.JC15" uncompressed and installed, entry point: 0x2003000
executing...
Secondary Bootloader - Starting system.
Antigua Board Pre-Pilot
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 80 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 20222976
flashfs[0]: Bytes available: 20935680
flashfs[0]: flashfs fsck took 11 seconds.
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 12257280
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 12256256
flashfs[1]: flashfs fsck took 0 seconds.
Base Ethernet MAC address: e4:aa:5d:1a:bc:f4
Boot CMD: 'boot flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-xx.153-3.JC15;flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx'
Loading "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-xx.153-3.JC15"...################################################
File "flash:/ap3g2-k9w8-mx.153-3.JC15/ap3g2-k9w8-xx.153-3.JC15" uncompressed and installed, entry point: 0x1003000
executing...
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JC15, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Thu 07-Jun-18 16:43 by prod_rel_team
Antigua Board Pre-Pilot
40MB format
Tide XL MB - 40MB of flash
Initializing flashfs...
flashfs[2]: 80 files, 9 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 40900608
flashfs[2]: Bytes used: 20222976
flashfs[2]: Bytes available: 20677632
flashfs[2]: flashfs fsck took 12 seconds.
flashfs[2]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 0 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCCCC
Copy in progress...CCC
Copy in progress...CCCC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...CC
Copy in progress...CCCC
Copy in progress...CC
Copy in progress...CCCCCC
Copy in progress...CCCC
Copy in progress...CC
Uncompressing radio files...
...done Initializing flashfs.
Radio0 present 8764 8000 0 A8000000 A8010000 0
Rate table has 650 entries (20 legacy/224 11n/406 11ac)
POWER TABLE FILENAME = ram:/U2.bin
Radio1 present 8864 8000 0 80000000 80100000 4
POWER TABLE FILENAME = ram:/U5.bin
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
export@cisco.com.
cisco AIR-AP2702I-UXK9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID FCW1939NA33
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 8.2.170.0
Access Point Type: World Mode
1 Gigabit Ethernet interface
2 802.11 Radios
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: E4:AA:5D:1A:BC:F4
Part Number : 73-15824-03
PCB Serial Number : @@@@@@@@@@@
Top Assembly Part Number : 068-100395-01
Top Assembly Serial Number :@@@@@@@@@@@
Top Revision Number : A0
Product/Model Number : AIR-AP2702I-UXK9
% Please define a domain-name first.
Press RETURN to get started!
*Mar 1 00:00:17.079: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
*Mar 1 00:00:17.543: Registering HW DTLS
*Mar 1 00:00:17.547: APAVC: Initial WLAN Buffers Given to System is 2500
*Mar 1 00:00:17.595: APAVC: WlanPAKs 42878 RadioPaks 42270
*Mar 1 00:00:17.595: Starting Ethernet promiscuous mode
*Mar 1 00:00:19.915: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:19.915: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
*Mar 1 00:00:22.419: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
*Mar 1 00:00:22.531: loading Power Tables from ram:/U2.bin. Class = A
*Mar 1 00:00:22.535: record size of 3ss: 1168 read_ptr: 4DE257E
*Mar 1 00:00:27.695: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
*Mar 1 00:00:27.743: loading Power Tables from ram:/U5.bin. Class = B
*Mar 1 00:00:27.775: record size of vht: 2904 read_ptr: 4DE257E
*Mar 1 00:00:27.899: Wait until the stile protocol list is initialized.
*Mar 1 00:00:29.147: Start STILE Activation
*Mar 1 00:00:30.919: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Mar 1 00:00:30.919: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to down
*Mar 1 00:00:31.951: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C2700 Software (AP3G2-K9W8-M), Version 15.3(3)JC15, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Thu 07-Jun-18 16:43 by prod_rel_team
*Mar 1 00:00:31.955: %SNMP-5-COLDSTART: SNMP agent on host Penpub-AP01 is undergoing a cold start
*Mar 1 00:00:33.139: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:00:33.967: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source
*Mar 1 00:00:34.179: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable statelwapp_crypto_init: MIC Present and Parsed Successfully
*Mar 1 00:00:34.339: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:00:34.339: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar 1 00:00:35.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar 1 00:00:36.027: %LINK-5-CHANGED: Interface GigabitEthernet1, changed state to administratively down
*Mar 1 00:00:44.187: %LINK-6-UPDOWN: Interface BVI1, changed state to down
*Mar 1 00:00:45.187: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
*Mar 1 00:00:46.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:46.947: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
*Mar 1 00:00:46.947: DPAA Initialization Complete
*Mar 1 00:00:46.947: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Mar 1 00:00:48.951: %LINK-6-UPDOWN: Interface BVI1, changed state to up
*Mar 1 00:00:49.959: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:00:50.399: Currently running a Release Image
*Mar 1 00:00:50.619: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.40.1.145, mask 255.255.255.0, hostname Penpub-AP01
*Mar 1 00:00:50.819: Using SHA-2 signed certificate for image signing validation.
*Mar 1 00:00:57.631: APAVC: Succeeded to activate all the STILE protocols.
*Mar 1 00:00:57.631: APAVC: Registering with CFT
*Mar 1 00:00:57.631: APAVC: CFT registration of delete callback succeeded
*Mar 1 00:00:57.631: APAVC: Reattaching Original Buffer pool for system use
*Mar 1 00:00:57.631: Pool-ReAtach: paks 42878 radio42270
%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar 1 00:01:05.387: AP image integrity check PASSED
*Mar 1 00:01:05.395: Non-recovery image. PNP Not required.
*Mar 1 00:01:05.403: Cert ISSUER (39): cn=Cisco Manufacturing CA SHA2,o=Cisco
*Mar 1 00:01:05.427: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 1 00:01:05.427: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar 1 00:01:06.427: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
%Error opening flash:/capwap-saved-config (No such file or directory)
capwap ap unencrypted_data_keep_alive enable
^
% Invalid input detected at '^' marker.
capwap ap ble-adv-power 0
^
% Invalid input detected at '^' marker.
*Mar 1 00:01:15.439: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 0 CLI Request Triggered
*Mar 1 00:01:16.439: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 started - CLI initiated%No matching route to delete
*Mar 1 00:01:23.635: %CDP_PD-4-POWER_OK: 15.4 W power - INJECTOR_DETECTED_PD inline power source
Translating "CISCO-CAPWAP-CONTROLLER.@@@@@@@@.com"...domain server (10.40.1.40)
*Mar 1 00:01:24.747: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 1 00:01:25.747: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar 1 00:01:26.443: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.40.1.50 obtained through DHCP
*Mar 1 00:01:37.447: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.
*Nov 5 22:40:27.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.40.1.50 peer_port: 5246
*Nov 5 22:40:27.347: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.40.1.50 peer_port: 5246
*Nov 5 22:40:27.347: %CAPWAP-5-SENDJOIN: sending Join Request to 10.40.1.50
*Nov 5 22:40:45.699: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.40.1.50:5246
*Nov 5 22:40:45.827: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source
*Nov 5 22:40:45.839: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Nov 5 22:40:45.839: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Nov 5 22:40:45.839: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state
*Nov 5 22:40:45.867: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Nov 5 22:40:46.851: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Nov 5 22:40:47.871: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Nov 5 22:40:47.879: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Nov 5 22:40:47.887: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Nov 5 22:40:48.879: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Nov 5 22:40:48.907: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Nov 5 22:40:49.907: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Nov 5 22:40:55.867: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.
*Nov 5 22:40:55.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.40.1.50 peer_port: 5246
*Nov 5 22:40:55.347: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.40.1.50 peer_port: 5246
*Nov 5 22:40:55.347: %CAPWAP-5-SENDJOIN: sending Join Request to 10.40.1.50
*Nov 5 22:41:13.431: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.40.1.50:5246
*Nov 5 22:41:13.555: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source
*Nov 5 22:41:13.567: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Nov 5 22:41:13.567: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state
*Nov 5 22:41:13.591: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Nov 5 22:41:14.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Nov 5 22:41:15.591: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Nov 5 22:41:15.599: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Nov 5 22:41:15.607: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Nov 5 22:41:16.599: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Nov 5 22:41:16.627: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Nov 5 22:41:17.627: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Nov 5 22:41:23.587: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.
*Nov 5 22:41:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.40.1.50 peer_port: 5246
*Nov 5 22:41:24.347: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.40.1.50 peer_port: 5246
*Nov 5 22:41:24.347: %CAPWAP-5-SENDJOIN: sending Join Request to 10.40.1.50
*Nov 5 22:41:42.431: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.40.1.50:5246
*Nov 5 22:41:42.555: [m102x_set_lanport_config] Cannot enable AUX port while POE, connect AC or Inj source
*Nov 5 22:41:42.567: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Nov 5 22:41:42.571: bsnUnlockDevice: not bring radio up: radio 1 is in admin disable state
*Nov 5 22:41:42.591: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Nov 5 22:41:43.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Nov 5 22:41:44.591: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Nov 5 22:41:44.599: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
11-05-2019 04:46 PM
I think this is related to the country code.
11-06-2019 06:16 AM
The Country Code is set to United States on both WLCs. The strange thing is that the AP initially joined. I configured it in my office which is in a different building and a different subnet. I then took it over to the building to install it and when I installed it it wouldn't join. So I reset it several times and still cannot get it to join in my office or the other building.
11-06-2019 09:24 AM
The solution was to reset the controller using the cli: I ran the following commands.
debug capwap console cli
erase /all nvram:
undebug all
reload
clear capwap private-config
Using the MODE button or just erasing/reloading the nvram would not fix it. It was only after I also ran clear capwap private-config was the AP able to join the controller.
Thanks for your help!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide