OfficeExtend AP not join the controller 5508

[csco10734177]

I try to configure an AP1131 as OfficeExtend but unfortunately I receive the following message from the debug command on the WLC5508:

(Cisco Controller)

*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Discovery Request from XX.XX.XX.XX:14847

*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Join Priority Processing status = 1, Incoming Ap's Priority 3, MaxLrads = 500, joined Aps =2
*spamApTask4: Oct 04 17:19:18.043: 00:1b:90:74:37:e0 Discovery Response sent to XX.XX.XX.XX:14847

*spamApTask0: Oct 04 17:19:18.046: 00:1b:90:74:37:e0 Received LWAPP DISCOVERY REQUEST to 54:75:d0:de:65:20 on port '1'
*spamApTask0: Oct 04 17:19:18.046: 00:1b:90:74:37:e0 Discarding discovery request in LWAPP from AP supporting CAPWAP

*

*spamApTask2: Oct 04 17:20:28.179: 00:1b:90:74:37:e0 Join Priority Processing status = 1, Incoming Ap's Priority 3, MaxLrads = 500, joined Aps =2
*spamApTask2: Oct 04 17:20:28.179: 00:1b:90:74:37:e0 Discovery Response sent to XX.XX.XX.XX:14845

*spamApTask0: Oct 04 17:20:28.181: 00:1b:90:74:37:e0 Received LWAPP DISCOVERY REQUEST to 54:75:d0:de:65:20 on port '1'
*spamApTask0: Oct 04 17:20:28.181: 00:1b:90:74:37:e0 Discarding discovery request in LWAPP from AP supporting CAPWAP

the Ap1131 is set and WLC5508 is behind an ASA.

ports 12222, 12223, 5246 and 5247 are allowed.
that may be causing the problem?

in advance THX.

Augustin.

[Stephen Rodriguez · Accepted solution]

Augustine,

     This is a common message.  All AP send discovery in both LWAPP and CAPWAP, incase it needs to connect to a controller running code < 5.2.  In your output, it does show the WLC sent the Discovey Response.  Do you have the NAT IP configured in the management interface?

[csco10734177]

Yes, the NAT is configurered on the ASA

and the 12222, 12223, 5246 and 5247 are allowed

THX

[Michael Sales]

Hi,

I have this same problem. Most solutions I've read online point to using multiple controllers, "guest anchor" design.

I am limited to a single 5508 controller with 7.0.116.0 code behind our firewall and need to setup OfficeExtend. I have our ASA setup with ports 5246/47 and assigned that NAT address to my management interface on the controller.

Unfortunately, my officeExtend AP never sees the controller.

I need a little help with this as well...

[George Stefanick]

Mike,

Can you hit the WLC nat address from the outside ?

[Michael Sales]

Hi all,

Thanks for getting back on this. I did figure it out. NAT issue on our ASA.

Its working good so far. Now I have to get our VPN client setup on my new Cius so I can registeto our call

Manager.

Again. Thanks for the reply.