I have a 3504 HA pair of controllers which have 100 registered APs on them currently and they are licensed for 150 APs. They are a mix of 2800/3800 and a few 9120s. Recently we purchased a few more 9120s. They are all being added to the same Vlan as all the current APs. They get IPs via DHCP, with option 43. I see the new APs trying to register on the controller, however they never do. Most of them are on the same Vlan as the mgmt interface of the controllers, so there is no firewall between them. The controllers are running fairly recent code and the APs brand new, so I don't see how it could be a cert issue. The APs were all installed about 40 feet off the floor and I don't have access to try to console into one of them, but they also are not responding to telnet or ssh, though I can ping them.
Here is a CDP neighborhood for one of them:
Device ID: AP588B.1C01.8A48
Entry address(es):
IP address: 10.187.14.31
Platform: cisco C9120AXE-B, Capabilities: Router Trans-Bridge
Interface: GigabitEthernet2/0/41, Port ID (outgoing port): GigabitEthernet0
Holdtime : 140 sec
Version :
Cisco AP Software, ap1g7-k9w8 Version: 17.6.4.56
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 2014-2015 by Cisco Systems, Inc.
advertisement version: 2
Power drawn: 23.200 Watts
Power request id: 40929, Power management id: 2
Power request levels are:23200 15400 0 0 0
Management address(es):
IP address: 10.187.14.31
Here is some of the debug output on the controller for one of the new APs
(Cisco Controller) >
(Cisco Controller) >*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Discovery Request from 10.187.1.224:5258
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 150, MaxLicense=150 joined Aps =100
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 apType = 87 apModel: C9120AXE-B
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 apType: Ox57 bundleApImageVer: 8.10.171.0
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 version:8 release:10 maint:171 build:0
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224 port 5258
*spamApTask6: Aug 30 15:36:51.372: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224:5258
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Request from 10.187.1.224:5258
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 150, MaxLicense=150 joined Aps =100
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 apType = 87 apModel: C9120AXE-B
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 apType: Ox57 bundleApImageVer: 8.10.171.0
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 version:8 release:10 maint:171 build:0
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224 port 5258
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Response sent to 10.187.1.224:5258
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Discovery Request from 10.187.1.224:5258
*spamApTask6: Aug 30 15:36:51.375: [PA] 58:8b:1c:02:85:00 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 150, MaxLicense=150 joined Aps =100
It doesn't seem to be that they aren't getting the DHCP option 43 correctly since they talk to the controller. It doesn't seem to be a cert issue as I'm not seeing any pki errors. These APs are on the same Vlan and DHCP scope as all the ones that are working...
Any suggestions on where to look for an issue?
