"Control Path Down" status message in Mobility Peer Configuration

[rezaalikhani]

Hi all;

Consider the following scenario:

I want to configure Mobility Tunnel between these WLCs (both of them are 9800-CL with IOS-XE 17.12.4). As you can see below, both controllers can ping each other without any problem:

Form the configuration point of view:

WLC1:

WLC2:

 

The following log is appears in both controller from time to time:

Based on Cisco document, it seems the problem is related to certificate operation malfunctioning. As you can see in the following figures, the WLC2 has this problem:

Any ideas?

Thanks

[marce1000]

   - Start with a checkup of the configuration on both controllers ; use the CLI command show tech wireless 
(not a simple show tech) and feed the output from that into Wireless Config Analyzer

 M.

[Rich R · Accepted solution]

You need to re-generate the missing wireless management trustpoint:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html#Dealingwithtrustpoints

This is one of the many problems the Config Analyser (link below) which Marce has recommended would highlight for you.

[Gaurav Kansal]

Hi,

Please verify UDP ports 16667 is open between both WLCs. Please refer below image and link for your reference.

Link: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107188-mobility-groups-faq.html

Regards
Gaurav Kansal

Please mark this helpful and if it resolves your issue please mark this as solution.