Suddenly AP1832 stopped join ME controller

[l.buschi]

My access-point stopped join ME Controller.

I manually configured a date with an older year and added config ap cert-ignore enable for both MIC and SSC.

They join for some seconds and then stops.

Here are some datas:

(Cisco Controller) >show auth-list

Authorize MIC APs against Auth-list or AAA ...... disabled
Authorize LSC APs against Auth-List ............. disabled
APs Allowed to Join
AP with Manufacturing Installed Certificate.... yes
AP with Self-Signed Certificate................ no
AP with Locally Significant Certificate........ no

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.5.151.0

System Name...................................... CT-T
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.2371
IP Address....................................... 10.22.254.20
Last Reset....................................... 2: Image Upgrade

System Up Time................................... 0 days 0 hrs 32 mins 33 secs
System Timezone Location......................... (GMT) London, Lisbon, Dublin, Edinburgh
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... IT - Italy

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 5

--More-- or (q)uit
Number of Active Clients......................... 9

OUI Classification Failure Count................. 79

Memory Current Usage............................. 59
Memory Average Usage............................. 59
CPU Current Usage................................ 16
CPU Average Usage................................ 16

Flash Type....................................... Compact Flash Card
Flash Size....................................... 1073741824

Burned-in MAC Address............................ CC:DB:93:3A:64:A0
Maximum number of APs supported.................. 50
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1/SHA2

(Cisco Controller) >show time

Time............................................. Sun Sep 26 10:49:14 2021

Timezone delta................................... 0:0
Timezone location................................ (GMT) London, Lisbon, Dublin, Edinburgh

NTP Servers
NTP Version.................................. 3
NTP Polling Interval......................... 86400

Index NTP Key Index NTP Server Status NTP Msg Auth Status
------- ---------------------------------------------------------------------

and from ap:

Processor board ID KWC25080CQU
AP Running Image : 8.5.151.0
Primary Boot Image : 8.5.151.0
Backup Boot Image : 8.5.182.0
AP Image type : MOBILITY EXPRESS IMAGE
AP Configuration : NOT MOBILITY EXPRESS CAPABLE
1 Gigabit Ethernet interfaces
2 802.11 Radios
Radio FW version : f6d58b5e05c762162e07fe70e0671647
NSS FW version : NSS.AK.C.CS-3-fix3

AP05-RECEPTION#sh clock
*09:48:46 UTC Sun Sep 26 2021

[marce1000]

 - Check and or post the ap boot process , also check the controller logs just after the access point fails to join

 M.

[l.buschi]

I get the following messages from on AP:

Discovery Response from 10.22.254.20
[*09/25/2022 21:06:30.7301] Discovery response from MWAR ''running version 0.0.0.0 is rejected.
[*09/25/2022 21:06:30.7301] Failed to decode discovery response(status = 4).
[*09/25/2022 21:06:30.7301] CAPWAP SM handler: Failed to process message type 2 state 2.
[*09/25/2022 21:06:30.7301] Failed to handle capwap control message from controller - status 4
[*09/25/2022 21:06:30.7301] Failed to process unencrypted capwap packet 0x13b1000 from 10.22.254.20
[*09/25/2022 21:06:30.7301] Failed to send message to CAPWAP state machine, msgId 0
[*09/25/2022 21:06:30.7301] Failed to send capwap message 0 to the state machine. Packet already freed.
[*09/25/2022 21:06:30.7301] IPv4 wtpProcessPacketFromSocket returned 4
[*09/25/2022 21:06:30.7301] Discovery Response from 10.22.254.20
[*09/25/2022 21:06:30.7301] Discovery response from MWAR ''running version 0.0.0.0 is rejected.
[*09/25/2022 21:06:30.7301] Failed to decode discovery response(status = 4).
[*09/25/2022 21:06:30.7301] CAPWAP SM handler: Failed to process message type 2 state 2.
[*09/25/2022 21:06:30.7301] Failed to handle capwap control message from controller - status 4
[*09/25/2022 21:06:30.7301] Failed to process unencrypted capwap packet 0x13ad000 from 10.22.254.20
[*09/25/2022 21:06:30.7301] Failed to send message to CAPWAP state machine, msgId 0
[*09/25/2022 21:06:30.7301] Failed to send capwap message 0 to the state machine. Packet already freed.
[*09/25/2022 21:06:30.7301] IPv4 wtpProcessPacketFromSocket returned 4

[patoberli]

Based on the logs your date/time adjustment is not active. 

You might be affected by this bug: https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html 

[l.buschi]

Now I have this situation: all access-points associated but they disassociate and reassociate to controller, no power outage no network issues:

is it normal?

what can I check?

[marce1000]

          - Check the intranet network, look at logs on switches, make sure the network is stable.

 M.

[l.buschi]

ME Controller is AP09.

[Arshad Safrulla]

How is your ME uplink configured and how is your AP uplink configured?  I would suggest if all the AP models are compatible to move to a newer release in 8.10.X