The AP series 3800E do not join to the vWLC.

[RaudelRodriguez7265]

Hello Community,

I hope you could help to me with the next issue,

I have 2 APs 3800E series and an one virtual WLC with IOS version 8.5.161.0

I will to try to signing the APs to vWLC but in the console port from the AP display me the follow messges:

[*08/16/2021 18:18:29.0003] CAPWAP State: DTLS Setup

[*08/16/2021 18:19:26.0380]

[*08/16/2021 18:19:26.0380] CAPWAP State: DTLS Teardown

[*08/16/2021 18:19:26.1506] upgrade.sh: Script called with args:[ABORT]

[*08/16/2021 18:19:26.2074] do ABORT, part1 is active part

[*08/16/2021 18:19:26.2248] upgrade.sh: Cleanup tmp files ...

[*08/16/2021 18:19:26.2523] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).

[*08/16/2021 18:19:26.2524] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).

[*08/16/2021 18:19:30.7877] No more AP manager addresses remain..

[*08/16/2021 18:19:30.7878] No valid AP manager found for controller 'WLC-CIDESI_01' (ip: 10.10.10.101)

[*08/16/2021 18:19:30.7878] Failed to join controller WLC-CIDESI_01.

[*08/16/2021 18:19:30.7878] Failed to join controller.

In the vWLC I found the DTLS section and I changed the diferent options, the options are:

dtls version: dtls_all, dtls1.0 and dtls1.2

dtls cipher suit: RSA-AES128-SHA, RSA-AES256-SHA, RSA-AES256-SHA256, ECDHE-ECDSA-AES128-GCM-

                        SHA256, and ECDHE-ECDSA-AES256-GCM-SHA384

But the problem pesist I mean the APs do not joining to the vWLC.

Could you guide me to solve this matters.

Thanks!

[Leo Laohoo]

Time and date is incorrect.

[RaudelRodriguez7265]

Hi Leo,

Thanks,

Yes that log I took in that days, so I connect the AP and the output is the next:

[*08/20/2021 15:30:00.0003]
[*08/20/2021 15:30:00.0003] CAPWAP State: DTLS Setup
[*08/20/2021 15:30:57.0359]
[*08/20/2021 15:30:57.0359] CAPWAP State: DTLS Teardown
[*08/20/2021 15:30:57.1488] upgrade.sh: Script called with args:[ABORT]
[*08/20/2021 15:30:57.2053] do ABORT, part1 is active part
[*08/20/2021 15:30:57.2217] upgrade.sh: Cleanup tmp files ...
[*08/20/2021 15:30:57.2491] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*08/20/2021 15:30:57.2492] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*08/20/2021 15:31:01.7875] No more AP manager addresses remain..
[*08/20/2021 15:31:01.7875] No valid AP manager found for controller 'WLC-CIDESI_01' (ip: 10.10.10.101)
[*08/20/2021 15:31:01.7876] Failed to join controller WLC-CIDESI_01.
[*08/20/2021 15:31:01.7876] Failed to join controller.

The day is correct but the time don´t.

How I can changed the time (hh:mm:ss)?

Thanks,

[RaudelRodriguez7265]

I try to change the time and date but the follow are the permit commands:

APCCDB.93C9.6A82#
Exec mode commands
ap-type Set the access point type
archive Archive commands
capwap CAPWAP exec commands
clear Reset functions
configure Configure parameters
connect Open a terminal connection
copy Copy a file
debug Debugging functions (see also 'undebug')
delete Delete a file
disable Turn off privileged commands
enable Turn on privileged commands
exec-timeout Set the exec-timeout
logging Logging commands
logout Logout out from CLI
more Display a file
no Negate a command or set its defaults
ping Send echo messages
reload Halt and perform a cold restart
show Show running system information
terminal Terminal parameters
test Test susbystems, memory and interfaces traceroute Trace route to destination
undebug Disable debugging functions (see also 'debug')
APCCDB.93C9.6A82#

[Leo Laohoo]

Post the complete output to the following commands: 

1.  WLC:  sh sysinfo

2.  WLC:  sh time

3.  AP:  sh version

4.  AP:  sh capwap client rcb

5.  AP:  sh inventory

[Arshad Safrulla]

in your vWLC, under the interface with the IP of WLC-CIDESI_01' (ip: 10.10.10.101) did you check Enable dynamic AP management is ticked? If not you can enable it and try again. Since you meant is vWLC is believe it is AireOS, not the Catalyst. If it is Catalyst there is only one AP Manager interface and you must follow the below guide to make sure that you have created the certificate required for AP to WLC communication

wireless config vwlc-ssc key-size 2048 signature-algo sha256 password 0 <pwd>

https://gblogs.cisco.com/ch-tech/setup-your-lab-with-catalyst-9800-cl/

[RaudelRodriguez7265 · Accepted solution]

Hello Community,

Thanks for you help!,

I justed solved this issue, I mean I changed the subnetwork in others words the original network it was vlan 200 there's no DHCP so I changed to vlan 210 with DHCP. The APs download information from the vWLC; I guess the new IOS for this APs and then I will return to the vlan 200 and assing the static IP address.

And finally the access points are signing without problem in the vWLC.

Thanks for you support!