Unable to connect CIsco WAP AIR-AP1231G-A-K9 to the WLC model AIR-CT2504-K9

Zarar7 · ‎03-03-2020

Hi

I have APs AIR-AP1231G-A-K9 and the Controller AIR-CT2504-K9. I am trying to add these APs to the controller but i am unable to discover the APs in WLC. i have configured the option 43 and DNS address but still not able.

i have the below console messages on the AP. Please someone assist me I am trying from last 3 days to figure out.

I am not wireless expert the guy who was managing these APs has left the company.

-------------------------------------------------------------------------------------

*Mar 3 21:34:36.944: status of voice_diag_test from WLC is false
*Mar 3 21:34:36.944: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 3 21:34:36.955: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar 3 21:34:37.956: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar 3 21:35:52.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.32.64.120 peer_port: 5246
*Mar 3 21:35:52.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Mar 3 21:35:53.916: %DTLS-5-ALERT: Received FATAL : Certificate unknown alert from 10.32.64.120
*Mar 3 21:35:53.916: %CAPWAP-3-ERRORLOG: Bad certificate alert received from peer.
*Mar 3 21:35:53.917: %DTLS-5-PEER_DISCONNECT: Peer 10.32.64.120 has closed connection.
*Mar 3 21:35:53.917: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.32.64.120:5246
*Mar 3 21:35:53.918: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
*Mar 3 21:35:52.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.32.64.120 peer_port: 5246
*Mar 3 21:35:53.900: %DTLS-5-ALERT: Received FATAL : Certificate unknown alert from 10.32.64.120
*Mar 3 21:35:53.900: %CAPWAP-3-ERRORLOG: Bad certificate alert received from peer.
*Mar 3 21:35:53.901: %DTLS-5-PEER_DISCONNECT: Peer 10.32.64.120 has closed connection.
*Mar 3 21:35:53.901: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.32.64.120:5246
*Mar 3 21:35:53.902: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
*Mar 3 21:36:57.577: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar 3 21:36:57.577: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar 3 21:36:57.578: bsnInitRcbSlot: slot 1 has NO radio
*Mar 3 21:36:57.643: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Mar 3 21:36:57.909: %PARSER-4-BADCFG: Unexpected end of configuration file.

*Mar 3 21:36:57.912: status of voice_diag_test from WLC is false
*Mar 3 21:36:57.913: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar 3 21:36:57.925: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

Rasika Nayanajith · ‎03-03-2020

I am sure your 2504 has software that is no longer supporting 1231. Look at this table, 1231AP last supported in 7.0.x software version

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#56735

if you have later version of software in your 2504, I would not bother bring this 1231 AP. I will replace it with a later model

HTH

Rasika

*** Pls rate all useful responses ***

Leo Laohoo · ‎03-03-2020

What firmware is the controller running on?
As what Rasika has stated, the WLC needs to be running on 7.0.X.X.

patoberli · ‎03-04-2020

And even if you have an old enough firmware on the WLC, make sure you don't hit the certificate bug:
https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html