Why does AP join fail after upgrading EWC?

[JustTakeTheFirstStep]

I upgraded the EWC.

To upgrade CAPWAP AP, TFTP server is configured in EWC.

EWC(config)#wireless profile image-download default
EWC(config-wireless-image-download-profile)#image-download-mode tftp
EWC(config-wireless-image-download-profile-tftp)#tftp-image-server 192.168.1.25
EWC(config-wireless-image-download-profile-tftp)#tftp-image-path /

But AP seems to fail to upgrade.

EWC#sh ver
WLC6C71.0DF2.5B94#sh ver
Cisco IOS XE Software, Version 17.08.01
Cisco IOS Software [Cupertino], C9800-AP Software (C9800-AP-K9_IOSXE-UNIVERSALK9-M), Version 17.8.1, RELEASE SOFTWARE (fc2)

AP#sh ver
cisco C9130AXI-K with 1815704/265544K bytes of memory.
Processor board ID KWC241100EB
AP Running Image : 16.12.7.2
Primary Boot Image: 16.12.7.2
Backup Boot Image: 8.10.151.0
AP Image type: EWC-AP IMAGE
AP Configuration: EWC-AP CAPABLE

Below is the log checked in AP.

*May 4 14:08:00.344: %CAPWAP_IMGDWNLD_TRACE_MESSAGE-6-CAPWAPIMGDWNLD_EWC_AP_AP_IMAGE_DELETED: Chassis 1 R0/0: wncd: AP Event: Downloaded AP image ap1g6a was deleted
*May 4 14:08:37.619: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: AP6C71.0DF2.5B94 Mac: 2c57.4158.dae0 Session-IP: 192.168.1.2[ 5272] 192.168.1.10[5246] Disjoined Image Download Failed
*May 4 14:08:40.894: %INSTALL-5-INSTALL_START_INFO: Chassis 1 R0/0: install_engine: Started install add tftp://192.168.1.3//ap1g6a
*May 4 14:09:14.341: %INSTALL-5-INSTALL_COMPLETED_INFO: Chassis 1 R0/0: install_engine: Completed install add tftp://192.168.1.3//ap1g6a
*May 4 14:09:33.406: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: AP6C71.0DF2.5B94 Session-IP:192.168.1.2[5272] 192.168.1.10[5246 ] CAPWAP DTLS session closed for AP, cause: DTLS handshake error

can anyone help me??

[Flavio Miranda · Accepted solution]

Hi

 Cisco determine upgrade path and it seems that you are not following the correct path.

From 16.12, you need to go to 17.3 frst when using AP 9130

Current Software	Upgrade Path for Deployments with 9130 or 9124	Upgrade Path for Deployments Without 9130 or 9124
16.10.x	—	Upgrade first to 16.12.5 or 17.3.x and then to 17.8.x.
16.11.x	—	Upgrade first to 16.12.5 or 17.3.x and then to 17.8.x.
16.12.x	Upgrade first to 17.3.4c or later and then to 17.8.x.	Upgrade directly to 17.8.x.

[JustTakeTheFirstStep]

Can you give me a link to the docs?

[Flavio Miranda]

Sure thing.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-8/release-notes/rn-17-8-9800.html 

[JustTakeTheFirstStep]

delete

[JustTakeTheFirstStep]

delete

[Flavio Miranda]

Try to downgrade the WLC to the same version of the Access Point 16.12.7 and then, try to upgrade to 17.x.

[JustTakeTheFirstStep]

When I posted the question, the EWC was 17.8 and the AP was 16.12.

Upgraded AP to 17.7 by setting TFTP with CLI in EWC.

Afterwards, the path of the TFTP server was set to the 17.8 directory, and the AP was upgraded to 17.8.

Thank you for supporting me.

[Arshad Safrulla · Accepted solution]

Your EWC AP running 16.12.7 and EWC running 17.8.1. So AP will not be able to join unless you upgrade the capwap AP's joining EWC to match the EWC image manually. 

Or you can host all the images in a central storage and then use TFTP/SFTP and then configure the path in your EWC. WHen an AP joins the EWC it will check the remote storage (TFTP/SFTP) path to see whether the images are there and upgrade the AP automatically.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/17-3/config-guide/ewc_cg_17_3/image_download.html#:~:text=image%20download%20profile.-,Configuring%20TFTP%20Image%20Download%20(CLI),-Procedure

Software Download - Cisco Systems You can download the AP software pack here

This is a well documented limitation in EWC as compared to physical WLC's EWC running in AP itself has lower resources for storage.

[JozefJuricek6442]

My issue was a little different, but can help people with the same error message.

Controller is 17.6.5 but an old 3802 was running with 8.5.135.0 and didn't want to join a modern WLC version.

After so many tries i tried something what didn't make sense and i uploaded https://software.cisco.com/download/home/286304536/type/286288051/release/15.3.3-JPP?catid=278875243 to client AP.

archive download-sw /reload tftp://192.168.10.63/ap3g3-k9w8-tar.153-3.JPP.tar

No idea why, AP joined the WLC and all went up.