Solved: wlc 17.5.1 and ap 3702

interfacedy · ‎02-17-2022

Hi Based on Matrix below link, AP 3702 can join 9800 17.5.1. but when the ap 3702 is connected to vWLC 9800, the vWLC log show it is unsupported AP. The below are ap and wlc log message. The ap should be able to join the vWLC? Thanks

--------------------------AP3702
*Feb 18 03:48:42.239: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.100.90 peer_port: 5246
*Feb 18 03:48:42.239: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.100.90
*Feb 18 03:48:42.243: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.0.100.90
*Feb 18 03:48:42.243: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.100.90:5246
*Feb 18 03:48:42.243: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Feb 18 03:48:45.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.0.100.90 peer_port: 5246
*Feb 18 03:48:47.003: %CAPWAP-1-SSC_CERT_AUTH_FAILED: Failed to authorize controller, SSC certificate validation failed.
*Feb 18 03:48:47.243: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.0.100.90 peer_port: 5246
*Feb 18 03:48:47.243: %CAPWAP-5-SENDJOIN: sending Join Request to 10.0.100.90
*Feb 18 03:48:47.247: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.0.100.90
*Feb 18 03:48:47.247: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.0.100.90:5246
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)

--------------------------- wlc 9800

Feb 18 03:52:37.479: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap
Feb 18 03:52:56.478: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap
Feb 18 03:53:13.517: %APMGR_TRACE_MESSAGE-6-WLC_AP_JOIN: Chassis 1 R0/0: wncd: AP Join Info : d8b1.909f.2660AP will not Join. AP model AIR-CAP3702I-A-K9 is unsupported .
Feb 18 03:53:13.518: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap
Feb 18 03:53:30.526: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap
Feb 18 03:53:49.274: %APMGR_TRACE_MESSAGE-6-WLC_AP_JOIN: Chassis 1 R0/0: wncd: AP Join Info : d8b1.909f.2660AP will not Join. AP model AIR-CAP3702I-A-K9 is unsupported .
Feb 18 03:53:49.274: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap
Feb 18 03:54:06.280: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap
Feb 18 03:58:31.623: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: admin] [Source: 10.0.100.1] [localport: 22] at 03:58:31 Eastern Fri Feb 18 2022
Feb 18 03:58:43.007: %APMGR_TRACE_MESSAGE-6-WLC_AP_JOIN: Chassis 1 R0/0: wncd: AP Join Info : d8b1.909f.2660AP will not Join. AP model AIR-CAP3702I-A-K9 is unsupported .
Feb 18 03:58:43.008: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APd8b1.909c.xxxx Mac: d8b1.909f.2660 Session-IP: 10.0.100.91[52070] Disjoined Unsupported ap

Leo Laohoo · ‎02-18-2022

The last supported firmware for the 2700/3700 is 17.3.X.

View solution in original post

JPavonM · ‎02-17-2022

Based on Cisco Wireless Compatibility Matrix AP3702 is only supported until IOS-XE 17.3 train.

https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html

HTH
-Jesus
*** Please rate helpful responses ***

marce1000 · ‎02-17-2022

- Try this : config certificate ssc hash validation disable

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Leo Laohoo · ‎02-18-2022

The last supported firmware for the 2700/3700 is 17.3.X.

Leftz · ‎02-18-2022

17.5.1 support AP 3700? Please see below:

Scott Fella · ‎02-18-2022

From what you posted, it is the 3700 Industrial access point, not the 3700 indoor access point. They are different models. The 3702x like @Leo Laohoo mentioned is last supported on 17.3.x.

Downgrade to 17.3.x and that ap will join.

-Scott
*** Please rate helpful posts ***

Leo Laohoo · ‎02-18-2022

Talk to your Cisco AM/SE.

As them if wireless BU will provide an AP Device Pack for the 2700/3700 to be supported past 17.3.X.

By the way, move up to 17.6.X instead of 17.5.X.

Why? Because 17.6.X has more maintenance updates (and bug fixes). There are no more releases after 17.5.1 and any bug fixes to this version will be included in future 17.6.X releases.

Leftz · ‎03-09-2022

Thanks Leo

" --- By the way, move up to 17.6.X instead of 17.5.X. "

Why? its because 17.6.X is newer than 17.5.X? or something else?

Leo Laohoo · ‎03-09-2022

@Leftz wrote:

Why? its because 17.6.X is newer than 17.5.X? or something else?

Why? Because 17.6.X has more maintenance updates (and bug fixes). There are no more releases after 17.5.1 and any bug fixes to this version will be included in future 17.6.X releases.

Leftz · ‎03-10-2022

Thanks Leo. My question is how do we know 17.6.X has more maintenance and bug fixes? Its just because 17.6.X is newer than 17.5.1. or in other word, 17.6.X is bigger digit?

Leo Laohoo · ‎03-10-2022

There is a "pattern".

Multi-releases trains, examples are 16.3.X, 16.6.X, 16.9.X, 16.12.X, 17.3.X, 17.6.X and the soon-to-be-announced 17.9.X. Multi-release trains have an interval of "3".

How do I know? It is stated in Release Notes which trains are single- and multi-release ones.