WLC 2504 - AP's visible but not joining - AAA Authentication Failure

[tadkov]

Any guidance here would be appreciated - I managed to get one of two 1572 outdoor AP's connected for a day and then it dropped off and I can't get either of them to connect back.

This is the error message I'm seeing on the Trap Logs:
AAA Authentication Failure for Client MAC: 70:70:xx:xx:xx UserName:70708bxxxxxx User Type: WLAN USER Reason: unknown error

I have tried to use just VLAN 30 on the WLC port, but could not access the management IP so I have returned that to a trunk port.  The management VLAN on the WLC had to be set to 0 otherwise I could not even ping the device.

I have tried both Trunk and Access ports for the AP's.

The first time it worked it was Trunked WLC and Trunked AP.

Ideally I want to have flex connect running so that the WLC and AP's are on VLAN 30 and all the users are connected to VLAN 20.

The equipment is currently out on site so I cannot access the AP's even when they have an IP address as they just refuse the connection.  I have no way currently to console into them directly.

[Leo Laohoo]

Hmmmm ... 1570 is the same image as the 1700/2700/3700.  

Are the APs coming up as constantly in a "Downloading" state?   If they are, then it is due to FN - 72524 - During Software Upgrade/Downgrade, Cisco IOS APs Might Remain in Downloading State After December 4, 2022 Due to Certificate Expiration.

And if if it is not the case, it could be FN - 63942 - Wireless Lightweight Access Points and WLAN Controllers Fail to Create CAPWAP Connections Due to Certificate Expiration.

[tadkov · Accepted solution]

Ahhh......ffs...... the user on site was connecting the cable to the PoE port instead of the Ethernet port despite all the diagrams I sent through.  AP's have now connected. 

Thanks for the help anyway @Leo Laohoo 

[tadkov]