WLC5508 any AP disconnected from the WLC can not join anymore

[IbrahimElbagouri57340]

Hello everyone,

I'm encountering an issue with our 5508 WLC. Whenever we restart or disconnect any Access Point, the AP fails to rejoin the WLC again. However, the AP is able to obtain an IP address, and the IP is reachable from the WLC. Upon investigation, I noticed that the web certificate expired on 25.01.2023. I'm uncertain if this is the root cause of the problem. Additionally, the time on the WLC matches the time on the switches.

can someone help here?

[marce1000]

  -  Adding  :   - include access point models
                       - current software version used on the 5508 WLC
                       - Post boot sequence from an AP that can not join
                       - Check controller logs when that happens , 

 M.

[IbrahimElbagouri57340]

AIR-AP2802E-E-K9

8.5.171.0

like

spamApTask1: Jan 25 18:23:47.156: [PA] 00:f6:63:13:c8:d2 DTLS connection was closed
*spamApTask3: Jan 25 18:23:47.247: [PA] 00:a3:8e:ef:e3:f6 ApModel: AIR-AP2802E-E-K9

spamApTask3: Jan 25 18:23:47.935: [PA] 2c:5a:0f:ed:36:1c Failed to parse CAPWAP packet from fe80::2e5a:fff:feed:261c:5243

[marce1000]

   - What are the lines reported just before :
         spamApTask3: Jan 25 18:23:47.935: [PA] 2c:5a:0f:ed:36:1c Failed to parse CAPWAP packet from fe80::2e5a:fff:feed:261c:5243

  (post the AP boot process too)

 M.

[IbrahimElbagouri57340]

*spamApTask0: Jan 25 18:23:53.027: [PA] 00:27:e3:04:fc:00 Unable to process Primary Discovery Request from 00:27:e3:04:fc:00 due to missing IPv6 AP Manager interface, discovery request received on interface 1 vlan 0
*spamApTask0: Jan 25 18:23:53.028: [PA] 00:27:e3:04:fc:00 State machine handler: Failed to process msg type = 19 state = 11 from fe80::2e5a:fff:fed6:2ee8:5272

*spamApTask0: Jan 25 18:23:53.028: [PA] 2c:5a:0f:d6:2e:e8 Failed to parse CAPWAP packet from fe80::2e5a:fff:fed6:2ee8:5272

*spamApTask3: Jan 25 18:23:53.552: [PA] 00:a3:8e:fe:dc:40 ApModel: AIR-AP2802E-E-K9

*spamApTask5: Jan 25 18:23:53.553: [PA] 00:a3:8e:fe:dc:40 ApModel: AIR-AP2802E-E-K9

*spamApTask5: Jan 25 18:23:53.553: [PA] 00:a3:8e:fe:dc:40 Unable to process Primary Discovery Request from 00:a3:8e:fe:dc:40 due to missing IPv6 AP Manager interface, discovery request received on interface 1 vlan 0
*spamApTask5: Jan 25 18:23:53.553: [PA] 00:a3:8e:fe:dc:40 State machine handler: Failed to process msg type = 19 state = 11 from fe80::2e5a:fff:fea6:8bb2:5272

[marce1000]

                        >...due to missing IPv6 AP Manager interface
   - Have there been any network changes ; it looks like the AP manager interface is not configured for IPV6 while at least some APs are using it (?)

 M.

[IbrahimElbagouri57340]

I recolved it with the following workaround via cli: 

config ap cert-expiry-ignore mic enable

Thanks for your answers and support