WLC5508 + AP2702 "%DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert"

[andre even]

---

Hi,

I am validating the upgrade of a platform using a controller WLC5508 + and AP 2702 both

connected on a switch to release 8.0.140.0.

The upgrade works fine but i have unstability issue with the AP not due to the upgrade.

Two or three times i have seen the AP on the controller otherwise the AP is like in a loop.

I have thought that it was due to the fact that the AP wasn't seeing the controller so i have used CAPWAP commands to fix the IP address of the AP, the gateway and the controller '10.10.10.32' but still the same issue.

I have done a reset factory of the controller then configured again but still the same issue.

I have been on the Internet where we can see logs with message like: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert but until now i haven't found a solution so i am interested by any idea to solve the issue.

I have attached the logs taken on the AP 2702.

******************************************************************************

*Feb 10 18:50:45.287: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Feb 10 18:50:46.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.32 peer_port: 5246
*Feb 10 18:50:46.459: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.10.10.32 peer_port: 5246
*Feb 10 18:50:46.459: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.32
*Feb 10 18:50:51.459: %CAPWAP-5-SENDJOIN: sending Join Request to 10.10.10.32
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
*Feb 10 18:51:09.855: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.10.32:5246
*Feb 10 18:51:09.991: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Feb 10 18:51:09.991: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Feb 10 18:51:09.995: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Feb 10 18:51:10.027: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Feb 10 18:51:10.995: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Feb 10 18:51:11.023: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Feb 10 18:51:11.031: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Feb 10 18:51:12.015: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Feb 10 18:51:12.023: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Feb 10 18:51:12.067: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Feb 10 18:51:12.075: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Feb 10 18:51:12.083: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Feb 10 18:51:13.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Feb 10 18:51:13.075: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Feb 10 18:51:13.103: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Feb 10 18:51:14.103: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

****************************************************************************************************************************************

Best regards.

[Sandeep Choudhary]

paste the complete info:

sh sysinfo from WLC

sh version from AP

How is the AP powered? 

Regards

Dont forget to rate helpful posts

[andre even]

Hi Sandeep,

I am right now on vacation. I will answer next week.

The AP is powered via PoE

Best regards.

[Rasika Nayanajith · Accepted solution]

Your AP is not compatible with the country code configured on WLC. Hence failing to register.

Configured Country............................... US - United States

Product/Model Number : AIR-CAP2702I-E-K9

-E is Europian regulatory domain AP and this should connect to WLC configured for a country code in that region. Since WLC configured with US, AP is not able to register.

If you sort this out (if AP is in right regulatory domain, then configure the correct country code in WLC), AP should able to register to your WLC.

https://mrncciew.com/2013/04/07/configuring-country-codes-on-wlc/

If your AP is in US, then you go the wrong AP, has to replace that with US regulatory domain ap (ie -A or -B domain)

HTH

Rasika

*** Pls rate all useful responses ***

[andre even]

Hi Rasika,

I have modofied the country code from US to FR and now the AP stays attached

to the controller.

Thanks for your help.

Best regards.