Error to join Secondary Controller WLC 7510

Unanswered Question
Jun 8th, 2012

Hi,

We have two controllers 7510 with the same config (SSID, Mobility Groups, etc)... All APs now was joined in wlc01... If we try to one o more APs join to another controller.. it's is not possible and debug show this :

*spamApTask4: Jun 09 02:08:23.260: <<<<  Start of CAPWAP Packet  >>>>

*spamApTask4: Jun 09 02:08:23.260: CAPWAP Control mesg Recd from 10.34.2.160, Port 63356

*spamApTask4: Jun 09 02:08:23.260:         HLEN 4,   Radio ID 0,    WBID 1

*spamApTask4: Jun 09 02:08:23.260:         Msg Type   :   CAPWAP_DISCOVERY_REQUEST

*spamApTask4: Jun 09 02:08:23.260:         Msg Length : 102

*spamApTask4: Jun 09 02:08:23.260:         Msg SeqNum : 0

*spamApTask4: Jun 09 02:08:23.260:  

*spamApTask4: Jun 09 02:08:23.260:      Type : CAPWAP_MSGELE_DISCOVERY_TYPE, Length 1

*spamApTask4: Jun 09 02:08:23.260:         Discovery Type : CAPWAP_DISCOVERY_TYPE_STATIC_CONFIG

*spamApTask4: Jun 09 02:08:23.260:  

*spamApTask4: Jun 09 02:08:23.260:      Type : CAPWAP_MSGELE_WTP_DESCRIPTOR, Length 40

*spamApTask4: Jun 09 02:08:23.260:         Maximum Radios Supported  : 2

*spamApTask4: Jun 09 02:08:23.260:         Radios in Use             : 2

*spamApTask4: Jun 09 02:08:23.260:         Encryption Capabilities   : 0x00 0x01

*spamApTask4: Jun 09 02:08:23.260:  

*spamApTask4: Jun 09 02:08:23.260:      Type : CAPWAP_MSGELE_WTP_FRAME_TUNNEL, Length 1

*spamApTask4: Jun 09 02:08:23.260:         WTP Frame Tunnel Mode : NATIVE_FRAME_TUNNEL_MODE

*spamApTask4: Jun 09 02:08:23.260:  

*spamApTask4: Jun 09 02:08:23.260:      Type : CAPWAP_MSGELE_WTP_MAC_TYPE, Length 1

*spamApTask4: Jun 09 02:08:23.260:         WTP Mac Type  : SPLIT_MAC

*spamApTask4: Jun 09 02:08:23.260:  

*spamApTask4: Jun 09 02:08:23.260:      Type : CAPWAP_MSGELE_VENDOR_SPECIFIC_PAYLOAD, Length 10

*spamApTask4: Jun 09 02:08:23.260:         Vendor Identifier  : 0x00409600

*spamApTask4: Jun 09 02:08:23.260:

    IE            :   UNKNOWN IE 207

*spamApTask4: Jun 09 02:08:23.260:     IE Length     :   4

*spamApTask4: Jun 09 02:08:23.260:     Decode routine not available, Printing Hex Dump

*spamApTask4: Jun 09 02:08:23.260: 00000000: 01 00 00 01                                       ....

*spamApTask4: Jun 09 02:08:23.260:  

*spamApTask4: Jun 09 02:08:23.260:      Type : CAPWAP_MSGELE_VENDOR_SPECIFIC_PAYLOAD, Length 25

*spamApTask4: Jun 09 02:08:23.260:         Vendor Identifier  : 0x00409600

*spamApTask4: Jun 09 02:08:23.260:

    IE            :   RAD_NAME_PAYLOAD

*spamApTask4: Jun 09 02:08:23.260:     IE Length     :   19

*spamApTask4: Jun 09 02:08:23.260:     Rad  Name     :  

*spamApTask4: Jun 09 02:08:23.260: Datacenter.Teatinos

*spamApTask4: Jun 09 02:08:23.260: <<<<  End of CAPWAP Packet  >>>>

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Msg Type = 1 Capwap state = 0

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery Request from 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery request: Total msgEleLen = 102

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgEleLength = 1 msgEleType = 20

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery Type = Static Config

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Total msgEleLen = 97

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgEleLength = 40 msgEleType = 39

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Total msgEleLen = 53

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgEleLength = 1 msgEleType = 41

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Total msgEleLen = 48

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgEleLength = 1 msgEleType = 44

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Total msgEleLen = 43

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgEleLength = 10 msgEleType = 37

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Vendor specific payload from AP  64:A0:E7:B1:91:20 validated

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery request: Vendor payload type = 207, length = 10

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Total msgEleLen = 29

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgEleLength = 25 msgEleType = 37

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Vendor specific payload from AP  64:A0:E7:B1:91:20 validated

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery request: Vendor payload type = 5, length = 25

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Total msgEleLen = 0

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 3000, joined Aps =0

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 1. 0 0

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 2. 232 3

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 3. 0 0

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 4. 184 11

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 msgLength = 36

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp: AC Descriptor message element len = 40

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 acName = WLC-2-STAROSA

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp:AC Name message element length = 57

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp: WTP Radio Information msg length = 66

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp: CAPWAP Control IPV4 Address len = 76

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp: CAPWAP Control IPV6 Address len = 98

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp: Mwar type payload len = 109

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery resp: Time sync payload len = 124

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 encodeLen = 124 len = 16

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery Response sent to 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 Discovery Response sent to 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:23.260: 64:a0:e7:b1:91:20 WTP already released

*spamApTask4: Jun 09 02:08:33.260: 64:a0:e7:b1:91:20 CAPWAP Control Msg Received from 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:33.260: 64:a0:e7:b1:91:20 DTLS Connection not found for 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:33.260: 64:a0:e7:b1:91:20 DTLS connection not found, creating new connection for 10:34:2:160 (63356) 10:97:27:5 (5246)

*spamApTask4: Jun 09 02:08:33.260: 64:a0:e7:b1:91:20 Failed to create DTLS connection for 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:33.260: 64:a0:e7:b1:91:20 Failed to create DTLS connection for 10.34.2.160.63356

*spamApTask4: Jun 09 02:08:35.259: 64:a0:e7:b1:91:20 CAPWAP Control Msg Received from 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:35.259: 64:a0:e7:b1:91:20 DTLS Connection not found for 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:35.259: 64:a0:e7:b1:91:20 DTLS connection not found, creating new connection for 10:34:2:160 (63356) 10:97:27:5 (5246)

*spamApTask4: Jun 09 02:08:35.259: 64:a0:e7:b1:91:20 Failed to create DTLS connection for 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:35.259: 64:a0:e7:b1:91:20 Failed to create DTLS connection for 10.34.2.160.63356

*spamApTask4: Jun 09 02:08:39.259: 64:a0:e7:b1:91:20 CAPWAP Control Msg Received from 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:39.259: 64:a0:e7:b1:91:20 DTLS Connection not found for 10.34.2.160:63356

*spamApTask4: Jun 09 02:08:39.259: 64:a0:e7:b1:91:20 DTLS connection not found, creating new connection for 10:34:2:160 (63356) 10:97:27:5 (5246)

*spamApTask4: Jun 09 02:08:39.259: 64:a0:e7:b1:91:20 Failed to create DTLS connection for 10.34.2.160:63356

If we check Message logs appears :

*spamApTask3: Jun 09 02:12:07.011: %CAPWAP-3-DTLS_DB_ERR: capwap_ac_sm.c:6831 64:9e:f3:a0:61:83: Failed to create DTLS connection for AP  10:34:2:160 (63355).

Software version :

7.2.110.0

AP 1140N

If you have some tips, thanks

Best regards,

Johann

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
Amjad Abdullah Sat, 06/09/2012 - 03:35

Hi Johann,

Debugs show that there was a failure in creating DTLS tunnel. This could possibly be due to certificate issue.

I suggest you go through the following document:

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00808f8599.shtml

Check that time is OK on the new WLC (which I think is OK form debugs you provbided) and make sure tha the regulatory domain is correct.

Make also sure that the new WLC does not already have maximum number of APs joined.

Do you have console output from the AP? If yes please provide it while it is trying to join.

Also, if you can copy the output of this command from WLC CLI that will be helpful:

show ap join stats detailed 

HTH

Amjad

Actions

Login or Register to take actions

This Discussion

Posted June 8, 2012 at 10:15 PM
Stats:
Replies:1 Avg. Rating:
Views:604 Votes:0
Shares:0
Tags: No tags.

Discussions Leaderboard