cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11842
Views
0
Helpful
25
Replies

AP not joining WLC - Invalid country code

berembert64
Level 1
Level 1

Hi to everyone,

I have problems to join an AP on the controller. 

 

AP model is: AIR-AP1242G-E-K9 (They all are the same model, already 15APs on the controller)

AP is reseted to factory default.

 

DEBUG OUTPUT on AP

*May 27 14:35:14.631: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*May 27 14:35:24.577: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*May 27 14:35:24.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.100.11 peer_port: 5246

*May 27 14:35:24.001: %CAPWAP-5-CHANGED: CAPWAP changed state to

*May 27 14:35:25.386: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.100.11 peer_port: 5246

*May 27 14:35:25.388: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.100.11

*May 27 14:35:25.388: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN

*May 27 14:35:25.498: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG

*May 27 14:35:25.498: %CAPWAP-3-ERRORLOG: Starting config timer

*May 27 14:35:25.503: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.1.100.11

*May 27 14:35:25.503: %DTLS-5-PEER_DISCONNECT: Peer 10.1.100.11 has closed connection.

*May 27 14:35:25.503: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.1.100.11:5246

*May 27 14:35:25.549: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*May 27 14:35:25.549: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*May 27 14:35:25.552: bsnInitRcbSlot: slot 1 has NO radio

*May 27 14:35:25.559: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*May 27 14:35:25.571: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up

*May 27 14:35:25.574: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down

*May 27 14:35:25.575: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

 

DEBUG OUTPUT on controller

(Cisco Controller) >debug capwap errors enable

(Cisco Controller) >

*May 27 16:33:04.596: 00:24:50:10:d2:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 25, joined Aps =15

*May 27 16:33:04.597: 00:24:50:10:d2:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 25, joined Aps =15

*May 27 16:33:05.741: 00:26:99:d7:56:b0 Duplicate sequence number in request message

 

*May 27 16:33:16.103: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

*May 27 16:33:16.103: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

*May 27 16:33:16.104: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

*May 27 16:33:16.104: 00:24:50:10:d2:a0 Regulatory Domain Mismatch: AP 00:24:50:10:d2:a0 not allowed to join. Regulatory Domain check failed.

                                                                                                                                             Allow

*May 27 16:33:16.107: 00:24:50:10:d2:a0 Failed post decode processing of config status from 10.1.100.205:57808

*May 27 16:33:16.107: 00:24:50:10:d2:a0 State machine handler: Failed to process  msg type = 5 state = 5 from 10.1.100.205:57808

*May 27 16:33:16.107: 00:24:50:10:d2:a0 Unable to release lock on AP database entry

*May 27 16:33:16.107: 00:24:50:10:d2:a0 Failed to parse CAPWAP packet from 10.1.100.205:57808

*May 27 16:33:16.109: Discarding non-ClientHello Handshake OR DTLS encrypted packet from  10.1.100.205:57808)since DTLS session is not established

 

If anyone could help, it would be wonderfull! If you need mote informations please let me know.

 

Thanks,

25 Replies 25

Scott Fella
Hall of Fame
Hall of Fame

*May 27 16:33:16.104: 00:24:50:10:d2:a0 AP 00:24:50:10:d2:a0: Invalid country code ().

The error shows the wrong country domain.  Are you sure that the other AP's are the E-K9?

-Scott

-Scott
*** Please rate helpful posts ***

Thanks for your reply, Yes absolutely sure, 

We have a total of 15 APs.

Some are AIR-AP1242AG-E-K9 

And some (less) others are AIR-AP1242G-E-K9 

 

But I'm 100% sure about the E-K9. This is why i'm asking on the forum because everything seems to be correct. And I was able to properly import one AP yesterday, but the three others I have left are not working... They all are the same model.

Stupid question, the other are all lightweight with the correct image?  If you console into the AP and power cycle, what is being shown on the output?

-Scott

-Scott
*** Please rate helpful posts ***

Yes, they all are lightweight with same image.

 

 

flashfs[0]: 10 files, 3 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 15998976
flashfs[0]: Bytes used: 7424512
flashfs[0]: Bytes available: 8574464
flashfs[0]: flashfs fsck took 31 seconds.
Base ethernet MAC Address: 00:23:5e:03:1d:20
Initializing ethernet port 0...
Reset ethernet port 0...
Reset done!
ethernet link up, 100 mbps, full-duplex
Ethernet port 0 initialized: link is up
Loading "flash:/c1240-k9w8-mx.124-21a.JA/c1240-k9w8-mx.124-21a.JA"...#################################################################################################################################################################################################################################################################################################################################################################################################################################################################

File "flash:/c1240-k9w8-mx.124-21a.JA/c1240-k9w8-mx.124-21a.JA" uncompressed and installed, entry point: 0x3000
executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

 

Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(21a)JA, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 08-Jun-09 16:34 by prod_rel_team


Proceeding with system init

Proceeding to unmask interrupts
Initializing flashfs...

flashfs[1]: 10 files, 3 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 15998976
flashfs[1]: Bytes used: 7424512
flashfs[1]: Bytes available: 8574464
flashfs[1]: flashfs fsck took 6 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.

Radio0  present A506 7100 E8000000 A0000000 80000000 3
Radio1 not present 0 0 0 0 0 2
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-AP1242G-E-K9     (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
Processor board ID FCW1303U0B0
PowerPCElvis CPU at 262Mhz, revision number 0x0950
Last reset from power-on
LWAPP image version 6.0.182.0
1 FastEthernet interface
1 802.11 Radio(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:23:5E:03:1D:20
Part Number                          : 73-11479-01
PCA Assembly Number                  : 800-30493-01
PCA Revision Number                  : A0
PCB Serial Number                    : FOC125007KK
Top Assembly Part Number             : 800-29586-03
Top Assembly Serial Number           : FCW1303U0B0
Top Revision Number                  : A0
Product/Model Number                 : AIR-AP1242G-E-K9
% Please define a domain-name first.


Press RETURN to get started!


*Mar  1 00:00:07.797: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar  1 00:00:09.410: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar  1 00:00:09.540: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 75 messages)

*Mar  1 00:00:11.677: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar  1 00:00:11.744: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1240 Software (C1240-K9W8-M), Version 12.4(21a)JA, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 08-Jun-09 16:34 by prod_rel_team
*Mar  1 00:00:11.744: %SNMP-5-COLDSTART: SNMP agent on host AP0023.5e03.1d20 is undergoing a cold start
*Mar  1 00:00:11.803: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

Did the AP get an IP address?  Can you put the AP on the same subnet as the WLC and see if it will join. Also provide the show sysinfo and show ap summary from the WLC CLI.

-Scott

-Scott
*** Please rate helpful posts ***

Yep, by DHCP. I configured the same VLAN on the switch for both controller and all APs. It join for some minuts after a reset. But after image download it disappears. 

 

(Cisco Controller) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 6.0.182.0
RTOS Version..................................... 6.0.182.0
Bootloader Version............................... 7.0.220.0
Emergency Image Version.......................... N/A
Build Type....................................... DATA + WPS

System Name...................................... FRWLC
System Location.................................. France, Anglet
System Contact................................... EU Helpdesk
System ObjectID.................................. 1.3.6.1.4.1.14179.1.1.4.3
IP Address....................................... 10.1.100.10
System Up Time................................... 37 days 4 hrs 2 mins 17 secs
System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna

Configured Country............................... FR  - France
Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +34 C


--More-- or (q)uit
State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Disabled
Number of WLANs.................................. 5
3rd Party Access Point Support................... Disabled
Number of Active Clients......................... 80

Burned-in MAC Address............................ 00:26:0B:05:02:60
Crypto Accelerator 1............................. Absent
Crypto Accelerator 2............................. Absent
Power Supply 1................................... Absent
Power Supply 2................................... Present, OK
Maximum number of APs supported.................. 25

 

 

(Cisco Controller) >show ap summary

Number of APs.................................... 15

Global AP User Name.............................. Not Configured
Global AP Dot1x User Name........................ Not Configured

AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
------------------  -----  -------------------  -----------------  ----------------  ----  -------  ------
volcom_ap37          2     AIR-AP1242AG-E-K9    00:07:0e:6b:aa:68  default location  LAG   FR       1
volcom_ap36          2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:c4  default location  LAG   FR       1
volcom_ap38          2     AIR-AP1232AG-E-K9    00:1a:6c:17:9e:9f  default location  LAG   FR       1
volcom_ap30          2     AIR-AP1232AG-E-K9    00:1a:6c:17:9e:a6  default location  LAG   FR       2
volcom_ap31          2     AIR-AP1232AG-E-K9    00:1a:6c:17:9e:a8  default location  LAG   FR       2
FRAP01               2     AIR-AP1242AG-E-K9    28:94:0f:a8:d7:4c  Marketing Office  LAG   FR       1
FRAP03               2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:be   Stock Marketing  LAG   FR       1
ESAP01               2     AIR-AP1242AG-E-K9    58:8d:09:8e:36:18  Spain - next to   LAG   FR       1
FRAP04               2     AIR-AP1242G-E-K9     e0:2f:6d:e6:e3:46         Marketing  LAG   FR       1
BCNAP01              2     AIR-AP1242G-E-K9     00:26:99:d7:98:f0  Barcelona Retail  LAG   FR       1
FRAP05               2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:62          showroom  LAG   FR       2
FRELAP01             2     AIR-AP1242G-E-K9     00:1d:70:96:b3:d6  default location  LAG   FR       1
LYSAP01              2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:ba       Retail Lyon  LAG   FR       1
CHXAP01              2     AIR-AP1242AG-E-K9    28:94:0f:a8:d7:e2  Retail Chamonix   LAG   FR       1

--More-- or (q)uit
NTEAP01              2     AIR-AP1242AG-E-K9    00:19:e7:d5:6b:a0     Nantes Retail  LAG   FR       1

 

Hello

Since you are using a 1242 AP that means that your access point have two radios but I notice you are having this message:

 

bsnInitRcbSlot: slot 1 has NO radio

 

Which tells me that the access point might be having a problem recognizing a radio and a hardware issue causing and explaining the whole problem.

The output from the "show controllers" on the AP should tell you some hints about this.

Please attach the output from the show controllers command from the access point and I will let you know.

bsnInitRcbSlot: slot 1 has NO radio

Marco,

  So long as the AP isn't single 5GHz radio, it should work. That has been that way since 4.x code.

 

Steve

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

!

interface Dot11Radio0
Radio AIR-AP1242GR, Base Address 003a.9919.3940, BBlock version 0.00, Software version 6.30.12
Serial number: GAM14391ZWP
Number of supported simultaneous BSSID on Dot11Radio0: 16
Carrier Set: Americas (US) (-A) ????????????????????????? On the sticker, it's -E-K9
Uniform Spreading Required: No
Configured Frequency: 2462 MHz  Channel 11
Allowed Frequencies: 2412(1) 2417(2) 2422(3) 2427(4) 2432(5) 2437(6) 2442(7) 2447(8) 2452(9) 2457(10) 2462(11)
Listen Frequencies: 2412(1) 2417(2) 2422(3) 2427(4) 2432(5) 2437(6) 2442(7) 2447(8) 2452(9) 2457(10) 2462(11) 2467(12) 2472(13) 2484(14)
Beacon Flags: 0, Interface Flags 20105; Beacons are enabled; Probes are enabled
High Density mode disabled
  Local Rx sensitivity (Config -80, Max -60, Min -11) dBm
        CCA Sensitivity -60 dBm
  Cell  Rx sensitivity -80 dBm, CCA Sensitivity -60 dBm
Configured CCK Power: -1 dBm (level 0)
Configured OFDM Power: -1 dBm
Active power levels by rate
     1.0 to 54.0  , -1  dBm
  OffChnl Power: 20, Rate 1.0
Allowed CCK Power Levels:  -1 2 5 8 11 14 17 20
Allowed OFDM Power Levels: -1 2 5 8 11 14 17 20
Allowed Client Power Levels: 2 5 8 11 14 17 20
Receive Antennas : right-a left-b
Transmit Antennas : right-a left-b
Antenna: external, Gain: Allowed 20, Reported 20, In Use 20
Active Rates:  basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Current Rates:  basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Allowed Rates:  1.0 2.0 5.5 6.0 9.0 11.0 12.0 18.0 24.0 36.0 48.0 54.0
All Rates:  1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Default Rates:  basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Best Range Rates:  basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
Best Throughput Rates:  basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
Current Voice Rates:  basic-5.5 basic-11.0 6.0 12.0 24.0 [disabled until voice packet-discard enabled]
Default Voice Rates:  basic-5.5 basic-11.0 6.0 12.0 24.0
Managment Rates:  basic-1.0
Multicast Rates:  basic-1.0 basic-2.0 basic-5.5 basic-11.0
Data Rate Sensitivity (rate, SNR dB, Contention dBm)
( 1.0, 10, -93)   ( 2.0, 10, -92)   ( 5.5, 11, -90)   (11.0, 14, -90)
( 6.0, 15, -89)   ( 9.0, 16, -88)   (12.0, 18, -88)   (18.0, 19, -86)
(24.0, 20, -85)   (36.0, 24, -81)   (48.0, 27, -78)   (54.0, 31, -77)
ERP settings: short slot time.
Neighbors in non-erp mode:

Number of MFP Indices: 10
RFID Tag Detection: Disabled
Multicast Address filtered:   010b.8500.0000  0140.9600.0004
Packet type filtered:
Probe limit: active off, filter on, count 0, time 0
Assoc limit: active off, count 0, time 0
Radio Management (RM) Configuration: Regular AP, Mode 1, Disabled

MCST RSCs: [0]0x0 [1]0x0 [2]0x0 [3]0x0 [4]0x0
TKIP Cum Stats: STA            MIC-L-Errs MIC-R-Errs Replay   C-Measure
                0000.0000.0000 00000000   00000000   00000000 00000000
AES-CCMP Cum Stats: 00000000 replays discarded
QBSS Load: 0x2B, Policing Stats: Rx downgrades 0, Tx downgrades 0
Classifier Stats tx_on_up6  0, tx_on_up4 0
Configured Local Access Class Parameters
  Back      : cw-min 4 cw-max 10 fixed-slot 7 admission-control Off txop 0
  Best      : cw-min 4 cw-max 6 fixed-slot 3 admission-control Off txop 0
  Video     : cw-min 3 cw-max 4 fixed-slot 1 admission-control Off txop 3008
  Voice     : cw-min 2 cw-max 3 fixed-slot 1 admission-control Off txop 1504
SIP stats sip_udp_rx_pkt 0, sip_tcp_rx_pkt 0,

*Jun  1 10:12:40.602: %CAPWAP-3-ERRORLOG: Go join a capwap controller   downlink classified_pkt 0,
                            uplink classified_pkt 0,
                            num_processed_SIP_Calls 0
Transmit queues: In Progress 0
       ---- Active --- In-Progress --------------- Counts --------------
       Cnt Quo Bas Max Cnt Quo Bas       Sent   Discard  Fail    Retry  Multi
Uplink   0   0   0   0   0   0   0          0         0     0        0      0
Voice    0   0   0   0   0   0   0          0         0     0        0      0
Video    0   0   0   0   0   0   0          0         0     0        0      0
Best     0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0
*Jun  1 10:12:41.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.100.11 peer_port: 5246
*Jun  1 10:12:41.001: %CAPWAP-5-CHANGED: CAPWAP changed state to     0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0
*Jun  1 10:12:42.399: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.100.11 peer_port: 5246
*Jun  1 10:12:42.401: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.100.11
*Jun  1 10:12:42.401: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
*Jun  1 10:12:42.513: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Jun  1 10:12:42.513: %CAPWAP-3-ERRORLOG: S  0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Mcast    0   0   0   0   0   0   0          0         0     0        0      0
Back     0   0   0   0   0   0   0          0         0     0        0      0
BSSIDS Index Flags State tarting config timer
*Jun  1 10:12:42.518: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.1.100.11
*Jun  1 10:12:42.518: %DTLS-5-PEER_DISCONNECT: Peer 10.1.100.11 has closed connection.
*Jun  1 10:12:42.518: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.1.100.11:5246
*Jun  1 10:12:42.565: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun  1 Next Held Defer NonDefer Clients Tsf Dtim Txq
  3940     0    20     0    0    0     0        0       0   0    2   0
  3941     1    20     0    0    0     0        0       0 148    2   1
  3942     2    20     0    0    0     0        0       0  24    2   2
  3943     3    20     0    0    0     0        0       0 172    2   3
  3944     4    20     0    0    0     0        0       0  12    2   4
  3945     5    20     0    0    0     0        0       0 160    2   5
  3946     6    20     0    0   10:12:42.566: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun  1 10:12:42.568: bsnInitRcbSlot: slot 1 has NO radio
*Jun  1 10:12:42.576: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jun  1 10:12:42.588: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun  1 1 0     0        0       0  36    2   6
  3947     7    20     0    0    0     0        0       0 184    2   7
  3948     8    20     0    0    0     0        0       0   6    2   8
  3949     9    20     0    0    0     0        0       0 118    2   9
  394A    10    20     0    0    0     0        0       0  30    2  10
  394B    11    20     0    0    0     0        0       0 142    2  11
  394C    12    20     0    0    0     0        0       0  54    2  12
  394D    13    20     0    0    0     0:12:42.619: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun  1 10:12:42.620: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
*Jun  1 10:12:42.651: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up0        0       0 166    2  13
  394E    14    20     0    0    0     0        0       0  78    2  14
  394F    15    20     0    0    0     0        0       0 190    2  15
Driver TX blocks: in use 0, high 0, at reset 0, fail 0 drop 0
---Clients     AID VLAN      Status    Age  Tx   Mode Enc Key       Rate
                 RxPkts KBytes  Dup Dec Mic   TxPkts  KBytes  Retry RSSI SNR
               IP Address      RSC
8021x auth in prog 0 allowed 0
Vlan BSSID   Clients PSP Pri HT Encr  Key0 Key1 Key2 Key3 SSIDs MFP
   0n 3940 0       0   0   0  0    0
17 0 flags 1 match 4
Protocol 55
Registers: io E8000000 mem 80000000 aux A0000000
 0000 FF50 0000 0000 0021 0000 0000 0000
 0001 0000 0000 0000 0000 0000 0000 0000
 0000 0000 0000 0000 0000 0000 0000 0000
 0100 0407 0000 0000 0020 0B88 F38C 0504
 0000 0000 0000 0000 0223 0070 0000 AD28
 00000000 73200522 13800224 7FFFDFB7 A7EF7D6D 00000000 10062880 0824E048
 EEF7F7E2 00002FFF 2A68AC56 00001200 00000000 00000000 0000800C 00008041
 00000000 00000000 00000000 00000000 00009AC8 00001D9C 00000000 00009754
Radio running:  temp 0 C tx_power 65535 bb_code 0x0
    rssi_threshold 0x0 gain offset 0 platform 2
PCI sys_id: 0xA506 subsys_id 0x7100 (0x7101)

Unicast ciphers 0x0 mcast ciphers 0x0
Rid Ring:
 A0000970: 006A8000 21C6A1BC * n
Rx Ring:
 A0000950: 89380000 21AF5420 * v, 89380000 21AFD310   v
 A0000960: 89380000 21B01288   v, 89380000 21AF3464   v
Tx Ring:
 A0000800: 00000000 00000000 * n, 00000000 00000000   n
 A0000810: 00000000 00000000   n, 00000000 00000000   n
 A0000820: 00000000 00000000   n, 00000000 00000000   n
 A0000830: 00000000 00000000   n, 00000000 00000000   n
 A0000840: 00000000 00000000   n, 00000000 00000000   n
 A0000850: 00000000 00000000   n, 00000000 00000000   n
 A0000860: 00000000 00000000   n, 00000000 00000000   n
 A0000870: 00000000 00000000   n, 00000000 00000000   n
 A0000880: 00000000 00000000   n, 00000000 00000000   n
 A0000890: 00000000 00000000   n, 00000000 00000000   n
TxDn Ring:
 A0000930: 802C0000 21C6A9C4 * v, 802C0000 21C6AAA4   v
 A0000940: 802C0000 21C6AB84   v, 802C0000 21C6AC64   v
Multicast counters:
Internal MC counts:
0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0) 0 (0)

-Channel Range-  -------Rates------ Max Power   Allowed
  1 to  11 by 1  1.0    to 11.0     20        -1 2 5 8 11 14 17 20
                 6.0    to 54.0     17
        DOT11 Statistics (Cumulative Total/Last 5 Seconds):
RECEIVER                               TRANSMITTER
Host Rx K Bytes:      10360 / 90       Host Tx K Bytes:             0 / 0
Unicasts Rx:             22 / 0        Unicasts Tx:                 0 / 0
Unicasts to host:        22 / 0        Unicasts by host:            0 / 0
Broadcasts Rx:       102384 / 842      Broadcasts Tx:               0 / 0
Beacons Rx:           49925 / 410      Beacons Tx:                  0 / 0
Broadcasts to host:   51192 / 421      Broadcasts by host:          0 / 0
Multicasts Rx:           40 / 1        Multicasts Tx:               0 / 0
Multicasts to host:       0 / 0        Multicasts by host:          0 / 0
Mgmt Packets Rx:       1289 / 11       Mgmt Packets Tx:             0 / 0
RTS received:             0 / 0        RTS transmitted:             0 / 0
Duplicate frames:         0 / 0        CTS not received:            0 / 0
CRC errors:           49915 / 361      Unicast Fragments Tx:        0 / 0
WEP errors:               0 / 0        Retries:                     0 / 0
Buffer full:              0 / 0        Packets one retry:           0 / 0
Host buffer full:         0 / 0        Packets > 1 retry:           0 / 0
Header CRC errors:        0 / 0        Protocol defers:             0 / 0
Invalid header:        1989 / 17       Energy detect defers:        0 / 0
Length invalid:           0 / 0        Jammer detected:             0 / 0
Incomplete fragments:     0 / 0        Packets aged:                0 / 0
Rx Concats:               0 / 0        Tx Concats:                  0 / 0

RATE 1.0
Rx Packets:           51130 / 421      Tx Packets:                  0 / 0
Rx Bytes:           9483204 / 77879    Tx Bytes:                    0 / 0
RTS Retries:              0 / 0        Data Retries:                0 / 0

RATE 12.0
Rx Packets:              84 / 0        Tx Packets:                  0 / 0
Rx Bytes:             12534 / 0        Tx Bytes:                    0 / 0
RTS Retries:              0 / 0        Data Retries:                0 / 0

Radio resets - total:0 retries:0 failed:0
Log Buffer:

PowerPCElvis Ethernet unit 0
PHY Hardware is Broadcom BCM5914 rev. 2 (id_register: 0x40, 0x6322)

rx_intr: 0 tx_intr: 0 mac_err_isr: 0 phy_link_isr:0
Current station address 588d.0955.3dd0, default address 588d.0955.3dd0
MAL register dump:
malcr        0x0007C082  0x180
malesr       0x00000000  0x181
malier       0x0000000F  0x182
maltxcasr    0x80000000  0x184
maltxcarr    0x80000000  0x185
maltxeobisr  0x00000000  0x186
maltxdeir    0x00000000  0x187
malrxcasr    0x80000000  0x190
malrxcarr    0x80000000  0x191
malrxeobisr  0x00000000  0x192
malrxdeir    0x00000000  0x193
maltxctp0r   0x01C6AEA0  0x1A0
malrxctp0r   0x01C6ADA0  0x1C0
malrcbs0   0x00000060  0x1E0

EMAC register dump:
emacmr0      0x18000000  0x00
emacmr1      0xA1788000  0x04
emactmr0     0x00000000  0x08
emactmr1     0x380F0000  0x0C
emacrmr      0x7D180000  0x10
emacisr      0x00000002  0x14
emacier      0x00000001  0x18
emaciah      0x0000588D  0x1C
emacial      0x09553DD0  0x20
emacptr      0x0000FFFF  0x2C
emaclsah     0x0000001A  0x50
emaclsal     0xA22E1409  0x54
emacipgr     0x00000004  0x58
emacstacr    0x002F8018  0x5C
emactrtr     0x18000000  0x60
emacrwmr     0x0F002000  0x64
emacoctx     0x000623F0  0x68
emacocrx     0x00062B25  0x6C

UIC register dump:
uicsr      0x00009FA0  0xC0
uicer      0x803F0048  0xC2
uicmsr
*Jun  1 10:12:52.596: %CAPWAP-3-ERRORLOG: Go join a capwap controller 0x00000000  0xC6

PHY register dump:
3000 782D 0040 6322 05E1 C3E1 000D 2001 0000 0000 0000 0000 0000 0000 0000 0000
1000 0300 0000 0000 0200 0138 0500 0000 002F 851F 4400 008A 002F 0000 80A0
RX ring with 16 entries at 0x1C6ADA0, Buffer size 1524
Rxhead = 0x1C6ADA8 (1), Rxp = 0xE822F8 (1)
00 pak=0x1116DD4 buf=0x1B01280 status=9C00 pak_size=0
01 pak=0x1145724 buf=0x1B8D510 status=9C00 pak_size=0
02 pak=0x11305A4 buf=0x1B4DD90 status=9C00 pak_size=0
03 pak=0x11712C0 buf=0x1C10E1C status=9C00 pak_
*Jun  1 10:12:53.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.100.11 peer_port: 5246
*Jun  1 10:12:53.001: %CAPWAP-5-CHANGED: CAPWAP changed state to
*Jun  1 10:12:54.402: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.100.11 peer_port: 5246
*Jun  1 10:12:54.403: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.100.11
*Jun  1 10:12:54.404: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIsize=0
04 pak=0x1115FC4 buf=0x1AFE830 status=9C00 pak_size=0
05 pak=0x112ADC0 buf=0x1B3D51C status=9C00 pak_size=0
06 pak=0x1155ED0 buf=0x1BBEE6C status=9C00 pak_size=0
07 pak=0x1156254 buf=0x1BBF900 status=9C00 pak_size=0
08 pak=0x1127C88 buf=0x1B34104 status=9C00 pak_size=0
09 pak=0x1113918 buf=0x1AF73D4 status=9C00 pak_size=0
10 pak=0x112D0E8 buf=0x1B43EE4 status=9C00 pak_size=0
11 pak=0x1151F88 buf=0x1BB3004 status=9C00 pak_size=0
12 pak=0x111E1D8 buf=0x1B16F94 status=9C00 pak_size=0
13 pak=0N
*Jun  1 10:12:54.517: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG
*Jun  1 10:12:54.517: %CAPWAP-3-ERRORLOG: Starting config timer
*Jun  1 10:12:54.523: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.1.100.11
*Jun  1 10:12:54.523: %DTLS-5-PEER_DISCONNECT: Peer 10.1.100.11 has closed connection.
*x115FD04 buf=0x1BDCA70 status=9C00 pak_size=0
14 pak=0x1133358 buf=0x1B56714 status=9C00 pak_size=0
15 pak=0x1115C40 buf=0x1AFDD9C status=DC00 pak_size=0

TX ring with 8 entries at 0x1C6AEA0, tx_count = 0
tx_head = 0x1C6AEB0 (2), head_txp = 0xE82358 (2)
tx_tail = 0x1C6AEB0 (2), tail_txp = 0xE82358 (2)
00 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
01 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
02 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
03 pak=0x0000000 buf=0x0000000 statuJun  1 10:12:54.523: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 10.1.100.11:5246
*Jun  1 10:12:54.569: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun  1 10:12:54.570: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Jun  1 10:12:54.572: bsnInitRcbSlot: slot 1 has NO radio
*Jun  1 10:12:54.580: %LINK-5-CHANGED: Interface Dot11Radio0, changed state ts=1400 pak_size=0
04 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
05 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
06 pak=0x0000000 buf=0x0000000 status=1400 pak_size=0
07 pak=0x0000000 buf=0x0000000 status=5400 pak_size=0
0 missed datagrams, 0 overruns
0 transmitter underruns, 0 excessive collisions
0 single collisions, 0 multiple collisions
0 dma memory errors, 0 CRC errors

0 alignment errors, 0 runts, 0 giants
emac/mal specific errors:
0 rx in range, 0 rx out range
0 mal_rx_serro administratively down
*Jun  1 10:12:54.592: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun  1 10:12:54.623: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
*Jun  1 10:12:54.654: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up, 0 mal_tx_serr
0 mal_rx_de, 0 mal_tx_de
0 emac_int
0 mal_err_isr
0 SQE errors, 0 tx CRC errors
0 output queue fail

gohussai
Level 4
Level 4

check if the AP country matches the regulatory domain allowed on your controller.  - Sometimes the issue comes from a bad communication between the AP and the controller. I would try to change the cable, or to test the AP on a small subnet close to the controller...

 

  Also Make sure your running the latest code version on the controller.   NOte: You can also manual  upgrade LAP and test in LAB before moving it into production.

All are the same : E regulatory domain. And others are working very well.

Abhishek Abhishek
Cisco Employee
Cisco Employee

You see this message in the debug lwapp events enable command output:

Note: Some lines of the output has been moved to the second line due to space constraints.

Wed Oct 24 17:13:20 2007: 00:0b:85:91:c3:c0 Received LWAPP DISCOVERY REQUEST 
from AP 00:0b:85:91:c3:c0 to 00:0b:85:33:52:80 on port '2'
Wed Oct 24 17:13:20 2007: 00:0e:83:4e:67:00 Successful transmission of 
LWAPP Discovery-Response to AP 00:0b:85:91:c3:c0 on Port 2
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Received LWAPP JOIN REQUEST 
from AP 00:0b:85:91:c3:c0 to 00:0b:85:33:52:81 on  port '2'
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 AP ap:91:c3:c0: 
txNonce  00:0B:85:33:52:80 rxNonce  00:0B:85:91:C3:C0 
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 LWAPP Join-Request MTU path 
from AP 00:0b:85:91:c3:c0 is 1500, remote debug mode is 0
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Successfully added NPU Entry 
for AP 00:0b:85:91:c3:c0 (index 48)
Switch IP: 10.77.244.211, Switch Port: 12223, intIfNum 2, vlanId 0
AP IP: 10.77.246.18, AP Port: 7228, next hop MAC: 00:17:94:06:62:88
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Successfully transmission 
of LWAPP Join-Reply to AP 00:0b:85:91:c3:c0
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Register LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 0
Wed Oct 24 17:13:46 2007: 00:0b:85:91:c3:c0 Register LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 1
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Received LWAPP CONFIGURE REQUEST 
from AP 00:0b:85:91:c3:c0 to  00:0b:85:33:52:81
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Updating IP info for AP 00:0b:85:91:c3:c0 -- 
static 0, 10.77.246.18/255.255.255.224, gtw 10.77.246.1
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Updating IP 10.77.246.18 ===> 10.77.246.18 
for AP 00:0b:85:91:c3:c0
Wed Oct 24 17:13:47 2007: spamVerifyRegDomain RegDomain set for 
slot 0 code 21 regstring -N regDfromCb -AB
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 AP 00:0b:85:91:c3:c0: 80211a Regulatory Domain 
(-N) does not match with country (US )  reg. domain -AB for the slot 0 
Wed Oct 24 17:13:47 2007: spamVerifyRegDomain RegDomain set for 
slot 1 code 21 regstring -N regDfromCb -AB
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 AP 00:0b:85:91:c3:c0: 80211bg Regulatory 
Domain (-N) does not match with country (US )  reg. domain -AB for the slot 1 
Wed Oct 24 17:13:47 2007: spamVerifyRegDomain AP RegDomain check for the country US failed
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 AP 00:0b:85:91:c3:c0: Regulatory Domain 
check Completely FAILED The AP will not be allowed to join
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 apfSpamProcessStateChangeInSpamContext: 
Deregister LWAPP event for AP 00:0b:85:91:c3:c0 slot 0
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 apfSpamProcessStateChangeInSpamContext: 
Deregister LWAPP event for AP 00:0b:85:91:c3:c0 slot 1
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Deregister LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 0
Wed Oct 24 17:13:47 2007: 00:0b:85:91:c3:c0 Deregister LWAPP event 
for AP 00:0b:85:91:c3:c0 slot 1

The message clearly indicates that there is a mismatch in the regulatory domain of the LAP and the WLC. The WLC supports multiple regulatory domains but each regulatory domain must be selected before an LAP can join from that domain. For example, the WLC that uses regulatory domain -A can only be used with APs that use regulatory domain -A (and so on). When you purchase APs and WLCs, ensure that they share the same regulatory domain. Only then can the LAPs register with the WLC.

Note: Both 802.1b/g and 802.11a radios must be in the same regulatory domain for a single LAP.

All my APs are E-Regulatory Domain. And they all are working perfectly. This is why I'm asking for help !

 

Here is my AP summary on the controller. All are E 

 

(Cisco Controller) >show ap summary

Number of APs.................................... 15

Global AP User Name.............................. Not Configured
Global AP Dot1x User Name........................ Not Configured

AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority
------------------  -----  -------------------  -----------------  ----------------  ----  -------  ------
volcom_ap37          2     AIR-AP1242AG-E-K9    00:07:0e:6b:aa:68  default location  LAG   FR       1
volcom_ap36          2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:c4  default location  LAG   FR       1
volcom_ap38          2     AIR-AP1232AG-E-K9    00:1a:6c:17:9e:9f  default location  LAG   FR       1
volcom_ap30          2     AIR-AP1232AG-E-K9    00:1a:6c:17:9e:a6  default location  LAG   FR       2
volcom_ap31          2     AIR-AP1232AG-E-K9    00:1a:6c:17:9e:a8  default location  LAG   FR       2
FRAP01               2     AIR-AP1242AG-E-K9    28:94:0f:a8:d7:4c  Marketing Office  LAG   FR       1
FRAP03               2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:be   Stock Marketing  LAG   FR       1
ESAP01               2     AIR-AP1242AG-E-K9    58:8d:09:8e:36:18  Spain - next to   LAG   FR       1
FRAP04               2     AIR-AP1242G-E-K9     e0:2f:6d:e6:e3:46         Marketing  LAG   FR       1
BCNAP01              2     AIR-AP1242G-E-K9     00:26:99:d7:98:f0  Barcelona Retail  LAG   FR       1
FRAP05               2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:62          showroom  LAG   FR       2
FRELAP01             2     AIR-AP1242G-E-K9     00:1d:70:96:b3:d6  default location  LAG   FR       1
LYSAP01              2     AIR-AP1242AG-E-K9    00:1b:d4:e9:41:ba       Retail Lyon  LAG   FR       1
CHXAP01              2     AIR-AP1242AG-E-K9    28:94:0f:a8:d7:e2  Retail Chamonix   LAG   FR       1

--More-- or (q)uit
NTEAP01              2     AIR-AP1242AG-E-K9    00:19:e7:d5:6b:a0     Nantes Retail  LAG   FR       1

- See more at: https://supportforums.cisco.com/discussion/12518186/ap-not-joining-wlc-invalid-country-code#comment-10533861

mohanak
Cisco Employee
Cisco Employee

These errors clearly show that there is a mismatch in the regulatory domain of the LAP and the WLC. To resolve this issue, add the country for which the AP was built to the list of countries supported on the controller from Wireless > Country. We have to disable all 802.11b/g and 802.11a radios to change the controller country codes list.

wirelesscountry

In my example, configured DE, this Country supports -E-   regulatory domain on AP:

The WLC can supports multiple regulatory domains but each regulatory domain must be selected before an LAP can join from that domain. When you purchase APs and WLCs, ensure that they share the same regulatory domain. Only then can the LAPs register with the WLC.

http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1300-series/product_data_sheet0900aecd80537b6a.html

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: