Waas Express and Central Manager register issue

Salvador Antonio Quintanilla Mendoza · ‎12-28-2015

Hi!,

I'm trying to register a Waas Express router with Central Manager following this guide http://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/waas/v431/configuration/guide/cnfg/other.html#wp1062469

when i run the command to register with the Central Manager (waas-express#waas cm-register https://CM_IP_Address:8443/wcm/register), in the CLI shows successfully registered, and in the central manager GUI looks like "pending" status for a while; but at the end shows failed "SSL Handshake failed while communicating with WAAS Express device"

Looking for the error message i found this.

SSL Handshake failed while communicating with WAAS Express devcie.
The WAAS Express device certificate is changed and the same certificate is not imported for this device in the Central Manager. To reimport the WAAS Express device certificate, choose the WAAS Express device, then choose Admin > Certificate.

My certificate has not changed but just to be sure I imported again the .pem cert mannualy and the results are the same.

Thanks for your help!,

finn.poulsen · ‎12-29-2015

Hi Salvador,

You could be hitting one of the bugs mentioned here :

https://supportforums.cisco.com/discussion/12611421/waasx-not-registering-cm

If it's the first bug mentioned, try restarting the CM, to verify whether that helps.

Best regards

Finn

Salvador Antonio Quintanilla Mendoza · ‎12-29-2015

Hi!,

Thanks for your reply, I restarted the central manager today but the problem continues. my version of Central Manager is 5.5.1 and the cisco 2921 IOS is 15.5.1.T2.

finn.poulsen · ‎12-30-2015

Hi,

Then you'll probably hit the bug that Nicolas described :

<snip>

This is most then likely due to CSCus70116

As from 15.3(3)M5, IOS stopped accepting SSLv3 connections and this is the only option used by the CM if you are running an affected version on the WAAS side.

To overcome this, you can either downgrade your router to 15.3(3)M4 or upgrade your CM to at least 5.5.3 where it is fixed.

<snip>

So either downgrade the router or upgrade the CM.

Best Regards

Finn