Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

2500 WLC & 1262 AP converted to LAP will not connect

Hi,

We are having a problem whereby, three new access points will not connect to the Wireless Controller.

We flashed the devices to LAP operation using the recovery images on the Cisco website, but upon rebooting we get the error message.

*Oct 10 16:31:38.004: %CAPWAP-3-ERRORLOG: Failed to load configuration from flash. Resetting to default config

*Oct 10 16:31:48.014: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Oct 10 16:31:47.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.xx.xx peer_port: 5246

*Oct 10 16:31:47.427: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.xx.xx peer_port: 5246

*Oct 10 16:31:47.427: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.xx.xx

*Oct 10 16:31:47.430: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.

*Oct 10 16:31:47.430: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.

*Oct 10 16:31:47.430: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Oct 10 16:31:47.430: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 192.168.xx.xx

*Oct 10 16:31:52.429: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.xx.xx

And the lights now cycle Blur/Green/Red/Off

We have two other access points, same model, on another site connected to the controller and they are working without any problems.

Googling we have been unable to find any answer to the problem.

  • Getting Started with Wireless
Everyone's tags (5)
17 REPLIES
VIP Purple

2500 WLC & 1262 AP converted to LAP will not connect

Try the below & see whether it makes any difference. Take the console output & post it again if it is not registering still

LAP#clear capwap private-config

LAP#reload

System configuration has been modified. Save? [yes/no]: yes

Proceed with reload? [confirm]

Writing out the event log to flash:/event.log ...

HTH

Rasika

**** Pls rate all useful responses ****

Cisco Employee

2500 WLC & 1262 AP converted to LAP will not connect

Seems there is a difference in the country code between AP and the WLC..  could you please check that and configure the right regulatory  domain/country code on WLC for that AP?

2500 WLC & 1262 AP converted to LAP will not connect

probably 'debug capwap errors enable' and 'debug dtls info enable' will give you more inputs

Hall of Fame Super Gold

2500 WLC & 1262 AP converted to LAP will not connect

Post the following output:

1.  WLC:  sh sysinfo;

2.  WLC:  sh time;

3.  AP:  sh version;

4.  AP:  sh ip interface brief; and

5.  AP:  sh inventory

New Member

2500 WLC & 1262 AP converted to LAP will not connect

sh version

Cisco IOS Software, C1260 Software (AP3G1-RCVK9W8-M), Version 15.2(2)JB, RELEASE SOFTWARE (fc1)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2012 by Cisco Systems, Inc.

Compiled Mon 10-Dec-12 23:48 by prod_rel_team

ROM: Bootstrap program is C1260 boot loader

BOOTLDR: C1260 Boot Loader (AP3G1-BOOT-M), Version 12.4 [mpleso-ap_jmr3_esc_0514 125]

APf872.ea76.d52b uptime is 4 minutes

System returned to ROM by reload

System image file is "flash:/ap3g1-rcvk9w8-mx/ap3g1-rcvk9w8-xx"

Last reload reason:

This product contains cryptographic features and is subject to United

States and local country laws governing import, export, transfer and

use. Delivery of Cisco cryptographic products does not imply

third-party authority to import, export, distribute or use encryption.

Importers, exporters, distributors and users are responsible for

compliance with U.S. and local country laws. By using this product you

--More--

*Oct 11 08:31:34.423: %CAPWAP-5-SENDJOIN: sending Join Request to 192.agree to comply with applicable laws and regulations. If you are unable

to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:

http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to

export@cisco.com.

cisco AIR-AP1262N-E-K9     (PowerPC460exr) processor (revision B0) with 98294K/32768K bytes of memory.

Processor board ID FCZ1725W0MP

PowerPC460exr CPU at 666Mhz, revision number 0x18A8

Last reset from reload

LWAPP image version 7.4.1.37

1 Gigabit Ethernet interface

32K bytes of flash-simulated non-volatile configuration memory.

Base ethernet MAC Address: F8:72:EA:76:D5:2B

Part Number                          : 73-12175-06

PCA Assembly Number                  : 800-32268-06

PCA Revision Number                  : B0

PCB Serial Number                    : FOC172323WX

Top Assembly Part Number             : 800-33866-02

Top Assembly Serial Number           : FCZ1725W0MP

Top Revision Number                  : A0

Product/Model Number                 : AIR-AP1262N-E-K9

Configuration register is 0xF

sh ip interface brief

Interface                  IP-Address      OK? Method Status                Protocol

BVI1                       192.168.16.125  YES DHCP   up                    up

GigabitEthernet0           unassigned      NO  unset  up                    up

GigabitEthernet0.1         unassigned      YES unset  up                    up

sh inventory

-- no output --

show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version.................................. 7.5.102.0

Bootloader Version............................... 1.0.16

Field Recovery Image Version..................... 1.0.0

Firmware Version................................. PIC 16.0

Build Type....................................... DATA + WPS

System Name...................................... SynergyWIFIController

System Location..................................

System Contact...................................

System ObjectID.................................. 1.3.6.1.4.1.9.1.1279

IP Address....................................... 192.168.xx.xx

Last Reset....................................... Software reset

System Up Time................................... 2 days 15 hrs 36 mins 46 secs

System Timezone Location.........................

System Stats Realtime Interval................... 5

System Stats Normal Interval..................... 180

--More-- or (q)uit

Configured Country............................... GB  - United Kingdom

Operating Environment............................ Commercial (0 to 40 C)

Internal Temp Alarm Limits....................... 0 to 65 C

Internal Temperature............................. +25 C

External Temperature............................. +30 C

Fan Status....................................... 3800 rpm

State of 802.11b Network......................... Enabled

State of 802.11a Network......................... Enabled

Number of WLANs.................................. 1

Number of Active Clients......................... 1

Burned-in MAC Address............................ AC:

show time

Time............................................. Fri Oct 11 08:51:26 2013

Timezone delta................................... 0:0

Timezone location................................

NTP Servers

    NTP Polling Interval.........................     86400

     Index     NTP Key Index                  NTP Server                  NTP Msg Auth Status

    -------  ----------------------------------------------------------------------------------

New Member

2500 WLC & 1262 AP converted to LAP will not connect

Can you run 'debug capwap events enable' at the WLC and dump its messages here?

Thanky you.

Hall of Fame Super Gold

2500 WLC & 1262 AP converted to LAP will not connect

Thanks for the output.

The only thing wrong I can see is your WLC is not configured for network time (NTP).  If the time/date of your WLC is not set right, the AP will not join.  This is because the AP has a certificate and it uses the time/date of the WLC.

Next, if you console into the AP, can the AP ping the Management IP Address of the WLC?  If it can, then issue this enable command "config capwap ap controller ip address ".  If this command works, this means your DHCP may not have the correct Option 43 and/or your DNS may have the wrong configuratoin for the CISCO-CAPWAP-CONTROLLER.

New Member

Re: 2500 WLC & 1262 AP converted to LAP will not connect

Thanks everybody for the help so far, still not working yet though

Leo - I have added NTP on the wireless controller but this hasn't had any effect. I tried manually connecting to the WLC from the AP but same problem. I have two other AP in another site that connect to the AP just fine, so I am assuming DHCP and DNS are fine?

Vlad - Please see the log below.

*spamApTask5: Oct 14 08:17:27.174: f8:72:ea:76:d5:20 Discovery Request from 192.168.xx.xx:27987

*spamApTask5: Oct 14 08:17:27.174: f8:72:ea:76:d5:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 5, joined Aps =2

*spamApTask5: Oct 14 08:17:27.174: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx port 27987

*spamApTask5: Oct 14 08:17:27.174: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx:27987

*spamApTask5: Oct 14 08:17:27.175: f8:72:ea:76:d5:20 Discovery Request from 192.168.xx.xx:27987

*spamApTask5: Oct 14 08:17:27.175: f8:72:ea:76:d5:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 5, joined Aps =2

*spamApTask5: Oct 14 08:17:27.176: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx port 27987

*spamApTask5: Oct 14 08:17:27.176: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx:27987

*spamApTask5: Oct 14 08:17:37.109: f8:72:ea:76:d5:20 DTLS connection not found, creating new connection for 192:168:xx:xx (27987) 192:168:yy:yy (5246)

*spamApTask5: Oct 14 08:17:37.529: acDtlsPlumbControlPlaneKeys: lrad:192.168.xx.xx(27987) mwar:192.168.yy.yy(5246)

*spamApTask5: Oct 14 08:17:37.530: f8:72:ea:76:d5:20 Allocated index from main list, Index: 27

*spamApTask5: Oct 14 08:17:37.530: f8:72:ea:76:d5:20 Using CipherSuite AES128-SHA

*spamApTask5: Oct 14 08:17:37.530: f8:72:ea:76:d5:20 DTLS keys for Control Plane are plumbed successfully for AP 192.168.xx.xx. Index 28

*spamApTask4: Oct 14 08:17:37.531: f8:72:ea:76:d5:20 DTLS Session established server (192.168.yy.yy:5246), client (192.168.xx.xx:27987)

*spamApTask4: Oct 14 08:17:37.531: f8:72:ea:76:d5:20 Starting wait join timer for AP: 192.168.xx.xx:27987

*spamApTask5: Oct 14 08:17:37.533: f8:72:ea:76:d5:20 Join Request from 192.168.xx.xx:27987

*spamApTask5: Oct 14 08:17:37.533: f8:72:ea:76:d5:20 Deleting AP entry 192.168.xx.xx:27987 from temporary database.

*spamApTask5: Oct 14 08:17:37.534: f8:72:ea:76:d5:20 In AAA state 'Idle' for AP f8:72:ea:76:d5:20

*spamApTask5: Oct 14 08:17:37.535: f8:72:ea:76:d5:20 Join Request failed!

*spamApTask0: Oct 14 08:17:37.539: f8:72:ea:76:d5:20 Finding DTLS connection to delete for AP (192:168:xx:xx/27987)

*spamApTask0: Oct 14 08:17:37.540: f8:72:ea:76:d5:20 Disconnecting DTLS Capwap-Ctrl session 0x17729778 for AP (192:168:xx:xx/27987)

*spamApTask0: Oct 14 08:17:37.540: f8:72:ea:76:d5:20 CAPWAP State: Dtls tear down

*spamApTask0: Oct 14 08:17:37.540: acDtlsPlumbControlPlaneKeys: lrad:192.168.xx.xx(27987) mwar:192.168.yy.yy(5246)

*spamApTask0: Oct 14 08:17:37.540: f8:72:ea:76:d5:20 DTLS keys for Control Plane deleted successfully for AP 192.168.xx.xx

*spamApTask5: Oct 14 08:17:37.547: f8:72:ea:76:d5:20 DTLS connection closed event receivedserver (192.168.yy.yy/5246) client (192.168.xx.xx/27987)

*spamApTask5: Oct 14 08:17:37.547: f8:72:ea:76:d5:20 Entry exists for AP (192.168.xx.xx/27987)

*spamApTask5: Oct 14 08:17:37.548: f8:72:ea:76:d5:20 No AP entry exist in temporary database for 192.168.xx.xx:27987

*spamApTask6: Oct 14 08:18:36.757: f8:72:ea:76:d5:20 Discovery Request from 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:36.757: f8:72:ea:76:d5:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 5, joined Aps =2

*spamApTask6: Oct 14 08:18:36.757: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx port 27988

*spamApTask6: Oct 14 08:18:36.757: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:36.758: f8:72:ea:76:d5:20 Discovery Request from 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:36.758: f8:72:ea:76:d5:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 5, joined Aps =2

*spamApTask6: Oct 14 08:18:36.758: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx port 27988

*spamApTask6: Oct 14 08:18:36.758: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:36.758: f8:72:ea:76:d5:20 Discovery Request from 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:36.759: f8:72:ea:76:d5:20 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 5, joined Aps =2

*spamApTask6: Oct 14 08:18:36.759: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx port 27988

*spamApTask6: Oct 14 08:18:36.759: f8:72:ea:76:d5:20 Discovery Response sent to 192.168.xx.xx:27988

*spamApTask0: Oct 14 08:18:36.759: f8:72:ea:76:d5:2b Received LWAPP DISCOVERY REQUEST to ac:f2:c5:a0:95:80 on port '1'

*spamApTask0: Oct 14 08:18:36.759: f8:72:ea:76:d5:2b Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask6: Oct 14 08:18:46.692: f8:72:ea:76:d5:20 DTLS connection not found, creating new connection for 192:168:xx:xx (27988) 192:168:yy:yy (5246)

*spamApTask6: Oct 14 08:18:47.113: acDtlsPlumbControlPlaneKeys: lrad:192.168.xx.xx(27988) mwar:192.168.yy.yy(5246)

*spamApTask6: Oct 14 08:18:47.114: f8:72:ea:76:d5:20 Allocated index from main list, Index: 28

*spamApTask6: Oct 14 08:18:47.114: f8:72:ea:76:d5:20 Using CipherSuite AES128-SHA

*spamApTask6: Oct 14 08:18:47.115: f8:72:ea:76:d5:20 DTLS keys for Control Plane are plumbed successfully for AP 192.168.xx.xx. Index 29

*spamApTask4: Oct 14 08:18:47.115: f8:72:ea:76:d5:20 DTLS Session established server (192.168.yy.yy:5246), client (192.168.xx.xx:27988)

*spamApTask4: Oct 14 08:18:47.115: f8:72:ea:76:d5:20 Starting wait join timer for AP: 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:47.117: f8:72:ea:76:d5:20 Join Request from 192.168.xx.xx:27988

*spamApTask6: Oct 14 08:18:47.118: f8:72:ea:76:d5:20 Deleting AP entry 192.168.xx.xx:27988 from temporary database.

*spamApTask6: Oct 14 08:18:47.118: f8:72:ea:76:d5:20 In AAA state 'Idle' for AP f8:72:ea:76:d5:20

*spamApTask6: Oct 14 08:18:47.120: f8:72:ea:76:d5:20 Join Request failed!

*spamApTask0: Oct 14 08:18:47.123: f8:72:ea:76:d5:20 Finding DTLS connection to delete for AP (192:168:xx:xx/27988)

*spamApTask0: Oct 14 08:18:47.123: f8:72:ea:76:d5:20 Disconnecting DTLS Capwap-Ctrl session 0x177298f0 for AP (192:168:xx:xx/27988)

*spamApTask0: Oct 14 08:18:47.123: f8:72:ea:76:d5:20 CAPWAP State: Dtls tear down

*spamApTask0: Oct 14 08:18:47.123: acDtlsPlumbControlPlaneKeys: lrad:192.168.xx.xx(27988) mwar:192.168.yy.yy(5246)

*spamApTask0: Oct 14 08:18:47.123: f8:72:ea:76:d5:20 DTLS keys for Control Plane deleted successfully for AP 192.168.xx.xx

*spamApTask6: Oct 14 08:18:47.131: f8:72:ea:76:d5:20 DTLS connection closed event receivedserver (192.168.yy.yy/5246) client (192.168.xx.xx/27988)

*spamApTask6: Oct 14 08:18:47.131: f8:72:ea:76:d5:20 Entry exists for AP (192.168.xx.xx/27988)

*spamApTask6: Oct 14 08:18:47.132: f8:72:ea:76:d5:20 No AP entry exist in temporary database for 192.168.xx.xx:27988

VIP Purple

2500 WLC & 1262 AP converted to LAP will not connect

As requested earlier, post the complete AP console output after issue the following command. That should give if any error messages while booting the AP.

LAP#clear capwap private-config

LAP#reload

HTH

Rasika

1349
Views
0
Helpful
17
Replies
This widget could not be displayed.