Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

3602 AP not able to join 3850 WLC

Hello,

I have a 3850 switch with inetegrated WLC and my 3602 is not able to join the controller.  Error from AP:

*Oct 24 19:21:17.355: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 19:21:17.355: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 19:21:17.355: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

*Oct 24 19:21:20.355: %CAPWAP-3-ERRORLOG: DTLS connection not found Failed to encrypt and send packet.

*Oct 24 19:21:20.355: %CAPWAP-3-ERRORLOG: Failed to encrypt and send packet.

*Oct 24 19:21:20.355: %CAPWAP-3-ERRORLOG: Failed to send packet from queue

*Oct 24 19:21:20.355: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 19:21:20.355: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 19:21:20.355: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

., 1)24 19:21:23.355: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(UNKNOWN_MESSAGE_TYPE (5)

*Oct 24 19:21:23.355: %CAPWAP-3-ERRORLOG: GOING BACK TO DISCOVER MODE

*Oct 24 19:21:28.903: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255

Switch Config:

ip dhcp pool TMOWireless

network x.x.x.0 255.255.255.0

default-router x.x.x.1

dns-server 8.8.8.8 4.2.2.2

option 43 hex f104.0x4x.dx0x

option 60 ascii "Cisco AP c3602"

wireless mobility controller

wireless management interface Vlanxxxx

wlan xxxxx1 xxxxx

client vlan xxxx

no security wpa akm dot1x

security wpa akm psk set-key ascii 0 xxxxxxxxx

no shutdown

show wlan summary

Mobility Controller Summary:

Mobility Role                                   : Mobility Controller

Mobility Protocol Port                          : 16666

Mobility Group Name                             : default

Mobility Oracle IP Address                      : 0.0.0.0

DTLS Mode                                       : Enabled

Mobility Domain ID for 802.11r                  : 0xac34

Mobility Keepalive Interval                     : 10

Mobility Keepalive Count                        : 3

Mobility Control Message DSCP Value             : 0

Mobility Domain Member Count                    : 1

Link Status is Control Link Status : Data Link Status

Controllers configured in the Mobility Domain:

IP               Public IP        Group Name       Multicast IP     Link Status

-------------------------------------------------------------------------------

x.x.x.x      -                default          0.0.0.0          UP   : UP

show ap summary:

clk5-Das-cor01#show ap summary

Number of APs: 1

Global AP User Name: Not configured

Global AP Dot1x User Name: Not configured

AP Name                           AP Model  Ethernet MAC    Radio MAC       State        

----------------------------------------------------------------------------------------

AP4c00.82df.ac68                  3602I     4c00.82df.ac68  f84f.57e3.8ec0  Registered

show capwap summary           

CAPWAP Tunnels General Statistics:

  Number of Capwap Data Tunnels       = 0 

  Number of Capwap Mobility Tunnels   = 0 

  Number of Capwap Multicast Tunnels  = 0 

Name   APName                           Type PhyPortIf Mode      McastIf

------ -------------------------------- ---- --------- --------- -------

Name   SrcIP           SrcPort DestIP          DstPort DtlsEn MTU

------ --------------- ------- --------------- ------- ------ -----

Any help is appreciated, thank you.

8 REPLIES
VIP Purple

3602 AP not able to join 3850 WLC

Does AP connected to a switch port configured for wireless management interface vlan ? Both has to be same in this case.

Also your output shows 3602 get registered to 3850. Does AP keep rebooting ?

Rasika

New Member

3602 AP not able to join 3850 WLC

HI Rasika,

Yes, the AP is in the wireless management VLAN. The AP seems to be in a loop, yeah...seems to keep rebooting.

Thank you,

Scott

VIP Purple

3602 AP not able to join 3850 WLC

Also check the license configured on your 3850. It should have minimum IPbase feature set for this functionality.

"show license right-to-use summary" should provide you the necessary information on this.

HTH

Rasika

New Member

3602 AP not able to join 3850 WLC

show license right-to-use summary

  |  Output modifiers

 

clk5-Das-cor01#show license right-to-use summary

  License Name    Type     Count   Period left

-----------------------------------------------

  ipservices   permanent   N/A      Lifetime

  apcount      base        0        Lifetime

  apcount      adder       5        Lifetime

--------------------------------------------

License Level In Use: ipservices

License Level on Reboot: ipservices

Evaluation AP-Count: Disabled

Total AP Count Licenses: 5

AP Count Licenses In-use: 1

AP Count Licenses Remaining: 4

VIP Purple

3602 AP not able to join 3850 WLC

This is all good...

Does your switch snyn to NTP ? Make sure time is correct on your 3850. Also check country code configured & AP regulatory domain is matches.

If all of them are ok then as a final step I would take following debug output on your 3850 to see what's going on

"debug capwap ap events"

"debug capwap ios events"

HTH

Rasika

New Member

Re: 3602 AP not able to join 3850 WLC

Yes, time is synced with NTP and is correct.  How do I check country code and AP regulatory domain?

Thank you,

Scott

VIP Purple

Re: 3602 AP not able to join 3850 WLC

"show wireless country supported" output should gives you current country code confgured on your controller. If it is not configured you can use "ap country " to configure it correctly.

AP product number should specify the regulatory domain it should operate. For example I have this (AIR-CAP3602I-N-K9) AP in Australia with "N" regulatory domain.It is the correct regulatory domain as per the compliance goes.

Refer this for full list regulatory domains & AP product numbers.

http://www.cisco.com/en/US/prod/collateral/wireless/ps5679/ps5861/product_data_sheet0900aecd80537b6a.pdf

HTH

Rasika

*** Pls rate all useful responses ****


New Member

3602 AP not able to join 3850 WLC

Full error log:

*Oct 24 19:59:32.351: %CAPWAP-3-ERRORLOG: GOING BACK TO DISCOVER MODE

*Oct 24 19:59:37.891: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255

*Oct 24 19:59:37.959: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Oct 24 19:59:37.959: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down

*Oct 24 19:59:38.175: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Oct 24 19:59:38.191: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up

*Oct 24 19:59:38.959: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Oct 24 19:59:38.991: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down

*Oct 24 19:59:38.999: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset

*Oct 24 19:59:39.983: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Oct 24 19:59:39.991: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down

*Oct 24 19:59:40.019: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up

*Oct 24 19:59:40.027: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down

*Oct 24 19:59:40.035: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Oct 24 19:59:41.019: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up

*Oct 24 19:59:41.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Oct 24 19:59:41.055: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Oct 24 19:59:42.055: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

Not in Bound state.

*Oct 24 20:00:33.687: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.

*Oct 24 20:00:38.691: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 2 combination.

*Oct 24 20:00:38.815: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.66.222.69, mask 255.255.255.0, hostname AP4c00.82df.ac68

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (8.8.8.8)

*Oct 24 20:00:44.687: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.66.222.1 obtained through DHCP

*Oct 24 20:00:44.687: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.

*Oct 24 20:00:44.935: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER

*Oct 24 20:01:14.935: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Oct 24 20:01:15.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.66.222.1 peer_port: 5246

*Oct 24 20:01:15.239: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.66.222.1 peer_port: 5246

*Oct 24 20:01:15.239: %CAPWAP-5-SENDJOIN: sending Join Request to 10.66.222.1

*Oct 24 20:01:15.371: %DTLS-5-ALERT: Received WARNING : Close notify alert from 10.66.222.1

*Oct 24 20:01:18.363: %CAPWAP-3-ERRORLOG: DTLS connection not found Failed to encrypt and send packet.

*Oct 24 20:01:18.363: %CAPWAP-3-ERRORLOG: Failed to encrypt and send packet.

*Oct 24 20:01:18.363: %CAPWAP-3-ERRORLOG: Failed to send packet from queue

*Oct 24 20:01:18.363: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 20:01:18.363: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 20:01:18.363: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

*Oct 24 20:01:21.363: %CAPWAP-3-ERRORLOG: DTLS connection not found Failed to encrypt and send packet.

*Oct 24 20:01:21.363: %CAPWAP-3-ERRORLOG: Failed to encrypt and send packet.

*Oct 24 20:01:21.363: %CAPWAP-3-ERRORLOG: Failed to send packet from queue

*Oct 24 20:01:21.363: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 20:01:21.363: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 20:01:21.363: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

*Oct 24 20:01:24.363: %CAPWAP-3-ERRORLOG: DTLS connection not found Failed to encrypt and send packet.

*Oct 24 20:01:24.363: %CAPWAP-3-ERRORLOG: Failed to encrypt and send packet.

*Oct 24 20:01:24.363: %CAPWAP-3-ERRORLOG: Failed to send packet from queue

*Oct 24 20:01:24.363: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 20:01:24.363: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 20:01:24.363: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

*Oct 24 20:01:27.363: %CAPWAP-3-ERRORLOG: DTLS connection not found Failed to encrypt and send packet.

*Oct 24 20:01:27.363: %CAPWAP-3-ERRORLOG: Failed to encrypt and send packet.

*Oct 24 20:01:27.363: %CAPWAP-3-ERRORLOG: Failed to send packet from queue

*Oct 24 20:01:27.363: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 20:01:27.363: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 20:01:27.363: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

*Oct 24 20:01:30.363: %CAPWAP-3-ERRORLOG: DTLS connection not found Failed to encrypt and send packet.

*Oct 24 20:01:30.363: %CAPWAP-3-ERRORLOG: Failed to encrypt and send packet.

*Oct 24 20:01:30.363: %CAPWAP-3-ERRORLOG: Failed to send packet from queue

*Oct 24 20:01:30.363: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 41, state 8

*Oct 24 20:01:30.363: %CAPWAP-3-ERRORLOG: Failed to handle timer message.

*Oct 24 20:01:30.363: %CAPWAP-3-ERRORLOG: Failed to process Message timer message.

*Oct 24 20:01:33.367: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(UNKNOWN_MESSAGE_TYPE (5)

., 1)

993
Views
13
Helpful
8
Replies
CreatePlease to create content