Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

AP 1524 wont join 2504 WLC

Hi Guys,

I've got a 1524 ap and it wont join my 2540 WLC. The messages I see in the WLC is RADIUS authorization is pending for the AP. I've added the MAC address of the ap under AP Policies using MIC. I dont have a radius server either so not sure how to tackle this one.

When I run debug capwap events enale under the wlc I see the following messages:

Discarding discovery request in LWAPP from AP supporting CAPWAP

Is this anything to do with it? If someone can help I'd appreciate it.

Thanks,

Ross.

36 REPLIES
Hall of Fame Super Silver

AP 1524 wont join 2504 WLC

You need to add the ethernet mac address of the mesh ap to the mac filter list.

http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mesh.html#wp1472458

-Scott
*** Please rate helpful posts ***
New Member

AP 1524 wont join 2504 WLC

I've added to the MAC filtering but now it says join failed as dtls connection not found.

Any ideas?

Hall of Fame Super Silver

Re: AP 1524 wont join 2504 WLC

Provide the debugs suggested but also make sure the time is set correctly on the wlc.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Cisco Employee

Re: AP 1524 wont join 2504 WLC

Hmm...

Make sure Multiple countries are not enabled on the WLC...

Regards

Surendra

New Member

Was this ever solved? Please

Was this ever solved? Please post solution!

Cisco Employee

AP 1524 wont join 2504 WLC

Hi,

Please paste thebelow logs when the AP fails to register..

AP console logs

on the WLC run the below debug

debug mac addr

deb capwap events enable

debug capwap errors enable

from the WLC get TRAP LOG and the MSG Log

Regards

Surendra

New Member

AP 1524 wont join 2504 WLC

Please see debug info below:

(Cisco Controller) >*sshpmLscTask: Jul 05 13:04:07.922: sshpmLscTask: LSC Task received a message 4

*spamApTask4: Jul 05 13:04:16.921: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:16.921: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 05 13:04:16.921: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5889

*spamApTask0: Jul 05 13:04:16.921: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 05 13:04:16.921: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask4: Jul 05 13:04:26.919: 00:22:0d:71:70:00 DTLS connection not found, creating new connection for 172:16:33:11 (5889) 172:16:30:2 (5246)

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: called to evaluate

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: called to get cert for CID 11f59bb1

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<

samApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<

spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<

spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<

spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCertFromCID: comparing to row 2, certname >cscoDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: called to evaluate

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

samApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetSshPrivateKeyFromCID: called to get key for CID 11f59bb1

*spamApTask4: Jul 05 13:04:26.919: sshpmGetSshPrivateKeyFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetSshPrivateKeyFromCID: comparing to row 1, certname >bsnDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetSshPrivateKeyFromCID: comparing to row 2, certname >cscoDefaultIdCert<

*spamApTask4: Jul 05 13:04:26.919: sshpmGetSshPrivateKeyFromCID: match in row 2

*spamApTask4: Jul 05 13:04:27.216: sshpmGetIssuerHandles: locking ca cert table

spamApTask4: Jul 05 13:04:27.216: sshpmGetIssuerHandles: calling x509_alloc() for user cert

*spamApTask4: Jul 05 13:04:27.216: sshpmGetIssuerHandles: calling x509_decode()

*spamApTask4: Jul 05 13:04:27.220: sshpmGetIssuerHandles: C=US, ST=California, L=San Jose, O=Cisco Systems, CN=C1520-00220d717000, MAILTO=support@cisco.com

*spamApTask4: Jul 05 13:04:27.220: sshpmGetIssuerHandles:   O=Cisco Systems, CN=Cisco Manufacturing CA

*spamApTask4: Jul 05 13:04:27.220: sshpmGetIssuerHandles: Mac Address in subject is 00:22:0d:71:70:00

*spamApTask4: Jul 05 13:04:27.220: sshpmGetIssuerHandles: Cert Name in subject is C1520-00220d717000

*spamApTask4: Jul 05 13:04:27.220: sshpmGetIssuerHandles: Cert is issued by Cisco Systems.

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: called to evaluate

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask4: Jul 05 13:04:27.220: sshpmGetCertFromCID: called to get cert for CID 2a403752

*spamApTask4: Jul 05 13:04:27.221: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<

*spamApTask4: Jul 05 13:04:27.221: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<

*spamApTask4: Jul 05 13:04:27.221: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<

*spamApTask4: Jul 05 13:04:27.221: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<

*spamApTask4: Jul 05 13:04:27.221: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<

*spamApTask4: Jul 05 13:04:27.221: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<

*spamApTask4: Jul 05 13:04:27.221: ssphmUserCertVerify: calling x509_decode()

*spamApTask4: Jul 05 13:04:27.230: ssphmUserCertVerify: user cert verfied using >cscoDefaultMfgCaCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetIssuerHandles: ValidityString (current): 2012/07/05/05:04:27

*spamApTask4: Jul 05 13:04:27.230: sshpmGetIssuerHandles: ValidityString (NotBefore): 2008/08/02/01:59:22

*spamApTask4: Jul 05 13:04:27.230: sshpmGetIssuerHandles: ValidityString (NotAfter): 2018/08/02/02:09:22

*spamApTask4: Jul 05 13:04:27.230: sshpmGetIssuerHandles: getting cisco ID cert handle...

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: called to evaluate

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<

*spamApTask4: Jul 05 13:04:27.230: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<

*spamApTask4: Jul 05 13:04:27.231: sshpmFreePublicKeyHandle: called with 0x2df77268

*spamApTask4: Jul 05 13:04:27.231: sshpmFreePublicKeyHandle: freeing public key

*spamApTask4: Jul 05 13:04:27.584: 00:22:0d:71:70:00 Allocated index from main list, Index: 8

*spamApTask4: Jul 05 13:04:27.584: 00:22:0d:71:70:00 DTLS keys for Control Plane are plumbed successfully for AP 172.16.33.11. Index 9

*spamApTask4: Jul 05 13:04:27.584: 00:22:0d:71:70:00 DTLS Session established server (172.16.30.2:5246), client (172.16.33.11:5889)

*spamApTask4: Jul 05 13:04:27.584: 00:22:0d:71:70:00 Starting wait join timer for AP: 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:27.586: 00:22:0d:71:70:00 Join Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:27.586: 00:22:0d:71:70:00 Deleting AP entry 172.16.33.11:5889 from temporary database.

*spamApTask4: Jul 05 13:04:27.586: 00:22:0d:71:70:00 AP with same name AP0022.0d71.7000 exist. Using default name AP0022.0d71.7000 for this AP.

*spamApTask4: Jul 05 13:04:27.587: 00:22:0d:71:70:00 MIC AP is not allowed to join by config

*spamApTask4: Jul 05 13:04:27.587: 00:22:0d:71:70:00 State machine handler: Failed to process  msg type = 3 state = 0 from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:27.587: 00:22:0d:71:70:00 Failed to parse CAPWAP packet from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.581: 00:22:0d:71:70:00 Join Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.581: 00:22:0d:71:70:00 Join request received from AP which is already present. Deleting previous connection

172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.582: 00:22:0d:71:70:00 Multiple Join Request: Join request received from AP which is already present. Deleting previous conne

*spamApTask4: Jul 05 13:04:32.582: 00:22:0d:71:70:00 Finding DTLS connection to delete for AP (172:16:33:11/5889)

*spamApTask4: Jul 05 13:04:32.582: 00:22:0d:71:70:00 Disconnecting DTLS Capwap-Ctrl session 0x14548a60 for AP (172:16:33:11/5889)

*spamApTask4: Jul 05 13:04:32.582: 00:22:0d:71:70:00 CAPWAP State: Dtls tear down

*spamApTask4: Jul 05 13:04:32.582: 00:22:0d:71:70:00 DTLS keys for Control Plane deleted successfully for AP 172.16.33.11

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 DTLS connection not found. Ignoring join request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 State machine handler: Failed to process  msg type = 3 state = 0 from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 Failed to parse CAPWAP packet from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 DTLS connection closed event receivedserver (172:16:30:2/5246) client (172:16:33:11/5889)

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 No entry exists for AP (172:16:33:11/5889)

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 No AP entry exist in temporary database for 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:32.584: 00:22:0d:71:70:00 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.16.33.11:5889)since DTLS session is not established

*spamApTask5: Jul 05 13:04:37.808: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5890

*spamApTask0: Jul 05 13:04:37.808: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask5: Jul 05 13:04:37.808: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask0: Jul 05 13:04:37.808: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:04:37.809: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5890

*spamApTask5: Jul 05 13:04:49.802: 00:22:0d:71:70:00 DTLS connection not found, creating new connection for 172:16:33:11 (5890) 172:16:30:2 (5246)

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: called to evaluate

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: called to get cert for CID 11f59bb1

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCertFromCID: comparing to row 2, certname >cscoDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: called to evaluate

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetSshPrivateKeyFromCID: called to get key for CID 11f59bb1

*spamApTask5: Jul 05 13:04:49.803: sshpmGetSshPrivateKeyFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetSshPrivateKeyFromCID: comparing to row 1, certname >bsnDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetSshPrivateKeyFromCID: comparing to row 2, certname >cscoDefaultIdCert<

*spamApTask5: Jul 05 13:04:49.803: sshpmGetSshPrivateKeyFromCID: match in row 2

*spamApTask5: Jul 05 13:04:50.100: sshpmGetIssuerHandles: locking ca cert table

*spamApTask5: Jul 05 13:04:50.100: sshpmGetIssuerHandles: calling x509_alloc() for user cert

*spamApTask5: Jul 05 13:04:50.100: sshpmGetIssuerHandles: calling x509_decode()

*spamApTask5: Jul 05 13:04:50.104: sshpmGetIssuerHandles: C=US, ST=California, L=San Jose, O=Cisco Systems, CN=C1520-00220d717000, MAILTO=support@cisco.com

*spamApTask5: Jul 05 13:04:50.104: sshpmGetIssuerHandles:   O=Cisco Systems, CN=Cisco Manufacturing CA

*spamApTask5: Jul 05 13:04:50.104: sshpmGetIssuerHandles: Mac Address in subject is 00:22:0d:71:70:00

*spamApTask5: Jul 05 13:04:50.104: sshpmGetIssuerHandles: Cert Name in subject is C1520-00220d717000

*spamApTask5: Jul 05 13:04:50.104: sshpmGetIssuerHandles: Cert is issued by Cisco Systems.

*spamApTask5: Jul 05 13:04:50.104: sshpmGetCID: called to evaluate

*spamApTask5: Jul 05 13:04:50.104: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: called to get cert for CID 2a403752

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<

*spamApTask5: Jul 05 13:04:50.105: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:50.105: ssphmUserCertVerify: calling x509_decode()

*spamApTask5: Jul 05 13:04:50.114: ssphmUserCertVerify: user cert verfied using >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetIssuerHandles: ValidityString (current): 2012/07/05/05:04:50

*spamApTask5: Jul 05 13:04:50.114: sshpmGetIssuerHandles: ValidityString (NotBefore): 2008/08/02/01:59:22

*spamApTask5: Jul 05 13:04:50.114: sshpmGetIssuerHandles: ValidityString (NotAfter): 2018/08/02/02:09:22

*spamApTask5: Jul 05 13:04:50.114: sshpmGetIssuerHandles: getting cisco ID cert handle...

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: called to evaluate

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<

*spamApTask5: Jul 05 13:04:50.114: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<

*spamApTask5: Jul 05 13:04:50.115: sshpmFreePublicKeyHandle: called with 0x2df7a870

*spamApTask5: Jul 05 13:04:50.115: sshpmFreePublicKeyHandle: freeing public key

*spamApTask5: Jul 05 13:04:50.565: 00:22:0d:71:70:00 Allocated index from main list, Index: 9

*spamApTask5: Jul 05 13:04:50.565: 00:22:0d:71:70:00 DTLS keys for Control Plane are plumbed successfully for AP 172.16.33.11. Index 10

*spamApTask5: Jul 05 13:04:50.566: 00:22:0d:71:70:00 DTLS keys for Control Plane deleted successfully for AP 172.16.33.11

*spamApTask5: Jul 05 13:04:50.567: 00:22:0d:71:70:00 DTLS connection was closed

*spamApTask5: Jul 05 13:04:50.567: Failed to find DTLS connection for a DTLS established event for AP 172.16.33.11:5890. DTLS connection might have been closed.

*spamApTask5: Jul 05 13:04:50.567: 00:22:0d:71:70:00 DTLS connection closed event receivedserver (172:16:30:2/5246) client (172:16:33:11/5890)

*spamApTask5: Jul 05 13:04:50.567: 00:22:0d:71:70:00 No entry exists for AP (172:16:33:11/5890)

*spamApTask5: Jul 05 13:04:50.567: 00:22:0d:71:70:00 No AP entry exist in temporary database for 172.16.33.11:5890

*spamApTask4: Jul 05 13:04:56.594: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:04:56.594: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 05 13:04:56.594: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5889

*spamApTask0: Jul 05 13:04:56.594: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 05 13:04:56.594: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:05:16.822: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5890

*spamApTask0: Jul 05 13:05:16.822: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask5: Jul 05 13:05:16.822: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask0: Jul 05 13:05:16.822: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:05:16.822: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5890

*spamApTask4: Jul 05 13:05:35.311: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:05:35.311: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 05 13:05:35.311: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5889

*spamApTask0: Jul 05 13:05:35.311: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 05 13:05:35.311: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:05:55.536: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5890

*spamApTask0: Jul 05 13:05:55.536: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask5: Jul 05 13:05:55.536: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask0: Jul 05 13:05:55.536: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:05:55.536: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5890

*sshpmLscTask: Jul 05 13:06:07.954: sshpmLscTask: LSC Task received a message 4

*spamApTask4: Jul 05 13:06:15.757: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:06:15.757: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 05 13:06:15.757: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5889

*spamApTask0: Jul 05 13:06:15.757: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 05 13:06:15.757: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:06:35.993: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5890

*spamApTask0: Jul 05 13:06:35.993: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask5: Jul 05 13:06:35.993: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask0: Jul 05 13:06:35.993: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask5: Jul 05 13:06:35.993: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5890

*spamApTask4: Jul 05 13:06:54.486: 00:22:0d:71:70:00 Discovery Request from 172.16.33.11:5889

*spamApTask4: Jul 05 13:06:54.486: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 05 13:06:54.487: 00:22:0d:71:70:00 Discovery Response sent to 172.16.33.11:5889

*spamApTask0: Jul 05 13:06:54.487: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 05 13:06:54.487: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

VIP Purple

AP 1524 wont join 2504 WLC

Hi,

Error:*spamApTask0: Jul 05 13:06:54.487: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

Explanation    Message was received in LWAPP from an AP that supports CAPWAP. This condition might be normal. The AP will join the controller in CAPWAP after the maximum number of retries in LWAPP.

Recommended Action    No action is required.

So what is happening is that you have a device and supports LWAPP and another that supports capwap and each device is expecting to use the protocol they support.  I find it a little odd that these APs just suddenly stopped talking to the controller.

When an AP joins a controller, it should update its code to whatever the wlc is so they would match lwapp and or capwap or both depending on the code.

Recommandtaion:As per my expriences...it may be issue of  an IP conflict with the 2nd AP-Manager address

Regards

Please rate if it helps.

New Member

AP 1524 wont join 2504 WLC

Here is the console output from the AP

*Mar  1 00:02:17.959:  status of voice_diag_test from WLC is false

*Mar  1 00:02:18.059: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 172.16.30.2

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:02:18.059: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 172.16.30.2

*Mar  1 00:02:23.159: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar  1 00:02:23.167: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Mar  1 00:02:24.163: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

% CDP is not supported on this interface, or for this encapsulation

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:02:27.163: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:02:29.191: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

VIP Purple

AP 1524 wont join 2504 WLC

You are tagging the managment and ap manager interface on the WLC interface?  You should not have the management and ap manager tagged (also should be native vlan).

Given the deployment at hand having these interfaces tagged or untagged would be deteremined by the switch's port configuration that connects to the WLC.  The easy way is to have these interfaces untagged, though that is not preferred.  Standard QoS on the switches has us trusting CoS on trunk links, which WLC connects should be.  Since an untagged interface has no 802.1q/p tag there is no marking for the switches to properly handle the traffic coming from the WLC on this interface.  Though the Management/AP manager interface is only used for communications between the AP and the WLC (as well as Admin access), there are different traffic types, Data and Control, that are marked and handled differently.  As such, the Managment/AP-Manager interface should belong to a tagged/non-native VLAN.

or

Can you share the show run-config from the WLC and point which AP is showing those messages?

Regards

please rate if it helps

New Member

AP 1524 wont join 2504 WLC

AP Running Config

Current configuration : 1272 bytes

!

version 12.4

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

!

hostname AP0022.0d71.7000

!

logging rate-limit console 9

enable secret 5 $1$Oucl$DeDrpryZQJAJx7d64Eb5a/

!

aaa new-model

!

!

aaa authentication login default local

!

aaa session-id common

!

!

username Cisco secret 5 $1$tsSQ$XzVjU5gW46Isf08WMpWRB0

!

!

ip ssh version 2

!

!

interface Dot11Radio0

no ip route-cache

antenna gain 0

mbssid

power client local

packet retries 64 drop-packet

!

interface Dot11Radio1

no ip route-cache

antenna gain 8

mbssid

power client local

packet retries 64 drop-packet

!

interface Dot11Radio2

no ip route-cache

antenna gain 8

mbssid

power client local

packet retries 64 drop-packet

!

interface GigabitEthernet0

no ip route-cache

duplex full

!

interface GigabitEthernet1

no ip route-cache

duplex full

!

interface GigabitEthernet2

no ip route-cache

duplex full

!

interface GigabitEthernet3

no ip route-cache

duplex full

!

interface BVI1

ip address 172.16.33.10 255.255.255.0

no ip route-cache

!

--More--

ip default-gateway 172.16.33.1

no ip http server

logging snmp-trap notifications

logging snmp-trap informational

logging snmp-trap debugging

!

control-plane

!

!

line con 0

line vty 0 4

!

WLC Running config

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2012.07.06 13:20:42 =~=~=~=~=~=~=~=~=~=~=~=

show run-config

Press Enter to continue...

System Inventory

NAME: "Chassis"    , DESCR: "Cisco 2500 Series Wireless LAN Controller"

PID: AIR-CT2504-K9,  VID: V01,  SN: PSJ162108BA

Burned-in MAC Address............................ F4:7F:35:B6:46:E0

Maximum number of APs supported.................. 15

Press Enter to continue or to abort

System Information

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version.................................. 7.0.220.0

Bootloader Version............................... 1.0.16

Field Recovery Image Version..................... 1.0.0

Firmware Version................................. PIC 16.0

Build Type....................................... DATA + WPS

System Name...................................... WLC-2504

System Location..................................

System Contact...................................

System ObjectID.................................. 1.3.6.1.4.1.9.1.1279

IP Address....................................... 172.16.30.2

Last Reset....................................... Software reset

System Up Time................................... 0 days 0 hrs 16 mins 15 secs

System Timezone Location......................... (GMT +8:00) HongKong, Bejing, Chongquing

Current Boot License Level....................... base

Current Boot License Type........................ Permanent

Next Boot License Level.......................... base

--More or (q)uit current module or to abort

Next Boot License Type........................... Permanent

Configured Country............................... AU  - Australia

Operating Environment............................ Commercial (0 to 40 C)

Internal Temp Alarm Limits....................... 0 to 65 C

Internal Temperature............................. +29 C

External Temperature............................. +33 C

Fan Status....................................... 4100 rpm

State of 802.11b Network......................... Disabled

State of 802.11a Network......................... Disabled

Number of WLANs.................................. 1

Number of Active Clients......................... 0

Burned-in MAC Address............................ F4:7F:35:B6:46:E0

Maximum number of APs supported.................. 15

Press Enter to continue or to abort

AP Bundle Information

Primary AP Image          Size

----------------          ----

ap3g1                              5792

ap801                              5192

ap802                              5232

c1100                              3084

c1130                              4964

c1140                              4992

c1200                              3364

c1240                              4812

c1250                              5504

c1310                              3136

c1520                              6404

c3201                              4324

c602i                              3716

Secondary AP Image          Size

------------------          ----

ap3g1                              5792

ap801                              5192

--More or (q)uit current module or to abort

ap802                              5232

c1100                              3084

c1130                              4964

c1140                              4992

c1200                              3364

c1240                              4812

c1250                              5504

c1310                              3136

c1520                              6404

c3201                              4324

c602i                              3716

Press Enter to continue or to abort

Switch Configuration

802.3x Flow Control Mode......................... Disable

FIPS prerequisite features....................... Disabled

secret obfuscation............................... Enabled

Strong Password Check Features:

case-check ...........Enabled

consecutive-check ....Enabled

default-check .......Enabled

username-check ......Enabled

Press Enter to continue or to abort

Network Information

RF-Network Name............................. Public-Wifi

Web Mode.................................... Disable

Secure Web Mode............................. Enable

Secure Web Mode Cipher-Option High.......... Disable

Secure Web Mode Cipher-Option SSLv2......... Enable

OCSP........................................ Disabled

OCSP responder URL..........................

Secure Shell (ssh).......................... Enable

Telnet...................................... Disable

Ethernet Multicast Forwarding............... Disable

Ethernet Broadcast Forwarding............... Disable

AP Multicast/Broadcast Mode................. Multicast   Address : 0.0.0.0

IGMP snooping............................... Disabled

IGMP timeout................................ 60 seconds

IGMP Query Interval......................... 20 seconds

User Idle Timeout........................... 300 seconds

ARP Idle Timeout............................ 300 seconds

Cisco AP Default Master..................... Disable

AP Join Priority............................ Disable

Mgmt Via Wireless Interface................. Disable

Mgmt Via Dynamic Interface.................. Disable

--More or (q)uit current module or to abort

Bridge MAC filter Config.................... Enable

Bridge Security Mode........................ PSK

Mesh Full Sector DFS........................ Enable

AP Fallback ................................ Disable

Web Auth Redirect Ports .................... 80

Web Auth Proxy Redirect  ................... Disable

Fast SSID Change ........................... Disabled

IP/MAC Addr Binding Check .................. Enabled

Press Enter to continue or to abort

Port Summary

           STP   Admin   Physical   Physical   Link   Link

Pr  Type   Stat   Mode     Mode      Status   Status  Trap     POE 

-- ------- ---- ------- ---------- ---------- ------ ------- -------

1  Normal  Forw Enable  Auto       1000 Full  Up     Enable  N/A    

2  Normal  Disa Enable  Auto       Auto       Down   Enable  N/A    

3  Normal  Disa Enable  Auto       Auto       Down   Enable  Enable  (Power Off)

4  Normal  Disa Enable  Auto       Auto       Down   Enable  Enable  (Power Off)

Press Enter to continue or to abort

AP Summary

Number of APs.................................... 0

Global AP User Name.............................. Not Configured

Global AP Dot1x User Name........................ Not Configured

AP Name             Slots  AP Model              Ethernet MAC       Location          Port  Country  Priority

------------------  -----  --------------------  -----------------  ----------------  ----  -------  ------

AP Tcp-Mss-Adjust Info

AP Name              TCP State  MSS Size

------------------   --------   -------

Press Enter to continue or to abort

AP Location

Total Number of AP Groups........................ 0   

Site Name........................................ default-group

Site Description.................................

WLAN ID          Interface          Network Admission Control          Radio Policy

-------          -----------        --------------------------         ------------

1               management           Disabled                          None

AP Name             Slots  AP Model             Ethernet MAC       Location          Port  Country  Priority

------------------  -----  -------------------  -----------------  ----------------  ----  -------  --------

Press Enter to continue or to abort

AP Config

Press Enter to continue or to abort

Press Enter to continue or to abort

AP Airewave Director Configuration

Press Enter to continue or to abort

802.11a Configuration

802.11a Network.................................. Disabled

11nSupport....................................... Enabled

      802.11a Low Band........................... Enabled

      802.11a Mid Band........................... Enabled

      802.11a High Band.......................... Enabled

802.11a Operational Rates

    802.11a 6M Rate.............................. Mandatory

    802.11a 9M Rate.............................. Supported

    802.11a 12M Rate............................. Mandatory

    802.11a 18M Rate............................. Supported

    802.11a 24M Rate............................. Mandatory

    802.11a 36M Rate............................. Supported

    802.11a 48M Rate............................. Supported

    802.11a 54M Rate............................. Supported

802.11n MCS Settings:

    MCS 0........................................ Supported

    MCS 1........................................ Supported

    MCS 2........................................ Supported

    MCS 3........................................ Supported

    MCS 4........................................ Supported

    MCS 5........................................ Supported

    MCS 6........................................ Supported

--More or (q)uit current module or to abort

    MCS 7........................................ Supported

    MCS 8........................................ Supported

    MCS 9........................................ Supported

    MCS 10....................................... Supported

    MCS 11....................................... Supported

    MCS 12....................................... Supported

    MCS 13....................................... Supported

    MCS 14....................................... Supported

    MCS 15....................................... Supported

802.11n Status:

    A-MPDU Tx:

        Priority 0............................... Enabled

        Priority 1............................... Disabled

        Priority 2............................... Disabled

        Priority 3............................... Disabled

        Priority 4............................... Enabled

        Priority 5............................... Enabled

        Priority 6............................... Disabled

        Priority 7............................... Disabled

    A-MSDU Tx:

        Priority 0............................... Enabled

        Priority 1............................... Enabled

        Priority 2............................... Enabled

--More or (q)uit current module or to abort

        Priority 3............................... Enabled

        Priority 4............................... Enabled

        Priority 5............................... Enabled

        Priority 6............................... Disabled

        Priority 7............................... Disabled

    Rifs Rx ..................................... Enabled

    Guard Interval .............................. Any

Beacon Interval.................................. 100

CF Pollable mandatory............................ Disabled

CF Poll Request mandatory........................ Disabled

CFP Period....................................... 4

CFP Maximum Duration............................. 60

Default Channel.................................. 36

Default Tx Power Level........................... 1

DTPC  Status..................................... Enabled

Fragmentation Threshold.......................... 2346

TI Threshold..................................... -50

Legacy Tx Beamforming setting.................... Disabled

Traffic Stream Metrics Status.................... Disabled

Expedited BW Request Status...................... Disabled

World Mode....................................... Enabled

EDCA profile type................................ default-wmm

Voice MAC optimization status.................... Disabled

--More or (q)uit current module or to abort

Call Admission Control (CAC) configuration

Voice AC:

   Voice AC - Admission control (ACM)............ Disabled

   Voice Stream-Size............................. 84000

   Voice Max-Streams............................. 2

   Voice max RF bandwidth........................ 75

   Voice reserved roaming bandwidth.............. 6

   Voice CAC Method ............................. Load-Based

   Voice tspec inactivity timeout................ Disabled

CAC SIP-Voice configuration

   SIP based CAC ................................ Disabled

   SIP Codec Type ............................... CODEC_TYPE_G711

   SIP call bandwidth ........................... 64

   SIP call bandwith sample-size ................ 20

Video AC:

   Video AC - Admission control (ACM)............ Disabled

   Video max RF bandwidth........................ Infinite

   Video reserved roaming bandwidth.............. 0

   Best-effort AC - Admission control (ACM)...... Disabled

   Background AC - Admission control (ACM)....... Disabled

Press Enter to continue or to abort

802.11a Advanced Configuration

Press Enter to continue or to abort

802.11a Airewave Director Configuration

RF Event and Performance Logging

  Channel Update Logging......................... Off

  Coverage Profile Logging....................... Off

  Foreign Profile Logging........................ Off

  Load Profile Logging........................... Off

  Noise Profile Logging.......................... Off

  Performance Profile Logging.................... Off

  TxPower Update Logging......................... Off

Default 802.11a AP performance profiles

  802.11a Global Interference threshold.......... 10 %

  802.11a Global noise threshold................. -70 dBm

  802.11a Global RF utilization threshold........ 80 %

  802.11a Global throughput threshold............ 1000000 bps

  802.11a Global clients threshold............... 12 clients

Default 802.11a AP monitoring

  802.11a Monitor Mode........................... enable

  802.11a Monitor Mode for Mesh AP Backhaul...... disable

  802.11a Monitor Channels....................... Country channels

  802.11a RRM Neighbor Discover Type............. Transparent

  802.11a AP Coverage Interval................... 180 seconds

  802.11a AP Load Interval....................... 60 seconds

--More or (q)uit current module or to abort

  802.11a AP Noise Interval...................... 180 seconds

  802.11a AP Signal Strength Interval............ 60 seconds

Automatic Transmit Power Assignment

  Transmit Power Assignment Mode................. OFF

  Transmit Power Update Interval................. 600 seconds

  Transmit Power Threshold....................... -70 dBm

  Transmit Power Neighbor Count.................. 3 APs

  Min Transmit Power............................. -10 dBm

  Max Transmit Power............................. 30 dBm

  Transmit Power Update Contribution............. SNI..

  Transmit Power Assignment Leader............... WLC-2504 (172.16.30.2)

  Last Run....................................... 358 seconds ago

Coverage Hole Detection

  802.11a Coverage Hole Detection Mode........... Enabled

  802.11a Coverage Voice Packet Count............ 100 packets

  802.11a Coverage Voice Packet Percentage....... 50%

  802.11a Coverage Voice RSSI Threshold.......... -80 dBm

  802.11a Coverage Data Packet Count............. 50 packets

  802.11a Coverage Data Packet Percentage........ 50%

  802.11a Coverage Data RSSI Threshold........... -80 dBm

  802.11a Global coverage exception level........ 25 %

  802.11a Global client minimum exception lev.... 3 clients

Automatic Channel Assignment

--More or (q)uit current module or to abort

  Channel Assignment Mode........................ OFF

  Channel Update Interval........................ 600 seconds [startup]

  Anchor time (Hour of the day).................. 0

  Channel Update Contribution.................... SNI..

  CleanAir Event-driven RRM option............... Disabled

  CleanAir Event-driven RRM sensitivity.......... Medium

  Channel Assignment Leader...................... WLC-2504 (172.16.30.2)

  Last Run....................................... 358 seconds ago

  DCA Sensitivity Level.......................... STARTUP (5 dB)

  DCA 802.11n Channel Width...................... 20 MHz

  DCA Minimum Energy Limit....................... -95 dBm

  Channel Energy Levels

    Minimum...................................... unknown

    Average...................................... unknown

    Maximum...................................... unknown

  Channel Dwell Times

    Minimum...................................... unknown

    Average...................................... unknown

    Maximum...................................... unknown

  802.11a 5 GHz Auto-RF Channel List

    Allowed Channel List......................... 36,40,44,48,52,56,60,64,149,

                                                  153,157,161

    Unused Channel List.......................... 165

--More or (q)uit current module or to abort

  DCA Outdoor AP option.......................... Disabled

Radio RF Grouping

  802.11a Group Mode............................. AUTO

  802.11a Group Update Interval.................. 600 seconds

  802.11a Group Leader........................... WLC-2504 (172.16.30.2)

    802.11a Group Member......................... WLC-2504 (172.16.30.2)

  802.11a Last Run............................... 358 seconds ago

802.11a CleanAir Configuration

Clean Air Solution............................... Disabled

Air Quality Settings:

    Air Quality Reporting........................ Enabled

    Air Quality Reporting Period (min)........... 15

    Air Quality Alarms........................... Enabled

    Air Quality Alarm Threshold.................. 35

Interference Device Settings:

    Interference Device Reporting................ Enabled

    Interference Device Types:

        TDD Transmitter.......................... Enabled

        Jammer................................... Enabled

        Continuous Transmitter................... Enabled

        DECT-like Phone.......................... Enabled

        Video Camera............................. Enabled

--More or (q)uit current module or to abort

        WiFi Inverted............................ Enabled

        WiFi Invalid Channel..................... Enabled

        SuperAG.................................. Enabled

        Canopy................................... Enabled

        WiMax Mobile............................. Enabled

        WiMax Fixed.............................. Enabled

    Interference Device Alarms................... Enabled

    Interference Device Types Triggering Alarms:

        TDD Transmitter.......................... Disabled

        Jammer................................... Enabled

        Continuous Transmitter................... Disabled

        DECT-like Phone.......................... Disabled

        Video Camera............................. Disabled

        WiFi Inverted............................ Enabled

        WiFi Invalid Channel..................... Enabled

        SuperAG.................................. Disabled

        Canopy................................... Disabled

        WiMax Mobile............................. Disabled

        WiMax Fixed.............................. Disabled

Additional Clean Air Settings:

    CleanAir Event-driven RRM State.............. Disabled

    CleanAir Driven RRM Sensitivity.............. Medium

    CleanAir Persistent Devices state............ Disabled

--More or (q)uit current module or to abort

802.11a CleanAir AirQuality Summary

AQ = Air Quality

DFS = Dynamic Frequency Selection

AP Name            Channel Avg AQ Min AQ Interferers DFS

------------------ ------- ------ ------ ----------- ---

Press Enter to continue or to abort

802.11b Configuration

802.11b Network.................................. Disabled

11gSupport....................................... Disabled

11nSupport....................................... Enabled

802.11b Operational Rates

    802.11b 1M Rate.............................. Mandatory

    802.11b 2M Rate.............................. Mandatory

    802.11b 5.5M Rate............................ Mandatory

    802.11b 11M Rate............................. Mandatory

802.11n MCS Settings:

    MCS 0........................................ Supported

    MCS 1........................................ Supported

    MCS 2........................................ Supported

    MCS 3........................................ Supported

    MCS 4........................................ Supported

    MCS 5........................................ Supported

    MCS 6........................................ Supported

    MCS 7........................................ Supported

    MCS 8........................................ Supported

    MCS 9........................................ Supported

    MCS 10....................................... Supported

    MCS 11....................................... Supported

    MCS 12....................................... Supported

--More or (q)uit current module or to abort

    MCS 13....................................... Supported

    MCS 14....................................... Supported

    MCS 15....................................... Supported

802.11n Status:

    A-MPDU Tx:

        Priority 0............................... Enabled

        Priority 1............................... Disabled

        Priority 2............................... Disabled

        Priority 3............................... Disabled

        Priority 4............................... Enabled

        Priority 5............................... Enabled

        Priority 6............................... Disabled

        Priority 7............................... Disabled

    A-MSDU Tx:

        Priority 0............................... Enabled

        Priority 1............................... Enabled

        Priority 2............................... Enabled

        Priority 3............................... Enabled

        Priority 4............................... Enabled

        Priority 5............................... Enabled

        Priority 6............................... Disabled

        Priority 7............................... Disabled

    Rifs Rx ..................................... Enabled

--More or (q)uit current module or to abort

    Guard Interval .............................. Any

Beacon Interval.................................. 100

CF Pollable mode................................. Disabled

CF Poll Request mandatory........................ Disabled

CFP Period....................................... 4

CFP Maximum Duration............................. 60

Default Channel.................................. 1

Default Tx Power Level........................... 1

DTPC  Status..................................... Enabled

Call Admission Limit  ........................... 105

G711 CU Quantum ................................. 15

ED Threshold..................................... -50

Fragmentation Threshold.......................... 2346

PBCC mandatory................................... Disabled

RTS Threshold.................................... 2347

Short Preamble mandatory......................... Enabled

Short Retry Limit................................ 7

Legacy Tx Beamforming setting.................... Disabled

Traffic Stream Metrics Status.................... Disabled

Expedited BW Request Status...................... Disabled

World Mode....................................... Enabled

Faster Carrier Tracking Loop..................... Disabled

EDCA profile type................................ default-wmm

--More or (q)uit current module or to abort

Voice MAC optimization status.................... Disabled

Call Admission Control (CAC) configuration

   Voice AC - Admission control (ACM)............ Disabled

   Voice Stream-Size............................. 84000

   Voice Max-Streams............................. 2

   Voice max RF bandwidth........................ 75

   Voice reserved roaming bandwidth.............. 6

   Voice CAC Method.............................. Load-Based

   Voice tspec inactivity timeout................ Disabled

CAC SIP-Voice configuration

   SIP based CAC ................................ Disabled

   SIP Codec Type ............................... CODEC_TYPE_G711

   SIP call bandwidth: .......................... 64

   SIP call bandwidth sample-size ............... 20

   Video AC - Admission control (ACM)............ Disabled

   Video max RF bandwidth........................ Infinite

   Video reserved roaming bandwidth.............. 0

   Best-effort AC - Admission control (ACM)...... Disabled

   Background AC - Admission control (ACM)....... Disabled

Press Enter to continue or to abort

802.11b Advanced Configuration

Press Enter to continue or to abort

802.11b Airewave Director Configuration

RF Event and Performance Logging

  Channel Update Logging......................... Off

  Coverage Profile Logging....................... Off

  Foreign Profile Logging........................ Off

  Load Profile Logging........................... Off

  Noise Profile Logging.......................... Off

  Performance Profile Logging.................... Off

  Transmit Power Update Logging.................. Off

Default 802.11b AP performance profiles

  802.11b Global Interference threshold.......... 10 %

  802.11b Global noise threshold................. -70 dBm

  802.11b Global RF utilization threshold........ 80 %

  802.11b Global throughput threshold............ 1000000 bps

  802.11b Global clients threshold............... 12 clients

Default 802.11b AP monitoring

  802.11b Monitor Mode........................... enable

  802.11b Monitor Channels....................... Country channels

  802.11b RRM Neighbor Discovery Type............ Transparent

  802.11b AP Coverage Interval................... 180 seconds

  802.11b AP Load Interval....................... 60 seconds

  802.11b AP Noise Interval...................... 180 seconds

--More or (q)uit current module or to abort

  802.11b AP Signal Strength Interval............ 60 seconds

Automatic Transmit Power Assignment

  Transmit Power Assignment Mode................. OFF

  Transmit Power Update Interval................. 600 seconds

  Transmit Power Threshold....................... -70 dBm

  Transmit Power Neighbor Count.................. 3 APs

  Min Transmit Power............................. -10 dBm

  Max Transmit Power............................. 30 dBm

  Transmit Power Update Contribution............. SNI..

  Transmit Power Assignment Leader............... WLC-2504 (172.16.30.2)

  Last Run....................................... 360 seconds ago

Coverage Hole Detection

  802.11b Coverage Hole Detection Mode........... Enabled

  802.11b Coverage Voice Packet Count............ 100 packets

  802.11b Coverage Voice Packet Percentage....... 50%

  802.11b Coverage Voice RSSI Threshold.......... -80 dBm

  802.11b Coverage Data Packet Count............. 50 packets

  802.11b Coverage Data Packet Percentage........ 50%

  802.11b Coverage Data RSSI Threshold........... -80 dBm

  802.11b Global coverage exception level........ 25 %

  802.11b Global client minimum exception lev.... 3 clients

Automatic Channel Assignment

  Channel Assignment Mode........................ OFF

--More or (q)uit current module or to abort

  Channel Update Interval........................ 600 seconds [startup]

  Anchor time (Hour of the day).................. 0

  Channel Update Contribution.................... SNI..

  CleanAir Event-driven RRM option............... Disabled

  CleanAir Event-driven RRM sensitivity.......... Medium

  Channel Assignment Leader...................... WLC-2504 (172.16.30.2)

  Last Run....................................... 360 seconds ago

  DCA Sensitivity Level: ...................... STARTUP (5 dB)

  DCA Minimum Energy Limit....................... -95 dBm

  Channel Energy Levels

    Minimum...................................... unknown

    Average...................................... unknown

    Maximum...................................... unknown

  Channel Dwell Times

    Minimum...................................... unknown

    Average...................................... unknown

    Maximum...................................... unknown

  802.11b Auto-RF Allowed Channel List........... 1,6,11

  Auto-RF Unused Channel List.................... 2,3,4,5,7,8,9,10

Radio RF Grouping

  802.11b Group Mode............................. AUTO

  802.11b Group Update Interval.................. 600 seconds

--More or (q)uit current module or to abort

  802.11b Group Leader........................... WLC-2504 (172.16.30.2)

    802.11b Group Member......................... WLC-2504 (172.16.30.2)

  802.11b Last Run............................... 360 seconds ago

802.11a CleanAir Configuration

Clean Air Solution............................... Disabled

Air Quality Settings:

    Air Quality Reporting........................ Enabled

    Air Quality Reporting Period (min)........... 15

    Air Quality Alarms........................... Enabled

    Air Quality Alarm Threshold.................. 35

Interference Device Settings:

    Interference Device Reporting................ Enabled

    Interference Device Types:

        Bluetooth Link........................... Enabled

        Microwave Oven........................... Enabled

        802.11 FH................................ Enabled

        Bluetooth Discovery...................... Enabled

        TDD Transmitter.......................... Enabled

        Jammer................................... Enabled

        Continuous Transmitter................... Enabled

        DECT-like Phone.......................... Enabled

        Video Camera............................. Enabled

--More or (q)uit current module or to abort

        802.15.4................................. Enabled

        WiFi Inverted............................ Enabled

        WiFi Invalid Channel..................... Enabled

        SuperAG.................................. Enabled

        Canopy................................... Enabled

        Microsoft Device......................... Enabled

        WiMax Mobile............................. Enabled

        WiMax Fixed.............................. Enabled

    Interference Device Alarms................... Enabled

    Interference Device Types Triggering Alarms:

        Bluetooth Link........................... Disabled

        Microwave Oven........................... Disabled

        802.11 FH................................ Disabled

        Bluetooth Discovery...................... Disabled

        TDD Transmitter.......................... Disabled

        Jammer................................... Enabled

        Continuous Transmitter................... Disabled

        DECT-like Phone.......................... Disabled

        Video Camera............................. Disabled

        802.15.4................................. Disabled

        WiFi Inverted............................ Enabled

        WiFi Invalid Channel..................... Enabled

        SuperAG.................................. Disabled

--More or (q)uit current module or to abort

        Canopy................................... Disabled

        Microsoft Device......................... Disabled

        WiMax Mobile............................. Disabled

        WiMax Fixed.............................. Disabled

Additional Clean Air Settings:

    CleanAir Event-driven RRM State.............. Disabled

    CleanAir Driven RRM Sensitivity.............. Medium

    CleanAir Persistent Devices state............ Disabled

802.11a CleanAir AirQuality Summary

AQ = Air Quality

DFS = Dynamic Frequency Selection

AP Name            Channel Avg AQ Min AQ Interferers DFS

------------------ ------- ------ ------ ----------- ---

Press Enter to continue or to abort

Mobility Configuration

Symmetric Mobility Tunneling (current) .......... Enabled

Symmetric Mobility Tunneling (after reboot) ..... Enabled

Mobility Protocol Port........................... 16666

Default Mobility Domain.......................... Public-Wifi

Multicast Mode .................................. Disabled

Mobility Domain ID for 802.11r................... 0xa081

Mobility Keepalive Interval...................... 10

Mobility Keepalive Count......................... 3

Mobility Group Members Configured................ 1

Mobility Control Message DSCP Value.............. 0

Controllers configured in the Mobility Group

MAC Address        IP Address       Group Name                        Multicast IP     Status

f4:7f:35:b6:46:e0  172.16.30.2      Public-Wifi                       0.0.0.0          Up

Press Enter to continue or to abort

Mobility Foreign Map Configuration

WLAN ID     Foreign Mac Address     Interface

-------     -------------------     ---------

Press Enter to continue or to abort

Advanced Configuration

Probe request filtering..........................  Enabled

Probes fwd to controller per client per radio....  2

Probe request rate-limiting interval.............  500 msec

Aggregate Probe request interval.................  0 msec

EAP-Identity-Request Timeout (seconds)........... 30

EAP-Identity-Request Max Retries................. 2

EAP Key-Index for Dynamic WEP.................... 0

EAP Max-Login Ignore Identity Response........... enable

EAP-Request Timeout (seconds).................... 30

EAP-Request Max Retries.......................... 2

EAPOL-Key Timeout (milliseconds)................. 1000

EAPOL-Key Max Retries............................ 2

EAP-Broadcast Key Interval....................... 3600

Fastpath Packet Capture.......................... disable

Fastpath Fast Cache Control...................... enable

Fastpath Fast Testmode........................... 0x0

dot11-padding.................................... Disabled

Press Enter to continue or to abort

Location Configuration

RFID Tag data Collection......................... Enabled

RFID  timeout.................................... 1200 seconds

RFID mobility.................................... Oui:00:14:7e : Vendor:pango  State:Disabled

Press Enter to continue or to abort

Interface Configuration

Interface Name................................... management

MAC Address...................................... f4:7f:35:b6:46:e0

IP Address....................................... 172.16.30.2

IP Netmask....................................... 255.255.255.0

IP Gateway....................................... 172.16.30.1

External NAT IP State............................ Disabled

External NAT IP Address.......................... 0.0.0.0

VLAN............................................. untagged 

Quarantine-vlan.................................. 0

Active Physical Port............................. 1        

Primary Physical Port............................ 1        

Backup Physical Port............................. Unconfigured

Primary DHCP Server.............................. 172.16.30.1

Secondary DHCP Server............................ Unconfigured

DHCP Option 82................................... Disabled

ACL.............................................. Unconfigured

AP Manager....................................... Yes

Guest Interface.................................. No

L2 Multicast..................................... Disabled

Interface Name................................... virtual

MAC Address...................................... f4:7f:35:b6:46:e0

IP Address....................................... 1.1.1.1

DHCP Option 82................................... Disabled

Virtual DNS Host Name............................ Disabled

AP Manager....................................... No

Guest Interface.................................. No

Press Enter to continue or to abort

Interface Group Configuration

Press Enter to continue or to abort

WLAN Configuration

WLAN Identifier.................................. 1

Profile Name..................................... NB-Piazza

Network Name (SSID).............................. NB-Piazza

Status........................................... Disabled

MAC Filtering.................................... Disabled

Broadcast SSID................................... Enabled

AAA Policy Override.............................. Disabled

Network Admission Control

  Radius-NAC State............................... Disabled

  SNMP-NAC State................................. Disabled

  Quarantine VLAN................................ 0

Maximum number of Associated Clients............. 0

Number of Active Clients......................... 0

Exclusionlist Timeout............................ 60 seconds

Session Timeout.................................. 1800 seconds

CHD per WLAN..................................... Enabled

Webauth DHCP exclusion........................... Disabled

Interface........................................ management

Multicast Interface.............................. Not Configured

--More or (q)uit current module or to abort

WLAN ACL......................................... unconfigured

DHCP Server...................................... Default

DHCP Address Assignment Required................. Enabled

Static IP client tunneling....................... Disabled

Quality of Service............................... Silver (best effort)

Scan Defer Priority.............................. 4,5,6

Scan Defer Time.................................. 100 milliseconds

WMM.............................................. Disabled

WMM UAPSD Compliant Client Support............... Disabled

Media Stream Multicast-direct.................... Disabled

CCX - AironetIe Support.......................... Enabled

CCX - Gratuitous ProbeResponse (GPR)............. Disabled

CCX - Diagnostics Channel Capability............. Disabled

Dot11-Phone Mode (7920).......................... Disabled

Wired Protocol................................... None

IPv6 Support..................................... Disabled

Passive Client Feature........................... Disabled

Peer-to-Peer Blocking Action..................... Disabled

Radio Policy..................................... All

DTIM period for 802.11a radio.................... 1

DTIM period for 802.11b radio.................... 1

Radius Servers

   Authentication................................ Disabled

--More or (q)uit current module or to abort

   Accounting.................................... Disabled

   Dynamic Interface............................. Disabled

Local EAP Authentication......................... Disabled

Security

   802.11 Authentication:........................ Open System

   Static WEP Keys............................... Disabled

   802.1X........................................ Disabled

   Wi-Fi Protected Access (WPA/WPA2)............. Disabled

   CKIP ......................................... Disabled

   Web Based Authentication...................... Disabled

   Web-Passthrough............................... Enabled

ACL............................................. Unconfigured

Email Input..................................... Disabled

   Conditional Web Redirect...................... Disabled

   Splash-Page Web Redirect...................... Disabled

   Auto Anchor................................... Disabled

   H-REAP Local Switching........................ Disabled

   H-REAP Local Authentication................... Disabled

   H-REAP Learn IP Address....................... Enabled

   Client MFP.................................... Optional but inactive (WPA2 not configured)

   Tkip MIC Countermeasure Hold-down Timer....... 60

--More or (q)uit current module or to abort

Call Snooping.................................... Disabled

Roamed Call Re-Anchor Policy..................... Disabled

SIP CAC Fail Send-486-Busy Policy................ Enabled

SIP CAC Fail Send Dis-Association Policy......... Disabled

Band Select...................................... Disabled

Load Balancing................................... Disabled

Mobility Anchor List

WLAN ID     IP Address            Status

-------     ---------------       ------

Press Enter to continue or to abort

Press Enter to continue or to abort

ACL Configuration

Press Enter to continue or to abort

CPU ACL Configuration

CPU Acl Name................................ NOT CONFIGURED

Wireless Traffic............................ Disabled

Wired Traffic............................... Disabled

Press Enter to continue or to abort

RADIUS Configuration

Vendor Id Backward Compatibility................. Disabled

Call Station Id Case............................. lower

Call Station Id Type............................. AP's Mac Address

Aggressive Failover.............................. Enabled

Keywrap.......................................... Disabled

Fallback Test:

    Test Mode.................................... Off

    Probe User Name.............................. cisco-probe

    Interval (in seconds)........................ 300

MAC Delimiter for Authentication Messages........ hyphen

MAC Delimiter for Accounting Messages............ hyphen

Authentication Servers

Idx  Type  Server Address    Port    State     Tout  RFC3576  IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr

---  ----  ----------------  ------  --------  ----  -------  ------------------------------------------------

Accounting Servers

Idx  Type  Server Address    Port    State     Tout  RFC3576  IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr

---  ----  ----------------  ------  --------  ----  -------  ------------------------------------------------

--More or (q)uit current module or to abort

Press Enter to continue or to abort

TACACS Configuration

Authentication Servers

Idx  Server Address    Port    State     Tout

---  ----------------  ------  --------  ----

Authorization Servers

Idx  Server Address    Port    State     Tout

---  ----------------  ------  --------  ----

Accounting Servers

Idx  Server Address    Port    State     Tout

---  ----------------  ------  --------  ----

Press Enter to continue or to abort

LDAP Configuration

Press Enter to continue or to abort

Local EAP Configuration

User credentials database search order:

    Primary ..................................... Local DB

Timer:

    Active timeout .............................. 300

Configured EAP profiles:

EAP Method configuration:

    EAP-FAST:

      Server key ................................

      TTL for the PAC ........................... 10

      Anonymous provision allowed ............... Yes

      Authority ID .............................. 436973636f0000000000000000000000

      Authority Information ..................... Cisco A-ID

Press Enter to continue or to abort

HREAP Group Summary

HREAP Group Summary: Count: 0

Group Name                # Aps

Press Enter to continue or to abort

HREAP Group Detail

Press Enter to continue or to abort

Route  Info

Number of Routes................................. 0

Destination Network          Netmask               Gateway

-------------------    -------------------   -------------------

Press Enter to continue or to abort

Qos Queue Length Info

Platinum queue length............................ 100

Gold queue length................................  75

Silver queue length..............................  50

Bronze queue length..............................  25

Press Enter to continue or to abort

Mac Filter Info

MAC Address               WLAN Id          Description

-----------------------   --------------   --------------------------------

00:22:0d:71:70:00         Any             

00:22:0d:71:70:fc         Any             

Press Enter to continue or to abort

Authorization List

Authorize MIC APs against AAA ................... disabled

Authorize LSC APs against Auth-List ............. disabled

APs Allowed to Join

  AP with Manufacturing Installed Certificate.... no

  AP with Self-Signed Certificate................ no

  AP with Locally Significant Certificate........ no

Press Enter to continue or to abort

Load Balancing Info

Aggressive Load Balancing........................ per WLAN enabling

Aggressive Load Balancing Window................. 5 clients

Aggressive Load Balancing Denial Count........... 3

Statistics

Total Denied Count............................... 0 clients

Total Denial Sent................................ 0 messages

Exceeded Denial Max Limit Count.................. 0 times

None 5G Candidate Count.......................... 0 times

None 2.4G Candidate Count........................ 0 times

Press Enter to continue or to abort

DHCP Info

No leases allocated.

DHCP Opt-82 RID Format:

DHCP Proxy Behaviour:          enabled

Scope: NB-Piazza

Enabled.......................................... Yes

Lease Time....................................... 7200 (2 hours )

Pool Start....................................... 172.16.31.10

Pool End......................................... 172.16.31.254

Network.......................................... 172.16.31.0

Netmask.......................................... 255.255.255.0

Default Routers.................................. 172.16.31.1  0.0.0.0  0.0.0.0

--More or (q)uit current module or to abort

DNS Domain.......................................

DNS.............................................. 8.8.8.8  4.2.2.2  0.0.0.0

Netbios Name Servers............................. 0.0.0.0  0.0.0.0  0.0.0.0

Press Enter to continue or to abort

Exclusion List ConfigurationUnable to retrieve exclusion-list entry

Press Enter to continue or to abort

CDP Configuration

cdp version v2

Press Enter to continue or to abort

Country Channels Configuration

Configured Country............................. AU  - Australia

      KEY: * = Channel is legal in this country and may be configured manually.

           A = Channel is the Auto-RF default in this country.

           . = Channel is not legal in this country.

           C = Channel has been configured for use by Auto-RF.

           x = Channel is available to be configured for use by Auto-RF.

         (-,-) = (indoor, outdoor) regulatory doamin allowed by this country.

-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-

    802.11bg     :                           

    Channels     :                   1 1 1 1 1

                 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4

-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-

AU (-A   ,-NA  ): A * * * * A * * * * A . . .

-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-

    802.11a      :                         1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1

    Channels     : 3 3 3 4 4 4 4 4 5 5 6 6 0 0 0 1 1 2 2 2 3 3 4 4 5 5 6 6

                 : 4 6 8 0 2 4 6 8 2 6 0 4 0 4 8 2 6 0 4 8 2 6 0 9 3 7 1 5

-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-

AU (-N   ,-N   ): . A . A . A . A A A A A . . . . . . . . . . . A A A A *

Press Enter to continue or to abort

WPS Configuration Summary

Auto-Immune

  Auto-Immune.................................... Disabled

Client Exclusion Policy

  Excessive 802.11-association failures.......... Enabled

  Excessive 802.11-authentication failures....... Enabled

  Excessive 802.1x-authentication................ Enabled

  IP-theft....................................... Enabled

  Excessive Web authentication failure........... Enabled

Signature Policy

  Signature Processing........................... Enabled

Press Enter to continue or to abort

Custom Web Configuration

Radius Authentication Method..................... PAP

Cisco Logo....................................... Enabled

CustomLogo....................................... None

Custom Title..................................... None

Custom Message................................... None

Custom Redirect URL.............................. None

Web Authentication Type.......................... Internal Default

External Web Authentication URL.................. None

Configuration Per Profile:

WLAN ID: 1

   WLAN Status................................... Disabled

   Web Security Policy........................... Web-Passthrough

   Global Status................................. Enabled

   WebAuth Type.................................. Internal

Press Enter to continue or to abort

Core dump Configuration

Core Dump is disabled

Press Enter to continue or to abort

Rogue AP Configuration

Rogue on wire Auto-Contain....................... Disabled

Rogue using our SSID Auto-Contain................ Disabled

Valid client on rogue AP Auto-Contain............ Disabled

Rogue AP timeout................................. 1200

Monitor Mode Report Interval..................... 10

MAC Address        Classification     # APs # Clients Last Heard            

-----------------  ------------------ ----- --------- -----------------------

Adhoc Rogue Configuration

Detect and report Ad-Hoc Networks................ Enabled

Auto-Contain Ad-Hoc Networks..................... Disabled

Client MAC Address  Adhoc BSSID         State              # APs   Last Heard            

------------------  ------------------  -----------------  ------  -----------------------

Rogue Client Configuration

Validate rogue clients against AAA............... Disabled

--More or (q)uit current module or to abort

MAC Address        State              # APs Last Heard            

-----------------  ------------------ ----- -----------------------

Ignore List Configuration

MAC Address      

-----------------

Rogue Rule Configuration

Priority Rule Name               State    Type          Match Hit Count

-------- ----------------------- -------- ------------- ----- ---------

Press Enter to continue or to abort

Media-Stream Configuration

Multicast-direct State........................... disable

Allowed WLANs....................................

Stream Name   Start IP       End IP         Operation Status

------------- -------------- -------------- ----------------

URL..............................................

E-mail...........................................

Phone............................................

Note.............................................

State............................................ disable

2.4G Band Media-Stream Configuration

Multicast-direct................................. Enabled

Best Effort...................................... Disabled

--More-- or (q)uit

Video Re-Direct.................................. Enabled

Max Allowed Streams Per Radio.................... Auto

Max Allowed Streams Per Client................... Auto

Max Video Bandwidth.............................. 0

Max Voice Bandwidth.............................. 75

Max Media Bandwidth.............................. 85

Min PHY Rate..................................... 6000

Max Retry Percentage............................. 80

5G Band Media-Stream Configuration

Multicast-direct................................. Enabled

Best Effort...................................... Disabled

Video Re-Direct.................................. Enabled

Max Allowed Streams Per Radio.................... Auto

Max Allowed Streams Per Client................... Auto

Max Video Bandwidth.............................. 0

Max Voice Bandwidth.............................. 75

Max Media Bandwidth.............................. 85

Min PHY Rate..................................... 6000

Max Retry Percentage............................. 80

--More-- or (q)uit

Number of Clients................................ 0

Client Mac         Stream Name  Stream Type  Radio WLAN  QoS    Status

-----------------  -----------  -----------  ----  ----  ------ -------

(

VIP Purple

AP 1524 wont join 2504 WLC

I am not able to find the error...please do these 2 steps:

1. Can you check with the command "dir" on the AP?

2. Please console into the AP and post the bootup process.

New Member

AP 1524 wont join 2504 WLC

Boot up from AP

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2012.07.09 14:20:05 =~=~=~=~=~=~=~=~=~=~=~=

IOS Bootloader - Starting system.
Xmodem file system is available.
flashfs[0]: 22 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31868928
flashfs[0]: Bytes used: 6641664
flashfs[0]: Bytes available: 25227264
flashfs[0]: flashfs fsck took 17 seconds.
Reading cookie from flash parameter block...done.
Base Ethernet MAC address: 00:22:0d:71:70:00

Low Power PoE - enabling LAN Ethernet port only
Loading "flash:/c1520-k9w8-mx.124-23c.JA3/c1520-k9w8-mx.124-23c.JA3"...#########################################################################################################################################################################################################################

File "flash:/c1520-k9w8-mx.124-23c.JA3/c1520-k9w8-mx.124-23c.JA3" uncompressed and installed, entry point: 0x3000
executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

Cisco IOS Software, C1520 Software (C1520-K9W8-M), Version 12.4(23c)JA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 18-Oct-11 15:13 by prod_rel_team


Proceeding with system init

Proceeding to unmask interrupts
Initializing flashfs...

flashfs[1]: 22 files, 2 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 31610880
flashfs[1]: Bytes used: 6641664
flashfs[1]: Bytes available: 24969216
flashfs[1]: flashfs fsck took 6 seconds.
flashfs[1]: Initialization complete.
flashfs[2]: 0 files, 1 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 5806080
flashfs[2]: Bytes used: 1024
flashfs[2]: Bytes available: 5805056
flashfs[2]: flashfs fsck took 1 seconds.
flashfs[2]: Initialization complete....done Initializing flashfs.

Warning:  the compile-time code checksum does not appear to be present.

Radio0  present 8363 8000 A8040000 0 A8050000 30
Radio1  present 8363 8000 B8020000 0 B8030000 13
Unable to create Frequency bands, Channel / Max Power information not found

Radio2  present 8363 8000 A8060000 0 A8070000 11
Unable to create Frequency bands, Channel / Max Power information not found

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.


%Error opening flash:/c1520-rcvk9w8-mx/info (No such file or directory)cisco AIR-LAP1524SB-N-K9   (PowerPC 8349) processor (revision B0) with 49142K/16384K bytes of memory.
Processor board ID FCW1233W00C
PowerPC 8349 CPU at 533Mhz, revision number 0x0031
Last reset from power loss
LWAPP image version 7.0.220.0
4 Gigabit Ethernet interfaces
3 802.11 Radio(s)

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:22:0D:71:70:00
Part Number                          : 73-10918-03
PCA Assembly Number                  : 800-28909-03
PCA Revision Number                  : B0
PCB Serial Number                    : FOC12312PD0
Top Assembly Part Number             : 800-31719-01
Top Assembly Serial Number           : FCW1233W00C
Top Revision Number                  : 01
Product/Model Number                 : AIR-LAP1524SB-N-K9 
% Please define a domain-name first.
flash:/mesh_start_cfg.txt: No such file or directoryThe filesystem containing the variables may not be initialized yet.

Press RETURN to get started!


Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)
*Mar  1 00:00:08.387: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar  1 00:00:08.875: m8349_ether_enable: MACCFG1 sync timeout
*Mar  1 00:00:09.439: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar  1 00:00:10.003: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
*Mar  1 00:00:10.655: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 2
*Mar  1 00:00:10.767: %LINK-3-UPDOWN: Interface Ethernet4, changed state to up
*Mar  1 00:00:10.783: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 1024 messages)

*Mar  1 00:00:10.799: AP identified to be in Huck Plus 58 configuration

*Mar  1 00:00:10.803:  status of voice_diag_test from WLC is false
*Mar  1 00:00:11.743: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar  1 00:00:11.743: %LINK-3-UPDOWN: Interface GigabitEthernet1, changed state to u

User Access Verification

Username: p
*Mar  1 00:00:11.743: %LINK-3-UPDOWN: Interface GigabitEthernet2, changed state to up
*Mar  1 00:00:11.747: %LINK-3-UPDOWN: Interface GigabitEthernet3, changed state to up
*Mar  1 00:00:12.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Mar  1 00:00:12.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1, changed state to down
*Mar  1 00:00:12.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet2, changed state to down
*ciMar  1 00:00:12.807: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet3, changed state to down
*Mar  1 00:00:12.831: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1520 Software (C1520-K9W8-M), Version 12.4(23c)JA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 18-Oct-11 15:13 by prod_rel_team
*Mar  1 00:00:12.831: %SNMP-5-COLDSTART: SNMP agent on host AP0022.0d71.7000 is undergoing a coldsco
Password:  start
*Mar  1 00:00:12.891: Warning: Failed to run startup script

*Mar  1 00:00:12.903: %MESH-6-BVI_CREATED: Mesh BVI1 interface created
*Mar  1 00:00:12.927: %LINK-5-CHANGED: Interface Dot11Radio2, changed state to reset
*Mar  1 00:00:12.927: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar  1 00:00:13.927: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio2, changed state to down
*Mar  1 00:00:13.927: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Mar  1 00:00:13.927: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar  1 00:00:14.903: %LINK-3-UPDOWN: Interface BVI1, changed state to down
*Mar  1 00:00:19.711: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet4, changed state to up

AP0022.0d71.7000>ena
*Mar  1 00:00:21.875: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
Password:

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
AP0022.0d71.7000#
flash:/mesh_start_cfg.txt: No such file or directoryThe filesystem containing the variables may not be initialized yet.
d
*Mar  1 00:00:27.903: No Mesh startup file found
ir
Directory of flash:/

    2  -rwx          62   Mar 1 2002 00:00:12 +00:00  mesh_cfg.txt
    3  -rwx          36   Mar 1 2002 00:00:11 +00:00  mesh_port_cfg.txt
    8  drwx        1024   Jul 4 2012 01:05:03 +00:00  c1520-k9w8-mx.124-23c.JA3
    4  -rwx           5   Jul 6 2012 00:38:24 +00:00  private-config
    5  -rwx        8216   Mar 1 2002 00:14:04 +00:00  private-multiple-fs
    6  -rwx         640   Mar 1 2002 00:04:16 +00:00  env_vars
    7  -rwx       96736   Mar 1 2002 00:40:11 +00:00  event.log

31610880 bytes total (24969216 bytes free)
AP0022.0d71.7000#

*Mar  1 00:00:33.923: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Mar  1 00:00:34.927: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error
*Mar  1 00:00:37.027: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error
*Mar  1 00:00:39.227: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar  1 00:00:39.323: Logging LWAPP message to 255.255.255.255.

*Mar  1 00:00:46.763: %CDP_PD-2-POWER_LOW: All radios disabled - INJECTOR_CONFIGURED_ON_SOURCE WS-C3750G-24PS (0015.63bf.9482)
*Mar  1 00:00:47.763: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 started - CLI initiated

Cisco Employee

Re: AP 1524 wont join 2504 WLC

*spamApTask4: Jul 05 13:04:27.587: 00:22:0d:71:70:00 MIC AP is not allowed to join by config

#Check mic from global ap policies, if not already.

Security>> Ap policies>> Accept Manufactured Installed  Certificate (MIC)

#If you had AP-manager interface created on wlc 2500 then delete it, it is not required for this 2500 WLC.

#Use a switch between wlc 2500 and AP, 'do not directly connect AP to 2500 port'.

#Keep AP, switch and WLC on WLC's management vlan.

#Add radio mac of AP also, if not already.

#Swtich to PSK from EAP for Mesh security.

wireless>> advanced>> mesh>> Security>> security mode>> PSK

Cisco Employee

Re: AP 1524 wont join 2504 WLC

Hi ,

Please enable MIC and this will help u

Regards

Surendra

Sent from Cisco Technical Support iPhone App

New Member

AP 1524 wont join 2504 WLC

please make sure your wlc got correct time and date in security tab

New Member

AP 1524 wont join 2504 WLC

Hi,

Can you try the following steps:

1) As some folks have already mentioned, enable "Accept Manufactured Installed Certificate (MIC)" option on the wlc. This is under Security > AAA > AP Policies > Policy Configuration

2) Add the BVI interface mac of the access point on the wlc.

3) If the ap still doesn't join after step 2, enable this debug - "debug capwap errors enable".

Regards,

Nagendra

New Member

AP 1524 wont join 2504 WLC

I've already tried above 2 options without success. Find below the output of the debug capwap errors enable:

(Cisco Controller) >debug capwap errors enable

(Cisco Controller) >*sshpmLscTask: Jul 09 14:28:27.685: sshpmLscTask: LSC Task received a message 4
*sshpmLscTask: Jul 09 14:30:27.685: sshpmLscTask: LSC Task received a message 4

VIP Purple

AP 1524 wont join 2504 WLC

HI Ross

Don't know if it's related but what's this?

flash:/mesh_start_cfg.txt: No such file or directoryThe filesystem containing the variables may not be initialized yet.

***if the AP is set to MESH, for some reason, then the MAC needs to be added to the macfilter on the WLC.

If adding the MAC allows the AP to join, you can then change the mode to local.

Regards

New Member

AP 1524 wont join 2504 WLC

Hi Sandeep,

I've already tried this many times but it still doesn't join the wlc.

Thanks,

Ross.

New Member

AP 1524 wont join 2504 WLC

Hi,

Is this an out of box ap? If not, when was the last time this had joined the wlc? Also, what mode is this ap on - RAP/MAP?

From the ap bootup logs that you pasted, I see a bad antenna gain on the backhaul radio. Is this something that you had configured earlier? If not, these messages should not be coming on the ap console.

Are you seeing anything on the wlc message logs related to this ap?

Regards,

Nagendra

New Member

AP 1524 wont join 2504 WLC

Hi,

This ap is a borrow from our local Cisco Office so I'm pretty sure its not new out of the box. How can you tell what mode the ap is in?

Cant see any logs from the wlc either. Do you reackon it could be a dodgy ap?

Thanks,

Ross.

New Member

AP 1524 wont join 2504 WLC

Ross,

Is this ap connected directly to the 2500 or through a switch? If through a switch, can you paste the config of the switchport?

"show  capwap client config" on the ap console will give the details on the ap  mode and all related config. I am assuming that there is some config on  the ap that is preventing it from joining the wlc. I could be wrong  though.

Please paste the o/p of the following clis from the ap console:

show mesh status

show mesh backhaul

Another  thing I noticed from the wlc config is that the management interface is  configured as untagged. Though this should not have any impact on ap  joining, have you tried tagging the management interface and see if the  behavior is the same?

Regards,

Nagendra

New Member

AP 1524 wont join 2504 WLC

Nagendra,

The ap is connected to a switch below is the config of the port the ap is connected to:

interface GigabitEthernet1/0/2

switchport access vlan 30

switchport mode access

power inline never

spanning-tree portfast

Please find below the optput of the other commands as requested:

AP0022.0d71.7000#show capwap client config

configMagicMark         0xF1E2D3C4

chkSumV2                39250

chkSumV1                62674

swVer                   7.0.220.0

adminState              ADMIN_ENABLED(1)

name                    AP0022.0d71.7000

location                default location

group name             

mwarName               

mwarIPAddress           172.16.30.2

mwarName               

mwarIPAddress           0.0.0.0

mwarName               

mwarIPAddress           0.0.0.0

ssh status              Disabled

Telnet status           Disabled

numOfSlots              3

spamRebootOnAssert      1

spamStatTimer           180

randSeed                0x0

transport               SPAM_TRANSPORT_L3(2)

transportCfg            SPAM_TRANSPORT_DEFAULT(0)

initialisation          SPAM_PRODUCTION_DISCOVERY(1)

ApMode                  Bridge

ApSubMode               Not Configured

AP Rogue Detection Mode Enabled

OfficeExtend AP         [0] Disabled

OfficeExtend AP JoinMode[0] Standard

ApRole                  MeshAP

ApBackhaul              802.11a

ApBackhaulChannel       0

ApBackhaulSlot          6

ApBackhaul11gEnabled    0

ApBackhaulTxRate        65535

BH SlotMask             6

BH 11g Enabled          0

MAR Mac Address         00:00:00:00:00:00

Discovery Timer         10 secs

Heart Beat Timer        30 secs

Led State Enabled       1

Primed Interval         0

AP ILP Pre-Standard Switch Support Disabled

AP Power Injector Disabled

Infrastructure MFP validation Enabled

Configured Switch 1 Addr 172.16.30.2

non-occupancy channels:

Ethernet (Duplex/Speed) auto/auto

Slot 0

adminstate              ADMIN_ENABLED(1)

radioType               RADIO_TYPE_80211bg

countryCode

countryISOCode          ^@^@^@

chanAutoCfg             CONFIG_AUTO

channel                 11

txPowerAutoCfg          CONFIG_AUTO

txPowerLevel            0

diversitySelection      DIVERSITY_ENABLED

Antenna Mode            ANTENNA_OMNI

antennaSelection_0      EXTERNAL_ANTENNA

antennaSelection_1      EXTERNAL_ANTENNA

twiceExtAntennaGain     0

Profile Mode            CONFIG_AUTO

Load Profile

rfBusyThreshold        0

numClientsThreshold    0

bytesPerSecThreshold   0

Interference Profile

InterferenceThreshold  0

Noise Profile

NoiseThreshold         0

Coverage Profile

SNRThreshold           0

ExceptionThreshold     0

minClientsThreshold    0

11gSupport             Enabled

override mode          Disabled

CCX RM Mode             CONFIG_AUTO

CCX RM Config

rm state              0

rm meas interval      0

rts enabled            0

rts threshold          2347

LOMM optimization 0

LOMM Number of Channels 0

channel[0] = 0, channel[1] = 0, channel[2] = 0, channel[3] = 0,

FMC HS AP Type is 0, Threshhold 0

Slot 1

adminstate              ADMIN_ENABLED(1)

radioType               RADIO_TYPE_80211a

countryCode             ^@^@^@

countryISOCode          ^@^@^@

chanAutoCfg             CONFIG_AUTO

channel                 0

txPowerAutoCfg          CONFIG_AUTO

txPowerLevel            0

diversitySelection      DIVERSITY_ENABLED

Antenna Mo

       ANTENNA_OMNI

antennaSelection_0      EXTERNAL_ANTENNA

antennaSelection_1      EXTERNAL_ANTENNA

twiceExtAntennaGain     16

Profile Mode            CONFIG_AUTO

Load Profile

rfBusyThreshold        0

numClientsThreshold    0

bytesPerSecThreshold   0

Interference Profile

InterferenceThreshold  0

Noise Profile

NoiseThreshold         0

Coverage Profile

SNRThreshold           0

ExceptionThreshold     0

minClientsThreshold    0

11gSupport             Disabled

override mode          Disabled

CCX RM Mode             CONFIG_AUTO

CCX RM Config

rm state              0

rm meas interval      0

rts enabled            0

rts threshold          2347

LOMM optimization 0

LOMM Number of Channels 0

channel[0] = 0, channel[1] = 0, channel[2] = 0, channel[3] = 0,

FMC HS AP Type is 0, Threshhold 0

Slot 2 non-occupancy channels:

Slot 2

adminstate              ADMIN_ENABLED(1)

radioType               RAD

countryCode             ^@^@^@

chanAutoCfg             CONFIG_STATIC

channel                 11

txPowerAutoCfg          CONFIG_AUTO

txPowerLevel            0

           diversitySelection      DIVERSITY_ENABLED

Antenna Mode            ANTENNA_OMNI

antennaSelection_0      EXTERNAL_ANTENNA

antennaSelection_1      EXTERNAL_ANTENNA

twiceExtAntennaGain     16

Profile Mode            CONFIG_AUTO

Load Profile

rfBusyThreshold        0

numClientsThreshold    0

bytesPerSecThreshold   0

Interference Profile

InterferenceThreshold  0

Noise Profile

NoiseThreshold         0

Coverage Profile

SNRThreshold           0

ExceptionThreshold     0

minClientsThreshold    0

11gSupport             Disabled

override mode          Disabled

CCX RM Mode             CONFIG_AUTO

CCX RM Config

  rm state              0

             rm meas interval      0

rts enabled            0

rts threshold          2347

LOMM optimization 0

LOMM Number of Channels 0

channel[0] = 0, channel[1] = 0, channel[2] = 0, channel[3] = 0,

FMC HS AP Type is 0, Threshhold 0

AP failure counters: LinkFailure = 0, SpamReboots = 0, ApCrashes = 0

AP join priority = 1

AP lsc enable = 0

AP lsc reboot cnt = 0

AP lsc max num of Retry = 0

Mesh AP lsc enable = 0

AP retransmit count = 255

AP retransmit timer = 255

show MESH Status

MeshAP in state Maint

Uplink Backbone: GigabitEthernet0,  hw GigabitEthernet0

Configured BGN: , Extended mode 0

Children: Not accept child

        rxNeighReq 0 rxNeighRsp 0 txNeighReq 0 txNeighRsp 0

        rxNeighRsp 2 txNeighUpd 0

        nextchan 0 nextant 0 downAnt 0 downChan 0 curAnts 0

        nextNeigh 2, malformedNeighPackets 0,poorNeighSnr 0

        excludedPackets 0,insufficientMemory 0, authenticationFailures 0

        Parent Changes 3, Neighbor Timeouts 0

        Vector through 0022.0d71.70fc:

                Vector ease 1 -1, FWD: 0022.0d71.70fc

AP0022.0d71.7000# show mesh backhaul

===================================

Backhaul Instance 0x02739B9C

HW: Dot11Radio1

Parent: NULL

  Properties: Access; Disabled;

===================================

Backhaul Instance 0x02739A00

HW: Dot11Radio2

Parent: NULL

  Properties: Downlink; Disabled;

===================================

Backhaul Instance 0x026B4DD0

HW: GigabitEthernet1

Parent: NULL

  Properties: Disabled;

===================================

Backhaul Instance 0x026B4C34

HW: GigabitEthernet0     Channel: 0

Parent: 0022.0d71.70fc

  Properties: Uplink;

===================================

Backhaul Instance 0x026B4A98

HW: GigabitEthernet3

Parent: NULL

  Properties: Disabled;

===================================

Backhaul Instance 0x026B48FC

HW: GigabitEthernet2

Parent: NULL

  Properties: Disabled;

I also tagged the management vlan which is 30 and it still doesn't make a difference. Any other thoughts would could be causing the problem?

Thanks,

Ross.

New Member

AP 1524 wont join 2504 WLC

Ross,

From the configuration on the ap I see that slot 1 and slot 2 channels show up as 0 and 11 which should not be the case. Only Slot 0 shows the channel properly as 11. The ap role is set to MAP which is fine. I was going through the ap console logs which you had pasted earlier and it didn't look like a complete log. Can you enable "debug capwap client event" on the ap and then wait till the wlc sends a discovery/join response to the ap?

At the same time when the ap is trying to join the wlc, issue the following cmd on the wlc - show ap join stats detailed . This might give some idea on why the ap is failing to join. Also, do you see anything in the traplogs when the ap fails to join?

As a last resort, if you want, we can probably try to clear/erase the ap configuration and see if it can join after that. There is no guarantee that the ap will definitely join after this, so I leave it upto you to try this out. Note that all ap configuration will be erased and you will need to re-configure any ap related config if/once it joins the wlc. Before that, just wanted to make sure we are through with the following steps even though you have already mentioned that you have done so:

1) AP's BVI MAC ( Not the ethernet MAC. Sometimes, the BVI MAC might be different from the ethernet MAC. Check with "show interfaces bvi 1" on the ap console ) is added on the wlc

2) Date and time is correctly set on the wlc

3) MIC support is enabled on the wlc

4) Regulatory domain is correctly set on the wlc and it matches the ap regulatory domain.

5) Try swapping the mesh security mode between eap/psk for a couple of times.

6) Make sure that if eap is selected as the security type, then "Force External Authentication" option is disabled under Mesh. Also, if you adding the ap mac locally on the wlc, make sure that the "External MAC Filter Authorization" is disabled under Mesh.

To erase the ap configuration, issue the "test capwap erase" cli from the ap console. After this, reboot the ap with the "reload" command. Once the config is erased, you will need to prime the ap to join the wlc since they are in different subnets. You can prime the ap to join the wlc using the - "capwap ap primary-base " from the ap console. Eg: - AP#capwap ap primary-base controller1 172.16.30.2

If it still doesn't work, I suspect it might be a dodgy ap. You might just want to check with your local cisco office if this ap ever worked.

Regards,

Nagendra

New Member

AP 1524 wont join 2504 WLC

Nagendra,

Please see the output of the debug capwap client event:

*Mar  1 00:05:10.799: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER

*Mar  1 00:05:10.799: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:05:11.799: %CAPWAP-3-EVENTLOG: Discovery Request sent to 172.16.30.2 with discovery type set to 1

*Mar  1 00:05:11.799: %CAPWAP-3-EVENTLOG:

SENDING DISCOVERY REQUEST wtpStartAcDiscovery:1653, Controller WLC-2504: IP Address 0xAC101E02

*Mar  1 00:05:11.799: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:05:11.799: %CAPWAP-3-EVENTLOG: Discovery Request sent to 255.255.255.255 with discovery type set to 0

*Mar  1 00:05:11.799:  status of voice_diag_test from WLC is false

*Mar  1 00:05:11.899: %CAPWAP-3-EVENTLOG: CAPWAP State: DTLS Teardown.

*Mar  1 00:05:11.899: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started

*Mar  1 00:05:11.899: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:05:11.899: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:05:11.899: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:05:16.899: %CAPWAP-3-EVENTLOG: DTLS session cleanup completed. Restarting capwap state machine.

*Mar  1 00:05:16.999: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar  1 00:05:17.007: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Mar  1 00:05:18.003: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:05:19.099: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

% CDP is not supported on this interface, or for this encapsulation

*Mar  1 00:05:20.099: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:05:21.195: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

*Mar  1 00:05:22.095: %CAPWAP-3-EVENTLOG: CAPWAP state not up.  Abort sending channel and power levels info.0:0:0:0

*Mar  1 00:05:22.127: %CAPWAP-3-EVENTLOG: Starting Discovery.Initializing discovery latency in discovery responses

*Mar  1 00:05:22

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255).127: %CAPWAP-3-EVENTLOG: CAPWAP State: Discovery.

*Mar  1 00:05:22.127: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Mar  1 00:05:28.127: %MESH-6-LINK_UPDOWN: Mesh station 0022.0d71.70fc link Down

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:05:31.127: %CAPWAP-3-EVENTLOG: ADDING IP 172.16.30.10, 255.255.255.0 resolvemethod  1, ip_dhcp_addr 0

*Mar  1 00:05:32.127: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-LWAPP-CONTROLLER

*Mar  1 00:05:41.127: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER

*Mar  1 00:05:41.127: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:05:42.127: %CAPWAP-3-EVENTLOG: Discovery Request sent to 172.16.30.2 with discovery type set to 1

*Mar  1 00:05:42.127: %CAPWAP-3-EVENTLOG:

SENDING DISCOVERY REQUEST wtpStartAcDiscovery:1653, Controller WLC-2504: IP Address 0xAC101E02

*Mar  1 00:05:42.127: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:05:42.127: %CAPWAP-3-EVENTLOG: Discovery Request sent to 255.255.255.255 with discovery type set to 0

*Mar  1 00:05:42.127:  status of voice_diag_test from WLC is false

*Mar  1 00:05:43.127: %CAPWAP-3-EVENTLOG: CAPWAP State: DTLS Teardown.

*Mar  1 00:05:43.127: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 172.16.30.2

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:05:43.127: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:05:48.127: %CAPWAP-3-EVENTLOG: DTLS session cleanup completed. Restarting capwap state machine.

*Mar  1 00:05:48.227: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar  1 00:05:48.231: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Mar  1 00:05:49.231: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:05:50.327: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

% CDP is not supported on this interface, or for this encapsulation

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:05:51.327: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:05:52.427: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

*Mar  1 00:05:53.327: %CAPWAP-3-EVENTLOG: CAPWAP state not up.  Abort sending channel and power levels info.0:0:0:0

*Mar  1 00:05:53.359: %CAPWAP-3-EVENTLOG: Starting Discovery.Initializing discovery latency in discovery responses

*Mar  1 00:05:53.359: %CAPWAP-3-EVENTLOG: CAPWAP State: Discovery.

*Mar  1 00:05:53.359: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Mar  1 00:05:59.359: %MESH-6-LINK_UPDOWN: Mesh station 0022.0d71.70fc link Down

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:06:02.359: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-LWAPP-CONTROLLER

*Mar  1 00:06:02.359: %CAPWAP-3-EVENTLOG: ADDING IP 172.16.30.10, 255.255.255.0 resolvemethod  1, ip_dhcp_addr 0

*Mar  1 00:06:11.359: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER

*Mar  1 00:06:11.359: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:06:12.359: %CAPWAP-3-EVENTLOG: Discovery Request sent to 172.16.30.2 with discovery type set to 1

*Mar  1 00:06:12.359: %CAPWAP-3-EVENTLOG:

SENDING DISCOVERY REQUEST wtpStartAcDiscovery:1653, Controller WLC-2504: IP Address 0xAC101E02

*Mar  1 00:06:12.359: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:06:12.359: %CAPWAP-3-EVENTLOG: Discovery Request sent to 255.255.255.255 with discovery type set to 0

*Mar  1 00:06:12.359:  status of voice_diag_test from WLC is false

*Mar  1 00:06:12.455: %CAPWAP-3-EVENTLOG: CAPWAP State: DTLS Teardown.

*Mar  1 00:06:12.455: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started

*Mar  1 00:06:12.459: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:06:12.459: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:06:12.459: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:06:17.455: %CAPWAP-3-EVENTLOG: DTLS session cleanup completed. Restarting capwap state machine.

*Mar  1 00:06:18.455: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar  1 00:06:18.459: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Mar  1 00:06:19.459: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:06:20.555: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

% CDP is not supported on this interface, or for this encapsulation

*Mar  1 00:06:21.555: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:06:22.651: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

*Mar  1 00:06:23.551: %CAPWAP-3-EVENTLOG: CAPWAP state not up.  Abort sending channel and power levels info.0:0:0:0

*Mar  1 00:06:23.583: %CAPWAP-3-EVENTLOG: Starting Discovery.Initializing discovery latency in discovery responses

*Mar  1 00:06:23

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255).583: %CAPWAP-3-EVENTLOG: CAPWAP State: Discovery.

*Mar  1 00:06:23.583: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Mar  1 00:06:29.583: %MESH-6-LINK_UPDOWN: Mesh station 0022.0d71.70fc link Down

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:06:32.583: %CAPWAP-3-EVENTLOG: ADDING IP 172.16.30.10, 255.255.255.0 resolvemethod  1, ip_dhcp_addr 0

*Mar  1 00:06:33.583: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-LWAPP-CONTROLLER

*Mar  1 00:06:42.583: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER

*Mar  1 00:06:42.583: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:06:43.583: %CAPWAP-3-EVENTLOG: Discovery Request sent to 172.16.30.2 with discovery type set to 1

*Mar  1 00:06:43.583: %CAPWAP-3-EVENTLOG:

SENDING DISCOVERY REQUEST wtpStartAcDiscovery:1653, Controller WLC-2504: IP Address 0xAC101E02

*Mar  1 00:06:43.583: %CAPWAP-3-EVENTLOG: WTP descriptor: version=0

*Mar  1 00:06:43.583: %CAPWAP-3-EVENTLOG: Discovery Request sent to 255.255.255.255 with discovery type set to 0

*Mar  1 00:06:43.583:  status of voice_diag_test from WLC is false

*Mar  1 00:06:43.683: %CAPWAP-3-EVENTLOG: CAPWAP State: DTLS Teardown.

*Mar  1 00:06:43.683: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started

*Mar  1 00:06:43.683: %CAPWAP-3-ERRORLOG: Invalid event 2 & state 4 combination.

*Mar  1 00:06:43.683: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 4.

*Mar  1 00:06:43.683: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Mar  1 00:06:48.683: %CAPWAP-3-EVENTLOG: DTLS session cleanup completed. Restarting capwap state machine.

*Mar  1 00:06:48.783: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Mar  1 00:06:48.791: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Mar  1 00:06:49.791: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

*Mar  1 00:06:50.887: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

*Mar  1 00:06:51.891: %LWAPP-3-BADANTGAIN: BackHaul Radio Interface:  Antenna Gain Configuration Error

% CDP is not supported on this interface, or for this encapsulation

Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:06:53.891: %CAPWAP-3-EVENTLOG: Discarding msg type 9 in CAPWAP state: 4.

*Mar  1 00:06:54.791: %CAPWAP-3-EVENTLOG: CAPWAP state not up.  Abort sending channel and power levels info.0:0:0:0

*Mar  1 00:06:54.823: %CAPWAP-3-EVENTLOG: Starting Discovery.Initializing discovery latency in discovery responses

*Mar  1 00:06:54.823: %CAPWAP-3-EVENTLOG: CAPWAP State: Discovery.

*Mar  1 00:06:54.823: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Mar  1 00:06:59.991: %MESH-6-LINK_UPDOWN: Mesh station 0022.0d71.70fc link Down

Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)

*Mar  1 00:07:02.991: %CAPWAP-3-EVENTLOG: ADDING IP 172.16.30.10, 255.255.255.0 resolvemethod  1, ip_dhcp_addr 0

*Mar  1 00:07:03.823: %CAPWAP-3-EVENTLOG: Could Not resolve CISCO-LWAPP-CONTROLLER

Also output of the command show ap join stats detailed :

(Cisco Controller) >show ap join stats detailed 00:22:0d:71:70:00

Discovery phase statistics

- Discovery requests received.............................. 84

- Successful discovery responses sent...................... 63

- Unsuccessful discovery request processing................ 0

- Reason for last unsuccessful discovery attempt........... Not applicable

- Time at last successful discovery attempt................ Jul 10 14:44:23.466

- Time at last unsuccessful discovery attempt.............. Not applicable

Join phase statistics

- Join requests received................................... 0

- Successful join responses sent........................... 0

- Unsuccessful join request processing..................... 0

- Reason for last unsuccessful join attempt................ Not applicable

- Time at last successful join attempt..................... Not applicable

- Time at last unsuccessful join attempt................... Not applicable

Configuration phase statistics

- Configuration requests received.......................... 0

- Successful configuration responses sent.................. 0

- Unsuccessful configuration request processing............ 0

- Reason for last unsuccessful configuration attempt....... Not applicable

--More-- or (q)uit

- Time at last successful configuration attempt............ Not applicable

- Time at last unsuccessful configuration attempt.......... Not applicable

Last AP message decryption failure details

- Reason for last message decryption failure............... Not applicable

Last AP disconnect details

- Reason for last AP connection failure.................... Not applicable

- Last AP disconnect reason................................ Not applicable

Last join error summary

- Type of error that occurred last......................... None

- Reason for error that occurred last...................... Not applicable

- Time at which the last join error occurred............... Not applicable

AP disconnect details

- Reason for last AP connection failure.................... Not applicable

                                                                           Ethernet Mac : 00:00:00:00:00:00  Ip Address : 172.16.30.10

New Member

AP 1524 wont join 2504 WLC

Ross,

Looking at the latest debug logs, I can see the ap sending the discovery request to the wlc, but the wlc is not responding to it. I remember that earlier the wlc was always responding to the discovery requests from the ap. Has anything changed on the wlc since? Please enable "debug capwap events" and "debug capwap errors" on the wlc at the same time when the debugs on the ap are enabled. If the discovery request if received on the wlc and it is not responding to it, then we need to see why it is not responding. Also, please paste the o/p of "show msglog" from the wlc at the time when ap is trying to join.

Regards,

Nagendra

New Member

AP 1524 wont join 2504 WLC

Hi Nagendra,

Please find below the details you requested:

(Cisco Controller) >

(Cisco Controller) >*sshpmLscTask: Jul 11 10:07:18.926: sshpmLscTask: LSC Task received a message 4

*spamApTask4: Jul 11 10:07:51.032: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:07:51.032: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:07:51.032: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:07:51.131: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:07:51.131: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:07:51.131: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:07:51.131: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:07:51.131: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:07:51.131: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask0: Jul 11 10:07:51.132: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:07:51.132: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask3: Jul 11 10:08:22.142: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:08:22.143: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:08:22.143: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:08:22.241: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:08:22.241: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:08:22.241: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:08:22.242: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:08:22.242: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

spamApTask3: Jul 11 10:08:22.242: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask0: Jul 11 10:08:22.242: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:08:22.242: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask4: Jul 11 10:08:53.357: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:08:53.357: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:08:53.358: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:08:53.457: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:08:53.457: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:08:53.458: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:08:53.458: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:08:53.458: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:08:53.458: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask0: Jul 11 10:08:53.458: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:08:53.458: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*sshpmLscTask: Jul 11 10:09:18.926: sshpmLscTask: LSC Task received a message 4

*spamApTask3: Jul 11 10:09:23.672: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:09:23.672: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:09:23.673: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:09:23.733: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:09:23.733: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:09:23.734: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:09:23.734: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:09:23.734: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:09:23.734: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask0: Jul 11 10:09:23.734: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:09:23.734: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask4: Jul 11 10:09:54.891: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:09:54.891: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:09:54.891: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask0: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:09:54.990: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask3: Jul 11 10:10:26.010: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:10:26.010: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:10:26.010: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:10:26.108: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask0: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:10:26.109: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask4: Jul 11 10:10:57.269: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:10:57.269: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:10:57.269: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:10:57.368: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:10:57.368: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:10:57.369: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask4: Jul 11 10:10:57.369: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5890

*spamApTask4: Jul 11 10:10:57.369: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask4: Jul 11 10:10:57.369: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5890

*spamApTask0: Jul 11 10:10:57.369: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:10:57.369: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*sshpmLscTask: Jul 11 10:11:18.926: sshpmLscTask: LSC Task received a message 4

*spamApTask3: Jul 11 10:11:27.588: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:11:27.588: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask3: Jul 11 10:11:27.588: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

*spamApTask3: Jul 11 10:11:27.649: 00:22:0d:71:70:00 Discovery Request from 172.16.30.10:5889

*spamApTask3: Jul 11 10:11:27.649: 00:22:0d:71:70:00 Join Priority Processing status = 0, Incoming Ap's Priority 4, MaxLrads = 15, joined Aps =0

*spamApTask0: Jul 11 10:11:27.650: 00:22:0d:71:70:00 Received LWAPP DISCOVERY REQUEST to f4:7f:35:b6:46:e0 on port '1'

*spamApTask0: Jul 11 10:11:27.650: 00:22:0d:71:70:00 Discarding discovery request in LWAPP from AP supporting CAPWAP

*spamApTask3: Jul 11 10:11:27.650: 00:22:0d:71:70:00 Discovery Response sent to 172.16.30.10:5889

(Cisco Controller) >show msglog

Message Log Severity Level ...................... ERROR

*emWeb: Jul 10 14:57:32.869: %WEB-3-FORM_SUBMIT_FAILED: ap_join_stats.c:474 Form submission failed for file:ap_join_stats_list.html.

*emWeb: Jul 10 14:34:12.285: %WEB-3-FORM_SUBMIT_FAILED: ap_join_stats.c:474 Form submission failed for file:ap_join_stats_list.html.

*emWeb: Jul 10 14:31:24.286: %WEB-3-FORM_SUBMIT_FAILED: ap_join_stats.c:474 Form submission failed for file:ap_join_stats_list.html.

*emWeb: Jul 10 11:38:52.854: %WEB-3-FORM_SUBMIT_FAILED: ap_join_stats.c:474 Form submission failed for file:ap_join_stats_list.html.

*nim_t: Jul 10 09:59:31.710: %SIM-3-PORT_UP: sim.c:9809 Physical port 1 is up!.

*fp_main_task: Jul 10 09:59:31.456: %CNFGR-3-INV_COMP_ID: cnfgr.c:2219 Invalid Component Id : Unrecognized (77) in cfgConfiguratorInit.

*cdpSocketTask: Jul 10 09:59:31.389: %LOG-3-Q_IND: rrmCfg.c:1501 RRM LOG: Airewave Director: Configuration has been sanitized -- save configuration to commit

*fp_main_task: Jul 10 09:59:31.275: %RRM-3-RRM_LOGMSG: rrmCfg.c:1501 RRM LOG: Airewave Director: Configuration has been sanitized -- save configuration to commit

*fp_main_task: Jul 10 09:59:25.834: %MM-3-MEMBER_ADD_FAILED: mm_dir.c:909 Could not add Mobility Member. Reason: IP already assigned, Member-Count:1,MAC: 00:00:00:00:00:00, IP: 0.0.0.0

*License Client Lib Notify Process: Jul 10 09:59:21.727: %LICENSE-1-REQUEST_FAILED: license_syslog_notify:564 License request for feature data_encryption 1.0 failed in this device, UDI=AIR-CT2504-K9:PSJ162108BA

AP 1524 wont join 2504 WLC

Hey Ross,

You mentioned first that there is a message about authorization pending for the AP.

Well, if this is correct then it should appear in the "show ap join stats detail" output you posted. But the weird thing that it does not.

Let us focus on the authorization point for a moment. can you please post screenshot of your ap-policies configuration?

besides output of the command "show auth-list" from WLC.

here is my output of show auth-list:

Authorize MIC APs against AAA ................... disabled

Authorize LSC APs against Auth-List ............. disabled

APs Allowed to Join

  AP with Manufacturing Installed Certificate.... yes

  AP with Self-Signed Certificate................ no

  AP with Locally Significant Certificate........ no

You need "AP with Manufacturing Installed Certificate" enabled.

Make sure you configure the mac filter correctly for the AP.

Post output of: (show macfilter detail ) from your WLC.

hope to catch the issue soon.

Amjad

Rating useful replies is more useful than saying "Thank you"
5112
Views
0
Helpful
36
Replies