Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

Im trying to have one of our APs join our controller. No matter what I do, i cant get it to join the controller.

The controller has the right OS, I had to upgraded it 7.4 to support the 3600...

Both the controller and the AP has the same time and date.

But Im getting this from my AP:

*Oct 30 14:49:26.043: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255

*Oct 30 14:49:26.055: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down

*Oct 30 14:49:26.055: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down

*Oct 30 14:49:26.067: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Oct 30 14:49:26.083: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up

*Oct 30 14:49:27.055: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Oct 30 14:49:27.095: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down

*Oct 30 14:49:27.103: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset

*Oct 30 14:49:28.087: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Oct 30 14:49:28.095: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down

*Oct 30 14:49:28.131: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up

*Oct 30 14:49:28.139: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down

*Oct 30 14:49:28.147: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset

*Oct 30 14:49:29.131: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up

*Oct 30 14:49:29.139: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down

*Oct 30 14:49:29.167: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up

*Oct 30 14:49:30.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up

*Oct 30 14:49:36.083: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Oct 30 14:49:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.0.50 peer_port: 5246

*Oct 30 14:49:36.411: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.0.50 peer_port: 5246

*Oct 30 14:49:36.411: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.0.50

*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.

*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.

*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller

*Oct 30 14:49:36.411: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.1.0.50

Anyone can help me please?

Thanks....

Everyone's tags (3)
3 ACCEPTED SOLUTIONS

Accepted Solutions
Hall of Fame Super Silver

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

The AP has a mesh code, so you will need to add the ap's mac address to the mac filter of the WLC

Security > AAA > Mac Filtering

That should allow the AP to join and then change the mode to localinsted of mesh.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Hall of Fame Super Silver

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

Better screen shot

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Hall of Fame Super Silver

Re: Cant Connect Cisco AIR-CAP 3602 with 2504 controller

If you click on the wireless tab and then click on the AP, there is a mode in which you will see it saying Bridge. Change that to local.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
11 REPLIES
Hall of Fame Super Silver

Re: Cant Connect Cisco AIR-CAP 3602 with 2504 controller

You have the ap connected to a PoE switch? Can you post the whole output after powering up the ap.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

AP is connected directly to one of the ports on the 2504 controller.

I can move it to a POE switch, if needed.

Here is the output after I boot up the AP:

IOS Bootloader - Starting system.
flash is writable
FLASH CHIP:  Macronix Mirrorbit (00C2)
Xmodem file system is available.
flashfs[0]: 43 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 16767488
flashfs[0]: Bytes available: 15230464
flashfs[0]: flashfs fsck took 16 seconds.
Reading cookie from SEEPROM
Base Ethernet MAC address: 4c:00:82:77:32:7b
Ethernet speed is 1000 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1"...###########################

File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
executing...

Secondary Bootloader - Starting system.
Xmodem file system is available.
flashfs[0]: 43 files, 9 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 16767488
flashfs[0]: Bytes available: 15230464
flashfs[0]: flashfs fsck took 8 seconds.
Base Ethernet MAC address: 4c:00:82:77:32:7b
Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1;flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1'
Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1"...###############################
File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
executing...

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

Cisco IOS Software, C3600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 30-Jul-13 22:57 by prod_rel_team

Initializing flashfs...

flashfs[3]: 43 files, 9 directories
flashfs[3]: 0 orphaned files, 0 orphaned directories
flashfs[3]: Total bytes: 31739904
flashfs[3]: Bytes used: 16767488
flashfs[3]: Bytes available: 14972416
flashfs[3]: flashfs fsck took 8 seconds.
flashfs[3]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 1 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCCCC
Copy in progress...CCC
Copy in progress...CCCC
Copy in progress...CCCC
Copy in progress...CC
Uncompressing radio files...
...done Initializing flashfs.

Radio0  present 8764 8000 0 A8000000 A8010000 0
Rate table has 244 entries (64 SGI/104 BF variants)

Radio1  present 8764 8000 0 88000000 88010000 4
Radio2 not present 0 0 0 0 0 8
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-CAP3602I-A-K9 (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
Processor board ID FTX1731GQYY
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.5.102.0
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 4C:00:82:77:32:7B
Part Number                          : 73-14521-02
PCA Assembly Number                  : 800-37501-02
PCA Revision Number                  : A0
PCB Serial Number                    : FOC17273HG4
Top Assembly Part Number             : 800-35852-02
Top Assembly Serial Number           : FTX1731GQYY
Top Revision Number                  : C0
Product/Model Number                 : AIR-CAP3602I-A-K9
% Please define a domain-name first.


Press RETURN to get started!


*Mar  1 00:00:11.355: FIPS IOS test Image Checksum successful
*Mar  1 00:00:11.355: FIPS IOS test Crypto RNG DEK Key Test successful
*Mar  1 00:00:11.355: FIPS IOS test SHA-1 successful
*Mar  1 00:00:11.355: FIPS IOS test HMAC-SHA1 successful
*Mar  1 00:00:11.355: FIPS IOS test AES CBC 128-bit Encrypt successful
*Mar  1 00:00:11.355: FIPS IOS test AES CBC 128-bit Decrypt successful
*Mar  1 00:00:11.355: FIPS IOS test IOS AES CMAC Encrypt successful
*Mar  1 00:00:11.355: FIPS IOS test IOS CCM Encrypt successful
*Mar  1 00:00:11.355: FIPS IOS test IOS CCM Decrypt successful
*Mar  1 00:00:11.387: FIPS IOS test RSA Signature Generation successful
*Mar  1 00:00:11.391: FIPS IOS test RSA Signature Verification successful
*Mar  1 00:00:11.391: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar  1 00:00:11.391: %IFMGR-7-NO_IFINDEX_FILE: Unable to open nvram:/ifIndex-table No such file or directory
*Mar  1 00:00:11.847: Registering HW DTLS

*Mar  1 00:00:14.647: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar  1 00:00:18.327: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 0 successful
*Mar  1 00:00:18.327: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 0 successful
*Mar  1 00:00:18.327: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 0 successful
*Mar  1 00:00:18.327: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 0 successful
*Mar  1 00:00:18.327: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar  1 00:00:24.451: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 1 successful
*Mar  1 00:00:24.451: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 1 successful
*Mar  1 00:00:24.451: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 1 successful
*Mar  1 00:00:24.451: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 1 successful
*Mar  1 00:00:24.451: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
*Mar  1 00:00:26.811: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C3600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 30-Jul-13 22:57 by prod_rel_team
*Mar  1 00:00:26.811: %SNMP-5-COLDSTART: SNMP agent on host AP4c00.8277.327b is undergoing a cold start
*Jul  4 23:55:50.035: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jul  4 23:55:50.035: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jul  4 23:55:50.051: %PARSER-4-BADCFG: Unexpected end of configuration file.
lwapp_crypto_init: MIC Present and Parsed Successfully

*Jul  4 23:55:50.191: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Jul  4 23:55:50.855: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
*Jul  4 23:55:51.027: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Jul  4 23:55:51.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jul  4 23:55:51.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jul  4 23:55:53.319: FIPS HW test SHA-1 successful
*Jul  4 23:55:53.319: FIPS HW test HMAC-SHA1 successful
*Jul  4 23:55:53.319: FIPS HW test AES CBC 128-bit Encrypt successful
*Jul  4 23:55:53.319: FIPS HW test AES CBC 128-bit Decrypt successful
*Jul  4 23:55:53.819: FIPS HW test SHA-1 successful
*Jul  4 23:55:53.819: FIPS HW test HMAC-SHA1 successful
*Jul  4 23:55:53.819: FIPS HW test AES CBC 128-bit Encrypt successful
*Jul  4 23:55:53.819: FIPS HW test AES CBC 128-bit Decrypt successful
*Jul  4 23:55:53.819: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed
*Jul  4 23:55:53.819: DPAA Initialization Complete
*Jul  4 23:55:53.819: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Jul  4 23:55:54.819: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up%Default route without gateway, if not a point-to-point interface, may impact performance
*Jul  4 23:56:13.191: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
*Jul  4 23:56:14.279: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jul  4 23:56:15.279: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jul  4 23:56:15.371: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jul  4 23:56:16.371: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jul  4 23:56:18.895: Logging LWAPP message to 255.255.255.255.

*Jul  4 23:56:23.627: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.1.150, mask 255.255.240.0, hostname AP4c00.8277.327b

Translating "CISCO-CAPWAP-CONTROLLER.pti.local"...domain server (10.3.1.32)

*Jul  4 23:56:34.559: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
*Jul  4 23:56:34.567: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER.pti.local
*Jul  4 23:56:44.567: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Oct 30 15:05:13.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.1.0.50 peer_port: 5246
*Oct 30 15:05:13.411: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.1.0.50 peer_port: 5246
*Oct 30 15:05:13.411: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.0.50
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Oct 30 15:05:13.411: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 10.1.0.50
*Oct 30 15:05:18.411: %CAPWAP-5-SENDJOIN: sending Join Request to 10.1.0.50

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

can you capture and post the output of the below debugs from the WLC CLI?

debug mac add < mac of AP >

debug capwap events enable

debug capwap errors enable

HTH,
Steve

------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
New Member

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

Yes I can and thank you for the help. Here is what I get once I put the commands in the WLC.

(Cisco Controller) >debug mac addr 4C00.8277.327b

(Cisco Controller) >debug capwap events enable

(Cisco Controller) >debug capwap errors enable

(Cisco Controller) >*spamApTask7: Oct 30 15:21:06.147: acDtlsPlumbControlPlaneKeys: lrad:10.1.1.150(29481) mwar:10.1.0.50(5246)

*spamApTask0: Oct 30 15:21:06.149: øOWfÓ
*spamApTask0: Oct 30 15:21:06.150: acDtlsPlumbControlPlaneKeys: lrad:10.1.1.150(29481) mwar:10.1.0.50(5246)

*spamApTask6: Oct 30 15:22:16.222: acDtlsPlumbControlPlaneKeys: lrad:10.1.1.150(29480) mwar:10.1.0.50(5246)

*spamApTask0: Oct 30 15:22:16.224: øOWfÓ
*spamApTask0: Oct 30 15:22:16.225: acDtlsPlumbControlPlaneKeys: lrad:10.1.1.150(29480) mwar:10.1.0.50(5246)

*spamApTask7: Oct 30 15:23:26.300: acDtlsPlumbControlPlaneKeys: lrad:10.1.1.150(29481) mwar:10.1.0.50(5246)

*spamApTask0: Oct 30 15:23:26.303: øOWfÓ
*spamApTask0: Oct 30 15:23:26.304: acDtlsPlumbControlPlaneKeys: lrad:10.1.1.150(29481) mwar:10.1.0.50(5246)

Hall of Fame Super Silver

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

The AP has a mesh code, so you will need to add the ap's mac address to the mac filter of the WLC

Security > AAA > Mac Filtering

That should allow the AP to join and then change the mode to localinsted of mesh.

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
New Member

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

Under Security-AAA I only have General Tab. There is no Mac Filtering tab. I will look thru the whole AP GUI menu, but so far I did not see that Mac Filtering section.

Thanks...

Hall of Fame Super Silver

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

Well you should...

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
Hall of Fame Super Silver

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

Better screen shot

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"

-Scott
*** Please rate helpful posts ***
New Member

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

That fixed it. Its now up and running. I added the MAC of the AP and now working.

My question is, where is the mesh option? I cant seem to find that? I could not see it under the MAC Filtering.

Thanks again, and much much appreciate the help. It works pefect now.

THANK YOU....

Hall of Fame Super Silver

Re: Cant Connect Cisco AIR-CAP 3602 with 2504 controller

If you click on the wireless tab and then click on the AP, there is a mode in which you will see it saying Bridge. Change that to local.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
New Member

Cant Connect Cisco AIR-CAP 3602 with 2504 controller

OK I found the MAC Filtering and its set as follows:

RADIUS Compatibility Mode: Cisco ACS

MAC Delimiter: Hyphen.

There are no MAC filters in the list.

Thanks...

2115
Views
0
Helpful
11
Replies
CreatePlease to create content