Can`t join my 1121-AG to the controller

[Liad Dayan]

Hi guys,

Iam having trouble to conect my 1121-AG AP`s to my 4404 WLC.

My WLC version is 7.0.116.0.

I can see he AP is getting an IP address from the controller(internal DHCP).

But from some reason they can`t connect to the WLC.

I have tried many things such as:

1)reset to default settings

2) move the AP to Autonumos mode and back to LWAPP mode --  didnt help.

Do you guys have any idea?

P.S

1 of my AP 1121AG is working properly.

[Scott Fella]

Look at the error log on the wlc and console into the ap to see what's happening. You might need to add the SSC to the wlc before it can join.

Sent from Cisco Technical Support iPhone App

[Liad Dayan]

Hi scott,

I can`t see any error logs in the WLC.

I can see the AP get IP address but for some reason he dont join to the WLC.

Plus- the AP 1121-AG dont have console port to connect.

Any ideas ?

[Tony Davis]

Policy Configuration
Accept Self Signed Certificate  (SSC)
Accept Manufactured Installed  Certificate (MIC)
Accept Local Significant Certificate (LSC)
Authorize MIC APs against auth-list or AAA
Authorize LSC APs against auth-list

--------------------------------------------------------------------------------------------------------------------------------

Also need to make sure that you are accepting SSC's and MIC's and LSC's... this can be found under security, AAA, AP policies...

Thanks,

Tony

[omer shtivi]

Hi Tony,

I checked the boxes and they still won't join.

thanks

Omer

[Tony Davis]

On that same page, do you have any "AP Authorization List" entries? There needs to be one with the MAC of the AP and the self-signed certificate(SSC) or manufacturer installed certificate(MIC) SHA1 Key Hash

You can add your AP here(if not already) by getting its MAC address from the back of the AP.

Let me know if this works.

Thanks,

Tony

>>> omer_shtivi 1/23/2012 9:32 AM >>>

Home ( https://supportforums.cisco.com/index.jspa )

Re: Can`t join my 1121-AG to the controller created by omer shtivi ( https://supportforums.cisco.com/people/omer_shtivi ) in Other Wireless - Mobility Subjects - View the full discussion ( https://supportforums.cisco.com/message/3541650#3541650 )

Hi Tony,

I checked the boxes and they still won't join.

thanks

Omer

Reply to this message by going to Home ( https://supportforums.cisco.com/message/3541650#3541650 )

Start a new discussion in Other Wireless - Mobility Subjects at Home ( https://supportforums.cisco.com/choose-container!input.jspa?contentType=1&containerType=14&container=2043 )

===========================================================

This message is confidential, intended only

for the named recipient(s) and may contain

information that is privileged or exempt from

disclosure under applicable law. If you are

not the intended recipient(s), you are notified

that the dissemination, distribution or copying

of this message is strictly prohibited. If you

received this message in error, or are not the

named recipient(s), please notify the sender

and delete this e-mail from your computer.

ETMC has implemented secure messaging for

certain types of messages. For more information

about our secure messaging system, go to:

http://www.etmc.org/mail/

Thank you.

===========================================================

[Scott Fella]

Run a debug on the ap then. But you should see that the AP joined or did not join. Did you add the AP's SSC to the wlc?

Take a look at these links

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00806a426c.shtml

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00808f8599.shtml

Sent from Cisco Technical Support iPhone App

[omer shtivi]

hi scott,

i'm working with liad on the trouble.

i tried the debug commands in the links and the only message i get for my ap mac is:

(Cisco Controller) >*sshpmLscTask: Jan 10 11:42:32.558: sshpmLscTask: LSC Task received a message 4

*sshpmLscTask: Jan 10 11:44:32.559: sshpmLscTask: LSC Task received a message 4

but when i debug dhcp packet enabled.

i get:

*DHCP Proxy DTL Recv Task: Jan 10 11:08:02.186: 00:11:bb:80:57:9c DHCP received op BOOTREQUEST (1) (len 267,vlan 16, port 1, encap 0xec00)

*DHCP Proxy DTL Recv Task: Jan 10 11:08:02.186: 00:11:bb:80:57:9c DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')

[Stephen Rodriguez]

are you sure the 1121 has the MP31G card in it?  If not, it'll have hte MP21b, and a B only AP is not allowed to join the WLC.

HTH,

Steve

[omer shtivi]

no,

the 1121 got the AIR-21G-E-K9 in  it.

does it mean i can't connect it?

[Stephen Rodriguez]

all the -E is saying is the country code nit the radio module that is installed. Can you pull a show country from the WLC?

Steve

Sent from Cisco Technical Support iPhone App

[Liad Dayan]

The Country code set to IL.