Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Can`t join my 1121-AG to the controller

Hi guys,

Iam having trouble to conect my 1121-AG AP`s to my 4404 WLC.

My WLC version is 7.0.116.0.

I can see he AP is getting an IP address from the controller(internal DHCP).

But from some reason they can`t connect to the WLC.

I have tried many things such as:

1)reset to default settings

2) move the AP to Autonumos mode and back to LWAPP mode --  didnt help.

Do you guys have any idea?

P.S

1 of my AP 1121AG is working properly.

11 REPLIES
Hall of Fame Super Silver

Re: Can`t join my 1121-AG to the controller

Look at the error log on the wlc and console into the ap to see what's happening. You might need to add the SSC to the wlc before it can join.

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Community Member

Re: Can`t join my 1121-AG to the controller

Hi scott,

I can`t see any error logs in the WLC.

I can see the AP get IP address but for some reason he dont join to the WLC.

Plus- the AP 1121-AG dont have console port to connect.

Any ideas ?

Community Member

Can`t join my 1121-AG to the controller

Policy Configuration

Accept Self Signed Certificate  (SSC)
Accept Manufactured Installed  Certificate (MIC)
Accept Local Significant Certificate (LSC)
Authorize MIC APs against auth-list or AAA
Authorize LSC APs against auth-list

--------------------------------------------------------------------------------------------------------------------------------

Also need to make sure that you are accepting SSC's and MIC's and LSC's... this can be found under security, AAA, AP policies...

Thanks,

Tony

Community Member

Can`t join my 1121-AG to the controller

Hi Tony,

I checked the boxes and they still won't join.

thanks

Omer

Community Member

Re: Can`t join my 1121-AG to the controller

On that same page, do you have any "AP Authorization List" entries? There needs to be one with the MAC of the AP and the self-signed certificate(SSC) or manufacturer installed certificate(MIC) SHA1 Key Hash

You can add your AP here(if not already) by getting its MAC address from the back of the AP.

Let me know if this works.

Thanks,

Tony

>>> omer_shtivi 1/23/2012 9:32 AM >>>

Home ( https://supportforums.cisco.com/index.jspa )

Re: Can`t join my 1121-AG to the controller created by omer shtivi ( https://supportforums.cisco.com/people/omer_shtivi ) in Other Wireless - Mobility Subjects - View the full discussion ( https://supportforums.cisco.com/message/3541650#3541650 )

Hi Tony,

I checked the boxes and they still won't join.

thanks

Omer

Reply to this message by going to Home ( https://supportforums.cisco.com/message/3541650#3541650 )

Start a new discussion in Other Wireless - Mobility Subjects at Home ( https://supportforums.cisco.com/choose-container!input.jspa?contentType=1&containerType=14&container=2043 )

===========================================================

This message is confidential, intended only

for the named recipient(s) and may contain

information that is privileged or exempt from

disclosure under applicable law. If you are

not the intended recipient(s), you are notified

that the dissemination, distribution or copying

of this message is strictly prohibited. If you

received this message in error, or are not the

named recipient(s), please notify the sender

and delete this e-mail from your computer.

ETMC has implemented secure messaging for

certain types of messages. For more information

about our secure messaging system, go to:

http://www.etmc.org/mail/

Thank you.

===========================================================

Hall of Fame Super Silver

Re: Can`t join my 1121-AG to the controller

Run a debug on the ap then. But you should see that the AP joined or did not join. Did you add the AP's SSC to the wlc?

Take a look at these links

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00806a426c.shtml

http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00808f8599.shtml

Sent from Cisco Technical Support iPhone App

-Scott
*** Please rate helpful posts ***
Community Member

Re: Can`t join my 1121-AG to the controller

hi scott,

i'm working with liad on the trouble.

i tried the debug commands in the links and the only message i get for my ap mac is:

(Cisco Controller) >*sshpmLscTask: Jan 10 11:42:32.558: sshpmLscTask: LSC Task received a message 4

*sshpmLscTask: Jan 10 11:44:32.559: sshpmLscTask: LSC Task received a message 4

but when i debug dhcp packet enabled.

i get:

*DHCP Proxy DTL Recv Task: Jan 10 11:08:02.186: 00:11:bb:80:57:9c DHCP received op BOOTREQUEST (1) (len 267,vlan 16, port 1, encap 0xec00)

*DHCP Proxy DTL Recv Task: Jan 10 11:08:02.186: 00:11:bb:80:57:9c DHCP dropping packet (no mscb) found - (giaddr 0.0.0.0, pktInfo->srcPort 68, op: 'BOOTREQUEST')

Can`t join my 1121-AG to the controller

are you sure the 1121 has the MP31G card in it?  If not, it'll have hte MP21b, and a B only AP is not allowed to join the WLC.

HTH,

Steve

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

Can`t join my 1121-AG to the controller

no,

the 1121 got the AIR-21G-E-K9 in  it.

does it mean i can't connect it?

Re: Can`t join my 1121-AG to the controller

all the -E is saying is the country code nit the radio module that is installed. Can you pull a show country from the WLC?

Steve

Sent from Cisco Technical Support iPhone App

HTH, Steve ------------------------------------------------------------------------------------------------ Please remember to rate useful posts, and mark questions as answered
Community Member

Re: Can`t join my 1121-AG to the controller

The Country code set to IL.

1640
Views
0
Helpful
11
Replies
CreatePlease to create content