Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

AP cannot join WLC

Hi,

I connected the AP [1140 - Version 12.4(21a)JA1, RELEASE SOFTWARE (fc1)] to the switch (3560) and the switch with the WLC (5500 series), but I get the below error:

*Nov  7 09:07:59.916: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.10.22:5246

*Nov  7 09:07:59.954: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov  7 09:07:59.954: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov  7 09:08:09.969: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Nov  7 09:08:10.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.10.22 pe6

*Nov  7 09:08:10.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 

*Nov  7 09:08:10.833: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.16

*Nov  7 09:08:10.834: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.10.22

*Nov  7 09:08:10.834: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN

*Nov  7 09:08:10.916: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG

*Nov  7 09:08:10.917: %DTLS-3-BAD_RECORD: Erroneous record received from 192.168.10.22: Duplicate (d

., 1) 7 09:08:28.914: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(UNKNOWN_MESS)

*Nov  7 09:08:28.914: %CAPWAP-3-ERRORLOG: GOING BACK TO DISCOVER MODE

*Nov  7 09:08:28.914: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.10.22:5246

*Nov  7 09:08:28.953: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov  7 09:08:28.954: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY

*Nov  7 09:08:38.968: %CAPWAP-3-ERRORLOG: Go join a capwap controller

*Nov  7 09:08:39.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.10.22 pe6

*Nov  7 09:08:39.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 

*Nov  7 09:08:39.835: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.16

*Nov  7 09:08:39.836: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.10.22

*Nov  7 09:08:39.836: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN

*Nov  7 09:08:39.919: %CAPWAP-5-CHANGED: CAPWAP changed state to CFG

*Nov  7 09:08:39.920: %DTLS-3-BAD_RECORD: Erroneous record received from 192.168.10.22: Duplicate (d

., 1) 7 09:08:57.918: %CAPWAP-3-ERRORLOG: Retransmission count for packet exceeded max(UNKNOWN_MESS)

The access point cannot join the controller. Is this a misconfiguration at the WLC or something else?

Thank you.

3 REPLIES
Cisco Employee

AP cannot join WLC

Hello,

It looks like we are failing during the DTLS handshake. We should capture the WLC side debugs to get the full story:

debug mac addr xx:xx:xx:xx:xx:xx (mac address of AP)

debug capwap events enable

debug capwap errors enable

Please capture this output while the AP is trying to join and we can take a look.

-Pat

Hall of Fame Super Blue

AP cannot join WLC

1.  Time looks OK.

2.  What region is your WLC configured for and what is the output on the AP with the command "sh inventory"?

Put a console cable and log the output of the AP.  Reboot the AP.  I want to see the complete bootup sequence please.

Hall of Fame Super Silver

AP cannot join WLC

By any chance do you have a duplicate ip address sharing the WLC management ip?

-Scott
*** Please rate helpful posts ***
4426
Views
0
Helpful
3
Replies
CreatePlease to create content