AIR-LAP1310G-E-K9 acces point not joining to 5508 wlan controller

Hi,
I have Cisco AIR-LAP1310G-E-K9 access point and 5508 wlan controller with version 7.0.220 and it is joining to the WLAN controller.  I have enabled dhcp in the lan controller and i dont have external dns server. How to fix this issue?  Can this LAN controller version will support this access point? 
My Lan Controller Management IP Address is 10.10.10.5
Please find the below configuration of 1300 access point.
AP001d.4513.dd68#reload
Proceed with reload? [confirm]
%SYS-5-RELOAD: Reload requested by console. Reload Reason: Reload Command.
%LWAPP-5-CHANGED: LWAPP changed state to DOWNXmodem file system is available.
flashfs[0]: 4 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 2052608
flashfs[0]: Bytes available: 5688832
flashfs[0]: flashfs fsck took 14 seconds.
Base ethernet MAC Address: 00:1d:45:13:dd:68
Initializing ethernet port 0...
Reset ethernet port 0...
Reset done!
ethernet link up, 100 mbps, full-duplex
Ethernet port 0 initialized: link is up
Unable to get our ip address: no "IP_ADDR" variable set
The system has been encountered and error initializing
tftp file system. The system is ignoring the error and
continuing boot. If you interrupt the system boot process,
the following commands will set IP_ADDR, DEFAULT_ROUTER
and NETMASK environment variables, initializing tftp file
system, and finish loading the operating system software:
    set IP_ADDR
    set DEFAULT_ROUTER
    set NETMASK
    tftp_init
    boot
Loading "flash:/c1310-rcvk9w8-mx/c1310-rcvk9w8-mx"...############################################################################################################################################################################################
File "flash:/c1310-rcvk9w8-mx/c1310-rcvk9w8-mx" uncompressed and installed, entry point: 0x3000
executing...
              Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, C1310 Software (C1310-RCVK9W8-M), Version 12.4(10b)JA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Wed 19-Mar-08 19:09 by prod_rel_team
Image text-base: 0x00003000, data-base: 0x003BE9E0
Initializing flashfs...
flashfs[1]: 4 files, 2 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 7741440
flashfs[1]: Bytes used: 2052608
flashfs[1]: Bytes available: 5688832
flashfs[1]: flashfs fsck took 2 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
cisco AIR-LAP1310G-E-K9R   (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
Processor board ID FHK1133E002
PowerPCElvis CPU at 262Mhz, revision number 0x0950
Last reset from reload
LWAPP image version 3.0.51.0
1 FastEthernet interface
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:1D:45:13:DD:68
Part Number                          : 73-8960-09
PCA Assembly Number                  : 800-24963-06
PCA Revision Number                  : A0
PCB Serial Number                    : FOC113000V7
Top Assembly Part Number             : 800-28479-05
Top Assembly Serial Number           : FHK1133E002
Top Revision Number                  : B0
Product/Model Number                 : AIR-LAP1310G-E-K9R
The name for the keys will be: ap.cisco.com
% The key modulus size is 1024 bits
% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]
ip ssh version 2
    ^
% Invalid input detected at '^' marker.
transport input ssh
                 ^
% Invalid input detected at '^' marker.
aaa new-model
^
% Invalid input detected at '^' marker.
aaa authentication login default enable local none
^
% Invalid input detected at '^' marker.
o
^
% Invalid input detected at '^' marker.
Press RETURN to get started!
*Mar  1 00:00:05.442: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar  1 00:00:06.473: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
*Mar  1 00:00:07.817: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1310 Software (C1310-RCVK9W8-M), Version 12.4(10b)JA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Wed 19-Mar-08 19:09 by prod_rel_team
Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)
transport input ssh
                 ^
% Invalid input detected at '^' marker.
*Mar  1 00:00:33.860: %LWAPP-3-CLIENTEVENTLOG: Performing DNS resolution for CISCO-LWAPP-CONTROLLER
*Mar  1 00:00:33.860: %LWAPP-3-CLIENTERRORLOG: DNS Name Lookup: could not resolve CISCO-LWAPP-CONTROLLER
*Mar  1 00:00:33.861: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
logging origin-id string AP:001d.4513.dd68
         ^
% Invalid input detected at '^' marker.
logging 255.255.255.255
        ^
% Invalid input detected at '^' marker.
logging trap 3
        ^
% Invalid input detected at '^' marker.
*Mar  1 00:00:37.440: Logging LWAPP message to 255.255.255.255.
AP001d.4513.dd68>
%LWAPP-3-CLIENTEVENTLOG: Forcing AP to obtain IP address using DHCP
%DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.10.10.46, mask 255.255.255.0, hostname AP001d.4513.dd68
Translating "CISCO-LWAPP-CONTROLLER.CISCO-LWAPP-CONTROLLER.mydomain.com"...domain server (10.10.10.5)
%LWAPP-3-CLIENTEVENTLOG: Did not get vendor specific options from DHCP.
%LWAPP-3-CLIENTEVENTLOG: Did not get log server settings from DHCP.
%LWAPP-3-CLIENTEVENTLOG: Performing DNS resolution for CISCO-LWAPP-CONTROLLER.CISCO-LWAPP-CONTROLLER.mydomain.com
%LWAPP-3-CLIENTERRORLOG: DNS Name Lookup: could not resolve CISCO-LWAPP-CONTROLLER.CISCO-LWAPP-CONTROLLER.mydomain.com
AP001d.4513.dd68>

Your debug is very telling ..
AP001d.4513.dd68>
%LWAPP-3-CLIENTEVENTLOG: Forcing AP to obtain IP address using DHCP
%DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.10.10.46, mask 255.255.255.0, hostname AP001d.4513.dd68
Translating "CISCO-LWAPP-CONTROLLER.CISCO-LWAPP-CONTROLLER.mydomain.com"...domain server (10.10.10.5)
%LWAPP-3-CLIENTEVENTLOG: Did not get vendor specific options from DHCP.
%LWAPP-3-CLIENTEVENTLOG: Did not get log server settings from DHCP.
%LWAPP-3-CLIENTEVENTLOG: Performing DNS resolution for CISCO-LWAPP-CONTROLLER.CISCO-LWAPP-CONTROLLER.mydomain.com
%LWAPP-3-CLIENTERRORLOG: DNS Name Lookup: could not resolve CISCO-LWAPP-CONTROLLER.CISCO-LWAPP-CONTROLLER.mydomain.com
AP001d.4513.dd68>
What are you using to tell the AP where the contoller lives ? Since you are consoled into the ap you can use the -> capwap ap controller ip address
This will point the ap to your controller
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

Similar Messages

  • Access Points not joining WLC

    Hello All,
    I am trying to deploy several AIR-CAP3502E-E-K9 access points from a cisco 5508 wire lan contoller running ver 7 code. However iam having difficulty regiserting the access points with the WLC. The wlc is connect to a 3650 switch, and each access point is connected to a 2960 switch.
    Problem Solved. A bad update was not allowing the access points to get their correct firmware.

    You need to provide what Leo stated, that would help a lot. Anyways you can't telnet or ssh into a capwap AP if it has not joined the WLC. So that being said, provide the info Leo requested and then console into the ap and provide use with output from the console. Make sure you reboot the AP and then start capturing the output for around 5 minutes.
    Sent from Cisco Technical Support iPad App

  • AIR-CAP3501I access point not joining the Cisco 2100 Wireless Lan controller.

    Hello All,
    I am installing a new LAP (AIR-CAP3501I ) through the wireless lan controller (AIR-WLC2112-K9) with software version 7.0. I have an external ADSL modem which will act as the DHCP server for the wireless clients and the LAP.
    Please find my network setup as below:
    The ISP ADSL modem , WLC and LAP are connected to a unmanaged POE switch. The LAP gets its power through the POE switch. When i connect the LAP and the WLC to the switch along with the ADSL modem, the LAPs are getting the ip address from the ADSL modem, however they are not joining the WLC for further process.
    ADSL Modem ip address: 192.168.1.254
    Management ip address on the LAP: 192.168.1.1 ( Assigned to port 1, untagged Vlan).
    Ap Manager ip address: 192.168.1.1 ( Assigned to the same port i.e port1, Untagged Vlan).
    The LAP is getting an IP address from the ADSL modem in the range of the DHCP scope.
    I will paste the logs very soon.
    Please let me know if i am doing anything wrong oe what will be the issue.
    Thanks in advance,
    Mohammed Ameen

    Hello All,
    Please find the logs for  "debug capwap event" from the WLC below:
    *spamReceiveTask: Sep 26 19:44:59.196: e8:04:62:0a:3f:10 Join Version: = 117465600
    *spamReceiveTask: Sep 26 19:44:59.197: e8:04:62:0a:3f:10 Join resp: CAPWAP Maximum Msg element len = 92
    *spamReceiveTask: Sep 26 19:44:59.197: e8:04:62:0a:3f:10 Join Response sent to 192.168.1.156:45510
    *spamReceiveTask: Sep 26 19:44:59.197: e8:04:62:0a:3f:10 CAPWAP State: Join
    *spamReceiveTask: Sep 26 19:44:59.197: e8:04:62:0a:3f:10 capwap_ac_platform.c:1216 - Operation State 0 ===> 4
    *apfReceiveTask: Sep 26 19:44:59.198: e8:04:62:0a:3f:10 Register LWAPP event for AP e8:04:62:0a:3f:10 slot 0
    *spamReceiveTask: Sep 26 19:44:59.341: e8:04:62:0a:d1:20 DTLS connection not found, creating new connection for 192:168:1:158 (45644) 192:168:1:2 (5246)
    *spamReceiveTask: Sep 26 19:45:00.119: e8:04:62:0a:d1:20 DTLS Session established server (192.168.1.2:5246), client (192.168.1.158:45644)
    *spamReceiveTask: Sep 26 19:45:00.119: e8:04:62:0a:d1:20 Starting wait join timer for AP: 192.168.1.158:45644
    *spamReceiveTask: Sep 26 19:45:00.121: e8:04:62:0a:d1:20 Join Request from 192.168.1.158:45644
    *spamReceiveTask: Sep 26 19:45:00.123: e8:04:62:0a:d1:20 Join Version: = 117465600
    *spamReceiveTask: Sep 26 19:45:00.123: e8:04:62:0a:d1:20 Join resp: CAPWAP Maximum Msg element len = 92
    *spamReceiveTask: Sep 26 19:45:00.124: e8:04:62:0a:d1:20 Join Response sent to 192.168.1.158:45644
    *spamReceiveTask: Sep 26 19:45:00.124: e8:04:62:0a:d1:20 CAPWAP State: Join
    *spamReceiveTask: Sep 26 19:45:00.124: e8:04:62:0a:d1:20 capwap_ac_platform.c:1216 - Operation State 0 ===> 4
    *apfReceiveTask: Sep 26 19:45:00.125: e8:04:62:0a:d1:20 Register LWAPP event for AP e8:04:62:0a:d1:20 slot 0
    *spamReceiveTask: Sep 26 19:45:00.273: e8:04:62:0a:d1:20 Configuration Status from 192.168.1.158:45644
    *spamReceiveTask: Sep 26 19:45:00.273: e8:04:62:0a:d1:20 CAPWAP State: Configure
    *spamReceiveTask: Sep 26 19:45:00.273: Invalid channel 1 spacified for the AP APf866.f2ab.24b6, slotId = 0
    *spamReceiveTask: Sep 26 19:45:00.274: e8:04:62:0a:d1:20 Updating IP info for AP e8:04:62:0a:d1:20 -- static 0, 192.168.1.158/255.255.255.0, gtw 192.168.1.254
    *spamReceiveTask: Sep 26 19:45:00.274: e8:04:62:0a:d1:20 Updating IP 192.168.1.158 ===> 192.168.1.158 for AP e8:04:62:0a:d1:20
    *spamReceiveTask: Sep 26 19:45:00.274: e8:04:62:0a:d1:20 Setting MTU to 1485
    *spamReceiveTask: Sep 26 19:45:00.274: e8:04:62:0a:d1:20 Finding DTLS connection to delete for AP (192:168:1:158/45644)
    *spamReceiveTask: Sep 26 19:45:00.274: e8:04:62:0a:d1:20 Disconnecting DTLS Capwap-Ctrl session 0xa06d6a4 for AP (192:168:1:158/45644)
    *spamReceiveTask: Sep 26 19:45:00.274: e8:04:62:0a:d1:20 CAPWAP State: Dtls tear down
    *spamReceiveTask: Sep 26 19:45:00.277: spamProcessGlobalPathMtuUpdate: Changing Global LRAD MTU to 576
    *spamReceiveTask: Sep 26 19:45:00.277: e8:04:62:0a:d1:20 DTLS connection closed event receivedserver (192:168:1:2/5246) client 192:168:1:158/45644).
    The Acess point joins the Controller for 2-3 seconds and then unjoins again. I am not sure what i am doing wrong here. The access points are getting the IPs from the ADSL modem through the switch, then it talks to the WLC, however it does not join the controller for further process.
    Note:
    The Managemnet interface and the AP manager interface are assigned to the same port 1 with unassigned Vlan as mention above.

  • AIR-CAP3702I booting up in mesh mode and not joining our 5508 WLC

    I have a batch of 30+ AIR-CAP3702I-A-K9 APs that I need to setup but none of them are joining to the 5508 WLC and when I connect a console cable and view the output from the AP it shows that it is trying to initiate in mesh mode. I have read other forums that are showing that I need to put in the APs MAC address to a filter list on the WLC for it to show up and then I will be able to change it from mesh mode to local mode. The only issue I'm having with that solution is not knowing how it will affect my current production environment off of that 5508 WLC. I have 69 active production APs with clients working off them and there are no MAC filters currently in place on the WLC. By adding a MAC filter entry for the new APs would the WLC create an implicit deny for all other clients that don't have their MAC addresses entered?? If so is there another work around? Can the mode be changed via the CLI on the AP itself to make it local instead of mesh? 

    sh capwap client rcb
    AdminState                  :  ADMIN_ENABLED
    SwVer                       :  7.6.1.118
    NumFilledSlots              :  2
    Name                        :  AP88f0.4290.7184
    Location                    :  default location
    MwarName                    :  xxxxx
    MwarApMgrIp                 :  x.x.x.x !<it has the correct name and IP of the WLC>
    MwarHwVer                   :  0.0.0.0
    ApMode                      :  Bridge
    ApSubMode                   :  Not Configured
    OperationState              :  JOIN
    CAPWAP Path MTU             :  576
    LinkAuditing                :  disabled
    ApRole                      :  MeshAP
    ApBackhaul                  :  802.11a
    ApBackhaulChannel           :  0
    ApBackhaulSlot              :  2
    ApBackhaul11gEnabled        :  0
    ApBackhaulTxRate            :  24000
    Ethernet Bridging State     :  0
    Public Safety State         :  disabled
    AP Rogue Detection Mode     :  Enabled
    AP Tcp Mss Adjust           :  Disabled
    AP IPv6 TCP MSS Adjust      :  Disabled
    Predownload Status          :  None
    Auto Immune Status          :  Disabled
    RA Guard Status             :  Disabled
    Efficient Upgrade State     :  Disabled
    Efficient Upgrade Role      :  None
    TFTP Server                 :  Disabled
    Antenna Band Mode           :  Unknown
    802.11bg(0) Radio
    ADMIN  State =  ENABLE [1]
    OPER   State =    DOWN [1]
    CONFIG State =      UP [2]
    HW     State =      UP [4]
      Radio Mode                : Bridge
      GPR Period                : 0
      Beacon Period             : 0
      DTIM Period               : 0
      World Mode                : 1
      VoceraFix                 : 0
      Dfs peakdetect            : 1
      Fragmentation Threshold   : 2346
      Current Tx Power Level    : 0
      Current Channel           : 11
      Current Bandwidth         : 20
    802.11a(1) Radio
    ADMIN  State =  ENABLE [1]
    OPER   State =    DOWN [1]
    CONFIG State =      UP [2]
    HW     State =      UP [4]
      Radio Mode                : Bridge
      GPR Period                : 0
      Beacon Period             : 0
      DTIM Period               : 0
      World Mode                : 1
      VoceraFix                 : 0
      Dfs peakdetect            : 1
      Fragmentation Threshold   : 2346
      Current Tx Power Level    : 1
      Current Channel           : 165
      Current Bandwidth         : 20
    It is showing the following error on our WLC in the log file:
    Tue Jul 15 14:01:26 2014
    AAA Authentication Failure for UserName:88f042907184 User Type: WLAN USER
    And here are some of the errors it's showing on the AP after bootup:
    *Jul 15 17:47:30.471: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.x.x
    *Jul 15 17:47:31.003: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:31.031: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:31.039: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:31.047: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 15 17:47:32.067: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:33.067: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:35.471: %CAPWAP-5-SENDJOIN: sending Join Request to x.x.x.x
    *Jul 15 17:47:35.471: %DTLS-5-ALERT: Received WARNING : Close notify alert from x.x.x.x
    *Jul 15 17:47:35.475: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:35.483: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 15 17:47:36.475: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Jul 15 17:47:36.503: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Jul 15 17:47:37.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Jul 15 17:48:15.007: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
    *Jul 15 17:48:15.007: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
    *Jul 15 17:48:15.007: %MESH-6-LINK_UPDOWN: Mesh station 88f0.4290.7184 link Down
    *Jul 15 17:48:17.007: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Jul 15 17:48:22.507: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Jul 15 17:59:10.099: %CAPWAP-3-ERRORLOG: Invalid event 31 & state 4 combination
    *Jul 15 17:59:10.099: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 31, state 4

  • AP's will not join new 5508's

    We just completed deployment of (4) 5508-250's in a large enviroment. We are now trying to get some test AP's to join the new WLC's. At one point it appeared that one of the 5 joined but the other 4 did not. We rebboted everything including resetting the AP's to factory and upon doing that all 5 ap's came up and joined the legacy WISM's blades sitting in the core.
    The new 5508's are sitting on a new stack of switches running 12.2.58(SE2) ip base.  We have all new subnets for the new ap's as well as all vlan interfaces on the controllers themselves. IE: vlan 499 and vlan 500. Vlan 500 is Management and 499 is the ap-manager interfaces (32 of them).
    1. Why would the new AP's prefer the old WISM to the 5508's?
    2. What do we need to do to fix that until the we can do a migration?
    3. The WLC's and the cores are not in the same stack. The WLC's are on the customers 6509 and the (4) 5508's are on a new 3750x stack with a port channel to the core 6509.
    4. Does the new stack have to be running the L-3 IOS with a routing protocol running. The customers current enviroment is EIGRP.
    5. I have looked at the new WLC configuration and compared it to other similar sites and they are the same with the exception of the L3 on the new 3750x stack.
    Thanks,
    Evan Kalbach

    Here is my response to your queries.
    1.  Unless you configure primary,secondary (HA parameters) on your AP, it does not prefer 5508 as long as it can reach both controllers
    2. You can configure the 5508 as primary controller ( & WiSM as secondary) to inluence AP to go to 5508 as first preference. You can try below CLI command on your WiSM for the APs you want to register to 5508 as primary & keep WiSM as secondary.
    config ap secondary-base
    config ap primary-base <5508 WLC name> <5508 Mgt IP>
    3. WLC does not need to connect Core
    4. As long as WLC have rachability to rest of networks, that's fine. No L3 routing required on the swich you connect the WLC.L3 gateway can be defined another L3 switch. Then you should have extend L2 from the WLC connect switch upto L3 defined switch.
    5. Doesn't matter this.
    HTH
    Rasika
    **** Pls rate all useful responses ****

  • AP 1532E not join WLC 5508

    Hi all,
    we have two new APs 1532E and we trying to join them into the WLC.
    APs received correctly Management IP address but they doesn't appear in the WLC, we got the follow error message :
    *Jul 16 09:29:46.499: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Jul 16 09:29:46.499: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Jul 16 09:29:46.499: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 172.31.93.250
    *Jul 16 09:29:51.499: %CAPWAP-5-SENDJOIN: sending Join Request to 172.31.93.250
    *Jul 16 09:30:45.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.31.93.250:5246
    *Jul 16 09:30:46.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Jul 16 09:30:46.079: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *Jul 16 09:30:46.307: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 16 09:30:56.307: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Jul 16 09:30:54.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.31.93.250 peer_port: 5246
    *Jul 16 09:30:54.507: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.31.93.250 peer_port: 5246
    *Jul 16 09:30:54.507: %CAPWAP-5-SENDJOIN: sending Join Request to 172.31.93.250
    *Jul 16 09:30:54.511: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Jul 16 09:30:54.511: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Jul 16 09:30:54.511: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Jul 16 09:30:54.511: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 172.31.93.250
    *Jul 16 09:30:59.507: %CAPWAP-5-SENDJOIN: sending Join Request to 172.31.93.250
    *Jul 16 09:31:53.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.31.93.250:5246
    *Jul 16 09:31:54.031: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
    *Jul 16 09:31:54.079: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *Jul 16 09:31:54.307: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Jul 16 09:32:03.383: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
    *Jul 16 09:32:03.383: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
    *Jul 16 09:32:03.383: Mesh setting the ethernet port 0 state to 0
    *Jul 16 09:32:03.383: %MESH-6-LINK_UPDOWN: Mesh station 78da.6e60.8000 link Down
    *Jul 16 09:32:04.307: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Jul 16 09:31:59.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.31.93.251 peer_port: 5246
    *Jul 16 09:32:06.075: Mesh setting the ethernet port 0 state to 2
    Do I need to change Country into the WLC? We have configured IT and US. 
    We tried to put into the MAC filter the Dot11radio MAC address but nothing changed.
    Thanks
    Marco

    Hi,
    I had the same join problem with a new CAP1552E outdoor model which should associate with 5508 WLC or WISM.  According to all information I checked before we ordered the hardware, the ios version should support this.  But could not get it working.
    I found this information about the country-code and the MAC address filtering.
    Removed the US-country-code next to BE-code and added the MAC-address of the AP and the problem was FIXED !!!
    AP joined the controller.  Thanks soo much for posting this very helpfull technical information.
    Belgian Network technician.

  • LWAP AP not join a WLC

    Hi all,
    I have a  Cisco 2500 series Wirless Controller and AP : AIR-LAP1310G-E-K9 with can't join a cisco controller, when i looked at the Log file for WLC i found this message : 
    AP Disassociated. Base Radio MAC:1c:df:0f:cf:da:88.
     So when i did this on the controller  ( command) : debug capwap errors enable
      This appear : 
    *spamApTask0: Jan 20 14:45:25.849: 1c:df:0f:cf:da:88 Received LWAPP DISCOVERY REQUEST to ff:ff:ff:ff:ff:ff on port '1'
    *spamApTask0: Jan 20 14:45:25.849: 1c:df:0f:cf:da:88 Join Priority Processing status = 0, Incoming Ap's Priority 0, MaxLrads = 15,joined Aps =3
    *spamApTask0: Jan 20 14:45:25.849: 1c:df:0f:cf:da:88 Successful transmission of LWAPP Discovery Response to AP 1c:df:0f:cf:da:88 on port 1
    *spamApTask0: Jan 20 14:45:36.851: 1c:df:0f:cf:da:88 Received LWAPP JOIN REQUEST from AP 1c:df:0f:cf:da:88 to 68:86:a7:36:37:00 on port '1'
    *spamApTask0: Jan 20 14:45:36.851: Could not find BoardDataPayload
    *spamApTask0: Jan 20 14:45:36.865: 1c:df:0f:cf:da:88 AP AP_BEJ: txNonce  00:00:00:00:00:00 rxNonce  00:00:00:00:00:00
    *spamApTask0: Jan 20 14:45:36.865: 1c:df:0f:cf:da:88 LWAPP Join Request MTU path from AP 1c:df:0f:cf:da:88 is 1500, remote debug mode is 0
    *spamApTask0: Jan 20 14:45:37.048: 1c:df:0f:cf:da:88 Successful transmission of LWAPP Join Reply to AP 1c:df:0f:cf:da:88
    *spamApTask0: Jan 20 14:45:37.049: 1c:df:0f:cf:da:88 spam_lrad.c:2080 - Operation State 0 ===> 4
    *spamApTask0: Jan 20 14:45:38.231: 1c:df:0f:cf:da:88 Received LWAPP IMAGE_DATA from AP 1c:df:0f:cf:da:88
    *spamApTask0: Jan 20 14:45:38.232: 1c:df:0f:cf:da:88 Refusing image download to AP 1c:df:0f:cf:da:88 - unable to open image file /bsn/ap//c1310
           Error:No such file or directory(2)
    Please help ?

    Hi George Stefanick ,
    the problème is : i want to convert it to autonomous so  to do , it must to plug the AP with the WLC , and in the CLI for WLC : tape this command  : o this 
    config ap tftp-downgrade tftp-server-ip-address filename access-point-name
    Refer to this link :  http://www.cisco.com/c/en/us/td/docs/wireless/controller/3-2/configuration/guide/ccfig32/c32lwap.html.
    but the WLC dont support the AP 1300 series , so please how to convert this AP  to autonomos ? 

  • AIR-CAP3502I-E-K9 does not join preferred controller

    I have an AIR-CAP3502I-E-K9 AP that is configured for two WLAN controllers with preferred order. However the AP does not join the primary controller, but uses the secondary one instead. I have a bunch of these AIR-CAP3502I-E-K9s , majority work fine, but three of them not.
    I have tried commands according to
    https://supportforums.cisco.com/docs/DOC-24917
    In the controller's GUI  the order is properly configured. I also tried to use 'Clear All Config" option on the controller and configured the AP from the scratch, but this did not help.
    Here is what I have
    XXXX#sh capwap client config
    configMagicMark         0xF1E2D3C4
    chkSumV2                30883
    chkSumV1                1073
    swVer                   7.2.111.3
    adminState              ADMIN_ENABLED(1)
    name                    XXXX
    location                YYYY
    group name
    mwarName                ZZZZ1
    mwarIPAddress           192.168.1.1
    mwarName                ZZZZ2
    mwarIPAddress           192.168.1.2
    mwarName
    mwarIPAddress           0.0.0.0
    ssh status              Enabled
    Telnet status           Enabled
    numOfSlots              2
    spamRebootOnAssert      1
    spamStatTimer           180
    randSeed                0xBAC2
    transport               SPAM_TRANSPORT_L3(2)
    transportCfg            SPAM_TRANSPORT_DEFAULT(0)
    initialisation          SPAM_PRODUCTION_DISCOVERY(1)
    ApMode                  Local
    ApSubMode               Not Configured
    AP Rogue Detection Mode Enabled
    OfficeExtend AP         [0] Disabled
    OfficeExtend AP JoinMode[0] Standard
    Discovery Timer         10 secs
    Heart Beat Timer        30 secs
    Led State Enabled       1
    Primed Interval         0
    AP ILP Pre-Standard Switch Support Disabled
    AP Power Injector Disabled
    Infrastructure MFP validation Disabled
    Configured Switch 1 Addr 192.168.1.2
    Configured Switch 2 Addr 192.168.1.1
    non-occupancy channels:
    Ethernet (Duplex/Speed) auto/auto
    *Mar  1 00:14:23.001: %CAPWAP-3-ERRORLOG: Selected MWAR 'ZZZZ2'(index 1).
    *Mar  1 00:14:23.001: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Aug 22 12:21:57.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.2 peer_port: 5246
    *Aug 22 12:21:57.581: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.2 peer_port: 5246
    *Aug 22 12:21:57.581: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.2
    My primary one is 192.168.1.1 and secondary is 192.168.1.2, but the AP joins always the secondary one.
    The lines above
    Configured Switch 1 Addr 192.168.1.2
    Configured Switch 2 Addr 192.168.1.1
    seem to be suspicious, I would expect the reverse order, but do not know how the code did it.
    The only guess is that in the very beginning the AP joined 192.168.1.2, and this was the controller I configured the AP initially from. The AP seems to maybe somehow remember this.
    OS version is
    swVer                   7.2.111.3
    Thanks,
    Vlad

    Yes, this is what I am trying all the time - configure the AP to point to the WLCs I want it to join.
    Firstly I did through GUI, did not work.
    Secondly I  used 'Clear All Config" option on the controller and configured the AP from the scratch through GUI, did not work.
    Thirdly I tried through command line on the AP, did not work.
    I used these commands
    XXXX#capwap ap  primary-base ZZZZ1 192.168.1.1
    XXXX#capwap ap  secondary-base ZZZZ2 192.168.1.2
    XXXX#sh capwap client config
    configMagicMark         0xF1E2D3C4
    chkSumV2                30883
    chkSumV1                1072
    swVer                   7.2.111.3
    adminState              ADMIN_ENABLED(1)
    name                    XXXX
    location                YYYY
    group name
    mwarName                ZZZZ1
    mwarIPAddress           192.168.1.1
    mwarName                ZZZZ2
    mwarIPAddress           192.168.1.2
    mwarName
    mwarIPAddress           0.0.0.0
    ssh status              Enabled
    Telnet status           Enabled
    numOfSlots              2
    spamRebootOnAssert      1
    spamStatTimer           180
    randSeed                0xBAC2
    transport               SPAM_TRANSPORT_L3(2)
    transportCfg            SPAM_TRANSPORT_DEFAULT(0)
    initialisation          SPAM_PRODUCTION_DISCOVERY(1)
    ApMode                  Local
    ApSubMode               Not Configured
    AP Rogue Detection Mode Enabled
    OfficeExtend AP         [0] Disabled
    OfficeExtend AP JoinMode[0] Standard
    Discovery Timer         10 secs
    Heart Beat Timer        30 secs
    Led State Enabled       1
    Primed Interval         0
    AP ILP Pre-Standard Switch Support Disabled
    AP Power Injector Disabled
    Infrastructure MFP validation Disabled
    Configured Switch 1 Addr 192.168.1.2
    Configured Switch 2 Addr 192.168.1.1
    non-occupancy channels:
    Ethernet (Duplex/Speed) auto/auto
    XXXX#sh log
    Syslog logging: enabled (1 messages dropped, 8 messages rate-limited,
                    0 flushes, 0 overruns, xml disabled, filtering disabled)
        Console logging: level debugging, 61 messages logged, xml disabled,
                         filtering disabled
        Monitor logging: level debugging, 0 messages logged, xml disabled,
                         filtering disabled
        Buffer logging: level debugging, 67 messages logged, xml disabled,
                        filtering disabled
        Logging Exception size (4096 bytes)
        Count and timestamp logging messages: disabled
        Trap logging: level emergencies, 0 message lines logged
            Logging to 255.255.255.255(global) (udp port 514, audit disabled,  link down), 0 message lines logged, xml disabled,
                   filtering disabled
    Log Buffer (1048576 bytes):
    *Mar  1 00:00:09.424: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
    *Mar  1 00:00:09.434: *** CRASH_LOG = YES
    *Mar  1 00:00:09.434: 64bit PCIE devicesSecurity Core found.
    Base Ethernet MAC address: E0:5F:B9:A8:00:7F
    *Mar  1 00:00:12.482: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:13.731: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
    *Mar  1 00:00:13.797: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:16.996: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
    *Mar  1 00:00:17.052: %LWAPP-3-CLIENTEVENTLOG: Read and initialized AP event log (contains, 1024 messages)
    *Mar  1 00:00:17.068:  status of voice_diag_test from WLC is false
    *Mar  1 00:00:19.182: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3500 Software (AP3G1-K9W8-M), Version 12.4(25e)JA2, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Fri 14-Sep-12 19:13 by prod_rel_team
    *Mar  1 00:00:19.182: %SNMP-5-COLDSTART: SNMP agent on host XXXX is undergoing a cold start
    *Mar  1 00:13:33.342: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:13:33.342: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:13:33.493:  status of voice_diag_test from WLC is false
    *Mar  1 00:13:33.632: %SSH-5-ENABLED: SSH 2.0 has been enabledlwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:13:33.956: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:13:34.343: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:13:34.343: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:13:36.029: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:13:41.484: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.1.21, mask 255.255.255.0, hostname XXXX
    *Mar  1 00:13:51.981: Logging LWAPP message to 255.255.255.255.
    *Mar  1 00:14:01.997: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:14:06.099: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar  1 00:14:07.190: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:14:08.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:14:08.288: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:14:09.289: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:14:11.000: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:14:23.001: %CAPWAP-3-ERRORLOG: Selected MWAR 'ZZZZ2'(index 1).
    *Mar  1 00:14:23.001: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Aug 23 06:07:13.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.2 peer_port: 5246
    *Aug 23 06:07:13.578: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.2 peer_port: 5246
    *Aug 23 06:07:13.578: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.1.2
    *Aug 23 06:07:14.025: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to down
    *Aug 23 06:07:14.091: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Aug 23 06:07:14.094: %CAPWAP-5-JOINEDCONTROLLER: AP has joined controller ZZZZ2
    *Aug 23 06:07:14.154: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    What I think might be the key to the problem is this
    Configured Switch 1 Addr 192.168.1.2
    Configured Switch 2 Addr 192.168.1.1
    This is not changing no matter what I do.
    Thanks,
    Vlad

  • AIR-LAP521G-E-K9 is not joining WLC4402-12

    Hi,
    Please I need some help with any guide or info regarding my LAP521 access points that are refusing to join the WLC4402-12.
    This is my first lightweight access point implementation and I have 3 LAP521's and 1 AIR-CAP3502I-E-K9 access points on my network.
    They are meant to pick up ip address from external dhcp server and then join the WLC but only the 3502i joins successfuly while the 521's get dhcp address but do not join the WLC. From the logs, I can see that the WLC is discovered by the 521's and even get a response message from the controller but they are still unable to join as shown in the screenshot below.
    My WLC is running software version 7.0.230.0 and the 521's are running an lwapp image version 4.2.61.8.
    Base Radio MAC
    AP Name
    Status
    Ethernet MAC
    IP Address
    Last Join Time
    00:23:04:cc:56:d0
    NA
    Not Joined
    00:00:00:00:00:00
    172.31.5.115
    00:23:04:f2:8d:10
    NA
    Not Joined
    00:00:00:00:00:00
    172.31.5.113
    00:23:33:22:3d:b0
    NA
    Not Joined
    00:00:00:00:00:00
    172.31.5.110
    3c:ce:73:94:b4:d0
    AP001
    Joined
    44:2b:03:6d:5d:50
    172.31.5.120
    Oct 01 18:01:17.713
    Please any suggestions or help with resolving this issue will be appreciated.
    Thanks

    The reason the 521 will not join, is because they require the Cisco Express WLC. They will not join the 4400 WLC. Take a look at this matrix with the code you are running and the AP's that are supported.
    http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html#wp81600
    Sent from Cisco Technical Support iPhone App

  • I want to use acces point air sap1602i e k9 first times i need default ip adress

    hi
     i want to use acces point air sap1602i e k9  first times i need default ip adress to setup
    it is possible if not give me please solution 

    Hello fouadissam,
    You can connect to the AP with a console cable and enter show ip interface brief, which will display the ip address.
    If its connected to a network you can log into your switch and enter show arp | i xxxx.xxxx.xxxx(mac address of the AP).
    The below link points to a configuration guide that may be helpful.
    http://www.cisco.com/c/dam/en/us/td/docs/wireless/access_point/15_2_4_JB/configuration/guide/scg15_2_4_JB3a.pdf
    Hope this helps,
    Please remember to rate helpful posts.
    Thanks.

  • IMP: Cisco AIR-CAP1602 &1532 not joining 2504 Controller issue

    Dear Team, We have Cisco wireless implementation in clients premises. We have 8 indoor AP (AIR-CAP1602E-AK9) and 2 Outdoor AP (AIR-CAP1532I-AK9) . Seven indoor APs are able to join the 2504 controller, but 1 indoor AIR-CAP1602E AP is not joining and signal is RED continuously while as outdoor AP AIR-CAP1532I-AK9 signal goes blinking from green, red to amber continuously and is not downloading LWAPP image from the controller even after hard reset.
    The output for both APs shown below-
    1) AIR-CAP1602E-A-K9:
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvara
    ap: reset
    Are you sure you want to reset the system (y/n)?y
    System resetting...
    Boot from flash
    IOS Bootloader - Starting system.
     FLASH CHIP: Spansion S25FL256
    Xmodem file system is available.
    flashfs[0]: 14 files, 3 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31936000
    flashfs[0]: Bytes used: 418304
    flashfs[0]: Bytes available: 31517696
    flashfs[0]: flashfs fsck took 9 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 18:e7:28:d1:9b:05
     ************* loopback_mode = 0
    The system is unable to boot automatically because there
    are no bootable files.
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvarag
    Same event repeating, failed to reset and reboot device
    2) AIR_CAP1532I-A-K9 (Outdoor AP):
     *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'Cisco_47:32:e4'running version 7.5.102.0 is rejected.
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 100.1.1.20
    signal goes blinking from Grean, Red to Amber continuously.
    Failed to download LWAPP image from the controller even after hard reset.
    Default image: 7.6.95.12
    Logs and screen shot attached
    Please advice. 
    Thanks
    Aakash

    Hi please note the details below-
    AIR-CAP1602E-A-K9:
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvara
    ap: reset
    Are you sure you want to reset the system (y/n)?y
    System resetting...
    Boot from flash
    IOS Bootloader - Starting system.
     FLASH CHIP: Spansion S25FL256
    Xmodem file system is available.
    flashfs[0]: 14 files, 3 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31936000
    flashfs[0]: Bytes used: 418304
    flashfs[0]: Bytes available: 31517696
    flashfs[0]: flashfs fsck took 9 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 18:e7:28:d1:9b:05
     ************* loopback_mode = 0
    The system is unable to boot automatically because there
    is no bootable files.
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvarag
    Can't reboot device!
    WLC-SYSLOG
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.5.102.0
    Bootloader Version............................... 1.0.18
    Field Recovery Image Version..................... 1.0.0
    Firmware Version................................. PIC 16.0
    Build Type....................................... DATA + WPS
    System Name...................................... Cisco_47:32:e4
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
    IP Address....................................... 100.1.1.20
    Last Reset....................................... Power on reset
    System Up Time................................... 0 days 2 hrs 18 mins 39 secs
    System Timezone Location......................... (GMT -6:00) Central Time (US a                                                                                        nd Canada)
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    --More-- or (q)uit
    Configured Country............................... US  - United States
    Operating Environment............................ Commercial (0 to 40 C)
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +32 C
    External Temperature............................. +37 C
    Fan Status....................................... 4000 rpm
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 3
    Number of Active Clients......................... 0
    Burned-in MAC Address............................ 24:E9:B3:47:32:E0
    Maximum number of APs supported.................. 15

  • How do i ensure the new access point is joined the controller or not

    How do i ensure the new access point is joined the controller or not

    To Verifying that Access Points Join the Controller or not there are two ways as below.
    Please go through the step by step to find the APs joined state
    When replacing a controller, you need to make sure that access points join the new controller.
    Using the GUI to Verify that Access Points Join the Controller
    Follow these steps to ensure that access points join the new controller.
    Step 1 Follow these steps to configure the new controller as a master controller.
    a. Click Controller > Advanced > Master Controller Mode to open the Master Controller Configuration page.
    b. Check the Master Controller Mode check box.
    c. Click Apply to commit your changes.
    d. Click Save Configuration to save your changes.
    Step 2 (Optional) Flush the ARP and MAC address tables within the network infrastructure. Ask your network administrator for more information about this step.
    Step 3 Restart the access points.
    Step 4 Once all the access points have joined the new controller, configure the controller not to be a master controller by unchecking the Master Controller Mode check box on the Master Controller Configuration page.
    Using the CLI to Verify that Access Points Join the Controller
    Follow these steps to ensure that access points join the new controller.
    Step 1 To configure the new controller as a master controller, enter this command:
    config network master-base enable
    Step 2 (Optional) Flush the ARP and MAC address tables within the network infrastructure. Ask your network administrator for more information about this step.
    Step 3 Restart the access points.

  • When I attempt to connect my new MacBook Air to my home network I receive a dialogue that says " Could not join name of network .  A connection timeout has occurred.  Any ideas on how to deal with this?

    When I attempt to connect my new MacBook Air to my home network I receive a dialogue that says " Could not join <name of network>.  A connection timeout has occurred.  Any ideas on how to deal with this?

    Please review the following Apple Support article for assistance with troubleshooting wireless connections.
    You may also find this OSXDaily article helpful as well.

  • AIR-CAP2702I-E-K9 not joining to WLC8500

    Hi there,
    I'm facing a strange issue as the CAPWAP AP is reporting problems while trying to associate the controller.
    These are the steps:
    AP with right IOS (ap3g2-rcvk9w8-xx)
    AP get the IP from DHCP
    AP get the controller IP through DHCP Option 43
    AP send CAPWAP request packet:*Mar  1 00:46:02.139: %CAPWAP-3-EVENTLOG: Discovery Request sent to a.b.c.d with discovery type set to 1
    *Mar  1 00:46:02.139: Sent Msg Type   :
    *Mar  1 00:46:02.139: CAPWAP Control mesg Sent to 255.255.255.255, Port 5246
    *Mar  1 00:46:02.139:   Msg Type   : CAPWAP_DISCOVERY_REQUEST
    *Mar  1 00:46:02.139:   Msg Length : 165
    *Mar  1 00:46:02.139:   Msg SeqNum : 0
    WLC recieve CAPWAP request and detect LWAPP AP and denies the petition
    *spamApTask3: Apr 17 13:34:34.370: a0:ec:f9:26:91:c4 Discovery Response sent to u.v.x.y:26909
    *spamApTask0: Apr 17 13:34:34.373: a0:ec:f9:26:91:c4 Received LWAPP DISCOVERY REQUEST to 10:05:ca:be:f7:a9 on port '4'
    *spamApTask0: Apr 17 13:34:34.373: a0:ec:f9:26:91:c4 Discarding discovery request in LWAPP from AP supporting CAPWAP
    AP receive the CAPWAP respond and get into a loop trying to associate endless.*Mar  1 00:46:02.171: CAPWAP Control mesg Recd from a.b.c.d, Port 5246
    *Mar  1 00:46:02.171:   HLEN 2,   Radio ID 0,    WBID 1
    *Mar  1 00:46:02.171:   Msg Type   : CAPWAP_DISCOVERY_RESPONSE
    *Mar  1 00:46:02.171:   Msg Length : 130
    *Mar  1 00:46:02.171:   Msg SeqNum : 0
    Attached you can find the captures from both AP console and controller.

    APa0ec.f926.91c4#sh version
    Cisco IOS Software, C2700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 15-Aug-14 12:27 by prod_rel_team
    ROM: Bootstrap program is C2700 boot loader
    BOOTLDR: C2700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB5m, RELEASE SOFTWARE (fc2)
    APa0ec.f926.91c4 uptime is 46 minutes
    System returned to ROM by power-on
    System image file is "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"
    Last reload reason:
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP2702I-E-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FCW1847NH67
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.72.236
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: A0:EC:F9:26:91:C4
    Part Number                          : 73-15824-03
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC184672B9
    Top Assembly Part Number             : 068-100379-01
    Top Assembly Serial Number           : FCW1847NH67
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP2702I-E-K9  
    Configuration register is 0xF
    And for the controller:
    (wcontrollerbe1.bsch) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.4.121.0
    RTOS Version..................................... 7.4.121.0
    Bootloader Version............................... 8.0.100.0
    Emergency Image Version.......................... 8.0.100.0
    Build Type....................................... DATA + WPS
    System Name...................................... wcontrollerbe1
    System Location.................................. CPD Este
    System Contact................................... Red Datos
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1615
    Redundancy Mode.................................. Disabled
    IP Address....................................... a.b.c.d
    System Up Time................................... 35 days 16 hrs 20 mins 56 secs
    System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... ES  - Spain
    Operating Environment............................ Commercial (10 to 35 C)

  • 3702i AP's not Joining WLC - Layer 3 discovery request not received on management VLAN

    Hi Guys, 
    This is a follow up post to this thread: https://supportforums.cisco.com/discussion/12400481/3702i-not-joint-2504
    Have been playing around with my AP's and made sure the time is correct on all the devices ( WLC and Switch). I have also moved the AP's to the same Vlan as the management IP of the WLC. 
    if I move the AP's to the same Vlan as the WLC they join and are happy, as soon as I move them to a different Vlan they cant join and there time goes back to the default plus they do not seem to save the WLC details to flash but still remember the test names I give them.
    it appears that option 43 is working fine as I can see it look for the WLC IP and I have done some trouble shooting on the WLC and it looks like it see's the AP but doesn't except it.
    please see below for the boot up of the AP and the WLC logs: 
    AP 
    IIOS Bootloader - Starting system.
    *** deleted for breverity ***** 
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1"...#########################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1" uncompressed and installed, entry point: 0x2003000
    executing...
    Secondary Bootloader - Starting system.
    Montserrat Board
    *** deleted for breverity ***** 
    Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1;flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1'
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1"...###############################################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1" uncompressed and installed, entry point: 0x1003000
    executing...
                  *** deleted for breverity ***** 
    cisco AIR-CAP3702I-Z-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FGL1838X4T1
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.110.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: F4:4E:05:B7:1E:84
    Part Number                          : 73-15243-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC18343WPR
    Top Assembly Part Number             : 068-05054-03
    Top Assembly Serial Number           : FGL1838X4T1
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP3702I-Z-K9
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:19.295: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
    *Mar  1 00:00:19.755: Registering HW DTLS
    *Mar  1 00:00:19.763: APAVC: Initial WLAN Buffers Given to System is  2500
    *Mar  1 00:00:19.815: APAVC:  WlanPAKs 42878 RadioPaks  42270
    *Mar  1 00:00:22.127: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:26.055: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
    *Mar  1 00:00:26.167: Loading Power Tables from ram:/Q2.bin. Class = A
    *Mar  1 00:00:26.167:  record size of 3ss: 1168 read_ptr: 4F9698E
    *Mar  1 00:00:31.207: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
    *Mar  1 00:00:31.251: Loading Power Tables from ram:/Q5.bin. Class = Z
    *Mar  1 00:00:31.251:  record size of vht: 2904 read_ptr: 4F9698E
    *Mar  1 00:00:31.407: Wait until the stile protocol list is initialized.
    *Mar  1 00:00:32.651: Start STILE Activation
    *Mar  1 00:00:34.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
    *Mar  1 00:00:35.447: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 19-Dec-14 11:20 by prod_rel_team
    *Mar  1 00:00:35.447: %SNMP-5-COLDSTART: SNMP agent on host Test_1 is undergoing a cold start
    *Mar  1 00:00:36.563: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:37.787: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:37.939: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:37.939: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:00:47.567: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:48.567: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Mar  1 00:00:50.431: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
    *Mar  1 00:00:50.431: DPAA Initialization Complete
    *Mar  1 00:00:50.431: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:51.431: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:53.435: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:00:53.867: Currently running a Release Image
    *Mar  1 00:00:54.287: Incorrect certificate in SHA2 PB !
    *Mar  1 00:00:54.287: Using SHA-1 signed certificate for image signing validation.
    *Mar  1 00:00:54.575: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:59.787: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.2, mask 255.255.255.0, hostname Test_1
    *Mar  1 00:01:02.707: APAVC: Succeeded to activate all the STILE protocols.
    *Mar  1 00:01:02.707: APAVC: Registering with CFT
    *Mar  1 00:01:02.707: APAVC: CFT registration of delete callback succeeded
    *Mar  1 00:01:02.707: APAVC: Reattaching  Original Buffer pool for system use
    *Mar  1 00:01:02.707: Pool-ReAtach: paks 42878 radio42270
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:01:10.103: AP image integrity check PASSED
    *Mar  1 00:01:10.187: Incorrect certificate in SHA2 PB !
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:01:11.591: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
    *Mar  1 00:01:12.691: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.691: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.947: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:14.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:20.211: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 CLI Request Triggered
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:01:31.215: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    *Mar  1 00:02:11.599: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar  1 00:02:11.603: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:11.611: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:02:12.603: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:12.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:12.647: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:12.655: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:02:13.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:13.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:13.699: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:02:14.699: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    Not in Bound state.
    *Mar  1 00:02:44.719: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:02:49.839: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.3, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:02:55.719: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    Not in Bound state.
    *Mar  1 00:03:59.219: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:04:04.343: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.4, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:04:10.223: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    WLC: 
    isco Controller) >show time
    Time............................................. Tue Jan 27 17:44:47 2015
    Timezone delta................................... 0:0
    Timezone location................................ (GMT +8:00) HongKong, Bejing, Chongquing
    NTP Servers
        NTP Polling Interval.........................     3600
         Index     NTP Key Index                  NTP Server                  NTP Msg Auth Status
           1              0                             150.101.176.226       AUTH DISABLED
    (Cisco Controller) >show ap join stats summary  
    Incorrect input! Use 'show ap join stats summary [all/<ap-mac>]'
    (Cisco Controller) >show ap join stats summary all 
    Number of APs.............................................. 2 
    Base Mac             AP EthernetMac       AP Name                 IP Address         Status
    f4:4e:05:aa:a6:a0    f4:4e:05:94:c3:98    APf44e.0594.c398        10.1.1.22          Joined    
    f4:4e:05:b6:ce:f0    N A                  Test_1                  10.1.20.7          Not Joined
    (Cisco Controller) >show ap join stats detailed f4:4e:05:b6:ce:f0
    Sync phase statistics
    - Time at sync request received............................ Not applicable
    - Time at sync completed................................... Not applicable
    Discovery phase statistics
    - Discovery requests received.............................. 45
    - Successful discovery responses sent...................... 21
    - Unsuccessful discovery request processing................ 24
    - Reason for last unsuccessful discovery attempt........... Layer 3 discovery request not received on management VLAN
    - Time at last successful discovery attempt................ Jan 27 17:45:49.705
    - Time at last unsuccessful discovery attempt.............. Jan 27 17:45:49.705
    Join phase statistics
    - Join requests received................................... 0
    - Successful join responses sent........................... 0
    - Unsuccessful join request processing..................... 0
    - Reason for last unsuccessful join attempt................ Not applicable
    - Time at last successful join attempt..................... Not applicable
    - Time at last unsuccessful join attempt................... Not applicable
    Configuration phase statistics
    --More-- or (q)uit
    - Configuration requests received.......................... 0
    - Successful configuration responses sent.................. 0
    - Unsuccessful configuration request processing............ 0
    - Reason for last unsuccessful configuration attempt....... Not applicable
    - Time at last successful configuration attempt............ Not applicable
    - Time at last unsuccessful configuration attempt.......... Not applicable
    Last AP message decryption failure details
    - Reason for last message decryption failure............... Not applicable
    Last AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
    - Last AP disconnect reason................................ Not applicable
    Last join error summary
    - Type of error that occurred last......................... Lwapp discovery request rejected
    - Reason for error that occurred last...................... Layer 3 discovery request not received on management VLAN
    - Time at which the last join error occurred............... Jan 27 17:45:49.705
    AP disconnect details
    - Reason for last AP connection failure.................... Not applicable
                                                                               Ethernet Mac : 00:00:00:00:00:00  Ip Address : 10.1.20.7
    (Cisco Controller) >show interface summary 
     Number of Interfaces.......................... 4
    Interface Name                   Port Vlan Id  IP Address      Type    Ap Mgr Guest
    ap                               LAG  20       10.1.20.231     Dynamic No     No   
    guest                            LAG  30       10.1.30.231     Dynamic No     No   
    management                       LAG  10       10.1.1.231      Static  Yes    No   
    virtual                          N/A  N/A      1.1.1.1         Static  No     No   
    SWITCH
    witch#show run
    Building configuration...
    *** deleted for breverity ***** 
    no aaa new-model
    clock timezone AWST 8
    system mtu routing 1500
    ip routing
    ip dhcp pool WAP_Pool
       network 10.1.20.0 255.255.255.0
       default-router 10.1.20.1 
       option 43 hex f104.0a01.01e7
    ip dhcp pool Clients
       network 10.1.30.0 255.255.255.0
       default-router 10.1.30.1 
       dns-server 203.0.178.191 
    ip dhcp pool test
       network 10.1.1.0 255.255.255.0
       default-router 10.1.1.1 
    crypto pki trustpoint TP-self-signed-4082587776
     enrollment selfsigned
     subject-name cn=IOS-Self-Signed-Certificate-4082587776
     revocation-check none
     rsakeypair TP-self-signed-4082587776
    *** deleted for breverity ***** 
    *** deleted for breverity ***** !
    interface FastEthernet0/3
     description *** WLC ****
     switchport trunk encapsulation dot1q
     switchport mode trunk
    interface FastEthernet0/4
     description **** AP *****
     switchport access vlan 20
     switchport mode access
     spanning-tree portfast
    interface FastEthernet0/5
     description **** AP ****
     switchport access vlan 20
     switchport mode access
     spanning-tree portfast
    interface FastEthernet0/6
    i*** deleted for breverity ***** !
    interface Vlan10
     description *** Managment ***
     ip address 10.1.1.230 255.255.255.0
    interface Vlan20
     description *** WIRELESS APS ***
     ip address 10.1.20.1 255.255.255.0
    interface Vlan30
     ip address 10.1.30.1 255.255.255.0
    ip classless
    ip route 0.0.0.0 0.0.0.0 10.1.1.1
    ip http server
    ip http secure-server
    ip sla enable reaction-alerts
    l*** deleted for breverity ***** 
    ntp clock-period 36028827
    ntp source FastEthernet0/1
    ntp server 121.0.0.42
    ntp server 202.127.210.37
    end
    I have also placed a Device in Vlan 20 and it is able to ping the WLC and the WLC can ping it s routing is working. 
    Thanks 

    Hey Scott, 
    I gave that a shot and still no luck, log's from AP boot up:
    IIOS Bootloader - Starting system.
    flash is writable
    Tide XL MB - 40MB of flash
    Xmodem file system is available.
    flashfs[0]: 67 files, 9 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 41158656
    flashfs[0]: Bytes used: 20894208
    flashfs[0]: Bytes available: 20264448
    flashfs[0]: flashfs fsck took 20 seconds.
    Base Ethernet MAC address: f4:4e:05:b7:1e:84
    Ethernet speed is 100 Mb - FULL Duplex
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1"...#########################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-mx.153-3.JA1" uncompressed and installed, entry point: 0x2003000
    executing...
    Secondary Bootloader - Starting system.
    Montserrat Board
    40MB format
    Tide XL MB - 40MB of flash
    Xmodem file system is available.
    flashfs[0]: 67 files, 9 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 41158656
    flashfs[0]: Bytes used: 20894208
    flashfs[0]: Bytes available: 20264448
    flashfs[0]: flashfs fsck took 21 seconds.
    flashfs[1]: 0 files, 1 directories
    flashfs[1]: 0 orphaned files, 0 orphaned directories
    flashfs[1]: Total bytes: 12257280
    flashfs[1]: Bytes used: 1024
    flashfs[1]: Bytes available: 12256256
    flashfs[1]: flashfs fsck took 1 seconds.
    Base Ethernet MAC address: f4:4e:05:b7:1e:84
    Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1;flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1'
    Loading "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1"...###############################################
    File "flash:/ap3g2-k9w8-mx.153-3.JA1/ap3g2-k9w8-xx.153-3.JA1" uncompressed and installed, entry point: 0x1003000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 19-Dec-14 11:20 by prod_rel_team
    Montserrat Board
    40MB format
    Tide XL MB - 40MB of flash
    Initializing flashfs...
    flashfs[2]: 67 files, 9 directories
    flashfs[2]: 0 orphaned files, 0 orphaned directories
    flashfs[2]: Total bytes: 40900608
    flashfs[2]: Bytes used: 20894208
    flashfs[2]: Bytes available: 20006400
    flashfs[2]: flashfs fsck took 14 seconds.
    flashfs[2]: Initialization complete.
    flashfs[4]: 0 files, 1 directories
    flashfs[4]: 0 orphaned files, 0 orphaned directories
    flashfs[4]: Total bytes: 11999232
    flashfs[4]: Bytes used: 1024
    flashfs[4]: Bytes available: 11998208
    flashfs[4]: flashfs fsck took 0 seconds.
    flashfs[4]: Initialization complete.
    Copying radio files from flash: to ram:
    Copy in progress...CCCCC
    Copy in progress...CCC
    Copy in progress...CCCC
    Copy in progress...CCCC
    Copy in progress...CC
    Copy in progress...CCCC
    Copy in progress...CC
    Copy in progress...CCCCC
    Copy in progress...CCCC
    Copy in progress...CC
    Uncompressing radio files...
    ...done Initializing flashfs.
    Radio0  present 8764 8000 0 A8000000 A8010000 0
    Rate table has 650 entries (20 legacy/224 11n/406 11ac)
    POWER TABLE FILENAME = ram:/Q2.bin
    Radio1  present 8864 8000 0 80000000 80100000 4
    POWER TABLE FILENAME = ram:/Q5.bin
    Radio2 not present 0 0 0 0 0 8
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP3702I-Z-K9 (PowerPC) processor (revision A0) with 376810K/134656K bytes of memory.
    Processor board ID FGL1838X4T1
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 8.0.110.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: F4:4E:05:B7:1E:84
    Part Number                          : 73-15243-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC18343WPR
    Top Assembly Part Number             : 068-05054-03
    Top Assembly Serial Number           : FGL1838X4T1
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP3702I-Z-K9
    % Please define a domain-name first.
    Press RETURN to get started!
    *Mar  1 00:00:19.295: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed (15)
    *Mar  1 00:00:19.755: Registering HW DTLS
    *Mar  1 00:00:19.763: APAVC: Initial WLAN Buffers Given to System is  2500
    *Mar  1 00:00:19.815: APAVC:  WlanPAKs 42878 RadioPaks  42270
    *Mar  1 00:00:22.127: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:26.055: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0 (4)
    *Mar  1 00:00:26.167: Loading Power Tables from ram:/Q2.bin. Class = A
    *Mar  1 00:00:26.167:  record size of 3ss: 1168 read_ptr: 4F9698E
    *Mar  1 00:00:31.207: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1 (4)
    *Mar  1 00:00:31.251: Loading Power Tables from ram:/Q5.bin. Class = Z
    *Mar  1 00:00:31.251:  record size of vht: 2904 read_ptr: 4F9698E
    *Mar  1 00:00:31.407: Wait until the stile protocol list is initialized.
    *Mar  1 00:00:32.651: Start STILE Activation
    *Mar  1 00:00:34.571: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to down
    *Mar  1 00:00:35.447: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.3(3)JA1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 19-Dec-14 11:20 by prod_rel_team
    *Mar  1 00:00:35.447: %SNMP-5-COLDSTART: SNMP agent on host Test_1 is undergoing a cold start
    *Mar  1 00:00:36.563: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:37.787: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:37.939: %SSH-5-ENABLED: SSH 2.0 has been enabled
    *Mar  1 00:00:37.939: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:00:38.987: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:00:47.567: %LINK-6-UPDOWN: Interface BVI1, changed state to down
    *Mar  1 00:00:48.567: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
    *Mar  1 00:00:50.431: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed (2-16)
    *Mar  1 00:00:50.431: DPAA Initialization Complete
    *Mar  1 00:00:50.431: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:51.431: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:53.435: %LINK-6-UPDOWN: Interface BVI1, changed state to up
    *Mar  1 00:00:53.867: Currently running a Release Image
    *Mar  1 00:00:54.287: Incorrect certificate in SHA2 PB !
    *Mar  1 00:00:54.287: Using SHA-1 signed certificate for image signing validation.
    *Mar  1 00:00:54.575: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:59.787: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.2, mask 255.255.255.0, hostname Test_1
    *Mar  1 00:01:02.707: APAVC: Succeeded to activate all the STILE protocols.
    *Mar  1 00:01:02.707: APAVC: Registering with CFT
    *Mar  1 00:01:02.707: APAVC: CFT registration of delete callback succeeded
    *Mar  1 00:01:02.707: APAVC: Reattaching  Original Buffer pool for system use
    *Mar  1 00:01:02.707: Pool-ReAtach: paks 42878 radio42270
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:01:10.103: AP image integrity check PASSED
    *Mar  1 00:01:10.187: Incorrect certificate in SHA2 PB !
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:01:10.203: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:01:11.591: %CDP_PD-4-POWER_OK: 15.4 W power - NEGOTIATED inline power source
    *Mar  1 00:01:12.691: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.691: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:01:13.947: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:14.947: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    *Mar  1 00:01:20.211: %SYS-6-LOGGINGHOST_STARTSTOP: Logging to host 255.255.255.255 port 514 CLI Request Triggered
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:01:31.215: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    *Mar  1 00:02:11.599: %CDP_PD-4-POWER_OK: Full power - NEGOTIATED inline power source
    *Mar  1 00:02:11.603: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:11.611: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Mar  1 00:02:12.603: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
    *Mar  1 00:02:12.639: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:12.647: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:12.655: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Mar  1 00:02:13.639: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
    *Mar  1 00:02:13.647: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
    *Mar  1 00:02:13.699: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
    *Mar  1 00:02:14.699: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
    Not in Bound state.
    *Mar  1 00:02:44.719: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:02:49.839: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.3, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:02:55.719: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP
    Not in Bound state.
    *Mar  1 00:03:59.219: %CAPWAP-3-DHCP_RENEW: Could not discover WLC. Either IP address is not assigned or assigned IP is wrong. Renewing DHCP IP.
    *Mar  1 00:04:04.343: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.1.20.4, mask 255.255.255.0, hostname Test_1
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:04:10.223: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.1.1.231 obtained through DHCP

Maybe you are looking for