WLC 5508 do not Join CAP2602E

Dear All,
My WLC a 5508 version 8.0.100.0.Do not Join a CAP2602E, is the first time that i connect this model of AP to the WLC.
I have enabled some Debug and I see that on the controller I got the "Unknown AP type. Using Controller Version!!!" error on the WLC.
Following the trouble shooting guide lines about Join issue, I have also checked this:
(Cisco Controller) >show ap join stats detailed 84:80:2d:c2:9c:90  <-----This is the 2602E Mac
Sync phase statistics
- Time at sync request received............................ Not applicable
- Time at sync completed................................... Not applicable
Discovery phase statistics
- Discovery requests received.............................. 75
- Successful discovery responses sent...................... 75
- Unsuccessful discovery request processing................ 0
- Reason for last unsuccessful discovery attempt........... Not applicable
- Time at last successful discovery attempt................ Dec 02 16:43:17.470
- Time at last unsuccessful discovery attempt.............. Not applicable
Join phase statistics
- Join requests received................................... 0
- Successful join responses sent........................... 0
- Unsuccessful join request processing..................... 0
- Reason for last unsuccessful join attempt................ Not applicable
- Time at last successful join attempt..................... Not applicable
- Time at last unsuccessful join attempt................... Not applicable
Configuration phase statistics
--More-- or (q)uit
- Configuration requests received.......................... 0
- Successful configuration responses sent.................. 0
- Unsuccessful configuration request processing............ 0
- Reason for last unsuccessful configuration attempt....... Not applicable
- Time at last successful configuration attempt............ Not applicable
- Time at last unsuccessful configuration attempt.......... Not applicable
Last AP message decryption failure details
- Reason for last message decryption failure............... Not applicable
Last AP disconnect details
- Reason for last AP connection failure.................... Not applicable
- Last AP disconnect reason................................ Not applicable
Last join error summary
- Type of error that occurred last......................... None
- Reason for error that occurred last...................... Not applicable
- Time at which the last join error occurred............... Not applicable
AP disconnect details
- Reason for last AP connection failure.................... Not applicable
WLC Policy config is:  Someone can help pls?

Dear All,
I have done other tests, and I hope this time I will be more precise.
The AP are on the same vlan where is located the WLC.
I found a way to work around the problem.
If I take a out-of-the-box AP and connect if on the same vlan of WLC, and after the boot I configure on the Ap:
capwap ap ip address 172.xx.xx.xx mask
capwap ap ip defaut-gataway 172.xx.xx.xx
capwap ap controller ip address ip_addressxx.xx.xx.xx
capwap ap primary-base controller_name controller_ip_address
The Ap try to Join the WLC but with no success:
User Access Verification
Username: cisco
Password:
AP1c6a.7ae2.ab11>en
Password:
% Access denied
AP1c6a.7ae2.ab11>en
Password:
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#capwap
AP1c6a.7ae2.ab11#capwap ap
AP1c6a.7ae2.ab11#capwap ap controll
AP1c6a.7ae2.ab11#capwap ap controller ip address 172.26.110.4
AP1c6a.7ae2.ab11#capwap ap controller ip address 172.26.110.4                                  prima
AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4
AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4controller ip address 172.26.110.4                                  ip addess
AP1c6a.7ae2.ab11#capwap ap ip addess      
AP1c6a.7ae2.ab11#capwap ap ip
*Mar  1 00:03:56.479: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
*Mar  1 00:03:56.479: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
*Mar  1 00:03:56.479: %MESH-6-LINK_UPDOWN: Mesh station 1c6a.7ae2.ab11 link Down
*Mar  1 00:03:58.479: %LINK-6-UPDOWN: Interface BVI1, changed state to down
*Mar  1 00:03:59.479: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
% Incomplete command.
AP1c6a.7ae2.ab11#capwap ap ip ?
  address          Configure ap static IP address
  default-gateway  Configure Default-gateway IP address
AP1c6a.7ae2.ab11#capwap ap ip defa
AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.1
AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.1                            address\
AP1c6a.7ae2.ab11#capwap ap ip address 172.26.110.
*Mar  1 00:04:39.891: %IP-4-CLASS: Bad IP address and mask 0.0.0.0/0 in class_resolve()
*Mar  1 00:04:40.391: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
*Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: Invalid event 29 & state 4 combination.
*Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 29, state 4
*Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: Failed to handle timer message.
*Mar  1 00:04:41.555: %CAPWAP-3-ERRORLOG: Failed to process timer message.
*Mar  1 00:04:42.391: %LINK-6-UPDOWN: Interface BVI1, changed state to up
*Mar  1 00:04:43.391: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar  1 00:04:45.439: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Mar  1 00:04:45.447: %PARSER-4-BADCFG: Unexpected end of configuration file.
*Mar  1 00:04:45.467: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar  1 00:04:46.439: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar  1 00:04:46.471: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Mar  1 00:04:46.479: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar  1 00:04:47.499: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar  1 00:04:48.499: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up?
A.B.C.D  
AP1c6a.7ae2.ab11#capwap ap ip address 172.26.110.30 255.255.254.0
You should configure Domain and Name Server from controller CLI/GUI.
AP1c6a.7ae2.ab11#
*Mar  1 00:05:16.503: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to downsh
*Mar  1 00:05:16.507: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar  1 00:05:17.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar  1 00:05:17.527: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar  1 00:05:18.527: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
% Type "show ?" for a list of subcommands
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#sh cap
AP1c6a.7ae2.ab11#sh cap
*Mar  1 00:05:26.467: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Mar  1 00:05:26.467: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.003: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to downw
AP1c6a.7ae2.ab11#sh capwap
*Dec  4 07:46:23.011: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec  4 07:46:23.707: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.707: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:46:23.711: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
*Dec  4 07:46:23.711: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
*Dec  4 07:46:23.711: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Dec  4 07:46:23.711: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.291: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec  4 07:46:23.319: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:46:23.723: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.723: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:46:23.727: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
*Dec  4 07:46:23.727: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
*Dec  4 07:46:23.727: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Dec  4 07:46:23.727: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.627: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:46:23.635: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:46:23.719: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.719: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:46:23.723: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
*Dec  4 07:46:23.723: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
*Dec  4 07:46:23.723: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Dec  4 07:46:23.723: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:46:23.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.723: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:46:23.727: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:46:24.327: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:46:24.335: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:46:24.343: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec  4 07:46:24.467: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.9 peer_port: 5246
*Dec  4 07:46:24.467: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.9
*Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Dec  4 07:46:24.467: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from 172.26.110.9
*Dec  4 07:46:25.363: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:46:25.371: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:46:25.379: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec  4 07:46:26.399: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:46:27.399: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec  4 07:46:29.467: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.9
*Dec  4 07:46:29.471: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:46:29.479: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec  4 07:46:30.471: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec  4 07:46:30.499: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:46:31.499: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
% Incomplete command.
AP1c6a.7ae2.ab11#sh capwap
AP1c6a.7ae2.ab11#sh capwap ip
AP1c6a.7ae2.ab11#sh capwap ip ?
  config  CAPWAP IP static configuration
AP1c6a.7ae2.ab11#sh capwap ip con
AP1c6a.7ae2.ab11#sh capwap ip config
LWAPP Static IP Configuration
IP Address         172.26.110.30  
IP netmask         255.255.254.0  
Default Gateway    172.26.110.1   
Primary Controller 172.26.110.4   
AP1c6a.7ae2.ab11#
*Dec  4 07:47:22.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.9:5246
*Dec  4 07:47:23.035: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Dec  4 07:47:23.047: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Dec  4 07:47:23.071: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:47:24.047: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec  4 07:47:24.079: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:47:24.087: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec  4 07:47:25.107: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:47:26.107: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Dec  4 07:47:33.071: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Dec  4 07:47:33.071: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:47:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:47:36.003: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:47:36.011: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Dec  4 07:47:36.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:47:36.715: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:47:36.715: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
*Dec  4 07:47:36.715: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
*Dec  4 07:47:36.715: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Dec  4 07:47:36.715: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:47:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:47:36.287: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Dec  4 07:47:36.315: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:47:36.719: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:47:36.719: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:47:36.723: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
*Dec  4 07:47:36.723: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
*Dec  4 07:47:36.723: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Dec  4 07:47:36.723: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:47:36.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:47:36.627: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Dec  4 07:47:36.635: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Dec  4 07:47:36.719: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:47:36.719: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4
*Dec  4 07:47:36.723: %DTLS-5-ALERT: Received WARNING : Close notify alert from 172.26.110.4
*Dec  4 07:47:36.723: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 172.26.110.4:5246
*Dec  4 07:47:36.723: %CAPWAP-3-ERRORLOG: Go join a capwap controller
On the WLC side at the same time:
*spamApTask0: Dec 04 08:46:34.619: ðcIÝ
*spamApTask0: Dec 04 08:46:34.619: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
*spamApTask0: Dec 04 08:46:34.627: Unable to find deleted AP f0:9e:63:49:dd:a0
*spamApTask0: Dec 04 08:46:34.628: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
*spamApTask0: Dec 04 08:46:35.345: f0:9e:63:49:dd:a0 State machine handler: Failed to process  msg type = 3 state = 0 from 172.26.110.30:10930
*spamApTask0: Dec 04 08:46:35.346: 1c:6a:7a:e2:ab:11 Failed to parse CAPWAP packet from 172.26.110.30:10930
*spamApTask0: Dec 04 08:46:35.346: ðcIÝ
*spamApTask0: Dec 04 08:46:35.346: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
*spamApTask0: Dec 04 08:46:35.354: Unable to find deleted AP f0:9e:63:49:dd:a0
*spamApTask0: Dec 04 08:46:35.354: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
*spamApTask0: Dec 04 08:46:36.070: f0:9e:63:49:dd:a0 State machine handler: Failed to process  msg type = 3 state = 0 from 172.26.110.30:10930
*spamApTask0: Dec 04 08:46:36.070: 1c:6a:7a:e2:ab:11 Failed to parse CAPWAP packet from 172.26.110.30:10930
*spamApTask0: Dec 04 08:46:36.071: ðcIÝ
*spamApTask0: Dec 04 08:46:36.071: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
*spamApTask0: Dec 04 08:46:36.079: Unable to find deleted AP f0:9e:63:49:dd:a0
*spamApTask0: Dec 04 08:46:36.080: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
*spamApTask0: Dec 04 08:46:36.799: f0:9e:63:49:dd:a0 State machine handler: Failed to process  msg type = 3 state = 0 from 172.26.110.30:10930
*spamApTask0: Dec 04 08:46:36.799: 1c:6a:7a:e2:ab:11 Failed to parse CAPWAP packet from 172.26.110.30:10930
*spamApTask0: Dec 04 08:46:36.799: ðcIÝ
*spamApTask0: Dec 04 08:46:36.799: f0:9e:63:49:dd:a0 Radius Authentication failed. Closing dtls Connection.
*spamApTask0: Dec 04 08:46:36.807: Unable to find deleted AP f0:9e:63:49:dd:a0
*spamApTask0: Dec 04 08:46:36.808: 1c:6a:7a:e2:ab:11 Discarding non-ClientHello Handshake OR DTLS encrypted packet from  172.26.110.30:10930)since DTLS session is not established
*spamApTask1: Dec 04 08:47:36.875: Unknown AP type. Using Controller Version!!!
*spamApTask1: Dec 04 08:47:36.876: Unknown AP type. Using Controller Version!!!
*spamApTask1: Dec 04 08:47:36.876: Unknown AP type. Using Controller Version!!!
*spamApTask1: Dec 04 08:47:36.876: Unknown AP type. Using Controller Version!!!
But If I take thw same Ap unplug the power cord, and press the MODE button, then I go in Rommode, I do the command Boot, the Ap restart, I configure again the same capwap ap commands, and the Ap JOIN the WLC!!!!! Somone can explain me why?
AP1c6a.7ae2.ab11#
IOS Bootloader - Starting system.
flash is writable
FLASH CHIP:  Macronix Mirrorbit (00C2)
Xmodem file system is available.
flashfs[0]: 42 files, 8 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 11515904
flashfs[0]: Bytes available: 20482048
flashfs[0]: flashfs fsck took 16 seconds.
Reading cookie from SEEPROM
Base Ethernet MAC address: 1c:6a:7a:e2:ab:11
Ethernet speed is 100 Mb - FULL Duplex
button is pressed, wait for button to be released...
button pressed for 24 seconds
process_config_recovery: set IP address and config to default 10.0.0.1
process_config_recovery: image recovery
image_recovery: Download default IOS tar image tftp://255.255.255.255/ap3g2-k9w7-tar.default
examining image...
DPAA Set for Independent Mode
DPAA_INIT = 0x0
%Error opening tftp://255.255.255.255/ap3g2-k9w7-tar.default (connection timed out)ap:
ap:
ap:
ap:
ap:
ap:
ap: boot
Rebooting system to reset DPAA...
IOS Bootloader - Starting system.
flash is writable
FLASH CHIP:  Macronix Mirrorbit (00C2)
Xmodem file system is available.
flashfs[0]: 42 files, 8 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 11515904
flashfs[0]: Bytes available: 20482048
flashfs[0]: flashfs fsck took 15 seconds.
Reading cookie from SEEPROM
Base Ethernet MAC address: 1c:6a:7a:e2:ab:11
Ethernet speed is 100 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1"...###########################
File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-mx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
executing...
Secondary Bootloader - Starting system.
Xmodem file system is available.
flashfs[0]: 42 files, 8 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 11515904
flashfs[0]: Bytes available: 20482048
flashfs[0]: flashfs fsck took 8 seconds.
Base Ethernet MAC address: 1c:6a:7a:e2:ab:11
Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1'
Loading "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1"...###############################
File "flash:/ap3g2-k9w8-mx.152-4.JA1/ap3g2-k9w8-xx.152-4.JA1" uncompressed and installed, entry point: 0x2003000
executing...
              Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706
Cisco IOS Software, C2600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 30-Jul-13 22:57 by prod_rel_team
Initializing flashfs...
flashfs[3]: 42 files, 8 directories
flashfs[3]: 0 orphaned files, 0 orphaned directories
flashfs[3]: Total bytes: 31739904
flashfs[3]: Bytes used: 11515904
flashfs[3]: Bytes available: 20224000
flashfs[3]: flashfs fsck took 8 seconds.
flashfs[3]: Initialization complete.
flashfs[4]: 0 files, 1 directories
flashfs[4]: 0 orphaned files, 0 orphaned directories
flashfs[4]: Total bytes: 11999232
flashfs[4]: Bytes used: 1024
flashfs[4]: Bytes available: 11998208
flashfs[4]: flashfs fsck took 0 seconds.
flashfs[4]: Initialization complete.
Copying radio files from flash: to ram:
Copy in progress...CCCCC
Copy in progress...CCC
Copy in progress...CCCC
Copy in progress...CCCC
Copy in progress...CC
Uncompressing radio files...
...done Initializing flashfs.
Radio0  present 8764 8000 0 A8000000 A8010000 0
Rate table has 244 entries (64 SGI/104 BF variants)
Radio1  present 8764 8000 0 88000000 88010000 4
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
%Error opening flash:/ap3g2-rcvk9w8-mx/info (No such file or directory)cisco AIR-CAP2602E-E-K9 (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
Processor board ID FCZ1843Q0WD
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 7.5.1.73
1 Gigabit Ethernet interface
2 802.11 Radios
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 1C:6A:7A:E2:AB:11
Part Number                          : 73-14511-03
PCA Assembly Number                  : 800-37898-01
PCA Revision Number                  : B0
PCB Serial Number                    : FOC18403PBM
Top Assembly Part Number             : 800-38357-02
Top Assembly Serial Number           : FCZ1843Q0WD
Top Revision Number                  : A0
Product/Model Number                 : AIR-CAP2602E-E-K9   
% Please define a domain-name first.
Press RETURN to get started!
*Mar  1 00:00:11.299: FIPS IOS test Image Checksum successful
*Mar  1 00:00:11.299: FIPS IOS test Crypto RNG DEK Key Test successful
*Mar  1 00:00:11.299: FIPS IOS test SHA-1 successful
*Mar  1 00:00:11.299: FIPS IOS test HMAC-SHA1 successful
*Mar  1 00:00:11.299: FIPS IOS test AES CBC 128-bit Encrypt successful
*Mar  1 00:00:11.299: FIPS IOS test AES CBC 128-bit Decrypt successful
*Mar  1 00:00:11.299: FIPS IOS test IOS AES CMAC Encrypt successful
*Mar  1 00:00:11.299: FIPS IOS test IOS CCM Encrypt successful
*Mar  1 00:00:11.299: FIPS IOS test IOS CCM Decrypt successful
*Mar  1 00:00:11.331: FIPS IOS test RSA Signature Generation successful
*Mar  1 00:00:11.335: FIPS IOS test RSA Signature Verification successful
*Mar  1 00:00:11.335: %SOAP_FIPS-2-SELF_TEST_IOS_SUCCESS: IOS crypto FIPS self test passed
*Mar  1 00:00:11.335: %IFMGR-7-NO_IFINDEX_FILE: Unable to open nvram:/ifIndex-table No such file or directory
*Mar  1 00:00:11.791: Registering HW DTLS
*Mar  1 00:00:14.591: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar  1 00:00:18.271: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 0 successful
*Mar  1 00:00:18.271: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 0 successful
*Mar  1 00:00:18.271: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 0 successful
*Mar  1 00:00:18.271: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 0 successful
*Mar  1 00:00:18.271: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 0
*Mar  1 00:00:24.399: FIPS RADIO test AES 128-bit encrypt for TX on Dot11Radio 1 successful
*Mar  1 00:00:24.399: FIPS RADIO test AES 128-bit CCM encrypt on Dot11Radio 1 successful
*Mar  1 00:00:24.399: FIPS RADIO test AES 128-bit CCM decrypt on Dot11Radio 1 successful
*Mar  1 00:00:24.399: FIPS RADIO test AMAC AES 128-bit CMAC encrypt on Dot11Radio 1 successful
*Mar  1 00:00:24.399: %SOAP_FIPS-2-SELF_TEST_RAD_SUCCESS: RADIO crypto FIPS self test passed on interface Dot11Radio 1
*Mar  1 00:00:24.483: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
*Mar  1 00:00:26.831: %CDP_PD-4-POWER_OK: Full power - AC_ADAPTOR inline power source
*Mar  1 00:00:26.859: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C2600 Software (AP3G2-K9W8-M), Version 15.2(4)JA1, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Tue 30-Jul-13 22:57 by prod_rel_team
*Mar  1 00:00:26.859: %SNMP-5-COLDSTART: SNMP agent on host ap is undergoing a cold start
*Mar  1 00:00:26.915: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar  1 00:00:26.923: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
*Mar  1 00:00:26.923: %CAPWAP-3-ERRORLOG: Failed to load configuration from flash. Resetting to default config
*Mar  1 00:00:26.927: %PARSER-4-BADCFG: Unexpected end of configuration file.
*Mar  1 00:00:26.939: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to uplwapp_crypto_init: MIC Present and Parsed Successfully
*Mar  1 00:00:27.031: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar  1 00:00:27.031: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Mar  1 00:00:27.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar  1 00:00:27.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar  1 00:00:28.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Mar  1 00:00:28.083: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Mar  1 00:00:29.071: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar  1 00:00:29.159: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Mar  1 00:00:29.167: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Mar  1 00:00:29.175: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Mar  1 00:00:30.063: FIPS HW test SHA-1 successful
*Mar  1 00:00:30.063: FIPS HW test HMAC-SHA1 successful
*Mar  1 00:00:30.063: FIPS HW test AES CBC 128-bit Encrypt successful
*Mar  1 00:00:30.063: FIPS HW test AES CBC 128-bit Decrypt successful
*Mar  1 00:00:30.159: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Mar  1 00:00:30.167: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Mar  1 00:00:30.195: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Mar  1 00:00:30.563: FIPS HW test SHA-1 successful
*Mar  1 00:00:30.563: FIPS HW test HMAC-SHA1 successful
*Mar  1 00:00:30.563: FIPS HW test AES CBC 128-bit Encrypt successful
*Mar  1 00:00:30.563: FIPS HW test AES CBC 128-bit Decrypt successful
*Mar  1 00:00:30.563: %SOAP_FIPS-2-SELF_TEST_HW_SUCCESS: HW crypto FIPS self test passed
*Mar  1 00:00:30.563: DPAA Initialization Complete
*Mar  1 00:00:30.563: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Mar  1 00:00:31.195: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Mar  1 00:00:31.563: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar  1 00:00:55.703: Logging LWAPP message to 255.255.255.255.
Not in Bound state.
*Mar  1 00:01:55.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
User Access Verification
Username: cisco
Password:
AP1c6a.7ae2.ab11>en
Password:
AP1c6a.7ae2.ab11#sh capwap
AP1c6a.7ae2.ab11#sh capwap ip
AP1c6a.7ae2.ab11#sh capwap ip con
AP1c6a.7ae2.ab11#sh capwap ip config
LWAPP Static IP Configuration
AP1c6a.7ae2.ab11#
Not in Bound state.
*Mar  1 00:02:45.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#cap
AP1c6a.7ae2.ab11#capwap ap
AP1c6a.7ae2.ab11#capwap ap co
AP1c6a.7ae2.ab11#capwap ap controller 172.26.110.4
                                      ^
% Invalid input detected at '^' marker.
AP1c6a.7ae2.ab11#capwap ap controller 172.26.110.4i172.26.110.4p172.26.110.4 172.26.110.4a172.26.110.4d172.26.110.4d172.26.110.4r172.26.110.4e172.26.110.4s172.26.110.4s172.26.110.4 172.26.110.4
AP1c6a.7ae2.ab11#capwap ap controller ip address 172.26.110.4                                    prim
AP1c6a.7ae2.ab11#capwap ap prima
AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.2
Not in Bound state.6.
*Mar  1 00:03:35.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.110.4 ?
  <cr>
AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4
AP1c6a.7ae2.ab11#capwap ap primary-base wlc01 172.26.110.4                                 ip def
AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.4 1
AP1c6a.7ae2.ab11#capwap ap ip default-gateway 172.26.110.1                            add
AP1c6a.7ae2.ab11#capwap ap ip address 172.26.110.30 255.255.254.0
Not in Bound state.
*Mar  1 00:04:25.707: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
You should configure Domain and Name Server from controller CLI/GUI.
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#
AP1c6a.7ae2.ab11#sh cap
AP1c6a.7ae2.ab11#sh capw
AP1c6a.7ae2.ab11#sh capwap ip
AP1c6a.7ae2.ab11#sh capwap ip con
Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
AP1c6a.7ae2.ab11#sh capwap ip config
LWAPP Static IP Configuration
IP Address         172.26.110.30  
IP netmask         255.255.254.0  
Default Gateway    172.26.110.1   
Primary Controller 172.26.110.4   
AP1c6a.7ae2.ab11#
*Mar  1 00:04:47.067: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
examining image...!
extracting info (283 bytes)
Image info:
    Version Suffix: k9w8-.153-3.JA
    Image Name: ap3g2-k9w8-mx.153-3.JA
    Version Directory: ap3g2-k9w8-mx.153-3.JA
    Ios Image Size: 225792
    Total Image Size: 13455872
    Image Feature: WIRELESS LAN|LWAPP
    Image Family: AP3G2
    Wireless Switch Management Version: 8.0.100.0
Extracting files...
*Mar  1 00:04:57.067: %CAPWAP-3-ERRORLOG: Selected MWAR 'wlc01'(index 0).
*Mar  1 00:04:57.067: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Dec  4 07:57:47.000: %CAPWAP-5-DTLSREQSEND: DT
ap3g2-k9w8-mx.153-3.JA/ (directory) 0 (bytes)
extracting ap3g2-k9w8-mx.153-3.JA/V2.bin (12826 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/Y2.bin (5830 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/file_hashes (7254 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/8004.img (561134 bytes)!!!LS connection request sent peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:57:47.707: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.26.110.4 peer_port: 5246
*Dec  4 07:57:47.707: %CAPWAP-5-SENDJOIN: sending Join Request to 172.26.110.4perform archive download capwap:/ap3g2 tar file
*Dec  4 07:57:47.751: %CAPWAP-6-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
*Dec  4 07:57:47.751: Loading file /ap3g2...
extracting ap3g2-k9w8-mx.153-3.JA/U2.bin (6996 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/X5.bin (1566 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/final_hash.sig (513 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/R5.bin (3423 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-k9w8-tx.153-3.JA (73 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/R2.bin (13992 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/img_sign_rel_sha2.cert (1371 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/B2.bin (9328 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/info (283 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/F5.bin (3662 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/8006.img (563979 bytes)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
ap3g2-k9w8-mx.153-3.JA/html/ (directory) 0 (bytes)
ap3g2-k9w8-mx.153-3.JA/html/level/ (directory) 0 (bytes)
ap3g2-k9w8-mx.153-3.JA/html/level/1/ (directory) 0 (bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/forms.js (20125 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/appsui.js (563 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/ap_home.shtml.gz (1370 bytes)!
ap3g2-k9w8-mx.153-3.JA/html/level/1/images/ (directory) 0 (bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/info.gif (399 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/cisco-logo-2007.gif (1648 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/background_web41.jpg (732 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/login_homeap.gif (19671 bytes)!!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/images/itp-logo.png (2822 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/config.js (27254 bytes)!!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/sitewide.js (17250 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/officeExtendap.css (41801 bytes)!!!!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/back.shtml (512 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/1/config-oeap.js (779 bytes)
ap3g2-k9w8-mx.153-3.JA/html/level/15/ (directory) 0 (bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapBanner.htm (7514 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapConfig.shtml.gz (2864 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapSummary.htm (985 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapHelp.htm (5721 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapMain.shtml.gz (3350 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/html/level/15/officeExtendapEvent.shtml.gz (988 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/B5.bin (1963 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/E5.bin (1846 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/Y5.bin (1511 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/C2.bin (19822 bytes)!!
extracting ap3g2-k9w8-mx.153-3.JA/final_hash (141 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-k9w8-xx.153-3.JA (11381713 bytes)!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
*Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: Invalid event 48 & state 10 combination.
*Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer message. Event 48, state 10
*Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: Failed to handle timer message.
*Dec  4 07:59:47.723: %CAPWAP-3-ERRORLOG: Failed to process timer message.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
extracting ap3g2-k9w8-mx.153-3.JA/C5.bin (6936 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-k9w8-mx.153-3.JA (215867 bytes)!!!!!!!!!!!!!!!!!
extracting ap3g2-k9w8-mx.153-3.JA/U5.bin (3048 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/img_sign_rel.cert (1375 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/Q5.bin (2806 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/X2.bin (16324 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/E2.bin (19822 bytes)!!
extracting ap3g2-k9w8-mx.153-3.JA/Q2.bin (6996 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-bl-2600 (190140 bytes)!!!!!!!!!!!!!!
extracting ap3g2-k9w8-mx.153-3.JA/V5.bin (512 bytes)
extracting ap3g2-k9w8-mx.153-3.JA/F2.bin (13992 bytes)!
extracting ap3g2-k9w8-mx.153-3.JA/ap3g2-bl-3600 (189183 bytes)!!!!!!!!!!!!!!!
extracting info.ver (283 bytes)
Deleting current version: flash:/ap3g2-k9w8-mx.152-4.JA1...
Set booting path to recovery image: ''...done.
New software image installed in flash:/ap3g2-k9w8-mx.153-3.JA
Configuring system to use
n
e
wW riimtaigneg. .o.udto nteh.e
eavrecnhti vleo gd otwon lfolaads:h :t/aekveesn t1.5l1o gs e.c.o.n
d
s

Similar Messages

  • WLC 5508 Most Recent Traps Duplications

    Hi,
    I have recently noticed that in my WLC traps  I keep finding lots of Mac addresses that have many hits on joining but it's the same MAC ADDRESS.  Example Mac addresss'08:11:96:e4:1a:60
    4
    Wed Mar 27 16:05:56 2013
    Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
    5
    Wed Mar 27 16:05:45 2013
    Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
    7
    Wed Mar 27 16:04:53 2013
    Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
    12
    Wed Mar 27 16:02:51 2013
    Client with MAC address 08:11:96:e4:1a:60 has joined profile corporate
      This has like 20 hits in the traps section and when I check my ISE this is also reflected on the authentication aspect. This is starting to occur with many different client laptops, why does it keep re-authenticatiing into the profile joined?
    Is there a Time to Live TTL setting I can set so it doesn't poll so often? The users aren't doing anything this is all occuring automcatically, I think it's the WLC 5508 controller not the ISE.
    Any ideas?
    Any information would be great.
    Cheers
    Eddy

    Hi Eddy,
    I am not an ISE guy so not sure about ISE config. But I would say couldn't it be roaming that increases the hit count?
    Whenever a client roams it authenticates again with the radius server. There are key caching mechanisms to bypass this process and makes roaming faster.
    You may read this: https://supportforums.cisco.com/thread/2065138
    Now, if for some reason the WLC sends a request to the ISE for every roaming process then that probably explains what you see
    HTH
    Amjad
    Rating useful replies is more useful than saying "Thank you"

  • LMS 4.2 and WLC 5508

    Hi all,
    Recently I have replaced 2 4400 WLC by 5508 wlc's.
    I have also replaced both 4400 in LMS by those new 5508. They have the same ip's, so I have removed the old 4400's from LMS and created 2 new devices.
    When checking the device center, LMS tells me Data collection, User tracking, Inventory and Fault discovery has succeeded.
    When I check the Reachability status in device center it is ok for ping, telnet, SSH, SNMPV2 read, SNMPV2 write. However I am not able to open the configuration through Config editor. He gives me the pop-up "CEDT0042: No latest configuration file exists for the device in Archive."
    When I go and check the archive summary report, I can see for both devices the log below:
    NMP: Failed to establish SNMP connection to x.x.x.x - Cause: Device is Unreachable. Check the ReadOnly community string. SNMP: Failed to establish SNMP connection to x.x.x.x - Cause: Device is Unreachable. Check the ReadOnly community string.
    Any ideas,
    Thanks,
    Joris

    Hello,
    I think I have found the problem. WLC 5508 is not compatible with LMS 4.2.2.
    I can find this in the release notes:
    Cisco Unified Wireless Network Solution Components
    The following components are part of the Cisco UWN Solution and are compatible in this release:
    Note For more information on the compatibility of wireless software components across releases, see the Cisco Wireless Solutions Software Compatibility Matrix.
    •Cisco IOS Release 15.2(2)JB
    •Cisco Prime Infrastructure 1.3
    •Mobility Services Engine (MSE) 7.4.100.0 software release and context-aware software
    Apparently only Prime 1.3 can manage this device.
    Joris

  • Autonomous 1252 converted to CAPWAP will not join 5508 WLC

    WLC 5508 firmware is v6.0.188.0
    I've tried updating the autonomous 1252 via both the upgrade tool 3.4 and 'archive download-sw' from the CLI
    I've tried multiple recovery images
    c1250-rcvk9w8-tar.124-21a.JA2.tar
    c1250-rcvk9w8-tar.124-10b.JDA.tar
    After AP reboots with recovery image it joins WLC and downloads new CAPWAP image then reboots again
    AP will not rejoin WLC with updated CAPWAP firmware
    Any help with this is greatly appreciated!
    Thanks in advance and happy holidays,
    Scott
    Error Msg from 1252 console
    *Dec 18 15:52:50.691: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:52:50.695: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    Additional info
    WLC Debugs Enabled:
    MAC address ................................ c4:7d:4f:39:31:e2
    Debug Flags Enabled:
      aaa detail enabled.
      capwap error enabled.
      capwap critical enabled.
      capwap events enabled.
      capwap state enabled.
      dtls event enabled.
      lwapp events enabled.
      lwapp errors enabled.
      pm pki enabled.
    WLC Debug Output:
    *Dec 18 10:51:51.575: dtls_conn_hash_search: Connection not found in hash table - Table empty.
    *Dec 18 10:51:51.575: sshpmGetCID: called to evaluate <cscoDefaultIdCert>
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: called to get cert for CID 154c7072
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 2, certname >cscoDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: called to evaluate <cscoDefaultIdCert>
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetSshPrivateKeyFromCID: called to get key for CID 154c7072
    *Dec 18 10:51:51.575: sshpmGetSshPrivateKeyFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.576: sshpmGetSshPrivateKeyFromCID: comparing to row 1, certname >bsnDefaultIdCert<
    *Dec 18 10:51:51.576: sshpmGetSshPrivateKeyFromCID: comparing to row 2, certname >cscoDefaultIdCert<
    *Dec 18 10:51:51.576: sshpmGetSshPrivateKeyFromCID: match in row 2
    *Dec 18 10:51:51.692: acDtlsCallback: Certificate installed for PKI based authentication.
    *Dec 18 10:51:51.693: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=0
    *Dec 18 10:51:51.693: local_openssl_dtls_record_inspect:   msg=ClientHello len=44 seq=0 frag_off=0 frag_len=44
    *Dec 18 10:51:51.693: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.693: local_openssl_dtls_send: Sending 60 bytes
    *Dec 18 10:51:51.694: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.694: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=1
    *Dec 18 10:51:51.694: local_openssl_dtls_record_inspect:   msg=ClientHello len=76 seq=1 frag_off=0 frag_len=76
    *Dec 18 10:51:51.695: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.695: local_openssl_dtls_send: Sending 544 bytes
    *Dec 18 10:51:51.695: local_openssl_dtls_send: Sending 544 bytes
    *Dec 18 10:51:51.696: local_openssl_dtls_send: Sending 314 bytes
    *Dec 18 10:51:51.712: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=2
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect:   msg=Certificate len=1146 seq=2 frag_off=0 frag_len=519
    *Dec 18 10:51:51.712: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.712: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=3
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect:   msg=Certificate len=1146 seq=2 frag_off=519 frag_len=519
    *Dec 18 10:51:51.713: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.713: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.713: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=4
    *Dec 18 10:51:51.713: local_openssl_dtls_record_inspect:   msg=Certificate len=1146 seq=2 frag_off=1038 frag_len=108
    *Dec 18 10:51:51.714: sshpmGetIssuerHandles: locking ca cert table
    *Dec 18 10:51:51.714: sshpmGetIssuerHandles: calling x509_alloc() for user cert
    *Dec 18 10:51:51.714: sshpmGetIssuerHandles: calling x509_decode()
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: <subject> C=US, ST=California, L=San Jose, O=Cisco Systems, CN=C1250-c47d4f3931e2, [email protected]
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: <issuer>  O=Cisco Systems, CN=Cisco Manufacturing CA
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: Mac Address in subject is c4:7d:4f:39:31:e2
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: Cert Name in subject is C1250-c47d4f3931e2
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: Cert is issued by Cisco Systems.
    *Dec 18 10:51:51.719: sshpmGetCID: called to evaluate <cscoDefaultMfgCaCert>
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: called to get cert for CID 2ab15c0a
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.719: ssphmUserCertVerify: calling x509_decode()
    *Dec 18 10:51:51.730: ssphmUserCertVerify: user cert verfied using >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: ValidityString (current): 2009/12/18/15:51:51
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: ValidityString (NotBefore): 2009/11/03/00:47:36
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: ValidityString (NotAfter): 2019/11/03/00:57:36
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: getting cisco ID cert handle...
    *Dec 18 10:51:51.730: sshpmGetCID: called to evaluate <cscoDefaultIdCert>
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<
    *Dec 18 10:51:51.731: sshpmFreePublicKeyHandle: called with 0x1f1f3b8c
    *Dec 18 10:51:51.731: sshpmFreePublicKeyHandle: freeing public key
    *Dec 18 10:51:51.731: openssl_shim_cert_verify_callback: Certificate verification - passed!
    *Dec 18 10:51:51.732: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:52.155: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:52.155: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=5
    *Dec 18 10:51:52.155: local_openssl_dtls_record_inspect:   msg=ClientKeyExchange len=258 seq=3 frag_off=0 frag_len=258
    *Dec 18 10:51:52.269: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:52.269: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=6
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect:   msg=CertificateVerify len=258 seq=4 frag_off=0 frag_len=258
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect: record=ChangeCipherSpec epoch=0 seq=7
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect: record=Handshake epoch=1 seq=0
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect:   msg=Unknown or Encrypted
    *Dec 18 10:51:52.273: openssl_dtls_process_packet: Connection established!
    *Dec 18 10:51:52.273: acDtlsCallback: DTLS Connection 0x167c5c00 established
    *Dec 18 10:51:52.273: openssl_dtls_mtu_update: Setting DTLS MTU for link to peer 192.168.100.54:62227
    *Dec 18 10:51:52.273: local_openssl_dtls_send: Sending 91 bytes
    *Dec 18 10:53:06.183: sshpmLscTask: LSC Task received a message 4
    Aironet 1252 Console Debug:
    *Dec 16 11:07:12.055: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec 18 15:51:40.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:51:40.999: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Dec 18 15:51:41.695: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:51:41.699: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:51:41.699: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    *Dec 18 15:51:46.695: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    *Dec 18 15:52:39.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.100.2:5246
    *Dec 18 15:52:40.039: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Dec 18 15:52:40.039: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Dec 18 15:52:40.051: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *Dec 18 15:52:40.051: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
    *Dec 18 15:52:40.059: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec 18 15:52:40.063: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
    *Dec 18 15:52:40.079: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec 18 15:52:40.079: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Dec 18 15:52:50.059: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec 18 15:52:50.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:52:50.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Dec 18 15:52:50.691: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:52:50.695: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    *Dec 18 15:52:55.691: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.1

    Nathan and Leo are alluding to CSCte01087. Basically the caveat is that DTLS fails on a non-00:xx:xx:xx:xx:xx L2 first hop. e.g. if the APs are on the same VLAN as the management interface, they must have 00 MACs; if they are on a different VLAN, the WLC/AP gateway must have a 00 MAC. If the workaround below does not suit your environment, open a TAC case for an image with the fix.
      Symptom:
    An access point running 6.0.188.0 code may be unable to join a WLC5508.
    Messages similar to the following will be seen on the AP.
       %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
       %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message
    Conditions:
    At least one of the following conditions pertains:
    - The high order byte of the AP's MAC address is nonzero, and the AP is in
    the same subnet as the WLC5508's management (or AP manager) interface
    - The WLC's management (or AP manager) interface's default gateway's
    MAC address' high order byte is nonzero.
    Workaround:
    If the MAC address of the WLC's default gateway does not begin with 00,
    and if all of the APs' MAC addresses begin with 00, then: you can put
    the APs into the same subnet as the WLC's management (or AP manager)
    interface.
    In the general case, for the situation where the WLC's default gateway's
    MAC does not begin with 00, you can address this by changing it to begin
    with 00. Some methods for doing this include:
    -- use the "mac-address" command on the gateway, to set a MAC address
    that begins with 00
    -- then enable HSRP on the gateway (standby ip ww.xx.yy.zz) and use this
    IP as the WLC's gateway.
    For the case where the APs' MAC addresses do not begin with 00, then make
    sure that they are *not* in the same subnet as the WLC's management
    (AP manager) interface, but are behind a router.
    Another workaround is to downgrade to 6.0.182.0.  However, after
    downgrading the WLC to 6.0.182.0, any APs that have 6.0.188.0 IOS
    (i.e. 12.4(21a)JA2) still installed on them will be unable to join.
    Therefore, after downgrading the WLC, the APs will need to have a
    pre-12.4(21a)JA2 rcvk9w8 or k9w8 image installed on them.

  • AIR-CAP1602I-E-K9 Not Talking to WLC 5508

    hi all,
    can't seem to get my APs to talk to WLC 5508.
    can someone advise which WLC firmware to use and where can i get/download (link pls).
    currently WLC is running 6.0.199.4.
    Mar  1 00:00:47.839: %CDP_PD-4-POWER_OK: All radios disabled - NEGOTIATED inlin
    e power source
    *Mar  1 00:00:53.931: %CAPWAP-3-ERRORLOG: Not sending discovery request AP does
    not have an Ip !!
    *Mar  1 00:00:55.963: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP addre
    ss 172.28.159.15, mask 255.255.255.192, hostname APfc99.47a3.4d22
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Mar  1 00:01:06.899: %CAPWAP-3-ERRORLOG: Did not get log server settings from D
    HCP.
    *Mar  1 00:01:15.899: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROL
    LER
    *Mar  1 00:01:15.899: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'Cisco_f8
    :72:64'running version 6.0.199.4 is rejected.    <<<<
    APfc99.47a3.4d22>sh ve
    Cisco IOS Software, C1600 Software (AP1G2-RCVK9W8-M), Version 15.2(2)JB, RELEASE
    SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Tue 11-Dec-12 04:52 by prod_rel_team
    ROM: Bootstrap program is C1600 boot loader
    BOOTLDR: C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFT
    WARE (fc1)
    APfc99.47a3.4d22 uptime is 11 minutes
    System returned to ROM by power-on
    System image file is "flash:/ap1g2-rcvk9w8-mx/ap1g2-rcvk9w8-mx"
    Last reload reason:
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP1602I-E-K9    (PowerPC) processor (revision B0) with 98294K/32768K
    bytes of memory.
    Processor board ID FGL1726W6DQ
    PowerPC CPU at 533Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.4.1.37
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: FC:99:47:A3:4D:22
    Part Number                          : 73-14671-04
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC17182J4J
    Top Assembly Part Number             : 800-38552-01
    Top Assembly Serial Number           : FGL1726W6DQ
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP1602I-E-K9
    Configuration register is 0xF

    Hi,
    Date and time is ok on the WLC,
    I configured Accept Self Signed Certificate (SSC) under Security / AP policy, once done the WLC recognized the AP, but output from the console of the AP  power cycle the access point is:
    IOS Bootloader - Starting system.
    FLASH CHIP: Micronix MX25L256_35F
    Xmodem file system is available.
    flashfs[0]: 5 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31936000
    flashfs[0]: Bytes used: 6551040
    flashfs[0]: Bytes available: 25384960
    flashfs[0]: flashfs fsck took 9 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 4c:00:82:9a:47:a3
    ************* loopback_mode = 0
    Loading "flash:/ap1g2-rcvk9w8-mx/ap1g2-rcvk9w8-mx"...####################
    File "flash:/ap1g2-rcvk9w8-mx/ap1g2-rcvk9w8-mx" uncompressed and installed, entr
    y point: 0x100000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C1600 Software (AP1G2-RCVK9W8-M), Version 15.2(2)JB, RELEASE
    SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Tue 11-Dec-12 04:52 by prod_rel_team
    Initializing flashfs...
    FLASH CHIP: Micronix MX25L256_35F
    flashfs[2]: 5 files, 2 directories
    flashfs[2]: 0 orphaned files, 0 orphaned directories
    flashfs[2]: Total bytes: 31808000
    flashfs[2]: Bytes used: 6551040
    flashfs[2]: Bytes available: 25256960
    flashfs[2]: flashfs fsck took 9 seconds.
    flashfs[2]: Initialization complete.
    flashfs[3]: 0 files, 1 directories
    flashfs[3]: 0 orphaned files, 0 orphaned directories
    flashfs[3]: Total bytes: 11999232
    flashfs[3]: Bytes used: 1024
    flashfs[3]: Bytes available: 11998208
    flashfs[3]: flashfs fsck took 1 seconds.
    flashfs[3]: Initialization complete....done Initializing flashfs.
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    memory validate-checksum 30
    ^
    % Invalid input detected at '^' marker.
    no ip http server
           ^
    % Invalid input detected at '^' marker.
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    login authentication default
      ^
    % Invalid input detected at '^' marker.
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    Warning:  the compile-time code checksum does not appear to be present.
    cisco AIR-CAP1602I-N-K9    (PowerPC) processor (revision B0) with 98294K/32768K
    bytes of memory.
    Processor board ID FGL1730S57A
    PowerPC CPU at 533Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.4.1.37
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 4C:00:82:9A:47:A3
    Part Number                          : 73-14671-04
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC17284HL9
    Top Assembly Part Number             : 800-38552-01
    Top Assembly Serial Number           : FGL1730S57A
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP1602I-N-K9
    % Please define a domain-name first.
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    logging trap emergencies
            ^
    % Invalid input detected at '^' marker.
    Press RETURN to get started!
    *Mar  1 00:00:12.451: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. In
    itialising Cfg
    *Mar  1 00:00:13.683: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state
    to up
    *Mar  1 00:00:14.687: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEth
    ernet0, changed state to up
    *Mar  1 00:00:15.123: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1600 Software (AP1G2-RCVK9W8-M), Version 15.2(2)JB, RELEASE
    SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Tue 11-Dec-12 04:52 by prod_rel_team
    *Mar  1 00:00:15.151: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. In
    itialising Cfg
    *Mar  1 00:00:15.151: %CAPWAP-3-ERRORLOG: Failed to load configuration from flas
    h. Resetting to default config
    *Mar  1 00:00:16.195: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, chan
    ged state to uplwapp_crypto_init: MIC Present and Parsed Successfully
    no bridge-group 1 source-learning
                       ^
    % Invalid input detected at '^' marker.
    %Default route without gateway, if not a point-to-point interface, may impact pe
    rformance
    *Mar  1 00:00:48.695: %CDP_PD-4-POWER_OK: All radios disabled - INJECTOR_CONFIGU
    RED_ON_SOURCE inline power source
    *Mar  1 00:00:48.923: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP addre
    ss 10.2.3.100, mask 255.255.255.0, hostname AP4c00.829a.47a3
    Translating "CISCO-CAPWAP-CONTROLLER.campeche.ecosur.mx"...domain server (10.2.3
    .10) [OK]
    *Mar  1 00:00:59.915: %CAPWAP-3-ERRORLOG: Did not get log server settings from D
    HCP.
    *Mar  1 00:00:59.919: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is
    not established. A0203E6, 147E, A020364, A47B, 0
    *Mar  1 00:01:09.915: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Jan 29 09:33:18.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
    p: 10.2.3.230 peer_port: 5246
    *Jan 29 09:33:18.535: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully
    peer_ip: 10.2.3.230 peer_port: 5246
    *Jan 29 09:33:18.535: %CAPWAP-5-SENDJOIN: sending Join Request to 10.2.3.230
    *Jan 29 09:33:23.535: %CAPWAP-5-SENDJOIN: sending Join Request to 10.2.3.230
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    logging trap emergencies
            ^
    % Invalid input detected at '^' marker.
    *Jan 29 09:34:17.999: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.
    2.3.230:5246
    *Jan 29 09:34:17.999: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led sta
    te 255
    *Jan 29 09:34:17.999: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. In
    itialising Cfg
    *Jan 29 09:34:17.999: %CAPWAP-3-ERRORLOG: Failed to load configuration from flas
    h. Resetting to default config
    *Jan 29 09:34:28.015: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Jan 29 09:34:28.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
    p: 10.2.3.230 peer_port: 5246
    *Jan 29 09:34:28.535: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully
    peer_ip: 10.2.3.230 peer_port: 5246
    *Jan 29 09:34:28.535: %CAPWAP-5-SENDJOIN: sending Join Request to 10.2.3.230
    *Jan 29 09:34:33.535: %CAPWAP-5-SENDJOIN: sending Join Request to 10.2.3.230
    and debug command output enable CAPWAP events
    (Cisco Controller) >debug capwap events enable
    (Cisco Controller) >*spamApTask7: Jan 29 03:39:08.092: acDtlsPlumbControlPlaneKeys: lrad:10.2.3.100(42107) mwar:10.2.3.230(5246)
    *spamApTask7: Jan 29 03:39:08.093: 4c:00:82:9a:47:a0 DTLS keys for Control Plane deleted successfully for AP 10.2.3.100
    *spamApTask7: Jan 29 03:39:08.100: 4c:00:82:9a:47:a0 DTLS connection closed event receivedserver (10.2.3.230/5246) client (10.2.3.100/42107)
    *spamApTask7: Jan 29 03:39:08.100: 4c:00:82:9a:47:a0 Entry exists for AP (10.2.3.100/42107)
    *spamApTask7: Jan 29 03:39:08.100: 4c:00:82:9a:47:a0 No AP entry exist in temporary database for 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:08.104: 4c:00:82:9a:47:a0 Discovery Request from 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:08.104: 4c:00:82:9a:47:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 500, joined Aps =0
    *spamApTask7: Jan 29 03:39:08.104: apModel:
    *spamApTask7: Jan 29 03:39:08.104: apType = 38 apModel:
    *spamApTask0: Jan 29 03:39:08.105: 4c:00:82:9a:47:a3 Received LWAPP DISCOVERY REQUEST to 6c:41:6a:5f:95:2f on port '13'
    *spamApTask0: Jan 29 03:39:08.105: 4c:00:82:9a:47:a3 Discarding discovery request in LWAPP from AP supporting CAPWAP
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Discovery Response sent to 10.2.3.100 port 42107
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Discovery Response sent to 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Discovery Request from 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 500, joined Aps =0
    *spamApTask7: Jan 29 03:39:08.105: apModel:
    *spamApTask7: Jan 29 03:39:08.105: apType = 38 apModel:
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Discovery Response sent to 10.2.3.100 port 42107
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Discovery Response sent to 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Discovery Request from 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:08.105: 4c:00:82:9a:47:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 500, joined Aps =0
    *spamApTask7: Jan 29 03:39:08.105: apModel:
    *spamApTask7: Jan 29 03:39:08.105: apType = 38 apModel:
    *spamApTask7: Jan 29 03:39:08.106: 4c:00:82:9a:47:a0 Discovery Response sent to 10.2.3.100 port 42107
    (Cisco Controller) >*spamApTask7: Jan 29 03:39:08.106: 4c:00:82:9a:47:a0 Discovery Response sent to 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:18.104: 4c:00:82:9a:47:a3 DTLS connection not found, creating new connection for 10:2:3:100 (42107) 10:2:3:230 (5246)
    *spamApTask7: Jan 29 03:39:18.638: acDtlsPlumbControlPlaneKeys: lrad:10.2.3.100(42107) mwar:10.2.3.230(5246)
    *spamApTask7: Jan 29 03:39:18.638: 4c:00:82:9a:47:a3 Allocated index from main list, Index: 397
    *spamApTask7: Jan 29 03:39:18.638: 4c:00:82:9a:47:a3 Using CipherSuite AES128-SHA
    *spamApTask7: Jan 29 03:39:18.638: 4c:00:82:9a:47:a3 DTLS keys for Control Plane are plumbed successfully for AP 10.2.3.100. Index 398
    *spamApTask6: Jan 29 03:39:18.638: 4c:00:82:9a:47:a3 DTLS Session established server (10.2.3.230:5246), client (10.2.3.100:42107)
    *spamApTask6: Jan 29 03:39:18.638: 4c:00:82:9a:47:a3 Starting wait join timer for AP: 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:23.636: 4c:00:82:9a:47:a0 Join Request from 10.2.3.100:42107
    *spamApTask7: Jan 29 03:39:23.636: 4c:00:82:9a:47:a3 Deleting AP entry 10.2.3.100:42107 from temporary database.
    *spamApTask7: Jan 29 03:39:23.637: 4c:00:82:9a:47:a0 MIC AP is not allowed to join by config
    *spamApTask7: Jan 29 03:39:23.637: 4c:00:82:9a:47:a0 Join Request failed!

  • APs not joining 5508 on dynamic ports created manualy

    Hey all,
    i have a problem with our new 5508 wireless controller (7.0.116.0).
    Port 1 is the system default "management" (Port 2 is backup). Dynamic AP Management is disabled.
    Port 3 is a new dynamic interface "ap-manager 2" with Dynamic AP Management enabled and has a ip in a seperated VLAN which is not routed.
    When i am connecting the AP (1260 series) to the "ap-manager 2" interface, then it will not join and i get an error message on the WLC:
    *spamApTask1: Mar 05 14:52:12.783: %CAPWAP-3-DISC_INTF_ERR1:
    capwap_ac_sm.c:1453 Ignoring discovery request received on non-management
    interface (3) from AP
    When i am connecting the AP to the "management2 interface, then it is working fine. But i don't want the APs in the Management LAN. I want them in the separated no routed LAN explicit for the APs.
    What do i miss here.
    Thanks a lot.
    Regards
    Matthew

    Hmmm...but i found follwoing in the documentation:
    The AP-manager interface's IP address must be different from the management interface's IP address and may or may not be on the same subnet as the management interface. However, we recommend that both interfaces be on the same subnet for optimum access point association.
    I want the APs in a separated non routed LAN because of security reasons. Why set APs into the management LAN when they only need to communicate with the controller?
    But if there is no way to do that, then i need to redesign the plans for the WLAN structure.
    Thanks
    Matthew

  • AP 1552E Lightweight not joining WLC

    I have a WLC 5508 network that works well with 1200 Series APs and now we got a 1552E AP that is in lightweight mode but doesnt join the WLC.
    The AP seems to be able to get to the WLC but some how the connection is not established fully, I suspect maybe the encapsulation could be the problem let me know if you have an idea. The WLC ip is 192.168.0.17 while the AP has a static IP of 192.168.0.123.
    *Feb 10 14:49:29.711: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.17
    *Feb 10 14:49:29.711: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 10 14:49:29.715: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.0.17
    *Feb 10 14:49:29.715: %DTLS-5-PEER_DISCONNECT: Peer 192.168.0.17 has closed connection.
    *Feb 10 14:49:29.715: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.17:5246
    *Feb 10 14:49:29.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:29.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 10 14:49:29.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:29.711: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.17
    *Feb 10 14:49:29.711: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 10 14:49:29.711: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.0.17
    *Feb 10 14:49:29.711: %DTLS-5-PEER_DISCONNECT: Peer 192.168.0.17 has closed connection.
    *Feb 10 14:49:29.711: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.17:5246
    *Feb 10 14:49:29.755: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Feb 10 14:49:29.755: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Feb 10 14:49:29.835:  status of voice_diag_test from WLC is false
    *Feb 10 14:49:42.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 10 14:49:42.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.715: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.17
    *Feb 10 14:49:42.715: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 10 14:49:42.715: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.0.17
    *Feb 10 14:49:42.715: %DTLS-5-PEER_DISCONNECT: Peer 192.168.0.17 has closed connection.
    *Feb 10 14:49:42.715: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.17:5246
    *Feb 10 14:49:42.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.715: %CAPWAP-5-SENDJOIN: sendin
    % CDP is not supported on this interface, or for this encapsulationg Join Request to 192.168.0.17 *Feb 10 14:49:29.711: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.17
    *Feb 10 14:49:29.711: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 10 14:49:29.715: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.0.17
    *Feb 10 14:49:29.715: %DTLS-5-PEER_DISCONNECT: Peer 192.168.0.17 has closed connection.
    *Feb 10 14:49:29.715: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.17:5246
    *Feb 10 14:49:29.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:29.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 10 14:49:29.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:29.711: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.17
    *Feb 10 14:49:29.711: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 10 14:49:29.711: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.0.17
    *Feb 10 14:49:29.711: %DTLS-5-PEER_DISCONNECT: Peer 192.168.0.17 has closed connection.
    *Feb 10 14:49:29.711: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.17:5246
    *Feb 10 14:49:29.755: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Feb 10 14:49:29.755: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Feb 10 14:49:29.835:  status of voice_diag_test from WLC is false
    *Feb 10 14:49:42.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Feb 10 14:49:42.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.715: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.0.17
    *Feb 10 14:49:42.715: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Feb 10 14:49:42.715: %DTLS-5-ALERT: Received WARNING : Close notify alert from 192.168.0.17
    *Feb 10 14:49:42.715: %DTLS-5-PEER_DISCONNECT: Peer 192.168.0.17 has closed connection.
    *Feb 10 14:49:42.715: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 192.168.0.17:5246
    *Feb 10 14:49:42.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.711: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.0.17 peer_port: 5246
    *Feb 10 14:49:42.715: %CAPWAP-5-SENDJOIN: sendin
    % CDP is not supported on this interface, or for this encapsulationg Join Request to 192.168.0.17
    Kindly let me know if you have ever faced such a problem.

    Thanks,
    It downloaded the image from the WLC but still am getting this error
      2F455CFF 4552ECDB 5667E3FC E7093E06 8FAE353D 4228B48D 8B415D9B F496342D
      C1459987 B69BFA4B 51FB67B4 A0C21E7F C6269A39 47EB1D48 5E83B129 8B079E5E
      1EDAB5A0 BE5E1DE0 109FF0BD 4750E32B 02030100 01A38201 37308201 33300C06
      03551D13 04053003 0101FF30 2E060960 86480186 F842010D 0421161F 41697265
      73706163 65204465 76696365 20434120 43657274 69666963 61746530 1D060355
      1D0E0416 04140A52 3BB12570 523B9CEA 747FB2AD 3D8F95EA 3FCC3081 D3060355
      1D230481 CB3081C8 8014538D 8360478D C20F8066 3232E9E1 7070552B 17EAA181
      ACA481A9 3081A631 0B300906 03550406 13025553 31133011 06035504 08130A43
      616C6966 6F726E69 61311130 0F060355 04071308 53616E20 4A6F7365 31173015
      06035504 0A130E41 69726573 70616365 20496E63 2E311430 12060355 040B130B
      456E6769 6E656572 696E6731 1A301806 03550403 13114169 72657370 61636520
      526F6F74 20434131 24302206 092A8648 86F70D01 09011615 73757070 6F727440
      61697265 73706163 652E636F 6D820100 300D0609 2A864886 F70D0101 04050003
      81C100A0 E8D59D9B DA9EED0C 96045DFE A37084EC 59B5C3D3 71694DB0 70664E0C
      8060D69E E366E81F 9F3CCF68 8AB0498E CCFA6CA7 2854F2D8 046690C9 8FEC84EF
      2F7F0F08 C90F719D C0F4C125 CED1B525 6DD93E51 777BD5E8 7F1DC79F CC502DC2
      0242C05D 1682DEE3 DF7541B8 C55B433C 10DFE2BF D2E802E7 D923329A 23A2076F
      86BCC048 D569B383 59AC8979 97F02C55 6F8FE318 754F605C 43CDA7C8 1847B085
      1DADF0D6 CD62C8DE A86E6E12 4A7CDCBF A6FCC7E1 852A1DB1 529D63B3 688305F6 7BD25F
            quit
    crypto pki certificate chain cisco-root-cert
    certificate ca 5FF87B282B54DC8D42A315B568C9ADFF
      30820343 3082022B A0030201 0202105F F87B282B 54DC8D42 A315B568 C9ADFF30
      0D06092A 864886F7 0D010105 05003035 31163014 06035504 0A130D43 6973636F
      20537973 74656D73 311B3019 06035504 03131243 6973636F 20526F6F 74204341
      20323034 38301E17 0D303430 35313432 30313731 325A170D 32393035 31343230
      32353432 5A303531 16301406 0355040A 130D4369 73636F20 53797374 656D7331
      1B301906 03550403 13124369 73636F20 526F6F74 20434120 32303438 30820120
      300D0609 2A864886 F70D0101 01050003 82010D00 30820108 02820101 00B09AB9
      ABA7AF0A 77A7E271 B6B46662 94788847 C6625584 4032BFC0 AB2EA51C 71D6BC6E
      7BA8AABA 6ED21588 48459DA2 FC83D0CC B98CE026 68704A78 DF21179E F46105C9
      15C8CF16 DA356189 9443A884 A8319878 9BB94E6F 2C53126C CD1DAD2B 24BB31C4
      2BFF8344 6FB63D24 7709EABF 2AA81F6A 56F6200F 11549781 75A725CE 596A8265
      EFB7EAE7 E28D758B 6EF2DD4F A65E629C CF100A64 D04E6DCE 2BCC5BF5 60A52747
      8D69F47F CE1B70DE 701B20D6 6ECDA601 A83C12D2 A93FA06B 5EBB8E20 8B7A91E3
      B568EEA0 E7C40174 A8530B2B 4A9A0F65 120E824D 8E63FDEF EB9B1ADB 53A61360
      AFC27DD7 C76C1725 D473FB47 64508180 944CE1BF AE4B1CDF 92ED2E05 DF020103
      A351304F 300B0603 551D0F04 04030201 86300F06 03551D13 0101FF04 05300301
      01FF301D 0603551D 0E041604 1427F3C8 151E6E9A 020916AD 2BA08960 5FDA7B2F
      AA301006 092B0601 04018237 15010403 02010030 0D06092A 864886F7 0D010105
      05000382 0101009D 9D8484A3 41A97C77 0CB753CA 4E445062 EF547CD3 75171CE8
      E0C6484B B6FE4C3A 198156B0 56EE1996 62AA5AA3 64C1F64E 5433C677 FEC51CBA
      E55D25CA F5F0939A 83112EE6 CBF87445 FEE705B8 ABE7DFCB 4BE13784 DAB98B97
      701EF0E2 8BD7B0D8 0E9DB169 D62A917B A9494F7E E68E95D8 83273CD5 68490ED4
      9DF62EEB A7BEEB30 A4AC1F44 FC95AB33 06FB7D60 0ADEB48A 63B09CA9 F2A4B953
      0187D068 A4277FAB FFE9FAC9 40388867 B439C684 6F57C953 DBBA8EEE C043B2F8
      09836EFF 66CF3EEF 17B35818 2509345E E3CBD614 B6ECF292 6F74E42F 812AD592
      91E0E097 3C326805 854BD1F7 57E2521D 931A549F 0570C04A 71601E43 0B601EFE
      A3CE8119 E10B35
            quit
    crypto pki certificate chain Cisco_IOS_MIC_cert
    certificate 2E3E144D0000001BB016
      30820470 30820358 A0030201 02020A2E 3E144D00 00001BB0 16300D06 092A8648
      86F70D01 01050500 30393116 30140603 55040A13 0D436973 636F2053 79737465
      6D73311F 301D0603 55040313 16436973 636F204D 616E7566 61637475 72696E67
      20434130 1E170D31 32313232 36303933 3231365A 170D3232 31323236 30393432
      31365A30 818C310B 30090603 55040613 02555331 13301106 03550408 130A4361
      6C69666F 726E6961 3111300F 06035504 07130853 616E204A 6F736531 16301406
      0355040A 130D4369 73636F20 53797374 656D7331 1B301906 03550403 13124331
      3532302D 30346461 64323166 61386465 3120301E 06092A86 4886F70D 01090116
      11737570 706F7274 40636973 636F2E63 6F6D3082 0122300D 06092A86 4886F70D
      01010105 00038201 0F003082 010A0282 010100B5 1F70C31A E12EDF1A D785A454
      BC6582C5 5AF3CD8D F561B83A 9E83E926 56EF2ABE 27CFF889 F0E13A5E 7EB1C562
      34AA43E8 3E75E2A1 83A27B82 CBE2356F 0842E6D7 887129CB F1FE5558 7A6BF7FF
      229771A2 8B2BBAA9 6678E02D 8073623F 3E5C5A40 07D9B04D 239EAD41 5FC67A59
      B1985F06 7750C5B3 64D2DBD3 66BF2A77 8E2EB7FC 7B3409A8 13BB0422 D10BB367
      FBA72948 58E3AE44 7D1D6483 0C1302F6 7FE49761 CFCE8F35 34647E3B CD5F15E3
      B9EF3B26 F3B09799 2BC6F6C7 41AC6DE1 D048E74D F4F11209 CDE7F377 B4C4A453
      075C9595 E5C61D5F 9F6E2857 AAA5CAF7 0F85DF7F C1B9242A 3AC5FA3F 7324FAE1
      74E39A29 4ABC3FD5 D0F33165 4FD6B75F 000A2902 03010001 A3820124 30820120
      300E0603 551D0F01 01FF0404 030205A0 301D0603 551D0E04 160414AD 5672F62C
      9C862284 6307646C D9E81919 E3123F30 1F060355 1D230418 30168014 D0C52226
      AB4F4660 ECAE0591 C7DC5AD1 B047F76C 303F0603 551D1F04 38303630 34A032A0
      30862E68 7474703A 2F2F7777 772E6369 73636F2E 636F6D2F 73656375 72697479
      2F706B69 2F63726C 2F636D63 612E6372 6C304C06 082B0601 05050701 01044030
      3E303C06 082B0601 05050730 02863068 7474703A 2F2F7777 772E6369 73636F2E
      636F6D2F 73656375 72697479 2F706B69 2F636572 74732F63 6D63612E 63657230
      3F06092B 06010401 82371402 04321E30 00490050 00530045 00430049 006E0074
      00650072 006D0065 00640069 00610074 0065004F 00660066 006C0069 006E0065
      300D0609 2A864886 F70D0101 05050003 82010100 0B5F8FF4 3EAF5A8C 7663D5FB
      16BC2823 4F37FE4A DBB26CDC E779C6D6 8A5CDC54 FACAFDE5 F07A8EC8 F44C07B6
      C0405359 F4CC7369 3763D8D5 AFAC720A 03C958F7 3745035D EF35D346 FCCFC6D9
      604506EE 52C85FDA FA9880FB 6D28C6A5 36D28A0E B97C8DBA 5E511196 C1263F23
      6EF77F60 84AE984F E2B3FF43 700F45FB D78FAA0E D44E3AA7 1014C824 43B11AAF
      03DB7D19 11A8E4AB 8E5EB734 FF7FAFE4 29DC9DB5 82FEBE26 EC39A005 CFD243E9
      8A19D74E A759EDC5 A2788B60 103480FB E7AF1D19 8AFE463E AF6C8CE6 90154ABB
      85DA3F6E 45A4FE0B 84229452 2871B507 80277B75 BEF926E1 57B2077D 8F15C4BC
      0FB4D661 8A70568A C8E89CB2 FA317D88 E5B7ACA7
            quit
    certificate ca 6A6967B3000000000003
      308204D9 308203C1 A0030201 02020A6A 6967B300 00000000 03300D06 092A8648
      86F70D01 01050500 30353116 30140603 55040A13 0D436973 636F2053 79737465
      6D73311B 30190603 55040313 12436973 636F2052 6F6F7420 43412032 30343830
      1E170D30 35303631 30323231 3630315A 170D3239 30353134 32303235 34325A30
      39311630 14060355 040A130D 43697363 6F205379 7374656D 73311F30 1D060355
      04031316 43697363 6F204D61 6E756661 63747572 696E6720 43413082 0120300D
      06092A86 4886F70D 01010105 00038201 0D003082 01080282 010100A0 C5F7DC96
      943515F1 F4994EBB 9B41E17D DB791691 BBF354F2 414A9432 6262C923 F79AE7BB
      9B79E807 294E30F5 AE1BC521 5646B0F8 F4E68E81 B816CCA8 9B85D242 81DB7CCB
      94A91161 121C5CEA 33201C9A 16A77DDB 99066AE2 36AFECF8 0AFF9867 07F430EE
      A5F8881A AAE8C73C 1CCEEE48 FDCD5C37 F186939E 3D71757D 34EE4B14 A9C0297B
      0510EF87 9E693130 F548363F D8ABCE15 E2E8589F 3E627104 8726A415 620125AA
      D5DFC9C9 5BB8C9A1 077BBE68 92939320 A86CBD15 75D3445D 454BECA8 DA60C7D8
      C8D5C8ED 41E1F55F 578E5332 9349D5D9 0FF836AA 07C43241 C5A7AF1D 19FFF673
      99395A73 67621334 0D1F5E95 70526417 06EC535C 5CDB6AEA 35004102 0103A382
      01E73082 01E33012 0603551D 130101FF 04083006 0101FF02 0100301D 0603551D
      0E041604 14D0C522 26AB4F46 60ECAE05 91C7DC5A D1B047F7 6C300B06 03551D0F
      04040302 01863010 06092B06 01040182 37150104 03020100 30190609 2B060104
      01823714 02040C1E 0A005300 75006200 43004130 1F060355 1D230418 30168014
      27F3C815 1E6E9A02 0916AD2B A089605F DA7B2FAA 30430603 551D1F04 3C303A30
      38A036A0 34863268 7474703A 2F2F7777 772E6369 73636F2E 636F6D2F 73656375
      72697479 2F706B69 2F63726C 2F637263 61323034 382E6372 6C305006 082B0601
      05050701 01044430 42304006 082B0601 05050730 02863468 7474703A 2F2F7777
      772E6369 73636F2E 636F6D2F 73656375 72697479 2F706B69 2F636572 74732F63
      72636132 3034382E 63657230 5C060355 1D200455 30533051 060A2B06 01040109
      15010200 30433041 06082B06 01050507 02011635 68747470 3A2F2F77 77772E63
      6973636F 2E636F6D 2F736563 75726974 792F706B 692F706F 6C696369 65732F69
      6E646578 2E68746D 6C305E06 03551D25 04573055 06082B06 01050507 03010608
      2B060105 05070302 06082B06 01050507 03050608 2B060105 05070306 06082B06
      01050507 0307060A 2B060104 0182370A 0301060A 2B060104 01823714 02010609
      2B060104 01823715 06300D06 092A8648 86F70D01 01050500 03820101 0030F330
      2D8CF2CA 374A6499 24290AF2 86AA42D5 23E8A2EA 2B6F6923 7A828E1C 4C09CFA4
      4FAB842F 37E96560 D19AC6D8 F30BF5DE D027005C 6F1D91BD D14E5851 1DC9E3F7
      38E7D30B D168BE8E 22A54B06 E1E6A4AA 337D1A75 BA26F370 C66100A5 C379265B
      A719D193 8DAB9B10 11291FA1 82FDFD3C 4B6E65DC 934505E9 AF336B67 23070686
      22DAEBDC 87CF5921 421AE9CF 707588E0 243D5D7D 4E963880 97D56FF0 9B71D8BA
      6019A5B0 6186ADDD 6566F6B9 27A2EE2F 619BBAA1 3061FDBE AC3514F9 B82D9706
      AFC3EF6D CC3D3CEB 95E981D3 8A5EB6CE FA79A46B D7A25764 C43F4CC9 DBE882EC
      0166D410 88A256E5 3C57EDE9 02A84891 6307AB61 264B1A13 9FE4DCDA 5F
            quit
    memory validate-checksum 30
    username Cisco secret 5 $1$vM.P$z4SmRayDYBroWLoHcrQvu/
    ip ssh version 2
    interface Dot11Radio0
    no ip route-cache
    antenna gain 0
    mbssid
    power local 3
    power client local
    packet retries 64 drop-packet
    interface Dot11Radio1
    no ip route-cache
    antenna gain 0
    mbssid
    power client local
    packet retries 64 drop-packet
    interface GigabitEthernet0
    no ip route-cache
    duplex full
    interface GigabitEthernet1
    no ip route-cache
    duplex full
    interface GigabitEthernet2
    no ip route-cache
    duplex full
    interface GigabitEthernet3
    no ip route-cache
    duplex full
    interface BVI1
    ip address dhcp client-id BVI1
    no ip route-cache
    no ip http server
    logging trap emergencies
    logging origin-id string AP:04da.d21f.a8c0
    logging facility kern
    logging snmp-trap notifications
    logging snmp-trap informational
    logging snmp-trap debugging
    logging 255.255.255.255
    line con 0
    line vty 0 4
    transport input none
    line vty 5 15
    transport input none
    end
    AP04da.d21f.a8c0#$
    AP04da.d21f.a8c0#
    AP04da.d21f.a8c0#
    AP04da.d21f.a8c0#
    *Feb 14 17:50:02.587: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join timer expired
    *Feb 14 17:50:02.587: %MESH-3-TIMER_EXPIRED: Mesh Lwapp join failed expired
    *Feb 14 17:50:02.587: %MESH-6-LINK_UPDOWN: Mesh station 04da.d21f.a8de link Down
    *Feb 14 17:50:53.591: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    *Feb 14 17:50:57.635: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP addre                                                           ss 10.131.228.144, mask 255.255.255.0, hostname AP04da.d21f.a8c0
    *Feb 14 17:50:57.635: %MESH-6-CAPWAP_RESTART: Mesh Capwap re-started
    % CDP is not supported on this interface, or for this encapsulation
    *Feb 14 17:51:02.587: %CAPWAP-3-ERRORLOG: Invalid event 29 & state 4 combination                                                           .
    *Feb 14 17:51:02.587: %CAPWAP-3-ERRORLOG: SM handler: Failed to process timer me                                                           ssage. Event 29, state 4
    *Feb 14 17:51:02.587: %CAPWAP-3-ERRORLOG: Failed to handle timer message.
    *Feb 14 17:51:02.587: %CAPWAP-3-ERRORLOG: Failed to process timer message.
    *Feb 14 17:51:02.671: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led sta                                                           te 255
    Translating "CISCO-CAPWAP-CONTROLLER.ke.batgen.com"...domain server (10.131.228.                                                           50)
    *Feb 14 17:51:04.771: %CAPWAP-3-ERRORLOG: Did not get log server settings from D                                                           HCP.
    *Feb 14 17:51:05.771: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROL                                                           LER.ke.batgen.com
    *Feb 14 17:51:16.771: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Feb 14 17:51:17.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.131.228.17 peer_port:                                5246
    *Feb 14 17:51:17.575: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.131.228.17 peer                               _port: 5246
    *Feb 14 17:51:17.575: %CAPWAP-5-SENDJOIN: sending Join Request to 10.131.228.17

  • AP not joining WLC via l3 network DTLS problem

    Dear All,
    i have a problem which is annoying me so bad!
    I have the scenario you can see in the attached file. The problem i have is that during the CAPWAP registration
    the public AP contact as I expect (option 43 dhcp) via the public interface 1.1.1.1 but after it finds the WLC, 
    what goes wrong is the dtls handshake, where the WLC tried to replay with the LAN interface.
    Both interfaces are configured as "Enable Dynamic AP Management" and of course if i disable the flag on that option the public AP starts working.
    Here some logs from the AP:
    %CAPWAP-3-ERRORLOG: Selected MWAR 'mywlc01'(index 0).
    %CAPWAP-3-ERRORLOG: Go join a capwap controller
    %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.254:5246 peer_port: 5246
    : DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2208 Max retransmission count reached for Connection 0x853E728!
    %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.10.10.254:5246
    %CAPWAP-3-ERRORLOG: Selected MWAR 'mywlc01'(index 0).
    %CAPWAP-3-ERRORLOG: Go join a capwap controller
    %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.10.10.254 peer_port: 5246
    DTLS_CLIENT_ERROR: ../capwap/base_capwap/dtls/base_capwap_dtls_connection_db.c:2208 Max retransmission count reached for Connection 0x853E728!
    More info the WLC ( 5508 IOS 7.6 ) can reach the AP and it's getaway is the Public If connected to the router.
    The WLC LAN has not been routed inside the public area.
    Thanks

    sh version
    Cisco IOS Software, C3700 Software (AP3G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 11:52 by prod_rel_team
    ROM: Bootstrap program is C3700 boot loader
    BOOTLDR: C3700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB, RELEASE SOFTWARE (fc1)
    AP74a2.e679.29ac uptime is 3 hours, 44 minutes
    System returned to ROM by power-on
    System image file is "flash:/ap3g2-k9w8-mx.152-4.JB6/ap3g2-k9w8-xx.152-4.JB6"
    Last reload reason:
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP3702I-E-K9 (PowerPC) processor (revision A0) with 204790K/57344K bytes of memory.
    Processor board ID FCZ1905U1AY
    PowerPC CPU at 800MHz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.6.130.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 74:AA:AE:00:11:22
    Part Number                          : 73-15243-01
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : xxxxx
    Top Assembly Part Number             : 068-05054-04
    Top Assembly Serial Number           : xxxxxx
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP3702I-E-K9
    Configuration register is 0xF
    #sh ip interface brief
    Interface                  IP-Address      OK? Method Status                Prot
    BVI1                       3.3.3.3  YES DHCP   up                    up
    Dot11Radio0                unassigned      NO  unset  up                    up
    Dot11Radio1                unassigned      NO  unset  up                    up
    GigabitEthernet0           unassigned      NO  unset  up                    up
    GigabitEthernet0.1         unassigned      YES unset  up                    up
    Virtual-WLAN0              unassigned      NO  unset  up                    up
    Virtual-WLAN0.1            unassigned      NO  unset  up                    up
    Virtual-WLAN0.2            unassigned      NO  unset  up                    up
    Virtual-WLAN0.3            unassigned      NO  unset  up                    up
    Virtual-WLAN0.4            unassigned      NO  unset  up                    up
    Virtual-WLAN0.5            unassigned      NO  unset  up                    up
    Virtual-WLAN0.6            unassigned      NO  unset  up                    up
    Virtual-WLAN0.7            unassigned      NO  unset  up                    up
    Virtual-WLAN0.8            unassigned      NO  unset  up                    up
    Virtual-WLAN0.9            unassigned      NO  unset  up                    up
    Virtual-WLAN0.10           unassigned      NO  unset  up                    up
    Virtual-WLAN0.11           unassigned      NO  unset  up                    up
    Virtual-WLAN0.12           unassigned      NO  unset  up                    up
    Virtual-WLAN0.13           unassigned      NO  unset  up                    up
    Virtual-WLAN0.14           unassigned      NO  unset  up                    up
    Virtual-WLAN0.15           unassigned      NO  unset  up                    up
    Virtual-WLAN0.16           unassigned      NO  unset  up                 up

  • Converted 1140 AP can't join the WLC 5508

    Hello! Please, help me to sort my problem out.
    We have bought autonomous APs   AIR-AP1141N-E-K9 and converted them to the lightweight mode, but they cannot join the WLC 5508. The errors are below. There were NO problems with the LAPs that were bought before, together with the WLC.
    AP's IP: 172.22.90.27   IOS version  12.4
    WLC's IP: 172.22.90.20   IOS version 6.0.188.0
    ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    This Discussion has been converted into document:- https://supportforums.cisco.com/docs/DOC-23054
    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
    logs from the AP:
    Translating "CISCO-LWAPP-CONTROLLER"...domain server (255.255.255.255)
    *Oct 13 21:37:06.044: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Oct 13 21:37:06.045: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Oct 13 21:37:06.046: bsnInitRcbSlot: slot 1 has NO radio
    *Oct 13 21:37:06.056: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to a
    dministratively down
    *Oct 13 21:37:06.066: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to r
    eset
    *Oct 13 21:37:06.098: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (255.255.255.255)
    *Oct 13 21:37:15.060: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-LWAPP-CONTROLL
    ER
    *Oct 13 21:37:24.060: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROL
    LER
    *Oct 13 21:37:34.060: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Oct 13 21:38:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
    p: 172.22.90.20 peer_port: 5246
    *Oct 13 21:38:34.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Oct 13 21:38:34.822: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully
    peer_ip: 172.22.90.20 peer_port: 5246
    *Oct 13 21:38:34.823: %CAPWAP-5-SENDJOIN: sending Join Request to 172.22.90.20
    *Oct 13 21:38:34.823: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Oct 13 21:38:34.825: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Contr
    ol Message from 172.22.90.20
    *Oct 13 21:38:34.825: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Oct 13 21:38:34.825: %CAPWAP-3-ERRORLOG: Failed to handle capwap control messag
    e from controller
    *Oct 13 21:38:39.823: %CAPWAP-5-SENDJOIN: sending Join Request to 172.22.90.20
    *Oct 13 21:38:39.823: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Contr
    ol Message from 172.22.90.20
    *Oct 13 21:38:39.823: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Oct 13 21:38:39.823: %CAPWAP-3-ERRORLOG: Failed to handle capwap control messag
    e from controller
    *Oct 13 21:38:39.824: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap p
    acket from 172.22.90.20
    *Oct 13 21:39:33.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 1
    72.22.90.20:5246
    *Oct 13 21:39:34.000: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Oct 13 21:38:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i
    p: 172.22.90.20 peer_port: 5246
    *Oct 13 21:38:34.000: %CAPWAP-5-CHANGED: CAPWAP changed state to
    *Oct 13 21:38:34.001: %DTLS-5-PEER_DISCONNECT: Peer 172.22.90.20 has closed conn
    ection.
    *Oct 13 21:38:34.001: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 1
    72.22.90.20:5246
    *Oct 13 21:38:34.001: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination
    *Oct 13 21:38:34.125: %CAPWAP-3-ERRORLOG: Dropping dtls packet since session is
    not established.
    logs from the WLC:
    debug capwap events enable
    *Dec 21 15:02:06.244: 68:bc:0c:63:3d:a0 DTLS keys for Control Plane deleted successfully for AP 172.22.90.27
      *Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 DTLS connection closed event receivedserver (172:22:90:20/5246) client (172:22:90:27/21077)
    *Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 Entry exists for AP (172:22:90:27/21077)
    *Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 apfSpamProcessStateChangeInSpamContext: Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 0
    *Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 0
    *Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 apfSpamProcessStateChangeInSpamContext: Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 1
    *Dec 21 15:02:06.246: 68:bc:0c:63:3d:a0 Deregister LWAPP event for AP 68:bc:0c:63:3d:a0 slot 1
    Ble
    *Dec 21 15:04:03.194: 68:bc:0c:63:3d:a0 capwap_ac_platform.c:1223 - Operation State 0 ===> 4
    *Dec 21 15:04:03.194: 68:bc:0c:63:3d:a0 Register LWAPP event for AP 68:bc:0c:63:3d:a0 slot 0
      *Dec 21 15:05:36.253: 68:bc:0c:63:3d:a0 Join Version: = 100711424
    *Dec 21 15:05:36.253: 68:bc:0c:63:3d:a0 Join resp: CAPWAP Maximum Msg element len = 93
    debug capwap errors enable
    *Dec 21 16:16:51.879: 68:bc:0c:63:3d:a0 DTLS connection was closed
    *Dec 21 16:17:09.940: 68:bc:0c:63:3d:a0 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 12, joined Aps =5
    debug capwap detail enable
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 CAPWAP Control Msg Received from 172.22.90.27:21078
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 packet received of length 281 from 172.22.90.27:21078
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Msg Type = 3 Capwap state = 5
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: Result Code message element len = 8
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 1. 47 0
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 2. 232 3
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 3. 6 0
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 4. 12 0
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: AC Descriptor message element len = 48
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 acName = Wi-Fi_Controller
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: AC Name message element len = 68
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: WTP Radio Information message element len = 77
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Join resp: CAPWAP Control IPV4 Address len = 87
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Sending encrypted packet to AP 172:22:90:27 (21078)
    *Dec 21 16:21:49.961: 68:bc:0c:63:3d:a0 Releasing WTP
    *Dec 21 16:24:12.212: 68:bc:0c:63:3d:a0 CAPWAP Control Msg Received from 172.22.90.27:21077
    *Dec 21 16:24:12.212: 68:bc:0c:63:3d:a0 DTLS connection 0x167c8b20 closed by controller
    *Dec 21 16:24:12.212: DTL Deleting AP 9 - 0.0.0.0
    *Dec 21 16:24:12.214: CAPWAP DTLS connection closed msg
    *Dec 21 16:24:12.216: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'mfpSendEventReport+168' for AP 68:bc:0c:63:3d:a0(0)
    *Dec 21 16:24:12.216: Received SPAM_MFP_RADIO_DOWN message
    *Dec 21 16:24:12.218: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'l2roamInit+560' for AP 68:bc:0c:63:3d:a0(0)
    *Dec 21 16:24:12.220: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamCallbackInSpamContext+1224' for AP 68:bc:0c:63:3d:a0(0)
    *Dec 21 16:24:12.222: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamSendBlackListTable+376' for AP 68:bc:0c:63:3d:a0(0)
    *Dec 21 16:24:12.224: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'rrmIappSendChdPacket+2320' for AP 68:bc:0c:63:3d:a0(0)
    *Dec 21 16:24:12.226: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'asTrackInitTask+19360' for AP 68:bc:0c:63:3d:a0(0)
    *Dec 21 16:24:12.228: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'mfpSendEventReport+168' for AP 68:bc:0c:63:3d:a0(1)
    *Dec 21 16:24:12.228: Received SPAM_MFP_RADIO_DOWN message
    *Dec 21 16:24:12.230: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'l2roamInit+560' for AP 68:bc:0c:63:3d:a0(1)
    *Dec 21 16:24:12.232: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamCallbackInSpamContext+1224' for AP 68:bc:0c:63:3d:a0(1)
    *Dec 21 16:24:12.234: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'apfSpamSendBlackListTable+376' for AP 68:bc:0c:63:3d:a0(1)
    *Dec 21 16:24:12.236: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'rrmIappSendChdPacket+2320' for AP 68:bc:0c:63:3d:a0(1)
    *Dec 21 16:24:12.238: 68:bc:0c:63:3d:a0 Sending LWAPP Event DeReg to 'asTrackInitTask+19360' for AP 68:bc:0c:63:3d:a0(1)
    *Dec 21 16:24:12.238: 68:bc:0c:63:3d:a0 Deleting and removing AP 68:bc:0c:63:3d:a0 from fast path
    P.S. The time is set to the WLC with the NTP
    P.P.S. Don't lookup at the time the logs were made - they were made not during the same day/time

    I have solved this as soon as published my problem!!!
    the answer is published here:
    https://supportforums.cisco.com/thread/2004491
    especially in the post of Matthew Fowler
    Hi,
    Please take a look at CSCte01087.
    I see that your WLC is 10.0.13.5 and your AP is 10.0.13.28/24 so they are on the same subnet. I also see your AP MAC address does not begin with 00. This is why I believe it is relevant.
    Please try the workaround or open a TAC case if you need a fix.
    -Matt
    Symptom:
    An access point running 6.0.188.0 code may be unable to join a WLC5508.
    Messages similar to the following will be seen on the AP.
       %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
       %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message
    Conditions:
    At least one of the following conditions pertains:
    - The high order byte of the AP's MAC address is nonzero, and the AP is in
    the same subnet as the WLC5508's management (or AP manager) interface
    - The WLC's management (or AP manager) interface's default gateway's
    MAC address' high order byte is nonzero.
    Workaround:
    If the MAC address of the WLC's default gateway does not begin with 00,
    and if all of the APs' MAC addresses begin with 00, then: you can put
    the APs into the same subnet as the WLC's management (or AP manager)
    interface.
    In the general case, for the situation where the WLC's default gateway's
    MAC does not begin with 00, you can address this by changing it to begin
    with 00. Some methods for doing this include:
    -- use the "mac-address" command on the gateway, to set a MAC address
    that begins with 00
    -- then enable HSRP on the gateway (standby ip ww.xx.yy.zz) and use this
    IP as the WLC's gateway.
    For the case where the APs' MAC addresses do not begin with 00, then make
    sure that they are *not* in the same subnet as the WLC's management
    (AP manager) interface, but are behind a router.
    Another workaround is to downgrade to 6.0.182.0.  However, after
    downgrading the WLC to 6.0.182.0, any APs that have 6.0.188.0 IOS
    (i.e. 12.4(21a)JA2) still installed on them will be unable to join.
    Therefore, after downgrading the WLC, the APs will need to have a
    pre-12.4(21a)JA2 rcvk9w8 or k9w8 image installed on them.
    different vlan!!!! yes! thank you Matthew Fowler sooooo much!!!!

  • 3602i CAP unable to join WLC 5508

    Hi All,
    Hope to you a very happy new year,
    I have an (AIR-CAP3602i-E-K9) and I tried to join it to WLC 5508 but I'm facing an error,
    I get this error from the LAP 1310 console as below:
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 60:73:5c:ad:cb:9c
    Boot CMD: 'boot  flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx;flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-mx'
    Loading "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"...#####################
    File "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx" uncompressed and installed, entry point: 0x2003000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C3600 Software (AP3G2-RCVK9W8-M), Version 15.2(2)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Thu 23-Aug-12 02:43 by prod_rel_team
    Initializing flashfs...
    flashfs[2]: 6 files, 3 directories
    flashfs[2]: 0 orphaned files, 0 orphaned directories
    flashfs[2]: Total bytes: 31997952
    flashfs[2]: Bytes used: 7015936
    flashfs[2]: Bytes available: 24982016
    flashfs[2]: flashfs fsck took 9 seconds.
    flashfs[2]: Initialization complete.
    flashfs[3]: 0 files, 1 directories
    flashfs[3]: 0 orphaned files, 0 orphaned directories
    flashfs[3]: Total bytes: 12257280
    flashfs[3]: Bytes used: 1024
    flashfs[3]: Bytes available: 12256256
    flashfs[3]: flashfs fsck took 0 seconds.
    flashfs[3]: Initialization complete....done Initializing flashfs.
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    Warning:  the compile-time code checksum does not appear to be present.
    cisco AIR-CAP3602I-E-K9    (PowerPC) processor (revision A0) with 180214K/81920K bytes of memory.
    Processor board ID FCZ1642J01K
    PowerPC CPU at 800Mhz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.3.1.73
    1 Gigabit Ethernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 60:73:5C:AD:CB:9C
    Part Number                          : 73-14521-02
    PCA Assembly Number                  : 800-37501-02
    PCA Revision Number                  : A0
    PCB Serial Number                    : FOC16352BJ0
    Top Assembly Part Number             : 800-35852-02
    Top Assembly Serial Number           : FCZ1642J01K
    Top Revision Number                  : C0
    Product/Model Number                 : AIR-CAP3602I-E-K9
    % Please define a domain-name first.
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    logging trap emergencies
            ^
    % Invalid input detected at '^' marker.
    logging facility kern
            ^
    % Invalid input detected at '^' marker.
    logging trap emergencies
            ^
    % Invalid input detected at '^' marker.
    Press RETURN to get started!
    *Mar  1 00:00:10.355: %LWAPP-3-CLIENTERRORLOG: Config load from flash failed. Initialising Cfg
    *Mar  1 00:00:11.971: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
    *Mar  1 00:00:12.575: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C3600 Software (AP3G2-RCVK9W8-M), Version 15.2(2)JA, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2012 by Cisco Systems, Inc.
    Compiled Thu 23-Aug-12 02:43 by prod_rel_teamlwapp_crypto_init: MIC Present and Parsed Successfully
    *Mar  1 00:00:13.603: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
    *Mar  1 00:00:15.387: DPAA Initialization Complete
    *Mar  1 00:00:15.387: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
    *Mar  1 00:00:15.979: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
    no bridge-group 1 source-learning
                       ^
    % Invalid input detected at '^' marker.
    %Default route without gateway, if not a point-to-point interface, may impact performance
    *Mar  1 00:00:32.327: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C2960S-48FPD-L (10bd.18a5.6082)
    *Mar  1 00:00:48.579: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.114.42.204, mask 255.255.255.128, hostname AP6073.5cad.cb9c
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (10.114.44.129) (8.8.8.8)
    *Mar  1 00:00:59.459: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.114.44.131 obtained through DHCP
    *Mar  1 00:00:59.459: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:00.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:10.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:20.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:30.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:01:32.343: %CDP_PD-2-POWER_LOW: All radios disabled - NEGOTIATED WS-C2960S-48FPD-L (10bd.18a5.6082)
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:40.015: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    Not in Bound state.
    *Mar  1 00:01:55.515: %CAPWAP-3-DHCP_RENEW: Could not discover WLC using DHCP IP. Renewing DHCP IP.
    *Mar  1 00:02:02.519: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 2 combination.
    *Mar  1 00:02:02.555: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 10.114.42.205, mask 255.255.255.128, hostname AP6073.5cad.cb9c
    Translating "CISCO-CAPWAP-CONTROLLER"...domain server (10.114.44.129) (8.8.8.8)
    *Mar  1 00:02:06.515: %CAPWAP-5-DHCP_OPTION_43: Controller address 10.114.44.131 obtained through DHCP
    *Mar  1 00:02:06.515: %CAPWAP-3-ERRORLOG: Did not get log server settings from DHCP.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:02:06.631: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:02:16.631: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'CIR906.WLC.5508'running version 7.0.235.3 is rejected.
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:02:26.631: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 10.114.44.131
    Please Advise,
    Thanks in Advanced,
    Ahmed,

    Your WLC is running a 7.0.235.3.  This firmware is suitable for your 1300 but you need at least 7.2.X to run 3600.
    As I've mentioned in your other thread, you can get a refurbished 4402/4404 cheap from Cisco Refurbished.  You can use the 4400 to run your 1310 and the 5508 to run the newer APs.

  • AIR-CAP1602i cannot join a WLC 5508 controller

    Hello,
    I'm managing a large number of access points on a Cisco wlc 5508 controller.
    We've recently purchased a bunch of new AIR-CAP1602I-E-K9.
    note that we already have AIR-CAP1602I-E-K9 and other models in production.
    These A.P are not able to join the controller for some reason, I've tried a lot of different things but I am now at a loss.
    I have checked the regulatory domain, upgraded the FUS, manually upgraded the software version of the LAP to match the version on the other A.P.
    I even downgraded/upgraded the WLC code (version 7.4.x and 8.0)
    I use the dhcp option 43 to to send the controller IP.
    Here are the info that can help:
    errors:
    #on A.P
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    #on WLC
    Lwapp join request rejected (WLC version 7.6.130.0)
    Failed to add database entry (WLC version 8.0)
    WLC sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.6.130.0
    Bootloader Version............................... 1.0.20
    Field Recovery Image Version..................... 7.6.101.1
    Firmware Version................................. FPGA 1.7, Env 1.8, USB console 2.2
    Build Type....................................... DATA + WPS
    System Name...................................... XXX
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
    Redundancy Mode.................................. Disabled
    IP Address....................................... XXX
    Last Reset....................................... Software reset
    System Up Time................................... 6 days 4 hrs 16 mins 27 secs
    System Timezone Location.........................
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    Configured Country............................... Multiple Countries:CA,FR
    Operating Environment............................ Commercial (0 to 40 C)
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +41 C
    External Temperature............................. +22 C
    Fan Status....................................... OK
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 7
    Number of Active Clients......................... 1977
    Burned-in MAC Address............................ A4:93:4C:B0:E4:C0
    Power Supply 1................................... Present, OK
    Power Supply 2................................... Present, OK
    Maximum number of APs supported.................. 250
    AP sh version
    AP58f3.9cb8.3701#sh version
    Cisco IOS Software, C1600 Software (AP1G2-K9W8-M), Version 15.2(4)JB6, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2014 by Cisco Systems, Inc.
    Compiled Fri 22-Aug-14 10:56 by prod_rel_team
    ROM: Bootstrap program is C1600 boot loader
    BOOTLDR: C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    AP58f3.9cb8.3701 uptime is 31 minutes
    System returned to ROM by power-on
    System image file is "flash:/ap1g2-k9w8-mx.152-4.JB6/ap1g2-k9w8-mx.152-4.JB6"
    Last reload reason:
    This product contains cryptographic features and is subject to United
    States and local country laws governing import, export, transfer and
    use. Delivery of Cisco cryptographic products does not imply
    third-party authority to import, export, distribute or use encryption.
    Importers, exporters, distributors and users are responsible for
    compliance with U.S. and local country laws. By using this product you
    agree to comply with applicable laws and regulations. If you are unable
    to comply with U.S. and local laws, return this product immediately.
    A summary of U.S. laws governing Cisco cryptographic products may be found at:
    http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
    If you require further assistance please contact us by sending email to
    [email protected].
    cisco AIR-CAP1602I-E-K9 (PowerPC) processor (revision B0) with 229366K/32768K bytes of memory.
    Processor board ID FGL1832X5QU
    PowerPC CPU at 533MHz, revision number 0x2151
    Last reset from power-on
    LWAPP image version 7.6.100.0
    1 Gigabit Ethernet interface
    2 802.11 Radios
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 58:F3:9C:B8:37:01
    Part Number                          : 73-14671-04
    PCA Assembly Number                  : 000-00000-00
    PCA Revision Number                  :
    PCB Serial Number                    : FOC183171L4
    Top Assembly Part Number             : 800-38552-01
    Top Assembly Serial Number           : FGL1832X5QU
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-CAP1602I-E-K9
    AP sh inventory
    NAME: "AP1600", DESCR: "Cisco Aironet 1600 Series (IEEE 802.11n) Access Point"
    PID: AIR-CAP1602I-E-K9 , VID: V01, SN: FGL1832X5QU
    Thanks for your help !

    Hi Olivier,
    The error messages that you have on the debugs:
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
    *Dec 12 09:24:49.659: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    It is related to the bug: CSCuh46442
    https://tools.cisco.com/bugsearch/bug/CSCuh46442/?referring_site=ss
    This bug is resolved in version : 8.0.100.0
    http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn80.html#pgfId-1163951
    Can you please paste here "show ap auth-list" from the controller CLI?
    I suggest to enable MIC if it is not enabled, and then check if the AP's will join or not.
    Kind Regards
    Mohammad Setan

  • 1310 LAP unable to join WLC 5508

    Hi All,
    Hope to you a very happy new year,
    I have an (AIR-LAP1310G-E-K9R) and I tried to join it to WLC 5508 but I'm facing an error,
    I get this error from the LAP 1310 console as below:
    Compiled Mon 17-Jul-06 11:45 by alnguyen
    *Mar  1 00:00:05.289: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
    *Mar  1 00:00:06.289: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
    *Mar  1 00:00:23.337: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Mar  1 00:00:33.477: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.114.36.25, mask 255.255.255.0, hostname APe4d3.f1c2.8882
    examining image...
    *Mar  1 00:00:44.781: %LWAPP-5-CHANGED: LWAPP changed state to JOIN
    *Jan 11 15:21:37.178: %LWAPP-5-CHANGED: LWAPP changed state to IMAGE
    %Error opening  (Protocol error)archive download: takes 6 seconds
    *Jan 11 15:21:43.178: LWAPP_CLIENT_ERROR_DEBUG:  Retransmission count for packet exceeded more than max(IMAGE_DATA
    , 1)
    *Jan 11 15:21:43.178: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.179: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.181: LWAPP_CLIENT_ERROR: not receive read response(3)
    *Jan 11 15:21:43.185: lwapp_image_proc: unable to open tar file
    *Jan 11 15:21:43.200: %SYS-5-RELOAD: Reload requested by lwapp image download proc. Reload Reason: Reason unspecified.
    *Jan 11 15:21:43.201: %LWAPP-5-CHANGED: LWAPP changed state to DOWN
    *Jan 11 15:21:43.207: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERYXmodem file system is available.
    flashfs[0]: 3 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 7741440
    flashfs[0]: Bytes used: 1861632
    flashfs[0]: Bytes available: 5879808
    flashfs[0]: flashfs fsck took 14 seconds.
    Base ethernet MAC Address: e4:d3:f1:c2:88:82
    Initializing ethernet port 0...
    Reset ethernet port 0...
    Reset done!
    ethernet link up, 100 mbps, full-duplex
    Ethernet port 0 initialized: link is up
    Loading "flash:/c1310-rcvk9w8-mx/c1310-rcvk9w8-mx"...#######################################################################################################################################################################
    File "flash:/c1310-rcvk9w8-mx/c1310-rcvk9w8-mx" uncompressed and installed, entry point: 0x3000
    executing...
                  Restricted Rights Legend
    Use, duplication, or disclosure by the Government is
    subject to restrictions as set forth in subparagraph
    (c) of the Commercial Computer Software - Restricted
    Rights clause at FAR sec. 52.227-19 and subparagraph
    (c) (1) (ii) of the Rights in Technical Data and Computer
    Software clause at DFARS sec. 252.227-7013.
               cisco Systems, Inc.
               170 West Tasman Drive
               San Jose, California 95134-1706
    Cisco IOS Software, C1310 Software (C1310-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2006 by Cisco Systems, Inc.
    Compiled Mon 17-Jul-06 11:45 by alnguyen
    Image text-base: 0x00003000, data-base: 0x00359EA0
    Initializing flashfs...
    flashfs[1]: 3 files, 2 directories
    flashfs[1]: 0 orphaned files, 0 orphaned directories
    flashfs[1]: Total bytes: 7741440
    flashfs[1]: Bytes used: 1861632
    flashfs[1]: Bytes available: 5879808
    flashfs[1]: flashfs fsck took 2 seconds.
    flashfs[1]: Initialization complete....done Initializing flashfs.
    cisco AIR-LAP1310G-E-K9R   (PowerPCElvis) processor (revision B0) with 24566K/8192K bytes of memory.
    Processor board ID FGL1649T00U
    PowerPCElvis CPU at 262Mhz, revision number 0x0950
    Last reset from reload
    LWAPP image version 3.0.51.0
    1 FastEthernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: E4:D3:F1:C2:88:82
    Part Number                          : 73-8960-09
    PCA Assembly Number                  : 800-24963-06
    PCA Revision Number                  : B0
    PCB Serial Number                    : FOC16447J1K
    Top Assembly Part Number             : 800-28479-05
    Top Assembly Serial Number           : FGL1649T00U
    Top Revision Number                  : D0
    Product/Model Number                 : AIR-LAP1310G-E-K9R
    Press RETURN to get started!
    *Mar  1 00:00:04.329: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1310 Software (C1310-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2006 by Cisco Systems, Inc.
    Compiled Mon 17-Jul-06 11:45 by alnguyen
    *Mar  1 00:00:05.289: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
    *Mar  1 00:00:06.289: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
    *Mar  1 00:00:23.337: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Mar  1 00:00:33.352: %DHCP-6-ADDRESS_ASSIGN: Interface FastEthernet0 assigned DHCP address 10.114.36.28, mask 255.255.255.0, hostname APe4d3.f1c2.8882
    examining image...
    *Mar  1 00:00:44.783: %LWAPP-5-CHANGED: LWAPP changed state to JOIN
    *Jan 11 15:21:37.189: %LWAPP-5-CHANGED: LWAPP changed state to IMAGE
    %Error opening  (Protocol error)archive download: takes 6 seconds
    *Jan 11 15:21:43.189: LWAPP_CLIENT_ERROR_DEBUG:  Retransmission count for packet exceeded more than max(IMAGE_DATA
    , 1)
    *Jan 11 15:21:43.189: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.189: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
    *Jan 11 15:21:43.192: LWAPP_CLIENT_ERROR: not receive read response(3)
    *Jan 11 15:21:43.195: lwapp_image_proc: unable to open tar file
    *Jan 11 15:21:43.210: %SYS-5-RELOAD: Reload requested by lwapp image download proc. Reload Reason: Reason unspecified.
    *Jan 11 15:21:43.210: %LWAPP-5-CHANGED: LWAPP changed state to DOWN
    *Jan 11 15:21:43.216: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERYXmodem file system is available.
    flashfs[0]: 3 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 7741440
    flashfs[0]: Bytes used: 1861632
    flashfs[0]: Bytes available: 5879808
    flashfs[0]: flashfs fsck took 14 seconds.
    Base ethernet MAC Address: e4:d3:f1:c2:88:82
    Initializing ethernet port 0...
    Reset ethernet port 0...
    Reset done!
    ethernet link up, 100 mbps, full-duplex
    Ethernet port 0 initialized: link is up
    Please Advise,
    Thanks in advanced,
    Ahmed,

    Dear Stefan,
    Many thanks for your kind reply,
    Please find the information below:
    Controller Summary
    Management IP Address
    10.114.44.131
    Service Port IP Address
    10.114.23.20
    Software Version
    7.2.111.3
    Field Recovery Image Version
    6.0.182.0
    System Name
    CIR906.WLC.5508
    Please Advise,
    Thanks,
    Ahmed,

  • WLC 5508 and LAP1310 - Not syncing up!

    As the title states I have a WLC 5508 and a LAP1310 that will not sync up.
    The error stated in the traps log is "AP with MAC (xxxx.xxxx.xxxx.xxxx) is unknown."
    WLC software release is : 7.2.103.0
    IOS on the AP is : 12.4(18a)JA2
    Upon some investigation I found that the "AP with MAC is unknown" error usually points to one of two things:
    A.  WLC firmware needs to be updated
    B.  AP needs to be updated.
    C. The AP is not compatible with the WLC.
    I am leaning toward solution C and I am looking for a conformation or a correction, if anyone could help out that would be greatly appreciated!
    I've tried reading the compatibility matrix released by Cisco, but I found it mildly confusing as to what is and isn't supported by each software release.
    Sources - http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00808f8599.shtml#lap1250
    Problem 11: 1250 LAP Not Able to Join WLC
    The setup consists of a 2106 WLC that runs version 4.1.185.0. A Cisco 1250 AP is not able to join the controller.
    The log on the WLC shows this:
    Mon Jun 2 21:19:37 2008 AP with MAC f0:2x:cf:2x:1d:3x (APf02x.cf2x.1d3x) is unknown.
    Mon Jun 2 21:19:37 2008 AP Associated. Base Radio MAC: f0:2x:cf:2x:1d:3x 
    Mon Jun 2 21:19:26 2008 AP Disassociated. Base Radio MAC:f0:2x:cf:2x:1d:3x
    Mon Jun 2 21:19:20 2008 AP with MAC f0:2x:cf:2x:1d:3x (APf02x.cf2x.1d3x) is unknown.
    Mon Jun 2 21:19:20 2008 AP Associated. Base Radio MAC: f0:2x:cf:2x:1d:3x 
    Mon Jun 2 21:19:09 2008 AP Disassociated. Base Radio MAC:f0:2x:cf:2x:1d:3x
    Mon Jun 2 21:19:03 2008 AP with MAC f0:2x:cf:2x:1d:3x (APf02x.cf2x.1d3x) is unknown.
    Solution: This is because the Cisco 1250 series LAP is not supported on version 4.1. The Cisco Aironet 1250 Series AP is supported from controller versions 4.2.61 and later. In order to fix this issue, upgrade the controller software to 4.2.61.0 or later.
    Problem 16: 1000 series LAPs not able to join the Wireless LAN controller, WLC runs version 5.0
    This is because WLC software release 5.0.148.0 or later is not compatible with Cisco Aironet 1000 series APs. If you have a Cisco 1000 series LAP in a network, which runs WLC versions 5.0.48.0, the 1000 series LAP does not join the controller and you see this trap message on the WLC.
    "AP with MAC xx:xx:xx:xx:xx:xx is unkown"

    videoaudiojack
    What version of Premiere Elements are you using and on what computer operating system is it running?
    What are the properties of this .mp4 video import (video and audio compressions, frame size, frame rate, interlaced or progressive, pixel aspect ratio)?
    If you have any information about the video bitrate and audio bitrate of the file, that would be good to know.
    What is the audio - stereo 2 channel or 5.1 channel?
    What are you (manually) or the project automatically setting as the project preset to match the properties of your source video?
    Let us start here and then decide what next.
    Thank you.
    ATR

  • Cisco LAP 2602 can not join Virtual WLC

    dear all, 
    i just install Virtual WLC and i remove WLC 2504 , i install & configured it , but LAP can not join. it was work fine with WLC 2504.
    i used the same network topology with the old WLC.
    i receive this error logs.
    *spamApTask4: Feb 04 06:01:30.082: <<<<  Start of CAPWAP Packet  >>>>
    *spamApTask4: Feb 04 06:01:30.082: CAPWAP Control mesg Recd from 10.192.200.93, Port 26711
    *spamApTask4: Feb 04 06:01:30.082:              HLEN 4,   Radio ID 0,    WBID 1
    *spamApTask4: Feb 04 06:01:30.082:              Msg Type   :   CAPWAP_DISCOVERY_REQUEST
    *spamApTask4: Feb 04 06:01:30.082:              Msg Length : 155
    *spamApTask4: Feb 04 06:01:30.082:              Msg SeqNum : 0
    *spamApTask4: Feb 04 06:01:30.082:   
    *spamApTask4: Feb 04 06:01:30.082:       Type : CAPWAP_MSGELE_DISCOVERY_TYPE, Length 1
    *spamApTask4: Feb 04 06:01:30.082:              Discovery Type : CAPWAP_DISCOVERY_TYPE_UNKNOWN
    *spamApTask4: Feb 04 06:01:30.082:   
    *spamApTask4: Feb 04 06:01:30.082:       Type : CAPWAP_MSGELE_WTP_BOARD_DATA, Length 62
    *spamApTask4: Feb 04 06:01:30.083:              Vendor Identifier      : 0x00409600
    *spamApTask4: Feb 04 06:01:30.083:              WTP_SERIAL_NUMBER : AIR-CAP2602E-I-K9
    *spamApTask4: Feb 04 06:01:30.083:   
    *spamApTask4: Feb 04 06:01:30.083:       Type : CAPWAP_MSGELE_WTP_DESCRIPTOR, Length 40
    *spamApTask4: Feb 04 06:01:30.083:              Maximum Radios Supported  : 2
    *spamApTask4: Feb 04 06:01:30.083:              Radios in Use             : 2
    *spamApTask4: Feb 04 06:01:30.083:              Encryption Capabilities   : 0x00 0x01
    *spamApTask4: Feb 04 06:01:30.083:   
    *spamApTask4: Feb 04 06:01:30.083:       Type : CAPWAP_MSGELE_WTP_FRAME_TUNNEL, Length 1
    *spamApTask4: Feb 04 06:01:30.083:              WTP Frame Tunnel Mode : NATIVE_FRAME_TUNNEL_MODE
    *spamApTask4: Feb 04 06:01:30.083:   
    *spamApTask4: Feb 04 06:01:30.083:       Type : CAPWAP_MSGELE_WTP_MAC_TYPE, Length 1
    *spamApTask4: Feb 04 06:01:30.083:              WTP Mac Type  : SPLIT_MAC
    *spamApTask4: Feb 04 06:01:30.083:   
    *spamApTask4: Feb 04 06:01:30.083:       Type : CAPWAP_MSGELE_VENDOR_SPECIFIC_PAYLOAD, Length 10
    *spamApTask4: Feb 04 06:01:30.083:              Vendor Identifier  : 0x00409600
    *spamApTask4: Feb 04 06:01:30.083: 
            IE            :   UNKNOWN IE 207
    *spamApTask4: Feb 04 06:01:30.083:      IE Length     :   4
    *spamApTask4: Feb 04 06:01:30.083:      Decode routine not available, Printing Hex Dump
    *spamApTask4: Feb 04 06:01:30.083: 00000000: 03 00 00 01                                       ....
    *spamApTask4: Feb 04 06:01:30.083:   
    *spamApTask4: Feb 04 06:01:30.083:       Type : CAPWAP_MSGELE_VENDOR_SPECIFIC_PAYLOAD, Length 12
    *spamApTask4: Feb 04 06:01:30.083:              Vendor Identifier  : 0x00409600
    *spamApTask4: Feb 04 06:01:30.083: 
            IE            :   RAD_NAME_PAYLOAD
    *spamApTask4: Feb 04 06:01:30.083:      IE Length     :   6
    *spamApTask4: Feb 04 06:01:30.083:      Rad  Name     :   
    *spamApTask4: Feb 04 06:01:30.083: CEO_AP
    *spamApTask4: Feb 04 06:01:30.083: <<<<  End of CAPWAP Packet  >>>>
    *spamApTask4: Feb 04 06:01:30.083: dc:a5:f4:8c:ff:30 Discovery Request from 10.192.200.93:26711
    *spamApTask4: Feb 04 06:01:30.083: dc:a5:f4:8c:ff:30 ApModel: AIR-CAP2602E-I-K9
    *spamApTask4: Feb 04 06:01:30.083: dc:a5:f4:8c:ff:30 Join Priority Processing status = 0, Incoming Ap's Priority 1, MaxLrads = 200, joined Aps =0
    *spamApTask4: Feb 04 06:01:30.083: apModel: AIR-CAP2602E-I-K9
    *spamApTask4: Feb 04 06:01:30.083: apType = 26 apModel: AIR-CAP2602E-I-K9
    *spamApTask4: Feb 04 06:01:30.083: apType: Ox1a bundleApImageVer: 8.0.110.0
    *spamApTask4: Feb 04 06:01:30.083: version:8 release:0 maint:110 build:0
    *spamApTask4: Feb 04 06:01:30.083: dc:a5:f4:8c:ff:30 Discovery Response sent to 10.192.200.93 port 26711
    *spamApTask4: Feb 04 06:01:30.083: dc:a5:f4:8c:ff:30 Discovery Response sent to 10.192.200.93:26711
    Please any help.

    dear
    yes  the wlc  2504  is 8.0.110 but because its damaged i replaced it with  new vWLC v 8.0.110.
    also i can not put the LAP in flexconnect until its joint.

  • Access Points not joining WLC

    Hello All,
    I am trying to deploy several AIR-CAP3502E-E-K9 access points from a cisco 5508 wire lan contoller running ver 7 code. However iam having difficulty regiserting the access points with the WLC. The wlc is connect to a 3650 switch, and each access point is connected to a 2960 switch.
    Problem Solved. A bad update was not allowing the access points to get their correct firmware.

    You need to provide what Leo stated, that would help a lot. Anyways you can't telnet or ssh into a capwap AP if it has not joined the WLC. So that being said, provide the info Leo requested and then console into the ap and provide use with output from the console. Make sure you reboot the AP and then start capturing the output for around 5 minutes.
    Sent from Cisco Technical Support iPad App

Maybe you are looking for