Cisco 3502 AP will not join 4402

Have 5 WLC 4402's in my network.  I upgraded one of them to 7.0.98.0 to test the new 3502 APs.  When I go to join the new 3502 it will not join to the upgraded WLC.  Keep in mind all WLC's are in the same mobility group.  Does it matter that the rest of the controllers are not on 7.0 code?
thanks
izzy

AP3500 requires a minimum of 7.0.98.0.  So my question is:  When  you console into the AP and reboot the AP (all in that order), can you please post everything?

Similar Messages

  • Cisco 3602e CAPWAP will not join vWLC

    I am having a rather troubling issue.  I had an access point that was connected to my virtual wireless lan controller.  It worked fine in the testing environment, but then I tried to roll the environment over to production.  This meant connecting the AP to the primary Wireless Lan Controller.  The original lan controller would have become the primary but I could not get the management interface moved over to the VLAN I wanted it on. 
    (Not sure why that did not work, but regardless I had to reinstall the controller and enter 3 as the VLAN during the initial config to get it to take.)
    So now I am trying to connect the AP to a new controller and the old controller is gone.  No matter what I try it will not connect.  My controller says that there is not an entry in the database.  The times on the 2 devices do not match up, and the certificate fails during the initialization process.  I cannot set the time on the AP because I cannot connect to it.  So I just set the wrong time on my controller so they would match, but no luck there either.  I cannot connect via the console port on any speed or setting for flow control.  I cannot telnet or SSH.  I can access the web interface but I have no options to change anything.  I am told that running a write erase command on the AP will reset it so I can connect it to the new controller, but I cannot access this device to run that command.  Is there a fault in the console port on this device?  Is there any other way to force this device to join the new controller?  I already tried setting it as the master controller and removing the arp cache.  No idea how to remove the MAC cache.  I get the error that the AP is not found in the temporary database.  Is there any way I can add it manually?  It fails on the certificate, can I disable the use of certificates/authentication of any kind at least until I can wipe this AP?

    Just wanted to note that I was able to gain access to my AP finally.  The console cable I was using was bad.  Now I have a different issue.  Apparently the IOS is corrupt and wont boot.  I tried changing the os to a different version within the flash folder, which got the device to boot, but then it rebooted right back into the other IOS and failed when I restarted the AP.  I entered the set boot command with the image name of the working IOS but that did not seem to do anything.  I then deleted the faulty IOS and now the boot process just cycles even when manually tell it to boot from the one that worked.  Is there a location on the device that keeps an archive of the IOS?  I would like to just erase my flash folder and start over with a new IOS. 
    If no archive then is there a location where I can download the IOS for this?  I want to try to avoid Cisco smartnet... I feel troubled paying thousands for something that I already own.

  • Cisco 7941G phones will not boot up after factory reset.

    Cisco 7941G phones will not boot up after factory reset.
    The following happens.
    1. Speaker light lit (Green)
    2. Phone displays a firmware upgrade page (see attachment) for a few minutes. (Doesn't seems to be upgrading, but it "saids" upgrading)
    3. Saw Cisco logo with a Java Powered page.
    4. The whole thing loops again and again...
    I think the reason why the phone isn't booting up is because the phone needs to know where to find the configuration/firmware files from a tftp server. I do have a TFTP server, but normally I need to go in settings to change the alternative tftp server, but the thing is that now I can't even press the settings button...
    Please help.

    How many phones were reset and upgrading at one time? What is the setting of the TFTP Maximum Serving Count (Advanced TFTP Service Parm) on each of the TFTP servers?
    Sounds like too many devices trying to use TFTP at once.

  • MacBook will not join Airport network

    I am flummoxed. My MacBook will not join my Airport Extreme network. It was fine this morning. I have restarted the MacBook. I have restarted the Airport base station. My iPhone is connecting to the network fine. My TV is connecting to the network fine. My G4 is connecting to the network fine. So, it appears there is some issue with the MacBook itself. Any ideas what could be the issue?

    Dr. Kellie wrote:
    I am flummoxed.
    Are you a Nero Wolfe fan?
    My MacBook will not join my Airport Extreme network. It was fine this morning. I have restarted the MacBook. I have restarted the Airport base station. My iPhone is connecting to the network fine. My TV is connecting to the network fine. My G4 is connecting to the network fine. So, it appears there is some issue with the MacBook itself. Any ideas what could be the issue?
    First, either update your profile or your OS to 10.5.6. There have been many bug fixes since 10.5.2 and some WiFi updates require the latest Leopard version.
    That being said, check your network preferences.
    Do you have a rational IP Address?
    If you are using an encrypted WiFi, you can temporarily turn off the encryption and see if the MB can join the network. If so, it's an encryption issue. If not, turn the encryption back on and we will have to look elsewhere.
    BTW, you should be using WPA since WEP has long ago been compromised and is useless, but thats a side thing right now.
    On the MB, I would run disk utility and repair permissions for starters.

  • Our service upgraded to 4g but now my Mac computer will not join the network, It sees the network but will not join

    Our service just upgraded to 4g. Now my Mac computer will not join the network. It "sees" the network but will not "join"

        Hi Hojo38,
    That's not good! What happens when you attempt to make the connection? Do you receive an error message? What device is the computer making a connection to? Send details please.
    Thanks,
    PamelaF_VZW
    Tweet us @vzwsupport

  • TS1398 I have just purchased an iPad mini and it will not join my wifi. It detects my wifi network but will not join. I have a Mac, 2 iPhones and an iPad 4 and all work perfectly. The new iPad mini just won't behave. Any ideas?

    I have purchased an iPad mini and it will not join my wifi network. Any ideas?

    Some things to try first:
    1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
    2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
    3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
    4. Go into your router security settings and change from WEP to WPA with AES.
    5.  Renew IP Address: (especially if you are droping internet connection)
        •    Launch Settings app
        •    Tap on Wi-Fi
        •    Tap on the blue arrow of the Wi-Fi network that you connect to from the list
        •    In the window that opens, tap on the Renew Lease button
    ~~~~~~~~~~~~~~~~~~~~~~~~~
    iOS 6 Wifi Problems/Fixes
    Fix For iOS 6 WiFi Problems?
    http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
    Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
    http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
    How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
    http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
    iOS 6 iPad 3 wi-fi "connection fix" for netgear router
    http://www.youtube.com/watch?v=XsWS4ha-dn0
    Apple's iOS 6 Wi-Fi problems
    http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
    ~~~~~~~~~~~~~~~~~~~~~~~
    Look at iOS Troubleshooting Wi-Fi networks and connections  http://support.apple.com/kb/TS1398
    iPad: Issues connecting to Wi-Fi networks  http://support.apple.com/kb/ts3304
    WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
    How to Fix: My iPad Won't Connect to WiFi
    http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
    iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
    iOS: Recommended settings for Wi-Fi routers and access points  http://support.apple.com/kb/HT4199
    How to Quickly Fix iPad 3 Wi-Fi Reception Problems
    http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
    iPad Wi-Fi Problems: Comprehensive List of Fixes
    http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
    Fix iPad Wifi Connection and Signal Issues  http://www.youtube.com/watch?v=uwWtIG5jUxE
    Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
    How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
    Unable to Connect After iOS Update - saw this solution on another post.
    https://discussions.apple.com/thread/4010130
    Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
    ~~~~~~~~~~~~~~~
    If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
     Cheers, Tom

  • Paths will not join with join tool

    I'm trying to use the join tool on a pencil path but the paths will not join. I saw a similar question earlier, but no answer was given as it was user error. I'm new to Illustrator, and I don't quite get what he/she figured out he/she was doing. One answer was that the open path should not be more than 1 inch apart, and it's not (0.2). I "scrub" with the join tool, get the blue line, but when I release, the line disappears and nothing happens? At this point I can't even figure out what's going wrong so I can backtrack. Ideas anyone?

    Please show a screenshot of the two lines.

  • Computer will not join wifi network.  Please hep

    I've used it at my home, in the airport, and cafes, and it worked flawlessly, but now in my girlfriend's house I cannot join their network. I even installed a brand new Linksys router today and it still will not join. It finds the network SSID but refuses to join it. All other computers in the house have no problems.
    Please help.
    Thank you.

    Hi Jason,
    Yes, other Macs, a MacBook Pro & Black MacBook, are connected to the network. The original router had WEP security and this router has WPA2 Personal security.
    I just realized my iPhone won't connect to it either. I'll try resetting it with no encryption.
    How do I make a new network location?
    Thank you!
    Message was edited by: .jacob

  • IPAD WILL NOT JOIN PASSWORD GUARDED WIRELESS NETWORK

    My ipad 2 will not join a password guarded Time Warner Cable home wireless network.   The network is properly discovered yet I cannot get a password access box to appear.  Suggestions please

    What encryption is the router using?
    - iOS: Troubleshooting Wi-Fi networks and connections
    - Wi-Fi: Unable to connect to an 802.11n Wi-Fi network
    - iOS: Recommended settings for Wi-Fi routers and access points

  • Will not join wifi

    My iPhone will not join WiFi network... My iPad is on, my Mac is on, but the phone will not join.

    Hi Jason,
    Yes, other Macs, a MacBook Pro & Black MacBook, are connected to the network. The original router had WEP security and this router has WPA2 Personal security.
    I just realized my iPhone won't connect to it either. I'll try resetting it with no encryption.
    How do I make a new network location?
    Thank you!
    Message was edited by: .jacob

  • I have 2  iPads both the sane except for case color. One connects to my home wifi fine, the other will not "join". It finds the wifi name and the little circle turning wheel just spins.

    I have 2  iPads both the sane except for case color. One connects to my home wifi fine, the other will not "join". It finds the wifi name and the little circle turning wheel just spins. I have tried about ten different "fixes" none work.. Reboot, forget wifi, etc.
    Unplugged wifi on and on for about an hour.
    I have compared settings between the two and cannot see any difference.
    Both iPads worked fine last week. One made a trip to MI  and used cellular access just fine. Now that one still uses cellular OK, but refuses to "join" the wifi.
    Too bad I can't attach a picture.
    Anyone care to offer a unique workable solution I have not tried?
    Thanks
    WD9HIK

    Have you tried renewing the lease in the WiFi settings? Settings>WiFi>Your network name>Tap the blue arrow>Renew Lease. If you haven't tried that - try it first before reading the information about restoring the iOS software.
    Follow the instructions in here. If you are unsure about anything - do not proceed. Post back with questions first.
    iTunes: Restoring iOS software - Apple - Support
    Make sure that you transfer all purchases, backup the iPad and sync with iTunes first. When you restore to factory settings, iTunes should ask if you want to backup first, but it will not hurt to initiate a backup on your won before you even start the restore process.
    How to transfer purchases into your iTunes library
    http://support.apple.com/kb/HT1848
    How to backup and restore from a backup
    http://support.apple.com/kb/HT1766

  • HT204053 My iPad will not join the iCal at my work after I've been invited. It says it needs more information.

    My iPad will not join the iCal at my work after I've been invited. It says it needs more information. What up?

    A reset should help. Tap and hold the Home button and the On/Off buttons for approximately 10-15 seconds, until the Apple logo reappears. When the logo appears, release both buttons.

  • Autonomous 1252 converted to CAPWAP will not join 5508 WLC

    WLC 5508 firmware is v6.0.188.0
    I've tried updating the autonomous 1252 via both the upgrade tool 3.4 and 'archive download-sw' from the CLI
    I've tried multiple recovery images
    c1250-rcvk9w8-tar.124-21a.JA2.tar
    c1250-rcvk9w8-tar.124-10b.JDA.tar
    After AP reboots with recovery image it joins WLC and downloads new CAPWAP image then reboots again
    AP will not rejoin WLC with updated CAPWAP firmware
    Any help with this is greatly appreciated!
    Thanks in advance and happy holidays,
    Scott
    Error Msg from 1252 console
    *Dec 18 15:52:50.691: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:52:50.695: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    Additional info
    WLC Debugs Enabled:
    MAC address ................................ c4:7d:4f:39:31:e2
    Debug Flags Enabled:
      aaa detail enabled.
      capwap error enabled.
      capwap critical enabled.
      capwap events enabled.
      capwap state enabled.
      dtls event enabled.
      lwapp events enabled.
      lwapp errors enabled.
      pm pki enabled.
    WLC Debug Output:
    *Dec 18 10:51:51.575: dtls_conn_hash_search: Connection not found in hash table - Table empty.
    *Dec 18 10:51:51.575: sshpmGetCID: called to evaluate <cscoDefaultIdCert>
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: called to get cert for CID 154c7072
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCertFromCID: comparing to row 2, certname >cscoDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: called to evaluate <cscoDefaultIdCert>
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<
    *Dec 18 10:51:51.575: sshpmGetSshPrivateKeyFromCID: called to get key for CID 154c7072
    *Dec 18 10:51:51.575: sshpmGetSshPrivateKeyFromCID: comparing to row 0, certname >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.576: sshpmGetSshPrivateKeyFromCID: comparing to row 1, certname >bsnDefaultIdCert<
    *Dec 18 10:51:51.576: sshpmGetSshPrivateKeyFromCID: comparing to row 2, certname >cscoDefaultIdCert<
    *Dec 18 10:51:51.576: sshpmGetSshPrivateKeyFromCID: match in row 2
    *Dec 18 10:51:51.692: acDtlsCallback: Certificate installed for PKI based authentication.
    *Dec 18 10:51:51.693: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=0
    *Dec 18 10:51:51.693: local_openssl_dtls_record_inspect:   msg=ClientHello len=44 seq=0 frag_off=0 frag_len=44
    *Dec 18 10:51:51.693: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.693: local_openssl_dtls_send: Sending 60 bytes
    *Dec 18 10:51:51.694: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.694: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=1
    *Dec 18 10:51:51.694: local_openssl_dtls_record_inspect:   msg=ClientHello len=76 seq=1 frag_off=0 frag_len=76
    *Dec 18 10:51:51.695: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.695: local_openssl_dtls_send: Sending 544 bytes
    *Dec 18 10:51:51.695: local_openssl_dtls_send: Sending 544 bytes
    *Dec 18 10:51:51.696: local_openssl_dtls_send: Sending 314 bytes
    *Dec 18 10:51:51.712: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=2
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect:   msg=Certificate len=1146 seq=2 frag_off=0 frag_len=519
    *Dec 18 10:51:51.712: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.712: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=3
    *Dec 18 10:51:51.712: local_openssl_dtls_record_inspect:   msg=Certificate len=1146 seq=2 frag_off=519 frag_len=519
    *Dec 18 10:51:51.713: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:51.713: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:51.713: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=4
    *Dec 18 10:51:51.713: local_openssl_dtls_record_inspect:   msg=Certificate len=1146 seq=2 frag_off=1038 frag_len=108
    *Dec 18 10:51:51.714: sshpmGetIssuerHandles: locking ca cert table
    *Dec 18 10:51:51.714: sshpmGetIssuerHandles: calling x509_alloc() for user cert
    *Dec 18 10:51:51.714: sshpmGetIssuerHandles: calling x509_decode()
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: <subject> C=US, ST=California, L=San Jose, O=Cisco Systems, CN=C1250-c47d4f3931e2, [email protected]
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: <issuer>  O=Cisco Systems, CN=Cisco Manufacturing CA
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: Mac Address in subject is c4:7d:4f:39:31:e2
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: Cert Name in subject is C1250-c47d4f3931e2
    *Dec 18 10:51:51.719: sshpmGetIssuerHandles: Cert is issued by Cisco Systems.
    *Dec 18 10:51:51.719: sshpmGetCID: called to evaluate <cscoDefaultMfgCaCert>
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: called to get cert for CID 2ab15c0a
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 0, certname >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 1, certname >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 2, certname >bsnDefaultCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 3, certname >bsnDefaultBuildCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 4, certname >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.719: sshpmGetCertFromCID: comparing to row 5, certname >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.719: ssphmUserCertVerify: calling x509_decode()
    *Dec 18 10:51:51.730: ssphmUserCertVerify: user cert verfied using >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: ValidityString (current): 2009/12/18/15:51:51
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: ValidityString (NotBefore): 2009/11/03/00:47:36
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: ValidityString (NotAfter): 2019/11/03/00:57:36
    *Dec 18 10:51:51.730: sshpmGetIssuerHandles: getting cisco ID cert handle...
    *Dec 18 10:51:51.730: sshpmGetCID: called to evaluate <cscoDefaultIdCert>
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 0, CA cert >bsnOldDefaultCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 1, CA cert >bsnDefaultRootCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 2, CA cert >bsnDefaultCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 3, CA cert >bsnDefaultBuildCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 4, CA cert >cscoDefaultNewRootCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 5, CA cert >cscoDefaultMfgCaCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 0, ID cert >bsnOldDefaultIdCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 1, ID cert >bsnDefaultIdCert<
    *Dec 18 10:51:51.730: sshpmGetCID: comparing to row 2, ID cert >cscoDefaultIdCert<
    *Dec 18 10:51:51.731: sshpmFreePublicKeyHandle: called with 0x1f1f3b8c
    *Dec 18 10:51:51.731: sshpmFreePublicKeyHandle: freeing public key
    *Dec 18 10:51:51.731: openssl_shim_cert_verify_callback: Certificate verification - passed!
    *Dec 18 10:51:51.732: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:52.155: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:52.155: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=5
    *Dec 18 10:51:52.155: local_openssl_dtls_record_inspect:   msg=ClientKeyExchange len=258 seq=3 frag_off=0 frag_len=258
    *Dec 18 10:51:52.269: openssl_dtls_process_packet: Handshake in progress...
    *Dec 18 10:51:52.269: dtls_conn_hash_search: Searching hash for Local 192.168.100.2:5246  Peer 192.168.100.54:62227
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect: record=Handshake epoch=0 seq=6
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect:   msg=CertificateVerify len=258 seq=4 frag_off=0 frag_len=258
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect: record=ChangeCipherSpec epoch=0 seq=7
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect: record=Handshake epoch=1 seq=0
    *Dec 18 10:51:52.269: local_openssl_dtls_record_inspect:   msg=Unknown or Encrypted
    *Dec 18 10:51:52.273: openssl_dtls_process_packet: Connection established!
    *Dec 18 10:51:52.273: acDtlsCallback: DTLS Connection 0x167c5c00 established
    *Dec 18 10:51:52.273: openssl_dtls_mtu_update: Setting DTLS MTU for link to peer 192.168.100.54:62227
    *Dec 18 10:51:52.273: local_openssl_dtls_send: Sending 91 bytes
    *Dec 18 10:53:06.183: sshpmLscTask: LSC Task received a message 4
    Aironet 1252 Console Debug:
    *Dec 16 11:07:12.055: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec 18 15:51:40.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:51:40.999: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Dec 18 15:51:41.695: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:51:41.699: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:51:41.699: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:51:41.699: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    *Dec 18 15:51:46.695: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:51:46.695: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    *Dec 18 15:52:39.999: %DTLS-5-SEND_ALERT: Send WARNING : Close notify Alert to 192.168.100.2:5246
    *Dec 18 15:52:40.039: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Dec 18 15:52:40.039: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
    *Dec 18 15:52:40.051: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
    *Dec 18 15:52:40.051: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
    *Dec 18 15:52:40.059: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
    *Dec 18 15:52:40.063: %LINK-3-UPDOWN: Interface Dot11Radio1, changed state to up
    *Dec 18 15:52:40.079: %LINK-3-UPDOWN: Interface Dot11Radio0, changed state to up
    *Dec 18 15:52:40.079: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
    *Dec 18 15:52:50.059: %CAPWAP-3-ERRORLOG: Go join a capwap controller
    *Dec 18 15:52:50.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:52:50.000: %CAPWAP-5-CHANGED: CAPWAP changed state to 
    *Dec 18 15:52:50.691: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.100.2 peer_port: 5246
    *Dec 18 15:52:50.695: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-5-CHANGED: CAPWAP changed state to JOIN
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:52:50.695: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.100.2
    *Dec 18 15:52:55.691: %CAPWAP-5-SENDJOIN: sending Join Request to 192.168.100.2
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message from 192.168.100.2
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Dec 18 15:52:55.691: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 192.168.1

    Nathan and Leo are alluding to CSCte01087. Basically the caveat is that DTLS fails on a non-00:xx:xx:xx:xx:xx L2 first hop. e.g. if the APs are on the same VLAN as the management interface, they must have 00 MACs; if they are on a different VLAN, the WLC/AP gateway must have a 00 MAC. If the workaround below does not suit your environment, open a TAC case for an image with the fix.
      Symptom:
    An access point running 6.0.188.0 code may be unable to join a WLC5508.
    Messages similar to the following will be seen on the AP.
       %CAPWAP-3-ERRORLOG: Invalid AC Message Type 4.
       %CAPWAP-3-ERRORLOG: Unencrypted non-discovery CAPWAP Control Message
    Conditions:
    At least one of the following conditions pertains:
    - The high order byte of the AP's MAC address is nonzero, and the AP is in
    the same subnet as the WLC5508's management (or AP manager) interface
    - The WLC's management (or AP manager) interface's default gateway's
    MAC address' high order byte is nonzero.
    Workaround:
    If the MAC address of the WLC's default gateway does not begin with 00,
    and if all of the APs' MAC addresses begin with 00, then: you can put
    the APs into the same subnet as the WLC's management (or AP manager)
    interface.
    In the general case, for the situation where the WLC's default gateway's
    MAC does not begin with 00, you can address this by changing it to begin
    with 00. Some methods for doing this include:
    -- use the "mac-address" command on the gateway, to set a MAC address
    that begins with 00
    -- then enable HSRP on the gateway (standby ip ww.xx.yy.zz) and use this
    IP as the WLC's gateway.
    For the case where the APs' MAC addresses do not begin with 00, then make
    sure that they are *not* in the same subnet as the WLC's management
    (AP manager) interface, but are behind a router.
    Another workaround is to downgrade to 6.0.182.0.  However, after
    downgrading the WLC to 6.0.182.0, any APs that have 6.0.188.0 IOS
    (i.e. 12.4(21a)JA2) still installed on them will be unable to join.
    Therefore, after downgrading the WLC, the APs will need to have a
    pre-12.4(21a)JA2 rcvk9w8 or k9w8 image installed on them.

  • Windows 8.1 Pro Will Not Join Domain

    Hello,
    I know this a bit lengthy, but hopefully all the details will better help you guys understand my problem.
    We just purchased an HP Pavilion Windows 8.1 laptop for our office along with the Windows 8.1 Pro Pack upgrade. When I went to install the pro upgrade, it accepted my key and started the upgrade process, but before the install completed, an error was generated
    that stated "Something went wrong. " No error code was generated. I restarted the laptop, it did some updates, and when I logged back in, I checked under the computer properties and noticed that the OS version was changed to Windows 8.1 Pro with
    Media Center, so I assumed that it installed. I checked for corrupted files in the command prompt and no corrupted files were found.
    So, the next thing I tried to do was join the laptop to our domain. I have joined XPs, Vistas, and 7s with no problems, but for some reason, Windows 8.1 does not want to join the domain. Just to be clear, I have the laptop plugged in via ethernet and the
    wifi off, I checked that the DNS of the laptop matched the DNS of the server, and all firewalls have been disabled. It seems to find the domain, but when it asks for the credentials to join the server, it returns an error stating that the domain could not
    be contacted or information was entered incorrectly. I know I am entering the correct credentials because, just to test, I created a new user account on a different machine and used the credentials to join the server. I pinged the server from the laptop and
    vice-versa, and all packets were received with no errors, so I know that they are "seeing" each other. Also, If I join the laptop to a Workgroup instead of the domain, I am able to access the server using the same credentials that it will not accept
    when attempting to join the domain.
    I am baffled. Any help or suggestions will be much appreciated. Thanks!

    I had exactly the same issue as above.  When I rebooted my machine, it now shows that the upgrade to Pro Pack with media center is installed.
    Haven't tried adding to a domain yet...  will post an update when/if it fails.  No reply means it joined fine after rebooting it from a failed attempt as above.   I suspect that this had something to do with the fact that I had just logged
    on to the machine and ran setup for the first time.
    Reboot after setting up the computer for the first time, then proceed with the upgrade to 8.1 Pro Pack and I suspect that this issue won't occur.  

  • IMP: Cisco AIR-CAP1602 &1532 not joining 2504 Controller issue

    Dear Team, We have Cisco wireless implementation in clients premises. We have 8 indoor AP (AIR-CAP1602E-AK9) and 2 Outdoor AP (AIR-CAP1532I-AK9) . Seven indoor APs are able to join the 2504 controller, but 1 indoor AIR-CAP1602E AP is not joining and signal is RED continuously while as outdoor AP AIR-CAP1532I-AK9 signal goes blinking from green, red to amber continuously and is not downloading LWAPP image from the controller even after hard reset.
    The output for both APs shown below-
    1) AIR-CAP1602E-A-K9:
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvara
    ap: reset
    Are you sure you want to reset the system (y/n)?y
    System resetting...
    Boot from flash
    IOS Bootloader - Starting system.
     FLASH CHIP: Spansion S25FL256
    Xmodem file system is available.
    flashfs[0]: 14 files, 3 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31936000
    flashfs[0]: Bytes used: 418304
    flashfs[0]: Bytes available: 31517696
    flashfs[0]: flashfs fsck took 9 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 18:e7:28:d1:9b:05
     ************* loopback_mode = 0
    The system is unable to boot automatically because there
    are no bootable files.
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvarag
    Same event repeating, failed to reset and reboot device
    2) AIR_CAP1532I-A-K9 (Outdoor AP):
     *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Could Not resolve CISCO-CAPWAP-CONTROLLER
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Discovery response from MWAR 'Cisco_47:32:e4'running version 7.5.102.0 is rejected.
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Failed to decode discovery response.
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 2 state 2.
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
    *Mar  1 00:01:22.211: %CAPWAP-3-ERRORLOG: Failed to process unencrypted capwap packet from 100.1.1.20
    signal goes blinking from Grean, Red to Amber continuously.
    Failed to download LWAPP image from the controller even after hard reset.
    Default image: 7.6.95.12
    Logs and screen shot attached
    Please advice. 
    Thanks
    Aakash

    Hi please note the details below-
    AIR-CAP1602E-A-K9:
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvara
    ap: reset
    Are you sure you want to reset the system (y/n)?y
    System resetting...
    Boot from flash
    IOS Bootloader - Starting system.
     FLASH CHIP: Spansion S25FL256
    Xmodem file system is available.
    flashfs[0]: 14 files, 3 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31936000
    flashfs[0]: Bytes used: 418304
    flashfs[0]: Bytes available: 31517696
    flashfs[0]: flashfs fsck took 9 seconds.
    Reading cookie from SEEPROM
    Base Ethernet MAC address: 18:e7:28:d1:9b:05
     ************* loopback_mode = 0
    The system is unable to boot automatically because there
    is no bootable files.
    C1600 Boot Loader (AP1G2-BOOT-M) LoaderVersion 15.2(2)JAX, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Compiled Fri 30-Nov-12 15:48 by aselvarag
    Can't reboot device!
    WLC-SYSLOG
    (Cisco Controller) >show sysinfo
    Manufacturer's Name.............................. Cisco Systems Inc.
    Product Name..................................... Cisco Controller
    Product Version.................................. 7.5.102.0
    Bootloader Version............................... 1.0.18
    Field Recovery Image Version..................... 1.0.0
    Firmware Version................................. PIC 16.0
    Build Type....................................... DATA + WPS
    System Name...................................... Cisco_47:32:e4
    System Location..................................
    System Contact...................................
    System ObjectID.................................. 1.3.6.1.4.1.9.1.1279
    IP Address....................................... 100.1.1.20
    Last Reset....................................... Power on reset
    System Up Time................................... 0 days 2 hrs 18 mins 39 secs
    System Timezone Location......................... (GMT -6:00) Central Time (US a                                                                                        nd Canada)
    System Stats Realtime Interval................... 5
    System Stats Normal Interval..................... 180
    --More-- or (q)uit
    Configured Country............................... US  - United States
    Operating Environment............................ Commercial (0 to 40 C)
    Internal Temp Alarm Limits....................... 0 to 65 C
    Internal Temperature............................. +32 C
    External Temperature............................. +37 C
    Fan Status....................................... 4000 rpm
    State of 802.11b Network......................... Enabled
    State of 802.11a Network......................... Enabled
    Number of WLANs.................................. 3
    Number of Active Clients......................... 0
    Burned-in MAC Address............................ 24:E9:B3:47:32:E0
    Maximum number of APs supported.................. 15

Maybe you are looking for