AP is not join my controller

My WLC is AIR-CT-2504 soft version 8.0

AP is AIR-CAP1702I-C-K9

Internal DHCP using at the WLC.

AP is not to join

Here is the output showing AP. What should I do to solve the problem?

AP5c83.8f38.0a98 >
* 2 jan 22:42:45.999: DTLS_CLIENT_ERROR:... /CAPWAP/base_capwap/DTLS/base_capwap_dtls_connection_db.c:2214 retransmission count Max reached for the 0x59AFA94 connection!

* 2 jan 22:43:15.999: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 192.168.14.5:5246
* 2 jan 22:43:35.999: AP a MIC SHA2 certificate - use SHA2 MIC for DTLS.

* 2 jan 22:43:36.000: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.14.5 peer_port: 5246
* 2 jan 22:44:05.999: DTLS_CLIENT_ERROR:... /CAPWAP/base_capwap/DTLS/base_capwap_dtls_connection_db.c:2214 retransmission count Max reached for the 0x59B0A90 connection!

* 2 jan 22:44:35.999: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 192.168.14.5:5246
* 2 jan 22:44:35.999: AP a MIC SHA2 certificate - use SHA2 MIC for DTLS.

* 2 jan 22:44:36.000: % CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.14.5 peer_port: 5246
* 2 jan 22:44:36.103: % CERTIFICATE_INVALID_NOT_YET_VALID-3-PKI: certificate chain validation failed. The certificate (SN: 10A26FD200000004825B) is not yet valid period of validity begins at 02:38:37 UTC Sep 11 2015Peer certificate verification failed 001 a

* 2 jan 22:44:36.103: DTLS_CLIENT_ERROR:... /CAPWAP/base_capwap/CAPWAP/base_capwap_wtp_dtls.c:496 verified certificate failed!
* 2 jan 22:44:36.103: % DTLS-5-SEND_ALERT: send FATAL: bad certificate alert at 192.168.14.5:5246
* 2 jan 22:44:36.103: % DTLS-5-SEND_ALERT: send FATAL: close notify alert at 192.168.14.5:5246

Hello

It seems that the DTLS/tunnel WLC AP does not form.

you have set up on WLC of NTP?

check it out by going on controller > NTP > Server.

Tags: Cisco Wireless

Similar Questions

Cisco WLC 2504 - Access Points do not reach the controller

Hello world

We bougth a Cisco WLC 2504 with two AIR-AP2702I-UXK9 Access Points. The problem is that the AP do not join the WLC.
The output from 'show join ap stats' shows the following:

(Cisco Controller) > view join ap stats summary all the

Database Mac EthernetMac AP AP name IP address Status
00:35: 1a: B1:A9:60 00:f2:8 b: f4:1 has: 9 c AP00f2.8bf4.1a9c 192.168.10.23 joined not
00:35: 1a: C9:99:B0 00:f2:8 b: 77:b7:fc AP00f2.8b77.b7fc not joined 192.168.10.24

(Cisco Controller) > show join ap 00:35:1 detailed stats to: b1:a9:60

Synchronization phase statistics
-For the synchronization request has received... Does not apply
-For the synchronization completed... Does not apply

Discovery phase statistics
-Applications received discovered... 114
-Answers success of discovery... 114
-Discovery failure processing... 0
-Purpose of the last unsuccessful attempt of discovery... Does not apply
-Attempt to finally successful discovery time... 20:15:40.106 16 June
-Discovery attempt ultimately unsuccessful time... Does not apply

Join the live statistics
-Join applications received... 57
-Join sent successful responses... 57
-Processing of the join request without success... 0
-Purpose of the last unsuccessful attempt to join... Does not apply
-Attempt to join finally managed time... 20:15:50.414 16 June
-Join finally failed time... Does not apply

Configuration phase statistics

-Configuration requests... 114
-Answers configuration successful... 0
-Processing configuration failed... 57
-Purpose of the last unsuccessful attempt to Setup... Invalid license in the application configuration
-Attempt to finally successful configuration time... Does not apply
-Time finally failed configuration attempt... 20:15:50.810 16 June

Last the decryption of the AP details failure messages
-Last message decryption failure reason... Does not apply

Details of recent disconnection AP
-Last AP connection failure reason... Does not apply
-Last reason for disconnection AP... Unknown failure reason

Latest summary join error
-Type of error that occurred in the last... Application of configuration rejected LWAPP
-Reason for the error that took place the last... Invalid license in the application configuration
-Time which occurred the last error to join... 20:15:50.810 16 June

Details of sign-out AP
-Last AP connection failure reason... Does not apply
Ethernet Mac: c 00:f2:8 b: f4:1 has: 9 Ip address: 192.168.10.23

Would be grateful for the help.

Best regards
Marc

Hi Marc,

Make sure first that your controller has software code 8.0.x or above, if first better it. Here's the code recommended by TAC

http://www.Cisco.com/c/en/us/support/docs/wireless/wireless-LAN-Controller-software/200046-TAC-recommended-AireOS.html

Then, try the UX above deployment guide to begin. Under Advanced tab WLAN, you need to enable "of the first universal ap' in order to use this app provisioning & connect to the AP.

If you have more than 1 AP, then you must start 1AP using this application. Other access points that you can feed them upward, while AP original is also powered, so they'll use protocal called NDP & start them automatically

Let us know how it goes

HTH

Rasika

Pls note all useful responses *.

1131 AP to WLC 2106. IP address is assigned, but will not join.

the installer is: 1131 AP connected to 2106 WLC connected to the xp machine to access the console windows. for testing purposes only are not connected to the network/internet still. the WLC will be connected to the internet eventually.
Scope DHCP is configured and address. I can ping the management WLC AND the IP of the console of the AP ap-Manager, but can not ping the AP from the WLC console.

I read - troubleshoot not joined Lightweight Access Point is not a wireless LAN Controller and most all other tech notes.
I can use the commands of DEBUG on the AP but I don't see any output on the screen or to capture or see the WLC console connection IE. Debug lwapp package activate or activate debugging capwap package but there is no output that I can see and search.

Someone at - it ideas? Happy to post debugging logs if I can get.
```
Cisco IOS Software, C1130 Software (C1130-K9W7-M), Version 12.4(21a)JA1, RELEASE
```
This is your culprit. The IOS that you are running is an autonomous access point. You need to load/run the IOS LWAP.

... And you don't need to be a Nobel Prize winner to convert AP LWAP autonomous access point.

1. download the IOS correct. The IOS LWAP has the prefix "RRs" in its file name.

2. copy the "RRs" image in your access point using the command ' archive download-sw tftp: / /.tar.

3. make sure that the boot variable changes for a startup to the image of "RRs".

4 charge your AP.

Be sure to note our useful messages. Thank you.

Can not join the domain of the Hyper-V virtualized system

Hello!
I have a domain controller active directory (adserver) in my ws12 network, and I have another physical server (server) also runs ws12 who is able to join the domain, but the virtualized systems can not.
DNS and other settings are ok (identical to what is implemented on the server) and made the flush and registerdns steps. I even tried to add the host name of the dc and the name of FQDN for hosts files.
I type in the domain (gczinege) and I'm able to type in the username and password. After awhile the virtualized pc SAIS: could not join the domain - not found network path
I feel there is something with the installation of hyper-v or network server.

Thank you all.
I solved the problem, first I was promoting to a domain controller and to be in the area and that the installation of hyper-v after everything went well.
Best regards.
g

I just upgraded to logic 10.2.4 and now it does not recognize my controller - Yamaha P-95. Yamaha has no new drivers yet. Any suggestions?

I just upgraded to logic 10.2.4 (and 10.11.16) and El Capitan now logical does not recognize my controller - Yamaha P-95. Yamaha has no new drivers yet. RELOADED drivers available and tried different USB ports. The audio works fine. Any suggestions?

you need to ask Yamaha if they have a work-around or they intend to release the pilots, have a beta driver or what is their recommendation.

If the logic is compatible with the operating system then the problem is with the 3rd party controller, and the developer will have to answer it. Past that if you have a backup time machine an instance where worked together your controller, the software and the operating system you can restore to that point

Use Time Machine to back up or restore your Mac - Apple Support

Is possible to change the type of node WINS with cmd command on a windows operating system that is not joined to the domain?

Is possible to change the type of node WINS with cmd command on a windows operating system that is not joined to the domain?

Hello

The question you posted would be better suited to the TechNet community. Please visit the link below to find a community that will provide the support you want.

http://social.technet.Microsoft.com/forums/en-us/itprovistanetworking/threads

Hope this information is useful.

Discover the State of the agent (18) composer initialization error: could not join the domain (expected 815 seconds)

Hi all
My Active Directory, View Manager, composer and vmware vcenter are all on windows 2008 R2.
I took a spanshot of Windows XP SP3 with DHCP setting, installed vmware tools, see agent installed, firewall disabled, the Member of domain etc.
When I tried to clone the snapshot XP to several XPs with the pool creation process it get error in personalization with error, below
*03/10/10 18:01:49 IST: View Composer agent State (18) initialization error: could not join the domain (expected 815 seconds)*.
Help, please.
Thank you
Selim Desai
VCP410

Take a look at http://communities.vmware.com/message/1613937

the solution has been http://support.microsoft.com/kb/944043/en-us

André

Virtual Center Server not joined to a domain

The environment is ESX 3.5 update 5 and Virtual Center Server 2.5 update 5.
My question is; Virtual Center Server 2.5 can be installed on a W2003 server that is not joined to a domain?
If the installation is possible what are the disadvantages and consequences?
At a later date, the server can be attached to a field and Virtual Center updated accordingly? Thanks,-Jeff

My question is; Virtual Center Server 2.5 can be installed on a W2003 server that is not joined to a domain?

Yes.

If the installation is possible what are the disadvantages and consequences?

Depends on if you are using ad groups / users to connect to vcenter. Otherwise, you must use local accounts for vCenter to provide user access to your vCenter cluster. Adding the vCenter in the field would facilitate this in the future add / secure users.

and Yes, you can join vCenter to the domain at any time, but it requires a reboot...

manage the server could not join the multicast cluster)
Help me please...
I have a problem with my cluster (multicast).
When I started managing the server, I found the error message "could not join the dizzycluster address 239.192.0.0 cluster due to: java.net.SocketException: option to set the error..."
I don't know what I'd do,
Make sure that the multicast works between your two servers using this utility of Weblogic.

http://WebLogic-wonders.com/WebLogic/2010/12/07/multicast-test-on-the-network/

LAP1131 can not join WLC4400

Hello world

I am trying to deploy a 4400 WLC with several LAP1131, but I have problems: the APs cannot reach the controller.

Before you begin this conversation, I read the documentation, the option DHCP set 60 and 43 with the appropriate values, verified that I ping the WLC of AP, manually set the LWAPP... but there is no way. The error message is:

LWAPP_CLIENT_EVENT: spamResolveStaticGateway - bridge found

Sent Msg Type: DISCOVERY_REQUEST

MSG length: 21

MSG SeqNum: 0

LWAPP_CLIENT_EVENT: spamHandleDiscoveryTimer: could not find any MWAR

Reading the forums, it seems that "could not discover MWAR" means that the AP cannot reach the regulator but, what can I do else?

WLC4400 version: 4-1-185

LAP1131 version: c1130-rcvk9w8-mx 12.3 (11) JX1

Any help?

Dani

Hi Dani,

Just a note to explain this behavior;

Q. my 1131 lightweight access point (LAP) does not record with my controller 4402 LAN wireless (WLC). What can be the reason for this?

A. a common reason is that the Mode of Transport Lightweight Access Point Protocol (LWAPP) is configured on the WLC. A WLC 4402 can operate in mode of layer 2 and layer 3 LWAPP. Whereas, in a TOUR of 1131 can operate only in layer 3 mode. Mode Layer 2 is not supported on the KNEES of 1131. If the WLC is configured with the Mode of Transport LWAPP layer 2, then your KNEES not to join the WLC. In order to overcome this problem, change the Mode of Transport of the WLC of layer 2 layer 3 LWAPP.

In order to change the Transport LWAPP Mode using the user interface, go to the WLC page and locate the second selection in the main field, which is the LWAPP Mode of Transport. Change this layer 3 and restart the controller. Now, your TURN is able to register with the controller.

This doc. good Q and A

http://www.Cisco.com/en/us/products/ps6366/products_qanda_item09186a008064a991.shtml

I hope this helps!

Rob

AIR-LAP1142N-E-K9 v03 not join WCS 5.2.130.0

The difficulty in reaching my new 1142 s ap to the controllers.

I have 2 controllers AIR-WLC4402-50-K9 with 50 licenses each and about 75 total s AP.

I never tried to join an AP before 1142. But join 1130 AP works very well. So my network settings should be OK.

I googled without finding the right info. I understand that the WCS 5.2 should support the 1142, or maybe I'm wrong?

Here is some info from the console of 1142:

*Aug 2 11:46:14.580: %LWAPP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:46:14.580: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:46:14.584: %LWAPP-3-CLIENTERRORLOG: not receive read response(5)
*Aug 2 11:46:14.585: Image could not be downloaded: LWAPP goes back to discover
y
*Aug 2 11:46:14.589: lwapp_image_proc: unable to open tar file
*Aug 2 11:46:14.590: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:46:24.594: %CAPWAP-3-ERRORLOG: Go join a lwapp controller
*Aug 2 11:46:24.594: %LWAPP-3-CLIENTERRORLOG: Set Transport AddressCalled
examining image...
*Aug 2 11:46:24.601: %LWAPP-5-CHANGED: CAPWAP changed state to JOIN
*Aug 2 11:46:08.578: %LWAPP-5-CHANGED: CAPWAP changed state to IMAGE
%Error opening lwapp:/c1140 (Incorrect Login/Password)
archive download: takes 6 seconds

*Aug 2 11:46:14.577: %LWAPP-3-CLIENTERRORLOG: Retransmission count for type (I
MAGE_DATA) exceeded more than max(1)

*Aug 2 11:46:14.578: %LWAPP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:46:14.578: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:46:14.582: %LWAPP-3-CLIENTERRORLOG: not receive read response(5)
*Aug 2 11:46:14.582: Image could not be downloaded: LWAPP goes back to discover
y
*Aug 2 11:46:14.587: lwapp_image_proc: unable to open tar file
*Aug 2 11:46:14.588: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:46:24.591: %CAPWAP-3-ERRORLOG: Go join a lwapp controller
*Aug 2 11:46:24.591: %LWAPP-3-CLIENTERRORLOG: Set Transport AddressCalled
examining image...
*Aug 2 11:46:24.598: %LWAPP-5-CHANGED: CAPWAP changed state to JOIN
*Aug 2 11:50:24.582: %LWAPP-5-CHANGED: CAPWAP changed state to IMAGE
%Error opening lwapp:/c1140 (Incorrect Login/Password)
archive download: takes 6 seconds

*Aug 2 11:50:30.582: %LWAPP-3-CLIENTERRORLOG: Retransmission count for type (I
MAGE_DATA) exceeded more than max(1)

*Aug 2 11:50:30.582: %LWAPP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:50:30.582: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
*Aug 2 11:50:30.583: %LWAPP-3-CLIENTERRORLOG: not receive read response(5)
*Aug 2 11:50:30.583: Image could not be downloaded: LWAPP goes back to discover
y
*Aug 2 11:50:30.592: lwapp_image_proc: unable to open tar file
*Aug 2 11:50:30.593: %CAPWAP-5-CHANGED: CAPWAP changed state to DISCOVERY
examining image...
*Aug 2 11:50:40.597: %CAPWAP-3-ERRORLOG: Go join a lwapp controller
*Aug 2 11:50:40.597: %LWAPP-3-CLIENTERRORLOG: Set Transport AddressCalled
*Aug 2 11:50:40.604: %LWAPP-5-CHANGED: CAPWAP changed state to JOIN
*Aug 2 11:50:24.581: %LWAPP-5-CHANGED: CAPWAP changed state to IMAGE
%Error opening lwapp:/c1140 (Incorrect Login/Password)
archive download: takes 6 seconds