AIR-AP2802I-E-K9 fail to join

[zillams]

Hello ,

We are having problem with one AP to join the WLC , all others successfully the controlle. 

the console output is :

[*03/19/2024 09:08:50.0003] CAPWAP State: DTLS Setup
[*03/19/2024 09:08:50.0035] dtls_process_packet: DTLS Error: 1040
[*03/19/2024 09:08:50.0035] dtls_process_packet: The controller shut down the DTLS connection.
[*03/19/2024 09:08:50.0035] dtls_process_packet: Please verify that the AP certificate is valid and has not expired

WLC model 3504 and software version is 8.10.185.0

Any advice ?

[Leo Laohoo]

---

@zillams wrote:

[*03/19/2024 09:08:50.0035] dtls_process_packet: Please verify that the AP certificate is valid and has not expired

---

FN63942 - Wireless Lightweight Access Points and WLAN Controllers Fail to Create CAPWAP Connections Due to Certificate Expiration

[zillams]

Thankyou for your reply, but if this is the cause wouldn't all the other AP fail to join ?

[Leo Laohoo]

Depends on the serial number of each individual AP.

[marce1000]

 - On the WLC enter the  config ap cert-expiry-ignore {mic|ssc} enable command (use both options in a separate command)

 M.

[zillams]

Thank you for your answer, i finally managed to try it ..but it didn't work.

I found another solution consisting of updating the AP image

https://blog.it-playground.eu/lightweight-ap-manual-firmware-upgrade/

[Hans Juergen Guenter]

Hi @zillams ,

does it work?

I had a similar problem yesterday. The following helped:
I reset the date on the WLC to a date before the certificate expired,
then the AP was able to connect and then I set it back to the current
date. The AP was then able to connect to the WLC and then worked
without any error messages.
I'll check again later today to see if everything works after everything
was out of power.

[zillams]

Hi @Hans Juergen Guenter  ,

Well not really, I ended up converting the AP to Mobility Express and then re-convert it to lightweight and then the AP joined the WLC.

see this:

https://wrmem.net/index.php/2018/04/03/converting-a-mobility-express-ap-into-a-capwap-ap/