01-07-2017 03:09 AM - edited 07-05-2021 06:19 AM
Hi,
I`m having some trouble to join the WLC.
When i hookup the AP to a console cable the folowing message apears:
*Jan 6 09:55:13.137: %CAPWAP-3-ERRORLOG: Certificate verification failed!
*Jan 6 09:55:13.137: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed!
*Jan 6 09:55:13.137: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to xxx.xxx.xxx.xxx:5246
*Jan 6 09:55:13.138: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to xxx.xxx.xxx.xxx:5246
*Jan 6 09:55:13.140: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
*Jan 6 09:56:34.055: %LWAPP-3-CLIENTERRORLOG: LWAPP LED Init: incorrect led state 255
*Jan 6 09:56:34.083: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to administratively down
*Jan 6 09:56:34.083: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to administratively down
*Jan 6 09:56:34.084: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jan 6 09:56:34.152: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jan 6 09:56:35.082: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jan 6 09:56:35.110: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jan 6 09:56:35.115: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jan 6 09:56:36.103: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jan 6 09:56:36.110: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jan 6 09:56:36.140: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jan 6 09:56:36.145: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jan 6 09:56:36.150: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jan 6 09:56:37.140: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jan 6 09:56:37.145: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jan 6 09:56:37.169: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jan 6 09:56:38.169: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jan 6 09:56:44.151: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 6 08:56:00.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: xxx.xxx.xxx.xxx peer_port: 5246
*Jan 6 08:56:00.137: %PKI-3-CERTIFICATE_INVALID_NOT_YET_VALID: Certificate chain validation has failed. The certificate (SN: 1000) is not yet valid Validity period starts on 00:54:58 UTC Jan 7 2017Peer certificate verification failed 000B
*Jan 6 08:56:00.139: %CAPWAP-3-ERRORLOG: Certificate verification failed!
*Jan 6 08:56:00.139: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed!
*Jan 6 08:56:00.139: %DTLS-5-SEND_ALERT: Send FATAL : Bad certificate Alert to xxx.xxx.xxx.xxx:5246
*Jan 6 08:56:00.139: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to xxx.xxx.xxx.xxx:5246
*Jan 6 08:56:00.141: %CAPWAP-3-ERRORLOG: Invalid event 38 & state 3 combination.
Is there a way to delete the certificate? so that the AP can join to the controller.
The controller is connected to a NTP server with the time set corectly.
Ik hope someone can help me.
Thanks in advanced.
Greetings
Palermo
Tech:
vWLC :7.4.140.0
AP : 2x AIR-LAP1131AG-E-K9
01-07-2017 04:05 AM
Post the complete output to the AP command: sh version
01-07-2017 04:32 AM
Hi Leo,
Thanks for your quick reply, i really appreciate that.
If been working to late (3:00AM) on this problem. This morning if decided to post and ask for help.
If done some groceries. And when i came back i found 2 AP joined to the controller.
I have no clue what happened. may be i had no patience. hahaha
Thanks again for posting
Greetings
Palermo
01-12-2017 10:52 AM
Ok, still having the same problem.
2 AP has been joined. Now i`f added another AP (AIR-CAP3502I-A-K9). I need to replace the 1131AG. But this one is giving a same sort of problem.
When i first connected the AP to the controller it worked fine. Is was downloading the controller software. upon it reboot it gave me this message:
*Jan 12 18:31:34.519: %CAPWAP-3-ERRORLOG: Go join a capwap controller
*Jan 12 18:31:34.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 192.168.1.130 peer_port: 5246
*Jan 12 18:31:34.264: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 192.168.1.130 peer_port: 5246
*Jan 12 18:31:34.264: %CAPWAP-5-SENDJOIN: sending Join Request to xxx.xxx.xxx.xxx
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: Invalid event 10 & state 5 combination.
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: CAPWAP SM handler: Failed to process message type 10 state 5.
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: Failed to handle capwap control message from controller
*Jan 12 18:31:34.267: %CAPWAP-3-ERRORLOG: Failed to process encrypted capwap packet from xxx.xxx.xxx.xxx
*Jan 12 18:31:34.390: %DTLS-5-ALERT: Received WARNING : Close notify alert from xxx.xxx.xxx.xxx
*Jan 12 18:31:35.472: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jan 12 18:31:35.491: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to down
*Jan 12 18:31:35.497: %LINK-5-CHANGED: Interface Dot11Radio1, changed state to reset
*Jan 12 18:31:36.485: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
*Jan 12 18:31:36.491: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to down
*Jan 12 18:31:36.513: %LINK-6-UPDOWN: Interface Dot11Radio1, changed state to up
*Jan 12 18:31:36.519: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to down
*Jan 12 18:31:36.526: %LINK-5-CHANGED: Interface Dot11Radio0, changed state to reset
*Jan 12 18:31:37.513: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio1, changed state to up
*Jan 12 18:31:37.520: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to down
*Jan 12 18:31:37.542: %LINK-6-UPDOWN: Interface Dot11Radio0, changed state to up
*Jan 12 18:31:38.542: %LINEPROTO-5-UPDOWN: Line protocol on Interface Dot11Radio0, changed state to up
All config has been cleared any idea?
Greetings
Palermo
01-12-2017 12:53 PM
Post the complete output to the AP command: sh version
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide