AP不能注冊(cè)到WLC的現(xiàn)象及解決方法

一、時(shí)間不在證書(shū)有效期Wlc：開(kāi)啟debuglwapperrorsenableanddebugpmpkienablecommands.現(xiàn)象:I'huJan1QQ:09:461?70:QO:Ob：85：Sbifb：dOReceivedLWAFFDI3CDVEFYREQUESTfromAPQOiQb：85i5bifb；(iOtof￡：f￡：fEiffiff：￡for.port'21ThuJan100:39:461970:00:0b:85:5b:fb:dOSuccessfultransRiissionofL殖汽PPDiscovery-ResponsetoAP00:：Ob:35:5b:fb:dOonPort2L'huJan100:091571970:DO:0b:S5:SbifbidOReceivedLWAPPJOINRECUES1fro(nAFQOiQb：35iSb：fbidOtoQ0：Ob： t81gport121ThuJsn_QQ：09i571970：00：Ob：85：5b：fb：dOLWAPPJoin-RequestdoesnotincludevalidcertificateinCERTIFICATE__PAYLOADfromAF00;Ob;85:5b:fb;dO.ThuJan100:0^:57197。：00:0b:85:5b:fb:dOUnabletofreepublickeyforAPOOiOB:S5:5BjFBLDOThuJan1QQ：09:571^70：spamProcessjoinRequest；spamDecodeJolnReqfailed解決：修改wlc時(shí)間AP上面AP0015.63e5.0c7e#showcryptocacertificates查看證書(shū)時(shí)間范圍setTime[^wnfemdlFileCunnentTim*uploadFIRHi^boot>SehfiduJcdReboot口He>AP0015.63e5.0c7e#showcryptocacertificates查看證書(shū)時(shí)間范圍setTime[^wnfemdlFileCunnentTim*uploadFIRHi^boot>SehfiduJcdReboot口He>bOCBtiflinlRgttto-FALtQI-y二、國(guó)家代碼不匹配Wlc開(kāi)啟debuglwappeventsenable現(xiàn)象：slot1dod-e：21r^gstring-14regDfrOmCb-A3WedOct2A17:13:472DD7:OQj0b!05:51:c,3:c(?APOD:Obi85■91:c3"cO:3O211bgRegulatoryDom4ini(-N)deesnotm^tchvithcountry(US) .dcitnin-ABforth?￡lot1WgdOct3417313:417SOO17:spamVerifyRogDorwiinAPRegDamaincTieckf白/切備countryUSfailedWedOct2W17；13；472007；00；0b：；95；91； ；e0AP00；0b；85；S1c3；cO；RjtgulaSry口*m"ch?ckCcprtpletelyFAZ'L'EDTheAPwillcwtbe tojoinWedOct2417；13：412007；001Ob；95s91；c3.coapfSpainProces.SStteChangeInSpamConteKtt

解決：初始化修改三、wlc支持的端口比實(shí)際AP的少解決：查看wlc型號(hào)四、wlc禁用了自簽名策略Wlcdebuglwappeventsenableanddebugpmpkienable現(xiàn)象：rtedAug917:20:212006[ERROR]spain_lrad.C4880:LWAFFJ<3in-RequestdoesnotincludevalidcertificateinCERTIF1CATE_PAYLOADfromAPOfli12:44:b3：eS:60.rtedAug917:20:212006[CRITICAL]sshpmPkiApirc1493:NotconfigucedtaacceptSaIf-signedAPcart解決：#showauthlistAuthorizeAPsagainstAAA disabledAllowAPswithSelf-signedCertificate(SSC)....enabled?MacAddrCertTypeKeyHash 00:09:12:2a:2b:2cSSC12345678901234567890123456789012345查看hash可以自己選擇類型加入授權(quán)列表t[LOUlIkAT1kIPnarrtyCv4HrL5C5KaDHrTORtfLAJlGCWmbQLlfftW騏ELE的SfCDSHYHjHWd￡HENTC^HHANDSl￡LPEJEEt[LOUlIkAT1kIPnarrtyCv4HrL5C5KaDHrTORtfLAJlGCWmbQLlfftW騏ELE的SfCDSHYHjHWd￡HENTC^HHANDSl￡LPEJEE口皿KAFP^Ick*小甲Se*$SpedCelticEW饞5GH*iuI?H?eUIraialadiZEdioiMQMICJ*^qrtlund gcMcalE(LK"tliitlECiNiMIC6Fchj^lilCiJiriib-lici'-SF4utiE-nMLSC4F?a9iiEiijiIIi-IbI:國(guó)。陽(yáng)如MlKKlnrtionLIM54jfi E>igLjqmjI五、AP五、AP授權(quán)列表開(kāi)啟，但是LAP不在授權(quán)列表Wlc：debuglwappeventsenable現(xiàn)象wedSep1217：42：.■o2Q07；0Q：Qb：aS：51：."^：eQLWAPPJcin-R&que5tMTUp5thfromAP00:Ob:85:51:5a:eOis1500,reinotBdebu^mode150WedSep1217;42;502007；apdJiiEladiusFxQCesBRespGnse;AFAuthorizationfailurefor00l0b:65j51l5aieOAP上面：debugIwappClienterrorcommand:APflaLd.a2iJ5,a2ffc34*Mar100:00；52.267jLMftFF_CLlENT_ERRDR_DEBUG；spamHand11JoinTim*r；DidnetrtetivetheJoinresponse■Mar100:00:52.267：L同耳PP.CL工ENT_ER比QR.DEBUG二NomoreAPmanagerIPaddreBHesremain.解決:AP上面configauth-listaddmic<APMACAddress>六、自簽名hash不正確(CiscoController)>debugpmpkienable4hjuaj ■?&ubuiuuu■w*▲vu-v MonMay22OS:34:2006：sshpmGetIssuerHandler：KeyData￡70203010001MonMay22G6二34二二勺20D6；sshpmGetlssuerHandles；SSCKeyHashis9e4ddd8dfcdd8458ba7b273fc37284b31a384eb9查看真實(shí)hash現(xiàn)象：HonMay2206;34:142006：LWAPPJoin-RequestMTUpath.fromAPOOiOe：S4；32：04：±0is1500fremotedebugmodeis0MonMay2206:34：142006：spsniRadiusPtocessResponse：APAuthorisationfailurefor00:Oe：64:32:04:f0解決:(CiscoController)>configauth-listaddssc00:0e:84:32:04:f09e4ddd8dfcdd8458ba7b273fc37284b31a384eb9(可圖形化操作)七、AP的證書(shū)或者公鑰不正確Wlc:debuglwapperrorsenableanddebugpmpkienable現(xiàn)象:TueAug1217:36:092DOS:00:Ot:24::52:e0LWAPPJoinRequestdoesnotincludevalidcertificateinCERTIFICATEPATLQADfrcifilAP00:0f :52:eO.TueAug1217:36:Q92D08:00:0t;24:a9:52:e0Leletingandreracvin9AL:00；0￡：24：a9；52；e0from￡&g工paLhTuaAug1217:36:092006：DO：Dfi24：a9：52：e0Unabletnfreepublic：keyforAF解決MICAPRequestareturnmaterialsauthorization(RMA).SSCAPDowngradetoCiscoIOS?SoftwareRelease12.3(7)JA.IfitisanAPwithanSSCconvertitbacktoIOSusingtheMODEbutton.ThenusethelwappupgradetoolagaintoconvertbacktoLWAPP.Thisshouldcreatethecertificateagain.Completethesestepsinordertodowngrade:Usetheresetbuttonoption.Clearthecontrollersettings.Runtheupgradeagain八、wlc可能工作在二層解決：1、修改wlc工作在三層2、初始化ap配置ap的管理口地址如果有一個(gè)serviceport盡量讓它與ap管理口不在一個(gè)網(wǎng)段九、AP轉(zhuǎn)換到LWAPP出現(xiàn)錯(cuò)誤消息*MgrLDD;DQ;23.535:\LWAPP-5-CHANGED：LWAPPchangedStatetODISCOVERY土MarLP[);DO;23..55Q:LWAPP_CL1EMI_ERRCiR_DEBUG:1w^pp_CryptO_irit_S3C_key5_3nrt$noCertSifith白SSCPriv&teFil生*Mt匚LOOiDO:23.550:二Tf皂FP_CL二EHT「EKR口R_EEBUG:*MarLOQiDO:23.551;_wapp3cxVPLnlL:-PK=_St15e￡eiDrtfailed*Mar100:00:23.TSO:^SYS-5-RELOAD：ReloadrequestedbyLWAPPCLIENT,ReloadReason:FAILEDCRYPTO1NIT,*Mar100:00:23.121:tLWAPF-5-CBANGED:LWAFFchangedstatetoDOWN

解決：轉(zhuǎn)換到之前的IOS清空配置重啟十、wlc收到AP的發(fā)現(xiàn)消息但是在錯(cuò)誤的vlan里面現(xiàn)象：Yousee由ismessageinikedebugIwappev?ntson窗blecom[迎[idouLpuc；ReceivedaDisceiveryRequestwith breadedstwithwr白gAPIPaddress(A.B.C.D)!解決：修改vlan或者打trunk吧十一、1250LAP不能注冊(cè)到wlc現(xiàn)象:MqnJun2MonJun2MoilJutl2MqnJun2MonJun2MonJun2MqnJun221115^3721:19:3721:19s26MqnJun2MonJun2MoilJutl2MqnJun2MonJun2MonJun2MqnJun221115^3721:19:3721:19s2621l15：2C21:1S:ZD21:19:0921l15：Q32DCB2DDH20002DCH2DDH20002DCHAPAPAPAPAP邑PAPwithMACfD:2x:cf:2x:ld:3x(kPfD2x.cf2x,Id3x)isAS3OC：ieted.BaseRadioMAC:fD:2x：Cf:2x:ld:3KDiHiSSoeiated.Em自白R(shí)mdiaMAC:￡0:2x：cf:2x[ld:3xwithMACfD：2x：cf：2k:1c1l3x(APfC'2x.,cf2x.ld3x)i5AS3OC：ieted.BaseRadioMAC:fD:2x：Cf:2x:ld:3KDisassociated.EaseRadioMAC:fQ:2x:cf:2k:ld^3^withMA