Field Notice: FN72258 - Some C9130AXI and C9130AXE APs Fail to Join Controllers That Run AireOS Released Earlier Than July 2021 - Software Upgrade Recommended
Available Languages
Notice
THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.
Products Affected
| Affected Product Name | Description | Comments |
|---|---|---|
| C9130AXE-A | Cisco Catalyst 9130AX Series | |
| C9130AXE-B | Cisco Catalyst 9130AX Series | |
| C9130AXE-D | Cisco Catalyst 9130AX Series | |
| C9130AXE-E | Cisco Catalyst 9130AX Series | |
| C9130AXE-F | Cisco Catalyst 9130AX Series | |
| C9130AXE-H | Cisco Catalyst 9130AX Series | |
| C9130AXE-I | Cisco Catalyst 9130AX Series | |
| C9130AXE-K | Cisco Catalyst 9130AX Series | |
| C9130AXE-Q | Cisco Catalyst 9130AX Series | |
| C9130AXE-R | Cisco Catalyst 9130AX Series | |
| C9130AXE-S | Cisco Catalyst 9130AX Series | |
| C9130AXE-Z | Cisco Catalyst 9130AX Series | |
| C9130AXI-A | Cisco Catalyst 9130AX Series | |
| C9130AXI-B | Cisco Catalyst 9130AX Series | |
| C9130AXI-D | Cisco Catalyst 9130AX Series | |
| C9130AXI-F | Cisco Catalyst 9130AX Series | |
| C9130AXI-G | Cisco Catalyst 9130AX Series | |
| C9130AXI-H | Cisco Catalyst 9130AX Series | |
| C9130AXI-I | Cisco Catalyst 9130AX Series | |
| C9130AXI-K | Cisco Catalyst 9130AX Series | |
| C9130AXI-Q | Cisco Catalyst 9130AX Series | |
| C9130AXI-R | Cisco Catalyst 9130AX Series | |
| C9130AXI-S | Cisco Catalyst 9130AX Series | |
| C9130AXI-T | Cisco Catalyst 9130AX Series | |
| C9130AXI-Z | Cisco Catalyst 9130AX Series |
Defect Information
| Defect ID | Headline |
| CSCvx98176 | Access point with 17.6 or later image cannot join controller running older AireOS |
Problem Description
Some C9130AXI and C9130AXE Access Points (APs) are not compatible for some customers with AireOS controllers with software versions released earlier than July 2021. Affected APs will not be able to join AireOS controllers with the affected software versions.
C9800 controllers are not affected.
Background
Between 2021-08-07 and 2021-09-15, non-compatible AP software was installed on some C9130AXI and C9130AXE APs. This issue has since been resolved.
Problem Symptom
Messages similar to these might be seen in the WLC's msglog:
*osapiBsnTimer: Feb 15 10:50:36.048: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:3241 Failed to complete DTLS handshake with peer 192.168.33.8
*spamApTask6: Feb 15 10:49:07.311: %LWAPP-3-AP_DEL: spam_lrad.c:6088 00:40:96:00:01:02: Entry deleted for AP: 192.168.33.8 (5272) reason : Normal Termination.
*spamReceiveTask: Feb 15 10:49:07.311: %CAPWAP-3-DTLS_CONN_ERR: capwap_ac.c:1142 00:40:96:00:01:02: DTLS connection not found forAP 192.168.33.8 (5272), Controller: 10.33.44.55 (5246) send packet
*osapiBsnTimer: Feb 15 10:41:35.880: %DTLS-3-HANDSHAKE_FAILURE: openssl_dtls.c:3241 Failed to complete DTLS handshake with peer 192.168.33.8
An access point with 17.6 AP-COS code loaded is unable to associate to an AireOS controller. The AireOS msglog shows messages similar to these examples:
*spamApTask0: Apr 08 14:13:07.790: [PA] d4:e8:80:19:a0:60 Releasing WTP
*RRM-DCLNT-5_0: Apr 08 14:13:08.911: [PA] 7c:21:0d:49:59:a0 Unable to find data structure for AP 7C:21:0D:49:59:A0
*RRM-DCLNT-5_0: Apr 08 14:13:08.911: [PA] d4:ad:bd:a2:13:a0 Unable to find data structure for AP D4:AD:BD:A2:13:A0
*RRM-DCLNT-5_0: Apr 08 14:13:08.911: [PA] d4:ad:bd:a2:13:a0 Unable to find data structure for AP D4:AD:BD:A2:13:A0
Workaround/Solution
Option 1. Upgrade AireOS to Release 8.10.162.0 or later.
Option 2. Join the AP to a Cisco IOS® XE controller that runs Release 17.5 or earlier or to an AireOS controller with Release 8.10.162.0 or later, have it download the code, and join the AP to the desired AireOS controller that runs earlier code.
Serial Number Validation
Cisco provides a tool to verify whether a device is impacted by this issue. To check the device, enter the serial number in the Serial Number Validation Tool.
Important: For security reasons, you must click the Serial Number Validation Tool link that is provided in this section. Do not copy and paste the link into a browser. Use of the Serial Number Validation Tool URL external to this field notice will fail.
Revision History
| Version | Description | Section | Date |
| 1.0 | Initial Release | — | 2021-OCT-04 |
For More Information
For further assistance or for more information about this field notice, contact the Cisco Technical Assistance Center (TAC) using one of the following methods:
Receive Email Notification About New Field Notices
To receive email updates about Field Notices (reliability and safety issues), Security Advisories (network security issues), and end-of-life announcements for specific Cisco products, set up a profile in My Notifications
Feedback