WirelessCCNA 200-301

Autonomous AP Not Joining WLC — CAPWAP Issue

Presenting Symptom

An autonomous access point (AP) fails to join the wireless LAN controller (WLC), remaining in 'Downloading' or 'Discovery' state indefinitely.

Network Context

A small branch office with a Cisco 9800 WLC and several Cisco 3702i APs running IOS. The APs are connected via a Layer 2 switch to the WLC over a routed network. The WLC is configured with a management IP and the APs are set to discover the WLC via DHCP option 43 or DNS. The issue occurs after a firmware upgrade on the WLC.

Diagnostic Steps

Check AP join state on WLC

show ap join summary

AP Name    AP IP      State
AP3702     10.1.1.2   Downloading

If the AP is in 'Downloading' state, it has discovered the WLC but is stuck during image download. If in 'Discovery', it hasn't found the WLC yet.

Verify AP can reach WLC management IP

ping 10.1.1.1 from AP console (or use 'show capwap client rcb' on AP)

Success rate is 100 percent (5/5)

If ping fails, there is a Layer 3 connectivity issue (routing, ACL, or firewall). If successful, the issue is likely CAPWAP-specific (DTLS, certificates, or image mismatch).

Check CAPWAP UDP ports on WLC

show capwap statistics

CAPWAP Control Packets Sent: 100, Received: 0

If control packets are sent but not received, the WLC may not be listening on UDP 5246 (control) or 5247 (data). Check if CAPWAP is enabled globally.

Verify AP image compatibility

show ap image (on AP) or 'show ap config general' on WLC

AP Image: ap3g2-k9w8-tar.152-4.JA9
WLC Image: 16.12.3

If the AP image is incompatible with the WLC version, the AP will fail to join. The AP may need a firmware upgrade via TFTP.

Root Cause

The AP's firmware version is incompatible with the WLC's IOS version. After the WLC upgrade, the AP's image is too old and does not support the CAPWAP protocol version used by the new WLC.

Resolution

Upgrade the AP firmware to a compatible version via TFTP from the WLC or manually. 1. On WLC, ensure TFTP server is reachable: 'config tftp-server enable' 2. Transfer AP image to WLC: 'transfer download mode tftp' then specify server IP and filename. 3. Upgrade AP: 'ap-name AP3702 transfer download tftp 10.1.1.100 ap3g2-k9w8-tar.152-4.JA9' 4. AP will reboot and join after upgrade.

Verification

After upgrade, run 'show ap join summary' and verify AP state is 'Registered'. Also run 'show ap config general AP3702' and confirm 'AP Image' matches the new version.

Prevention

1. Always check WLC and AP compatibility matrix before upgrading. 2. Use a consistent firmware version across all APs. 3. Enable automatic AP image pre-download on the WLC to push updates before APs reboot.

CCNA Exam Relevance

On the CCNA 200-301 exam, this scenario appears in troubleshooting questions where the AP is stuck in 'Downloading' state. The exam tests understanding of CAPWAP discovery and join process, including the role of DHCP option 43, DNS, and image compatibility. Key fact: APs must have a compatible firmware to join the WLC; otherwise, they remain in 'Downloading' state.

Exam Tips

Remember that 'Downloading' state means the AP has discovered the WLC but is downloading a new image; 'Discovery' state means it hasn't found the WLC yet.

The exam may ask which command to use to check AP join state: 'show ap join summary'.

Know that incompatible firmware is a common cause; the AP will automatically download a compatible image from the WLC if available.

Test Your CCNA Knowledge

Practice with scenario-based questions to prepare for the CCNA 200-301 exam.

Practice CCNA Questions