Last updated:

Access Point Provisioning for Cisco dCloud Content – Unified Mode

AP Provisioning for Cisco dCloud Content – Unified Mode

This document outlines the steps needed to configure your unified mode AP to operate with Cisco dCloud content. If you are using an AP only without an endpoint kit, you must configure the IP address of your WLC each time you schedule a demonstration, as the public IP address for the wireless LAN controller will change each time.

If you are using an endpoint router, you need only complete this task once.

You should read this document entirely before starting the provisioning process. Your AP must be provisioned before it can be used with Cisco dCloud content.

  • Access Point Configuration – 3000, 2000, and 1000 Series

Access Point Configuration – 3000, 2000, and 1000 Series

Equipment List

The following equipment is needed to complete the configuration:

  • An Active Cisco dCloud session
  • Cisco Aironet Series Access Point with lightweight IOS software (unified)
  • Laptop with serial port or USB-to-serial adapter and terminal emulation application
  • Ethernet cable
  • Console cable (USB to serial adapter may be needed)
  • Internet connectivity

Connect to AP

  1. On Workstation1, ensure your Country is enabled on the demo wireless LAN controller. If the physical country is not in the list, select the country that matches the wireless regulatory domain.
  2. Connect one end of the console cable to the AP and the other end to the serial port of the laptop.
  3. Launch the terminal emulation application on the laptop.
  4. Connect the AP to a power outlet or to a PoE source.
NOTE: If you are not familiar with or comfortable with using the command line interface (console connection) to the AP, we highly recommend using a Cisco dCloud endpoint router.

The AP will boot up. You can observe the boot sequence using the terminal emulation application. After the AP has completed booting, you will see a message that the AP is available.

  1. Press the Enter key. You will be prompted for a username and password.
  2. Enter the default username and password.
    Username: Cisco
    Password: Cisco
  3. Enter privileged EXEC mode.
    AP> enable
    Password: Cisco

Figure 1. AP Login ScreenAP_login_screen

Configure WLC IP Address

Locate the IP addresses for the WLC for your active session.

  1. From the Cisco dCloud UI, go to My Dashboard > My Sessions. Click the View link for your active demonstration.
  2. Click the Review Session Info link. You will see an incoming addresses table that lists the public and private IP addresses for the wireless LAN controller.

Figure 2. Public and Private IP Addresses for WLCpublic_private_IP


  1. Configure the IP address of the wireless LAN controller.
  • If you are using an AP without an endpoint router, you will use the public address.
  • If you are using an AP with an endpoint router, you will use the private address.
  1. From the CLI connection to the AP, enter the following command and press Enter.
    AP# capwap ap controller ip address <IP_Address>

Figure 3. Configuring the controller IP Addresscontroller_ip_address

  1. Enter the show capwap ip config command to verify that the wireless LAN controller IP address entered correctly.

Figure 4. Verifying IP address was acceptedverifying_ip_address

  1. Connect one end of an ethernet cable to the port labeled ethernet on the AP and the other end to an active port on your network. This port should have Internet access and should pass the Cisco dCloud Connection Test.
  2. Verify that the AP has received an IP address on the network via DHCP.

Figure 5. IP Address Verificationip_address_verification

NOTE: If the network is not configured to supply IP addresses via DHCP, you will need to statically configure an IP Address on your AP as shown in the Appendix.

The AP will connect to the wireless LAN controller within the demonstration environment.

NOTE: After the AP connects to the demonstration environment it may download software and the LED light will flash blue. This takes approximately 10 minutes, depending on the speed of your connection. Please do not interrupt this process. The AP will reboot if it installs new software. Once complete, the status light will remain solid blue or green. If the status light is solid red or flashing red and blue there is a problem.

The AP Status indicator light will remain solid blue or solid green. The AP is now connected to the system.

  1. You can connect to your monitoring workstation and verify that your AP is operational.

Static IP Assignment

If you are provisioning your AP in a network that requires static IP configuration for devices, you must manually configure the IP address. Contact the system administrator at your location to determine if a static IP address is required.

If a static IP address is required, gather the configuration details, including the IP Address, Subnet Mask and Default-Gateway.

  1. Configure the IP address, subnet mask and default-gateway using the following commands:
    AP# capwap ap ip address <IP_address> <netmask>
    AP# capwap ap ip default-gateway <GW_address>
  2. Confirm the configuration:
    AP# show capwap ip config

Figure 11. Static IP Configstatic_ip_address

Please note that this configuration is site-specific and may need to be changed when connecting the AP from a different location.


Your AP may fail to join the controller due to a known bug. If your AP is not joining the controller properly, and you see something similar to the below logs on your AP console, follow the steps below to troubleshoot the issue.

*Aug 22 19:39:51.247: %CAPWAP-3-ERRORLOG: Failed to authorize controller using trust config. *Aug 22 19:39:51.248: %CAPWAP-1-SSC_CERT_AUTH_FAILED: Failed to authorize controller, SSC certificate validation failed.Peer certificate verification failed FFFFFFFF *Aug 22 19:39:51.251: %CAPWAP-3-ERRORLOG: Certificate verification failed! *Aug 22 19:39:51.252: DTLS_CLIENT_ERROR: ../capwap/base_capwap/capwap/base_capwap_wtp_dtls.c:447 Certificate verified failed!

  1. Physically unplug the network cable from the AP.
  2. Clear any previous configuration stored on the AP.
    AP# clear capwap private-config
    AP# clear lwapp private-config
  3. Reload the AP.
    AP# reload
  4. Once the AP is reloaded, plug in the network cable.

After your AP has reloaded, it should successfully join the controller.