01-08-2015 05:39 AM
Actualluy the question is in the subject, How to identify IAP 92 - that has been converted previously - on a controler ?
Thanks in advance
Solved! Go to Solution.
01-08-2015 05:43 AM
(you can console in)
Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
01-08-2015 06:06 AM
I have IAP(converted) an AP attached to the controler and running. I do not have easy access to AP and IAP to check on console
What I'm looking for, is a way to differenciate AP an IAP on the controler while they are already running....
01-08-2015 06:26 AM
An IAP working as a CAP will still create an IPSEC tunnel to the controller. Technically making it a sort of local RAP.
Type: show crypto ipsec sa
Grab the Inner IP and cross reference that IP by doing a show ap database long.
I believe you will then be able to find out which one is the IAP.
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
01-10-2015 11:38 PM
you can use show ap image version. Assuming you didn't do take to the apboot to do the IAP to CAP conversion, and just used the webUI method, then the AP will still have the instant load in it's second bank.
Example below - this is hard to see due to the rediculous width of the output, but you can see one AP below 192.168.1.8 has an instant image in the backup image bank (184.108.40.206-220.127.116.11) , but the other AP shows two ArubaOS versions hence is unlikely to be a converted IAP (see note below)
(sg-7030) #show ap image version
Access Points Image Version
AP Running Image Version String
192.168.1.8 18.104.22.168(email@example.com)#47524 Sat Dec 6 08:48:39 PST 2014 22.214.171.124(firstname.lastname@example.org)#47524 Sat Dec 6 08:48:39 PST 2014 126.96.36.199-188.8.131.52(p4build@stan)#43022 Thu Apr 3 13:10:02 PDT 2014 Yes 1 0 0 0 Done
192.168.1.6 184.108.40.206(email@example.com)#47524 Sat Dec 6 09:02:09 PST 2014 220.127.116.11(firstname.lastname@example.org)#47524 Sat Dec 6 09:02:09 PST 2014 18.104.22.168(p4build@cartman)#43850 Tue May 20 23:07:58 PDT 2014 Yes 1 0 0 0 Done
It is possible to totally remove the iAP image from the 2nd s/w bank on a converted iAP->CAP, but this can only be done from the apboot and by someone who 100% intended to make the AP unable to be recovered to iAP by pressing the reset button. If there is no chance that happened in your customer, then you can trust the above method.