Wireless Access

Hello,

  We have an Aruba Mobility Controller with 4 WAPs that is working great. We would like to put some more WAPs in our campus, and we have trunked the Mobility Controller to an Aruba s1500 switch. We set up a port on the switchto access the wireless vlan, and when we plug the AP 105 in, connect to 'instant' and convert to a Campus AP we are getting an error that says 'Retrieve Image Failed'  band the following log. We are running Aruba OS 6.3.1.6

Target : 24:de:c6:c4:88:70


show vpn status


profile name:default
--------------------------------------------------
current using tunnel                            :unselected tunnel
ipsec is preempt status                         :disable
ipsec is fast failover status                   :disable
ipsec hold on period                            :600
ipsec tunnel monitor frequency (seconds/packet) :5
ipsec tunnel monitor timeout by lost packet cnt :2

ipsec     primary tunnel crypto type            :Cert
ipsec     primary tunnel peer address           :N/A
ipsec     primary tunnel peer tunnel ip         :N/A
ipsec     primary tunnel ap tunnel ip           :N/A
ipsec     primary tunnel current sm status      :Init
ipsec     primary tunnel tunnel status          :Down
ipsec     primary tunnel tunnel retry times     :0
ipsec     primary tunnel tunnel uptime          :0

ipsec      backup tunnel crypto type            :Cert
ipsec      backup tunnel peer address           :N/A
ipsec      backup tunnel peer tunnel ip         :N/A
ipsec      backup tunnel ap tunnel ip           :N/A
ipsec      backup tunnel current sm status      :Init
ipsec      backup tunnel tunnel status          :Down
ipsec      backup tunnel tunnel retry times     :0
ipsec      backup tunnel tunnel uptime          :0
end of show vpn status
========================================================

show upgrade info

Image Upgrade Progress
----------------------
Mac                IP Address     AP Class  Status       Image Info                      Error Detail
---                ----------     --------  ------       ----------                      ------------
24:de:c6:c4:88:70  169.254.86.17  Orion     downloading  ac-ftp://10.10.10.2/mips32.ari  Retrieve image fail
Auto reboot           :enable
Use external URL      :enable
end of show upgrade info
========================================================

show log upgrade
----------Download log start----------

Executing '/aruba/bin/download_image_swarm ac-ftp://10.10.10.2/mips32.ari X-Ap-Info:BT0571111,24:de:c6:c4:88:70,AP-105'
fetching ('/usr/sbin/wget -T 120 -t 3 --header=X-Ap-Info:BT0571111,24:de:c6:c4:88:70,AP-105 ftp://sap:x@10.10.10.2/mips32.ari')
Error: failed to retrieve image
cleaning up
done

----------Download log end------------
Download status: Retrieve image fail
----------Upgrade log start----------
upgrade log not available
----------Upgrade log end------------
Upgrade status: upgrade status not available
end of show log upgrade
========================================================

show log rapper
Rapper info not available
end of show log rapper
========================================================

I'm guessing it's something with the port we set up on the switch. If I plug a laptop into that port I can't ping the switch, the controller or anything. Should it be set up as a trunk port perhaps? Or with a different native vlan? I appreciate the help!

it shouldn't matter whether its a trunk port or access port, as long as the vlans are right and you have connectivity to the IP of the controller this should work. Get ping working first and then deal with the AP. Double check that all the ports are all set to trusted as well.

looks like you may not have working DHCP on the AP port either, the AP appears to have 169.254.x.x address, so check into that first.

24:de:c6:c4:88:70  169.254.86.17  Orion     downloading  ac-ftp://10.10.10.2/mips32.ari  Retrieve image fail

If there is meant to be DHCP elsewhere, or it's still stuck after putting local DHCP then take another look at the vlan setup, don't forget that the 1500 MAS doesnt automatically trunk all vlans, you have to add them each.

check your vlan and port membership on the controller:

show vlan status

show port status

show trunk

and check it on the 1500 side too:

show interface status

show port status

show vlan detail

show trunk

also make sure that PVST hasn't blocked the vlan for any reason:

show spanning-tree vlan <X>

regards

-jeff