Wireless Access

Hi , Where is the access point image located on the controller? Can use winscp/scp to download the file?  Thanks in advance. 

Thanks for reply. 

we are trying to do AP provisioning ,but the AP is not in the same subnet with the controller, and ftp traffic is not allowed between AP and controller. If the case like this, how to do AP provisioning?  Is there any other method rather than ftp to download new AP image from controller, like scp? 

The AP should try tftp if FTP does not work, but maybe you should provision it at a site where there is no firewall, first...

Thanks for reply.

If using tftp,  the controller will work as tftp server, is it right?  

Correct...your other option is to enable CPSec, bring up the Aps for the initial provisioning on-site or in the same VLAN as the controller to allow the AP to pull the AP image locally, and come up with a CPSec (IPSec) tunnel. Once done, you can take the AP to the installation site and when the AP discovers the controller, will use IPsec to bring up the tunnel and will not require FTP. All future AP upgrades will be within the CPSec tunnel as well.

Thanks a lot for reply. 

Thanks Jhoward, could you help tell me the detailed procedure of the AP provisioning method with using Ipsec tunnel? Thanks in advance. 

Thanks for reply.

After new AP received the certificate from controller, is the secure tunnel already established?