Wired Intelligent Edge

 View Only
last person joined: 14 hours ago 

Bring performance and reliability to your network with the Aruba Core, Aggregation, and Access layer switches. Discuss the latest features and functionality of the ArubaOS-Switch and ArubaOS-CX devices, and find ways to improve security across your network to bring together a mobile first solution.
Expand all | Collapse all

Zero Touch Provisioning, image problems

Jump to Best Answer
This thread has been viewed 9 times
  • 1.  Zero Touch Provisioning, image problems

    Posted Jan 24, 2018 02:57 AM

    Hi,

    We are trying to get zero touch provisioning to work for our 2930F switches. We don't want to use airwave or activate/central.

    Everything works fine and the switch get the correct configuration but I can't get the switch to download a new image firmware.

    I can't find any documentation how to configure image upgrade.

    This is my isc-dhcp configuration (read somewhere that Cisco switches ueses option 125 for image upgrade, doesn't work...):

     

    option configfile code 67 = text;
    option tftpserver code 66 = text;

    option imagefile code 125 = text;

     

    subnet 10.202.0.0 netmask 255.255.255.0 {
        range 10.202.0.10 10.202.0.200;
        option routers 10.202.0.1;
        option subnet-mask 255.255.255.0;

        host accesswitch {
            hardware ethernet e0:07:1b:34:0c:a0;
            fixed-address 10.202.0.5;
            option tftpserver "172.18.20.51";
            option configfile "CN68FP53DN.cfg";
            option imagefile YA_16_04_0011.swi;

        }

    }

     

     

    In my TFTP server I can't see any requests for the image file.

     

    Thanks!



  • 2.  RE: Zero Touch Provisioning, image problems

    EMPLOYEE
    Posted Jan 24, 2018 04:38 AM


  • 3.  RE: Zero Touch Provisioning, image problems

    Posted Jan 24, 2018 04:48 AM

    @cjoseph wrote:

    Zero touch provisioning only works with Airwave or Central.

    http://h22208.www2.hpe.com/eginfolib/networking/docs/switches/K-KA-KB/16-01/5200-0137_MCG/content/ch11s07.html

     

     


    Well it is working with ZTP-configuration with only DHCP and TFTP server.

    Why would you have this command in place if it's only working with airwave?

    NS-0001# show dhcp client image-file-update


    Downloading Image File from TFTP server is enabled

     

    Log also shows the following:

     

    I 01/01/90 00:02:30 00092 dhcp: ST1-CMDR: Enabling Auto Image Config Download via DHCP and turning off auto-tftp if enabled

    Are you saying that DHCP/TFTP is viable only for configuration of device but if I want to upgrade, I need to use airwave?

     

    Thanks!



  • 4.  RE: Zero Touch Provisioning, image problems

    EMPLOYEE
    Posted Jan 24, 2018 05:04 AM

    Let's take a step back.

     

    Do you want to upgrade your firmware and distribute configuration via TFTP?

     

    Zero-Touch is the brand name for a specific process that requires Airwave or Central.



  • 5.  RE: Zero Touch Provisioning, image problems

    Posted Jan 24, 2018 05:08 AM

    @cjoseph wrote:

    Let's take a step back.

     

    Do you want to upgrade your firmware and distribute configuration via TFTP?

     

    Zero-Touch is the brand name for a specific process that requires Airwave or Central.


    Hi,

    Yes I want to upgrade firmware and distribute configuration using only DHCP options and TFTP.

    Sorry if I confused you with the ZTP acronym.



  • 6.  RE: Zero Touch Provisioning, image problems

    EMPLOYEE
    Posted Jan 24, 2018 05:50 AM
    Good morning, I was just taking a look at this thread and noticed that you stated that you are using a 2930F but for some reason it looks as if you are tying to load incorrect firmware “YA_16_04_0011.swi”.

    Can you try it with the “WC_16_04_0011.swi” and see if you still get the same results? depending on the switch model number, even though the “16_xx_xxxx.swi” looks the same, each model will start with a different identifier “ya, wc, wb, kB, k, etc”.

    Thanks
    Benny


  • 7.  RE: Zero Touch Provisioning, image problems

    Posted Jan 24, 2018 06:22 AM

    @beggers wrote:
    Good morning, I was just taking a look at this thread and noticed that you stated that you are using a 2930F but for some reason it looks as if you are tying to load incorrect firmware “YA_16_04_0011.swi”.

    Can you try it with the “WC_16_04_0011.swi” and see if you still get the same results? depending on the switch model number, even though the “16_xx_xxxx.swi” looks the same, each model will start with a different identifier “ya, wc, wb, kB, k, etc”.

    Thanks
    Benny

    Hi,

    Actually I was doing this with a 2530 for LAB, sorry for the confusion. In production we use 2930F.



  • 8.  RE: Zero Touch Provisioning, image problems
    Best Answer

    Posted Jan 26, 2018 03:34 AM

    Hello, found the solution. The DHCP sub-option 145 needs to be encapsulated inside DHCP option 43. Sub-option 144 can also be used to specify configuration file.

    Here is the DHCP configuration file:

     

    option space NEW_OP;
        option NEW_OP.image-file-name code 145 = text;
        option NEW_OP-encapsulation code 43 = encapsulate NEW_OP;

     

    subnet 10.202.0.0 netmask 255.255.255.0 {
    range 10.202.0.10 10.202.0.200;
    option routers 10.202.0.1;
    option subnet-mask 255.255.255.0;
    option tftpserver "172.18.20.51";

    subclass "vendor-class" "HP J9774A 2530-8G-PoEP Switch                            dslforum.org" {
          option vendor-class-identifier "HP J9774A 2530-8G-PoEP Switchdslforum.org";
        option NEW_OP.image-file-name "YA_16_04_0011.swi";

     

     



  • 9.  RE: Zero Touch Provisioning, image problems

    Posted Jan 05, 2022 11:04 PM
    Thank You for sharing this.
    Added some more for the DHCP Option on some of the CX switches. 

    ### Begin Config for ISC DHCP Server dhcpd.conf #####


    #############################
    # Aruba CX ZTP provisions #
    # #
    #############################
    # https://www.arubanetworks.com/techdocs/AOS-CX/10.07/HTML/5200-7852/Content/Chp_ZTP/ztp-sup-aos-cx-10.htm
    ##############################
    option space ArubaCX;
    option ArubaCX.config-file-name code 144 = text;
    option ArubaCX.image-file-name code 145 = text;
    option ArubaCX.CentralOnPrem-FQDN code 146 = text;
    option ArubaCX-encapsulation code 43 = encapsulate ArubaCX;

    #Class to Match Option 60
    ​class "Vendor-Class" {
    match option vendor-class-identifier;
    }

    subnet 10.202.0.0 netmask 255.255.255.0 {
    range 10.202.0.10 10.202.0.200;
    option routers 10.202.0.1;
    option subnet-mask 255.255.255.0;

    #######################
    #SubClass Definiions
    #######################

    ##################
    # To Get Vendor Class for Switch CLI command on switch:
    # show dhcp client vendor-class-identifier
    #################

    # Aruba CX Lab OVA
    subclass "Vendor-Class" "Aruba ABC123 ArubaOS" {
    vendor-option-space ArubaCX;
    option ArubaCX.config-file-name "CXLab.cfg";
    option ArubaCX.image-file-name "filename.swi";
    option tftp-server-name "172.18.20.51";
    }
    # Aruba 6200F 48 Port
    subclass "Vendor-Class" "Aruba JL728A 6200F" {
    vendor-option-space ArubaCX;
    option ArubaCX.config-file-name "6200F-24Port.cfg";
    option ArubaCX.image-file-name "ArubaOS-CX_6200_10_09_0002.swi";
    option tftp-server-name "172.18.20.51";
    }
    # Aruba 6200F 24 Port
    subclass "Vendor-Class" "Aruba JL725A 6200F" {
    vendor-option-space ArubaCX;
    option ArubaCX.config-file-name "6200F-48Port.cfg";
    option ArubaCX.image-file-name "ArubaOS-CX_6200_10_09_0002.swi";
    option tftp-server-name "172.18.20.51";
    }
    # Aruba 6300 48 Port
    subclass "Vendor-Class" "Aruba JL659A 6300" {
    vendor-option-space ArubaCX;
    option ArubaCX.config-file-name "6300-48Port.cfg";
    option ArubaCX.image-file-name "ArubaOS-CX_6300_10_09_0002.swi";
    option tftp-server-name "172.18.20.51";
    }
    }


    ### End Config for ISC DHCP Server dhcpd.conf #####