Cloud Managed Networks

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.

have you enabled HTTP as well as HTTPS for the IAPs to download the firmware?

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.

It is important to follow the Documentation on "Opening Firewall Ports for Device Communication" - https://www.arubanetworks.com/techdocs/central/latest/content/nms/device-mgmt/communication_ports.htm

Did you followed the guidlines, depending on the location of your Central Account?

As already mentioned by @ariyap it is important to open HTTP and HTTPS

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.

yes, i have these documents and they have been followed. but these documents do not always have complete information. for instance we had an issue were ther APs stopped reporting to Central and we had to add 8.8.8.8 DNS to the firewall rule and all the APs started reporting again. The only way we noticed this was by watching packets.

It is important to follow the Documentation on "Opening Firewall Ports for Device Communication" - https://www.arubanetworks.com/techdocs/central/latest/content/nms/device-mgmt/communication_ports.htm

Did you followed the guidlines, depending on the location of your Central Account?

As already mentioned by @ariyap it is important to open HTTP and HTTPS

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.

These documents have all information included. When I get you right it worked after you placed Google DNS additionally. Which is logic because your internal DNS Server does not know Internet URLs.
That´s why you get the "Resolving common.cloud.hpe.com... failed: Name or service not known." message. Every Device which has to access the Internet should be able to use a public DNS Server.

yes, i have these documents and they have been followed. but these documents do not always have complete information. for instance we had an issue were ther APs stopped reporting to Central and we had to add 8.8.8.8 DNS to the firewall rule and all the APs started reporting again. The only way we noticed this was by watching packets.

It is important to follow the Documentation on "Opening Firewall Ports for Device Communication" - https://www.arubanetworks.com/techdocs/central/latest/content/nms/device-mgmt/communication_ports.htm

Did you followed the guidlines, depending on the location of your Central Account?

As already mentioned by @ariyap it is important to open HTTP and HTTPS

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.

no, the google dns was for a different issue we had which was the APs showing offline in Central. After we added googles dns the APs then began to show online in Central. Googles dns did not fix the firmware failure issue. We are still trying to fix that.

These documents have all information included. When I get you right it worked after you placed Google DNS additionally. Which is logic because your internal DNS Server does not know Internet URLs.
That´s why you get the "Resolving common.cloud.hpe.com... failed: Name or service not known." message. Every Device which has to access the Internet should be able to use a public DNS Server.

yes, i have these documents and they have been followed. but these documents do not always have complete information. for instance we had an issue were ther APs stopped reporting to Central and we had to add 8.8.8.8 DNS to the firewall rule and all the APs started reporting again. The only way we noticed this was by watching packets.

It is important to follow the Documentation on "Opening Firewall Ports for Device Communication" - https://www.arubanetworks.com/techdocs/central/latest/content/nms/device-mgmt/communication_ports.htm

Did you followed the guidlines, depending on the location of your Central Account?

As already mentioned by @ariyap it is important to open HTTP and HTTPS

Hello Community

I am having a issue when I try to upgrade my APs in Aruba Central. Ive added the URL that the APs are trying to reach to the firewall. I was able to ping the URL IPs from the AP itself as well. I was able to do a traceroute to each IP address that the URL points to which I got from doing a nslookup of the URL. But when I try to download the firmware via Central I get this error when I do a sh log upgrade on the VC.

----------Download log start----------

Executing ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

fetching ('/usr/sbin/wget -T 120 -t 3 -M 29712384 --no-proxy  --proxy-passwd=****** --header=X-Ap-Info:(serial number removed by me),(mac address removed by me),AP-515 -a /tmp/download_url_log --no-check-certificate https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193')

--11:42:00--  https://common.cloud.hpe.com/ccssvc/ccs-system-firmware-registry/IAP/ArubaInstant_Draco_8.10.0.6_86193

           => `ArubaInstant_Draco_8.10.0.6_86193'

Resolving common.cloud.hpe.com... failed: Name or service not known.

Error: failed to retrieve image

cleaning up

done

----------Download log end------------

Download status: incomplete

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

Has anyone run into this issue before? 

Also im aware i can remove the AP subscription and upgrade the APs then add the subscription back, but i would rather be able to run upgrades via Aruba Central.

Thanks in advance.