Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Upgrade Backup Partition on AP From Controller

This thread has been viewed 58 times
  • 1.  Upgrade Backup Partition on AP From Controller

    Posted Aug 20, 2023 03:31 PM

    I am attempting to upgrade the Backup (Flash (Provisioning/Backup) Image) on an AP that is connected to a standalone controller running AOS 8.11.1.2.

    As you can see, the backup flash is running 6.5.0.0 and I want that to be upgraded to an AOS 8 version.

    [mynode] #show ap image version ap-name AP-0020
    
    AP Image Versions On Controller 
    --------------------------------
    Image name     Image Version String
    ----------     --------------------
    arm32emmc.ari  8.11.1.2(jenkins@42b2effef396)#87606 SMP Wed Aug 2 17:09:47 UTC 2023
    arm64emmc.ari  8.11.1.2(jenkins@65f025e73bd0)#87606 SMP Wed Aug 2 18:10:28 UTC 2023
    arm32.ari      8.11.1.2(jenkins@651fa9cc2270)#87606 SMP Wed Aug 2 16:57:36 UTC 2023
    ipq807x.ari    8.11.1.2(jenkins@6f225f85bd1f)#87606 SMP Wed Aug 2 17:50:58 UTC 2023
    arm64.ari      8.11.1.2(jenkins@d1e951ea7d12)#87606 SMP Wed Aug 2 16:51:13 UTC 2023
    ipq40xx.ari    8.11.1.2(jenkins@fb382228c26d)#87606 SMP Wed Aug 2 17:10:42 UTC 2023
    ipq806x.ari    8.11.1.2(jenkins@b4b66d59540e)#87606 SMP Wed Aug 2 17:09:00 UTC 2023
    
    Access Points Image Version
    ---------------------------
    AP             Running Image Version String                                          Flash (Production) Image Version String                               Flash (Provisioning/Backup) Image Version String               Matches  Num Matches  Num Mismatches  Bad Checksums  Bad Provisioning Checksums  Image Load Status
    --             ----------------------------                                          ---------------------------------------                               ------------------------------------------------               -------  -----------  --------------  -------------  --------------------------  -----------------
    172.31.97.116  8.11.1.2(jenkins@b4b66d59540e)#87606 SMP Wed Aug 2 17:09:00 UTC 2023  8.11.1.2(jenkins@b4b66d59540e)#87606 SMP Wed Aug 2 17:09:00 UTC 2023  6.5.0.0(p4build@corfu)#54817 SMP Thu Apr 28 07:05:41 PDT 2016  Yes      1            0               0              0                           Done

    There was a way to specifically upgrade the image on the backup partition in older versions of AOS, but I cannot seem to find the way to do this in AOS 8. 

    The old command was apflash.  https://www.arubanetworks.com/techdocs/ArubaOS_61/ArubaOS_61_CLI/apflash.htm

    Any ideas on how I can accomplish this on either AOS8 from the controller, or by SSH'ing directly to the AP and having it pull the latest image off of one of my FTP servers?

    Thank you.



  • 2.  RE: Upgrade Backup Partition on AP From Controller

    EMPLOYEE
    Posted Aug 22, 2023 07:37 AM

    The backup partition could only be upgraded on specific APs (AP-80, RAP-5, RAP-2) that are not supported on AOS8.

    You can upgrade the backup partition on AP31x/32x with the apflash command in AOS8.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Upgrade Backup Partition on AP From Controller

    Posted Aug 22, 2023 12:19 PM

    Good Day Herman,

    Thank you for responding to my post. 

    I know with current generation APs (i.e. 300 series, 500 series, and 600 series) If I console directly into the AP I can manually upgrade the primary partition and backup partion via TFTP.  Easy enough to do, but its not practical when scaling.  Especially not practical if the AP is mounted on a ceiling high up.

    As a workaround in certain circumstances, I have converted the AP into a controllerless AP running VMC, SSH'h into it and use the command 

    upgrade-image2-no-reboot to upgrade the backup partition.  I would then factory default it and it would rejoin my controller.
    The APs in my environment can be SSH'd into for access to the "full shell" (ESC + CTRL + k).  Is there a way to perhaps upgrade the backup partition on an individual AP this way?
    Thank you.



  • 4.  RE: Upgrade Backup Partition on AP From Controller

    EMPLOYEE
    Posted Aug 23, 2023 04:19 AM

    For campus APs, I'm not aware of a reason to upgrade the backup firmware. That's more for Instant mode. Campus APs can be fully factory defaulted and then get firmware from the controller. The backup partition on Instant APs that are converted to campus mode is used to reset them back to Instant mode.

    What would be the reason for you to upgrade the backup partition?



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 5.  RE: Upgrade Backup Partition on AP From Controller

    Posted Aug 23, 2023 06:19 PM

    Good Day Herman,

    We have a decent amount of sites that are running in a standalone configuration because they are small facilities.  These sites only have 1 controller (generally speaking). We had a situation recently at customer site that was over 7 hours away where the standalone controller suffered a hardware failure and we had a lot of trouble getting the access points to respond and it required someone to ultimately drive out there to assist.  We want to have the ability to quickly convert campus APs to instant mode as a temporary solution in the event of a standalone controller failure.  Having the backup partitions on an old version of the operating system (i.e. 6.5.x.x) is not something we want to leave unaddressed.  This is why we want to make sure the backup partitions are updated on the APs.




  • 6.  RE: Upgrade Backup Partition on AP From Controller

    EMPLOYEE
    Posted Aug 24, 2023 04:26 AM

    As far as I know, you cannot upgrade an Instant image to the secondary partition when running in controller mode, for the 31x/32x, just the controller image in the backup partition (still not sure why you would need to do that).

    You could in this case use a backup LMS which is on a different location to prevent full outage and/or loss of control to your APs. Once the APs connect to that backup controller (LMS), you can run an ap-convert from there to get those in Instant mode. Once you have the APs up in Instant mode, just upgrade twice to the desired version, or upgrade the secondary partition with no-reboot if you need to have an updated image in the backup partition.

    If you have one AP running in Instant (you could even have one running for the backup scenario in each location), once you factory-reset the other APs, they will come up in Instant/Unified mode and connect to the already running AP, inheriting the configuration and firmware version.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 7.  RE: Upgrade Backup Partition on AP From Controller

    Posted Nov 08, 2023 05:47 AM
      |   view attached

    Good day Herman,

    show ap image version
    ipq807x.ari

    I want copy ipq807x.ari from Aruba 7008 controller to local pc, can have any command can do it?

    or can you help send me 1 file for this, 8.10 or 8.11 or any version is ok?

    I have 1 AP-534 RW from a Lab, lose the AP-Boot, now use console to connect AP, is type U-Boot, can't upgrade os.

    want flash the IPQ807x.ari boot in the AP, then can upgrade aruba ap os.

    Thank you.




  • 8.  RE: Upgrade Backup Partition on AP From Controller

    EMPLOYEE
    Posted Nov 08, 2023 05:53 AM

    Not sure how you got in that state, but I think it's not 'field recoverable' and the AP has to be replaced. It may be eligible for replacement under warranty.

    There is an option to zeroize the AP flash for secure disposal, which brings the AP in an state that cannot be recovered. Possibly that's what happened here, and I believe that it's not covered for free replacement if the AP has been zeroized.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 9.  RE: Upgrade Backup Partition on AP From Controller

    Posted Nov 13, 2023 09:56 AM

    According to what you said, you should use UAP.
    When the controller malfunctions, UAP will automatically become an IAP mode for operation.
    CAP IAP cannot automatically switch modes.



    ------------------------------
    eddy zhou

    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
    ------------------------------



  • 10.  RE: Upgrade Backup Partition on AP From Controller

    Posted 23 days ago

    I have the same request to upgrade the backup firmware

    • The Aruba AP-505H needs ArubaOS 8.10.0.0, because it is the mimimum firmware version for supporting Aruba USB LTE Modems.
      • https://www.arubanetworks.com/techdocs/ArubaOS_8.10.0_Web_Help/Content/arubaos-solutions/rap/pro-aruba-4g-usb.htm
    • When a Aruba RAP crashes and load the stock firmware, there is no way to connect it easy back home without additional hardware

    I haven't found any way to do this over the aruba controller, manual update in InstanAP mode is a pain.

    may you can convert the APs back with DHCP-Option 60

    • AP sends "ArubaInstantAP", DHCP-Server send back "ArubaAP" --> it will convert to CAP
      • that works with out new APs
    • I never tested the opposite, feel free to checkout the PowerShell Script ;-)

    # variables
    $DHCPServerFQDN = $DHCPServerFQDN 
    $DomainName = "domain.local"
    $ArubaControllerIP = "192.168.1.100"
    
    # creating new Vendor Class for ArubaAP
    $VendorID = "ArubaAP"
    Add-DhcpServerv4Class -ComputerName $DHCPServerFQDN -Name $VendorID -Data "ArubaAP"-Type Vendor -Description "VCI: ArubaAP added $(Get-Date -Format yyyyMMdd-HHmm) by: $($env:username)"
    
    
    #----------------------------------------------------------------------
    # DHCP Policy to convert ArubaInstantAP to Aruba AP [untested]
    #----------------------------------------------------------------------
    Add-DhcpServerv4Policy -Name "ArubaAPtoInstantAP"    -Condition And -VendorClass  EQ,ArubaAP-Description "mayconvert ArubaAP in to ArubaInstantAP back" -Enabled $false -ComputerName $DHCPServerFQDN 
    #Set-DhcpServerv4OptionValue -PolicyName "ArubaAPtoInstantAP" -OptionId 43 -Value ($ArubaControllerIP|Format-Hex).Bytes -ComputerName $DHCPServerFQDN 
    Set-DhcpServerv4OptionValue -PolicyName "ArubaAPtoInstantAP" -OptionId 60 -Value "ArubaInstantAP" -ComputerName $DHCPServerFQDN # must send back ArubaAP in Option 60 to convert to cap
    Get-DhcpServerv4OptionValue -PolicyName "ArubaAPtoInstantAP" -ComputerName $DHCPServerFQDN  | ft -AutoSize