If the AP is managed in Central, and you can't get it removed, in case you want to convert it to a campus AP, the suggested would work: put it in a place in the network where it can reach the controller, but not the internet, then factory reset the AP and once in the WebUI or CLI, you can convert the AP to a campus AP. After that, it should no longer connect back to Central.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Jun 20, 2023 10:18 AM
From: forsytad
Subject: Used AP505
That makes as much sense as any theory I've come up with so far. Factory reset wouldn't remove it from the central account, though? Would that explain why it also doesn't seem to be following our dhcp and dns settings to find our controllers?
If that's the case how do i break this cycle? Would booting it up somewhere that it doesn't get internet access do the trick? I'm thinking no because if factory reset doesn't free it from central, once it has internet access again it will try to go back, won't it. If I made it a place that it could boot up, not get internet, but could see our controller's might I be able to factory reset login and change the password, and then be able to login again and convert it to a campus ap connected to our controller?
--
Original Message:
Sent: 6/20/2023 10:08:00 AM
From: kdisc98
Subject: RE: Used AP505
This AP might be connectd to an Central account , And once its getting internet its getting some other user / pass .. and other settings from some user default group in central or other.
------------------------------
(*) If i helped you , Please do kudos me as a thank you (*)
Aruba AirHeads - Because mobility matters.
Original Message:
Sent: Jun 20, 2023 09:59 AM
From: Adam Forsyth
Subject: Used AP505
hmm, it does basically the same thing on the serial port. It lets me log in with the serial number after factory reset, then makes me change my password, then before I'm allowed to do anything else it makes me log in with the new password but it won't take it.
User: admin
Password:
Input new mgmt password:
Input new mgmt password again:
show tech-support and show tech-support supplemental are the two most useful outputs to collect for any kind of troubleshooting session.
6c:c4:9f:c8:2c:de# show tech-support
CLI's management authentication settings have been changed. Your login credentials are now being re-checked...
Your credentials are no longer valid, you are being logged out. Please login again with the up-to-date username and password.
User: admin
Password:
Login incorrect, reason code 6
User:
upon unit booting and when u can log in via CLI (Console) please to share with us the show tech-support of the unit. because from the boot process you copied&pasted i was unable to notice anything wrong
------------------------------(*) If i helped you , Please do kudos me as a thank you (*)Aruba AirHeads - Because mobility matters.
Original Message:Sent: Jun 16, 2023 05:14 PMFrom: forsytadSubject: Used AP505I bought a Used AP505 (model R2H29A) on ebay. I factory reset it and it comes up in Instant mode. I login with admin and its serial number as a password. At that point it prompts me to set a new admin password. Up to this point everything seems to be working properly, but this is where things start to go wrong. Sometimes it acts like it's accepted the password and then goes back to the login prompt as though it's requiring me to login with the new password I just set. That's fine but it doesn't take the password i just set. Sometimes instead of this behavior,it just hangs on the password resetting screen and doesn't go forward from there. That is all i can do. if I reboot at that point it acts as though i don't know the password. It doesn't seem to be the serial number any more and it doesn't seem to be the password i attempted to set. If i reset to factory defaults again, it will take the serial number as password and then let me fail to change the password again.
Here is what I see when I watch it boot on the serial console. Nothing there is jumping out to me as giving a clue as to what's going wrong.
HELOCPU0L1CDMMUIZBBSMAIN5.0207HNDpre5-1.0.38-163.191Boot Strap Register: 0x7ffffdc3MCB chksum 0xa41d9a22, config 0x101530DDR4-2133 CL15 total 1024MB 1 16bits part[s] %1 SSCDDR test done successfullyLoading image 0...Validating image 0...Uncompressing image 0...Booting image 0...APBoot 2.5.3.8 (build 74444)Built: 2020-02-25 at 14:39:56Model: AP-50xDRAM: 1 GiBNAND: ECC BCH-8, ONFI, Manuf ID: 0x01, Chip ID: 0xf1 (AMD/Spansion S34ML01G2), page size: 2048, OOB size: 64, device size: 128 MiBPower: 802.3af POEIn: serialOut: serialErr: serialNet: eth0Radio: bcm47622#0,bcm47622#1Reset: coldFIPS: passedHit <Enter> to stop autoboot: 0Checking image @ 0x0Copying image from 0x08000000Image is signed; verifying checksum... passedSHA2 Signature availableSigner Cert OKPolicy Cert OKRSA signature verified using SHA2.Uncompressing Kernel Image ... reserving fdt memory region: addr=0 size=8000 reserving fdt memory region: addr=4000000 size=100000OK[ 0.000000][ 0.000000] Aruba Networks[ 0.000000] ArubaOS Version 8.7.1.3-8.7.1.3 (build 79817 / label #79817)[ 0.000000] Built by p4build@pr-hpn-build05 on 2021-04-07 at 07:06:02 UTC (gcc version 5.3.0 (Buildroot 2016.02) )[ 8.929868] tpm tpm0: TPM2_RC_INITIALIZE (256) continue selftest[ 9.678059] tpm tpm0: TPM2 self test passed[ 9.854073] brcmboard registered[ 9.897443] broadcomThermalDrv brcm-therm: init (CPU count 4 4 4 4)[ 10.120131] Enabling all watchdogs[ 10.722607]Starting Kernel SHA1 KAT ...[ 10.769635] Completed Kernel SHA1 KAT[ 10.769687] Starting Kernel HMAC-SHA1 KAT ...[ 10.769731] Starting Kernel DES KAT ...[ 10.769732] Completed Kernel DES KAT[ 10.769774] Starting Kernel AES KAT ...[ 10.769774] Completed Kernel AES KAT[ 10.769774][ 10.769778] Starting Kernel AESGCM KAT ...[ 10.769778] Completed Kernel AESGCM KAT[ 10.774972] Completed Kernel HMAC-SHA1 KATThu Jan 1 00:00:00 PST 1970Populate AP type infoDomain Name: SetMeUp.arubanetworks.comCurrent OEM Name : Aruba NetworksDisabling ipv6 for devices by defaultAP-type has_ble_support: NORDIC_ONBOARD.IPv6 capability is supported for devicesNo panic info availableEnabling UDMD via nannyWriting /dev/ttyH0 into /tmp/ble_portEnabling ble_daemon and ble_relay via nannyglenlivet: Start hotplugBackup ENV.Loading Broadcom drivers and ker[ 17.404964] bcmlibs: module license 'Proprietary' taints kernel.nel modules...[ 17.503966] Disabling lock debugging due to kernel taintDisable archer hw acceleration...[ 18.393030] isl28022: loading out-of-tree module taints kernel.Enter non-FIPS modeCfg len is 9625uap controller less detectedMesh disabledStarting watchdog process...Aruba watchdog daemon started [1 thread(s)]dual_uplink_default is 0Loading configuration file of length 9625...wifi uplink not present...extended ssid config detected...Terminal access enabled...Valid SSID detected...touching file /tmp/ip_mode_1Enabling DHCPv6 ... IP mode is v4-prefer ...do ethtool autoneg on for bond0cp: /lib/nls_base.ko: No such file or directorycp: /lib/usbcore.ko: No such file or directoryeth1 admin downSIOCGIFFLAGS: No such deviceinit usb modem ...[ 22.690610] bond0 (Int switch port: 0) (Logical Port: 0) (phyId: 8) Link Up at 1000 mbps full duplexNo USB Plugged inskip backup uplink detect, as preferred uplink is UPset eth0 as select uplinkMesh is DISABLED on this device.extended ssid is activated on the platform ...[ 43.948983] uol_init_driver:423 HW offload not applicable, AP will use cutting through path!copying bootuplog ...allow PAPIset device anul0 mtu to 2000notify asap_mod 3g no present...Enabling IPv6 for devices... IP mode is v4-prefer...apdot1x authentication is not enabledStarting DHCPGetting an IP address...Jan 1 00:00:33 udhcpc[4046]: udhcpc (v0.9.9-pre) startedJan 1 00:00:33 udhcpc[4046]: send_discover: pkt num 0, secs 0Jan 1 00:00:33 udhcpc[4046]: Sending discover...Jan 1 00:00:33 udhcpc[4046]: send_selecting: pkt num 0, secs 0Jan 1 00:00:33 udhcpc[4046]: Sending select for 10.22.1.129...Jan 1 00:00:33 udhcpc[4046]: Lease of 10.22.1.129 obtained, lease time 2592000Jan 1 00:00:33 udhcpc[4046]: Domain invalid [lc.luther.edu]: Contains invalid charactersJan 1 00:00:34 udhcpc[4046]: DHCP OPT 60 is ArubaAPJan 1 00:00:34 udhcpc[4046]: DHCP OPT 42, len: 4, ip: 192.203.196.68[ 49.504563] ip_time_handler: Got ip and packets on bond0 Started master election 38-0, rand 3010.22.1.129 255.255.255.0 10.22.1.1Compressing all files in the /etc/httpd directory...Done.Starting Webserverbind: Transport endpoint is not connectedbind: Transport endpoint is not connectedbind: Transport endpoint is not connectedNTP server 192.203.196.68 received via DHCP option.Put ntpdate to the nannylist.AP Reboot reason: Power-resetshutting down watchdog process (nanny will restart it)... <<<<< Welcome to the Access Point >>>>>Completed SW FIPS KAT testUSB Modem is not present.User:User: ble_ready NOT present @init ....[ 98.618603] (21:08:09) !!! Init ---> Master
Anyone see what I'm doing wrong here? My goal if i could get it to let me is to convert this back to a campus access point and ask it to connect to our controller.
--