Controllerless Networks

Hi

Today my two IAP-225 have firmware 6.3.1.4-4.0.0.6_44126. The firmware check page on the instant gui says there is version 6.3.1.8-4.0.0.7_44641 available. The IAPs however fail to download. Have tried a handfull times over the last 10-15 hours.

As I can see the URL in the log window I can also confirm this is a arubanetwork site error as I cannot download this file from my laptop either...

sjoholmp:Desktop sjoholmp$ wget http://images.arubanetworks.com/fwfiles/ArubaInstant_Centaurus_6.3.1.8-4.0.0.7_44641

--2014-09-09 01:29:43--  http://images.arubanetworks.com/fwfiles/ArubaInstant_Centaurus_6.3.1.8-4.0.0.7_44641

Resolving images.arubanetworks.com... 199.27.105.183

Connecting to images.arubanetworks.com|199.27.105.183|:80... ^C

sjoholmp:Desktop sjoholmp$ 

So... The IAP can check against Aruba that there is a newer version, but cannot download. Check and download are probably two different sites.. I can also see that the site images.arubanetworks.com is dead when it comes to HTTP connections.

Can anyone confirm Aruba has network problems right now? Or am I missing something here...

Thanks in advance

/Peo

I'm having the same issue trying to update an IAP-135. 

Any guidance would be greatly appreciated.

Can you both confirm that you have Aruba IAPs or are the Dell / Alcatel branded?

Directly from Aruba

NO Dell !

/Per-Olov

And as said in the first post. The web site is down. So it does not matter what AP you have...

Per-Olov

Hi Marcus, I'm working with an Aruba branded IAP-135. I get an error saying "failed to retrieve image".

Attached is the text of the log that pops up.

Attachment(s)

error.txt   613 B 1 version

This is my error I logged this evening...

http://www.incedo.eu/~sjoholmp/misc_internet_links/Support_aruba.pdf

Not that I tried the same url from my Linux laptop with the same issue. Site down...

Per-Olov

We just changed the Colo for the upgrade server on Sept. 6th  and the IP address has changed from 199.27.105.183 to104.36.249.199.

Go to the CLI on your IAP and ping device.arubanetworks.com to see what you are resolving to.  You may have the old IP cached.

Hi

Really... What is the point of resolving a name that the IAP wont even try to contact? The IAP tries to contact images.arubanetworks.com and not device.arubanetworks.com.

You can also see the result  you asked for here here...

http://www.incedo.eu/~sjoholmp/misc_internet_links/Support_aruba_screenshot.png

I have also tried to resolve "images.arubanetworks.com" from another DNS with the same result. How is my IAP suppose to guess a totalty new DNS name to download from that you noted above?

Regards

Per-Olov

What do add to my answer a few minutes ago that...

Both images.arubanetworks.com and device.arubanetworks.com resolves the same, no matter if I look it up in my own DNS server or directly against arubanetworks.com authoritative DNS server.

And none resolves to the IP you mention Marcus. And as said... images.arubanetworks.com is the one that my IAP look up in DNS and NOT device.arubanetworks.com

So...  Looking for your networking technician to fix the DNS against the correct IP of what the error now might be after your colo-change...

It would be nice if you could post here when the error is solved Marcus.

Thanks in advance

Regards

Per-Olov

Sorry...........there are two discussion threads on the same topic.   I am checking with engineering and will post as soon as I get an update (posted in the other thread).

Our IT department fixed the external DNS entry for images.arubanetworks.com.  My IAP now resolves to the correct IP address for images.  NOTE: I did have to reboot my IAP to clear out the old entry.

Hi

Now it works perfect !

Thank you

Best regards

/Peo

Hi Marcus,

My issue appears to be still happening. I get the error "retrieve image fail", even after several reboots of the AP. This appears to be happening at several of our sites, between IAP-105's and IAP-135's.

jamesislame-

Did you reboot your cluster?  Either it is retaining the old DNS entry or the DNS server you are resolving to has not been updated yet.

If you PING from the IAP, or a PC, to images.arubanetworks.com it should resolve to 104.36.249.199.

Probably your DNS cache still have the old value.

Do a dig or nslookup and see the cache time of the entry...

"rndc flush" in the DNS server if you have bind...

Peo 

Thanks guys, I've tried several different DNS servers with nslookup as pos42 mentioned and it still seems to be resolving to 199.27.105.183

Also, it looks like many other servers are resolving to that as well --https://www.whatsmydns.net/#A/images.arubanetworks.com

Attached a screencap from my phone. Thanks for your help so far.

It can take time for the change to fan out to all DNS servers.

In the meantime there are several options for SW upgrades:

1. Use automatic updates.  This is not working for some as the DNS server they are using has not received the updated IP address.  The old address for images.arubanetworks.com  is 199.27.105.183 and the new IP is104.36.249.199.

2. You can log into the TAC site and manually download IAP upgrades.  This assumes you have an active support contract.

3. You can point your web browser to:  http://104.36.249.199/fwfiles/ArubaInstant_Orion_6.3.1.8-4.0.0.7_44641 to download the file to your PC then manually upgrade.

4. You can go to the IAP maintenance page and specify the upgrade URL as: http://104.36.249.199/fwfiles/ArubaInstant_Orion_6.3.1.8-4.0.0.7_44641

NOTE:  You need to specify the HW type as part of the URL above.  In the example provided "Orion" refers to : -92/93, -104/105, -175, RAP-3.

Aries=RAP-155

Cassiopeia= -134/135

Centaurus=-224/225, -274/275

Pegasus= -108/109, -114/115, -103

Fantastic, thank you very much Marcus. I didn't realize you could manually download the images without have a support contract.

Thanks again.

Seems to be a problem again with fimware checks....

http://images.arubanetworks.com seems to answer ok on port 80.... I can also see in my firewall that the AP actually sent and receive an answer...

The dns name images.arubanetworks.com resolves to IP 104.36.249.201

### From firewall when pressing "check for new version" in IAP 225 instant gui.

Jul 27 00:46:21.491817 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 74: 82.182.181.104.51099 > 104.36.249.201.443: S 72348814:72348814(0) win 5040 <mss 1260,sackOK,timestamp 443533535 0,nop,wscale 5> (DF)

Jul 27 00:46:21.679343 50:3d:e5:ff:5d:80 00:1b:21:cc:51:7d 0800 74: 104.36.249.201.443 > 82.182.181.104.51099: S 1276912933:1276912933(0) ack 72348815 win 14480 <mss 1460,sackOK,timestamp 2160640817 443533535,nop,wscale 7> (DF)

Jul 27 00:46:21.680172 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 66: 82.182.181.104.51099 > 104.36.249.201.443: . ack 1 win 158 <nop,nop,timestamp 443533630 2160640817> (DF)

Jul 27 00:46:21.683000 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 66: 82.182.181.104.51099 > 104.36.249.201.443: F 1:1(0) ack 1 win 158 <nop,nop,timestamp 443533631 2160640817> (DF)

Jul 27 00:46:21.871249 50:3d:e5:ff:5d:80 00:1b:21:cc:51:7d 0800 66: 104.36.249.201.443 > 82.182.181.104.51099: F 1:1(0) ack 2 win 114 <nop,nop,timestamp 2160641009 443533631> (DF)

Jul 27 00:46:21.872250 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 66: 82.182.181.104.51099 > 104.36.249.201.443: . ack 2 win 158 <nop,nop,timestamp 443533726 2160641009> (DF)

but the IAP225 instant gui says "no response from server" when checking. I have 6.4.2.0-4.1.1.1_46936

I can see a point if the gui says there are no available updates. But the gui says "no response from server".

I have not done any HTTP analysis yet on the fw log dump. I posted this first.... :)

Thanks in advance

/PeO

Peo,

The 4.1.1.1 version has an expired certificate that would keep it from checking or downloading firmware.  Please manually download 4.1.1.7 that I sent you to fix.

Having the same error on my 325 IAP sees the new DRT but fails to download error logging shows malformed URL.

Please open a new thread.  This thread is 5 years old.