Firmware download error

[Marcus]

Sorry...........there are two discussion threads on the same topic.   I am checking with engineering and will post as soon as I get an update (posted in the other thread).

[Marcus]

Our IT department fixed the external DNS entry for images.arubanetworks.com.  My IAP now resolves to the correct IP address for images.  NOTE: I did have to reboot my IAP to clear out the old entry.

[pos42 · Accepted solution]

Hi

Now it works perfect !

Thank you

Best regards

/Peo

[jamesislame]

Hi Marcus,

My issue appears to be still happening. I get the error "retrieve image fail", even after several reboots of the AP. This appears to be happening at several of our sites, between IAP-105's and IAP-135's.

[Marcus]

jamesislame-

Did you reboot your cluster?  Either it is retaining the old DNS entry or the DNS server you are resolving to has not been updated yet.

If you PING from the IAP, or a PC, to images.arubanetworks.com it should resolve to 104.36.249.199.

[pos42]

Probably your DNS cache still have the old value.

Do a dig or nslookup and see the cache time of the entry...

"rndc flush" in the DNS server if you have bind...

Peo 

[jamesislame]

Thanks guys, I've tried several different DNS servers with nslookup as pos42 mentioned and it still seems to be resolving to 199.27.105.183

Also, it looks like many other servers are resolving to that as well --https://www.whatsmydns.net/#A/images.arubanetworks.com

Attached a screencap from my phone. Thanks for your help so far.

[Marcus]

It can take time for the change to fan out to all DNS servers.

In the meantime there are several options for SW upgrades:

1. Use automatic updates.  This is not working for some as the DNS server they are using has not received the updated IP address.  The old address for images.arubanetworks.com  is 199.27.105.183 and the new IP is104.36.249.199.

2. You can log into the TAC site and manually download IAP upgrades.  This assumes you have an active support contract.

3. You can point your web browser to:  http://104.36.249.199/fwfiles/ArubaInstant_Orion_6.3.1.8-4.0.0.7_44641 to download the file to your PC then manually upgrade.

4. You can go to the IAP maintenance page and specify the upgrade URL as: http://104.36.249.199/fwfiles/ArubaInstant_Orion_6.3.1.8-4.0.0.7_44641

NOTE:  You need to specify the HW type as part of the URL above.  In the example provided "Orion" refers to : -92/93, -104/105, -175, RAP-3.

Aries=RAP-155

Cassiopeia= -134/135

Centaurus=-224/225, -274/275

Pegasus= -108/109, -114/115, -103

[jamesislame]

Fantastic, thank you very much Marcus. I didn't realize you could manually download the images without have a support contract.

Thanks again.

[pos42]

Seems to be a problem again with fimware checks....

http://images.arubanetworks.com seems to answer ok on port 80.... I can also see in my firewall that the AP actually sent and receive an answer...

The dns name images.arubanetworks.com resolves to IP 104.36.249.201

### From firewall when pressing "check for new version" in IAP 225 instant gui.

Jul 27 00:46:21.491817 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 74: 82.182.181.104.51099 > 104.36.249.201.443: S 72348814:72348814(0) win 5040 <mss 1260,sackOK,timestamp 443533535 0,nop,wscale 5> (DF)

Jul 27 00:46:21.679343 50:3d:e5:ff:5d:80 00:1b:21:cc:51:7d 0800 74: 104.36.249.201.443 > 82.182.181.104.51099: S 1276912933:1276912933(0) ack 72348815 win 14480 <mss 1460,sackOK,timestamp 2160640817 443533535,nop,wscale 7> (DF)

Jul 27 00:46:21.680172 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 66: 82.182.181.104.51099 > 104.36.249.201.443: . ack 1 win 158 <nop,nop,timestamp 443533630 2160640817> (DF)

Jul 27 00:46:21.683000 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 66: 82.182.181.104.51099 > 104.36.249.201.443: F 1:1(0) ack 1 win 158 <nop,nop,timestamp 443533631 2160640817> (DF)

Jul 27 00:46:21.871249 50:3d:e5:ff:5d:80 00:1b:21:cc:51:7d 0800 66: 104.36.249.201.443 > 82.182.181.104.51099: F 1:1(0) ack 2 win 114 <nop,nop,timestamp 2160641009 443533631> (DF)

Jul 27 00:46:21.872250 00:1b:21:cc:51:7d 50:3d:e5:ff:5d:80 0800 66: 82.182.181.104.51099 > 104.36.249.201.443: . ack 2 win 158 <nop,nop,timestamp 443533726 2160641009> (DF)

but the IAP225 instant gui says "no response from server" when checking. I have 6.4.2.0-4.1.1.1_46936

I can see a point if the gui says there are no available updates. But the gui says "no response from server".

I have not done any HTTP analysis yet on the fw log dump. I posted this first.... :)

Thanks in advance

/PeO