Controllerless Networks

i am trying to convert iap-93 to cap but it fails i see it cannot connect to port 21 in error logs any help appreciated.

 

show vpn status

 

 

profile name:default

--------------------------------------------------

current using tunnel                            :unselected tunnel

ipsec is preempt status                         :disable

ipsec is fast failover status                   :disable

ipsec hold on period                            :600

ipsec tunnel monitor frequency (seconds/packet) :5

ipsec tunnel monitor timeout by lost packet cnt :2

 

ipsec     primary tunnel crypto type            :Cert

ipsec     primary tunnel peer address           :N/A

ipsec     primary tunnel peer tunnel ip         :N/A

ipsec     primary tunnel ap tunnel ip           :N/A

ipsec     primary tunnel current sm status      :Init

ipsec     primary tunnel tunnel status          :Down

ipsec     primary tunnel tunnel retry times     :0

ipsec     primary tunnel tunnel uptime          :0

 

ipsec      backup tunnel crypto type            :Cert

ipsec      backup tunnel peer address           :N/A

ipsec      backup tunnel peer tunnel ip         :N/A

ipsec      backup tunnel ap tunnel ip           :N/A

ipsec      backup tunnel current sm status      :Init

ipsec      backup tunnel tunnel status          :Down

ipsec      backup tunnel tunnel retry times     :0

ipsec      backup tunnel tunnel uptime          :0

end of show vpn status

========================================================

 

show upgrade info

 

Image Upgrade Progress

----------------------

Mac                IP Address   AP Class  Status       Image Info                     Error Detail

---                ----------   --------  ------       ----------                     ------------

24:de:c6:c0:7a:a4  10.26.2.249  Orion     downloading  ac-ftp://10.26.2.5/mips32.ari  Retrieve image fail

Auto reboot           :enable

Use external URL      :enable

end of show upgrade info

========================================================

 

show log upgrade

----------Download log start----------

 

Executing '/aruba/bin/download_image_swarm ac-ftp://10.26.2.5/mips32.ari --no-proxy X-Ap-Info:BU0072836,24:de:c6:c0:7a:a4,AP-93'

fetching ('/usr/sbin/wget -T 120 -t 3 --no-proxy --header=X-Ap-Info:BU0072836,24:de:c6:c0:7a:a4,AP-93 -a /tmp/download_url_log ftp://sap:x@10.26.2.5/mips32.ari')

--00:04:03--  ftp://sap:*password*@10.26.2.5/mips32.ari

           => `mips32.ari'

Connecting to 10.26.2.5:21... failed: Connection refused.

Error: failed to retrieve image

cleaning up

done

 

----------Download log end------------

Download status: Retrieve image fail

----------Upgrade log start----------

upgrade log not available

----------Upgrade log end------------

Upgrade status: upgrade status not available

end of show log upgrade

========================================================

 

show log rapper

Rapper info not available

end of show log rapper

========================================================

Looks like your controller doesn't have the required code. What version of AOS is running on your controller?


Thanks,
Tim

I am running aos 6.3.1.6 on the controller

and on the IAP-93 aos is greater than the one on the controller

 

Thanks 

Rijo

HI,

 

In order to convert an IAP to RAP, Controller should have minimum 6.1 Image version and also there is a minimum 4.1 IAP version,

 

Please check whether you are justifying the above along with other RAP related settings and RAP whitelist DB.

 

Please feel free for any further help on this.

Both the AOS of the controller and IAP is above 6.1

also control plane security is disabled on the controller

controller 

Model:	Aruba7210
Version:	6.3.1.6

IAP93 version is 

Version:

6.3.1.8-4.0.0.8_46401

 

Any help highly appreciated,

 

Thanks Rijo

Hi,

 

Please upgrade the IAP version to 4.1 or higher.

Hi,

 

The AOS is above 4.1 as mentioned earlier,

 

Thanks,

Rijo

HI, in your prev post you said, it is on 6.3.1.8-4.0.0.8,

 

AP93 version is 

Version:

6.3.1.8-4.0.0.8_46401

 

Upgrade the IAP to 6.3.1.8-4.1.x.x or above 

 

 

Hi,

 

These IAP's were previously converted to CAP and was working perfectly.

We then copied the config from an old controller to the 7200

it was reset recently and since then i am not able to convert it back to CAP.

How could this relate to the firmware.

 

Also there are other IAP-93 with same firmware still on the network working as CAP.

 

 

 

Thanks 

HI,

 

For converting IAP to CAP or IAP to RAP we have min image version criteria. I will share the doc If I find any.

 

 

There is some confusion added in that iAP code has two version numbers to the uninitiated:

6.3.x.x-4.0.x.x  -- looks like version 6 something (higher than 4) but not in fact the correct number to look at.

 

When Aruba talks about version numbers for iAP they refer to the number on the right of the dash: 4.0.x.x (lower than 4.1)