Wireless Access

last person joined: 21 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Downgrade AOS8 to AOS6 IAP-277

This thread has been viewed 6 times
  • 1.  Downgrade AOS8 to AOS6 IAP-277

    Posted Oct 12, 2018 05:53 AM

    Hey,

     

    today I have a new IAP-277 access point with firmware version 8.3.0.0_64659 and I want to connect to a mobility controller with firmware version 6.5.4.8.

     

    The question is now how can I downgrade the iap-277 for connecting the mobility controller?

     

    Greetings Wolfgang



  • 2.  RE: Downgrade AOS8 to AOS6 IAP-277

    MVP EXPERT
    Posted Oct 12, 2018 06:04 AM

    If you login to the VC and point the IAP to the Mobility Controller, it will automatically download the ArubaOS version to the IAP.

     

    https://www.arubanetworks.com/techdocs/Instant_40_Mobile/Advanced/Content/UG_files/IAP_management/ConvertingIAPtoCAP.htm



  • 3.  RE: Downgrade AOS8 to AOS6 IAP-277

    Posted Oct 12, 2018 06:16 AM
    thank you for your answer converting via gui to the controller with error message (in german) check image false - ap will restart in 15 minutes


  • 4.  RE: Downgrade AOS8 to AOS6 IAP-277

    MVP EXPERT
    Posted Oct 12, 2018 06:17 AM

    Is the IAP able to reach the mobility controller, is there any firewalls in between? Do you see anything on the controller for the IAP? Run the command below on the mobility controller to check for traffic

     

    #show datapath session | include [IAP IP ADDRESS]

     

     



  • 5.  RE: Downgrade AOS8 to AOS6 IAP-277

    Posted Oct 12, 2018 06:27 AM

    connection via iap and controller via icmp is ok

     

    80:8d:b7:cf:71:c6# ping 172.24.0.254
    Press 'q' to abort.
    PING 172.24.0.254 (172.24.0.254): 56 data bytes
    64 bytes from 172.24.0.254: icmp_seq=0 ttl=64 time=1.8 ms
    64 bytes from 172.24.0.254: icmp_seq=1 ttl=64 time=1.1 ms
    64 bytes from 172.24.0.254: icmp_seq=2 ttl=64 time=0.7 ms
    64 bytes from 172.24.0.254: icmp_seq=3 ttl=64 time=1.6 ms
    64 bytes from 172.24.0.254: icmp_seq=4 ttl=64 time=1.3 ms
    
    --- 172.24.0.254 ping statistics ---
    5 packets transmitted, 5 packets received, 0% packet loss
    round-trip min/avg/max = 0.7/1.3/1.8 ms
    
    

    no firewall between iap and controller

     

    80:8d:b7:cf:71:c6# show datapath session | include 172.24.126.183
    172.24.0.1        172.24.126.183  17   53    60364 0    0    0   1   dev19       3b   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    62542 0    0    0   1   dev19       47   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    52655 0    0    0   1   dev19       47   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    57985 0    0    0   0   dev19       8    1       82    FNI
    172.24.0.1        172.24.126.183  17   53    63876 0    0    0   1   dev19       39   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    63911 0    0    0   0   dev19       3b   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    60999 0    0    0   0   dev19       47   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    52318 0    0    0   0   dev19       18   1       93    FNI
    172.24.0.1        172.24.126.183  17   53    62224 0    0    0   1   dev19       47   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    52432 0    0    0   1   dev19       47   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    61428 0    0    0   1   dev19       49   0       0     FNI
    172.24.0.1        172.24.126.183  17   53    58804 0    0    0   0   dev19       18   1       9a    FNI


  • 6.  RE: Downgrade AOS8 to AOS6 IAP-277

    MVP EXPERT
    Posted Oct 12, 2018 06:30 AM

    Looks like those are just DNS packets which I assume is the default gateway. Do you have control plane security enabled? Do you see anything in the Mobility Controller logs for the IP of the IAP. Also run the datapath session a few times to see if you can capture traffic to the controller.



  • 7.  RE: Downgrade AOS8 to AOS6 IAP-277

    Posted Oct 12, 2018 10:55 AM
    sorry for the confusion, the ap is a ap-377 so It´s not possible to downgrade the firmware