C9130AXI devices and EWC

[yarixa]

hi
I got 2 used C9130AXI devices. I'm trying to configure them for my lab, using Embedded Wireless Controller.

• I was able to setup the EWC on one of the devices (host name Cisco-AP-2-CTRL), including the Day-0 configuration.

Cisco-AP-2-CTRL>show version
Cisco IOS XE Software, Version 17.03.08a
Cisco IOS Software [Amsterdam], C9800-AP Software (C9800-AP-K9_IOSXE-UNIVERSALK9-M), Version 17.3.8a, RELEASE SOFTWARE (fc3)

• the other AP (hostname Cisco-AP-3) is running w/o EWC.

Cisco-AP-3>show version

cisco C9130AXI-I ARMv8 Processor rev 4 (v8l) with 1813648/1229636K bytes of memory.
Processor board ID KWC25100S0S
AP Running Image     : 17.3.3.26
Primary Boot Image   : 17.3.3.26
Backup Boot Image    : 8.10.130.0
Primary Boot Image Hash: 09f9bc0381282faeb00977114d2479454eff8af75ef9c24be1cbdcb7ae31fc4f814ef7f3afe12de30dae835c929a5803343cc0621eb31d9663ed3bfb8a27ea61
Backup  Boot Image Hash:
1 Multigigabit Ethernet interfaces
2 802.11 Radios
Radio FW version : QC_IMAGE_VERSION_STRING=WLAN.HK.2.1-01577-QCAHKSWPL_SILICONZ-1.342931.1.351584.1
NSS FW version : NSS.HK.K.CS-18-sba5.1-max_seg_len_E_custC

• when I login to the EWC, i do see that there are 2 discovered AP, but none of them joined.

questions:

1. On the EWC device, how can i "switch to the AP" to configure it? (for example to change it's hostname)
2. Most important - how do i make the 2 AP join to the EWC...?

Thanks!

 

[yarixa]

the console/terminal logs on the 2nd device shows it's running infinite Discovery loop every few minutes.

from that log i see 2 possible problems:

1. Version does not match. (AP image version 17.3.3.26 backup 8.10.130.0, Controller 17.3.8.21) 
2. Going to restart CAPWAP (reason : image download interrupted.)... :

[*12/28/2024 21:27:00.7939] CAPWAP State: Discovery
[*12/28/2024 21:27:00.7967] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
[*12/28/2024 21:27:00.7971] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Discovery(2).
[*12/28/2024 21:27:00.7985] Discovery Response from 192.168.1.8
[*12/28/2024 21:27:04.3051] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Discovery(2).
[*12/28/2024 21:27:11.0003]
[*12/28/2024 21:27:11.0003] CAPWAP State: DTLS Setup
[*12/28/2024 21:27:11.3531]
[*12/28/2024 21:27:11.3531] CAPWAP State: Join
[*12/28/2024 21:27:11.3722] Sending Join request to 192.168.1.8 through port 5248
[*12/28/2024 21:27:11.3802] Join Response from 192.168.1.8
[*12/28/2024 21:27:11.3803] AC accepted join request with result code: 0
[*12/28/2024 21:27:11.4828] Received wlcType 2, timer 30
[*12/28/2024 21:27:11.5108]
[*12/28/2024 21:27:11.5108] CAPWAP State: Image Data
[*12/28/2024 21:27:11.5110] AP image version 17.3.3.26 backup 8.10.130.0, Controller 17.3.8.21
[*12/28/2024 21:27:11.5110] Version does not match.
[*12/28/2024 21:27:11.5373] upgrade.sh: Script called with args:[PRECHECK]
[*12/28/2024 21:27:11.5828] do PRECHECK, part2 is active part
[*12/28/2024 21:27:11.6048] upgrade.sh: /tmp space: OK available 79020, required 40000
[*12/28/2024 21:27:11.6052] wtpImgFileReadRequest: request ap1g6a, local /tmp/part.tar
[*12/28/2024 21:27:11.6062] Image Data Request sent to 192.168.1.8, fileName [ap1g6a], slaveStatus 0
[*12/28/2024 21:27:11.6106] Image Data Response from 192.168.1.8
[*12/28/2024 21:27:11.6106] AC accepted join request with result code: 0
[*12/28/2024 21:27:11.6255] ..
[*12/28/2024 21:27:12.4811] .............Re-Tx Count=1, Max Re-Tx Value=5, SendSeqNum=2, NumofPendingMsgs=1
[*12/28/2024 21:27:42.9300]
[*12/28/2024 21:27:45.7810] Re-Tx Count=2, Max Re-Tx Value=5, SendSeqNum=2, NumofPendingMsgs=1
[*12/28/2024 21:27:45.7810]
[*12/28/2024 21:27:47.4916]
[*12/28/2024 21:27:47.4916] Going to restart CAPWAP (reason : image download interrupted.)...
[*12/28/2024 21:27:47.4916]
[*12/28/2024 21:27:47.4917] Restarting CAPWAP State Machine.
[*12/28/2024 21:27:47.4924] Image Data Request sent to 192.168.1.8, fileName [ap1g6a], slaveStatus 1
[*12/28/2024 21:27:47.5134]
[*12/28/2024 21:27:47.5134] CAPWAP State: DTLS Teardown
[*12/28/2024 21:27:47.5312] Aborting image download(0x0): Dtls cleanup, ap1g6a
[*12/28/2024 21:27:47.5950] upgrade.sh: Script called with args:[ABORT]
[*12/28/2024 21:27:47.6336] do ABORT, part2 is active part
[*12/28/2024 21:27:47.6527] upgrade.sh: Cleanup tmp files ...
[*12/28/2024 21:27:47.6761] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*12/28/2024 21:27:47.6761] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: DTLS Teardown(4).
[*12/28/2024 21:28:02.2649]

[Flavio Miranda]

@yarixa 

 EWC does not have  firmware for Access Point. You need to add the access point´s firmware to a TFTP server and associate the TFTP server to the EWC.

Recommend a close look on this guide.

https://www.cisco.com/c/en/us/support/docs/wireless/embedded-wireless-controller-on-catalyst-access-points/215303-embedded-wireless-controller-conversion.html#:~:text=Unlike%20a%209800,to%20join%20it%3A

EWC(config)#wireless profile image-download default
EWC(config-wireless-image-download-profile)#image-download-mode tftp
EWC(config-wireless-image-download-profile-tftp)#tftp-image-server 192.168.1.25
EWC(config-wireless-image-download-profile-tftp)#tftp-image-path /

When the AP try to associate, it can get the required firmware from the TFTP server.

Regarding your question, on this guide you can read "Access the AP Console From the EWC (former apciscoshell)"

EWC#wireless ewc-ap ap shell username admin

admin@192.168.129.1's password: Cisco123

If your Second AP is also EWC, you can change it to access point with

AP1#ap-type capwap

[yarixa]

thanks @Flavio Miranda 

-----

Cisco-AP-2-CTRL#wireless ewc-ap ap shell username admin
The authenticity of host '192.168.129.1 (192.168.129.1)' can't be established.
ECDSA key fingerprint is SHA256:P..............................Q.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.129.1' (ECDSA) to the list of known hosts.
admin@192.168.129.1's password:
AP.....34>
AP.....34>enable
Password:
AP.....34#capwap ap hostname Cisco-AP-2
Please note that if AP is already associated to WLC,
the new hostname will only reflect on WLC after AP
 dis-associates and rejoins.
AP.....34#
Cisco-AP-2#

[Flavio Miranda]

You got it.

 For the second Access Point, you may need the firmware. You can also try to put them on the same version 17.3.8a and on the same network and make one primary and the other secondary.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/17-7/config-guide/ewc_cg_17_7/m_ewc_high_availability.html

[yarixa]

thanks again @Flavio Miranda . i don't need HA for now, maybe later

I still have problems with the versions. I setup TFTP as you mention (also tried SFTP and even cisco online cco...), yet AP doesn't it connect...

1. I wonder why the internal AP which has the same version as the EWC don't connect? maybe it's something else? (i read something about using flex connection type??)
2. just to be sure, on the TFTP I should extract the zip file (version 17.3.8a of the EWC) - right?
3. how can i upgrade the AP (using serial cable and console commands)?

[Flavio Miranda · Accepted solution]

1. I wonder why the internal AP which has the same version as the EWC don't connect? maybe it's something else? (i read something about using flex connection type??)

EWC Will always use flexconnect. The AP firmware is different from EWC. They use an AP specific firmware and they need to download from EWC on Join process. Thats why you need the TFTP server.

1. just to be sure, on the TFTP I should extract the zip file (version 17.3.8a of the EWC) - right?

No. The AP firmware have different code

• EWC .bin image (example: C9800-AP-iosxe-wlc.bin)
• AP image for all APs that can join EWC (example: ap1g4, ap1g7)

1. how can i upgrade the AP (using serial cable and console commands)?

It is possible but dont believe It easier

[yarixa]

it seems to work now , i did 2 changes:

• on the EWC i noticed that the internal AP and the EWC shared the same IP (which is logical) but on my router (Netgear) it seems like a conflict. Since i had 1 IP with 2 different MAC address.
  • So, i edited the "internal" AP IP - now i see 2 different IPs for the 2 MAC add.
• I also decided to use SFTP and set the path correctly to the extracted folder of 17.3.8a.
• finally - I restarted both devices.

Thanks for your help with that.  

[Flavio Miranda]

You are welcome and thanks for sharing. This Will Guide other