Cisco AP1602i not getting firmware upgrade 8.5.135.0 from WLC 2504

[supportgns]

Hi,

We have an office with 4 access points deployed: two 1702i and two 1602i. All of them are joined to a WLC 2504. Last night, we did an upgrade firmware from 8.0.121.0 version to 8.5.135.0. The 1702 models came up correctly and now they're working fine, but none of the two 1602i have came yet and the upgrade was applied more than 12 hours ago.

This is what happens

* Physically the LED is blinking between amber/red/green, sometimes gets amber, and then blinks again. 

* At the WLC, we see the 1602i in a Downloading state but still with the 8.0.121.0 version, then after a while disappears, and then appears again in the same Downloading state. It always has an IP of 0.0.0.0 when shown in the AP list at the WLC.

* Both symptoms are happening in a loop.

* Currently it's not so easy to connect to the AP via CLI and see what's happening because of the physical installation in itself, and it's not possible to access the AP through SSH/Telnet.

We have discarded:

* Compatibility issues: according to the Cisco documentation the 1600 models support 8.5.135.0.

* Inline power issues: all the access points are connected to the same PoE switches and in fact we have tested by moving them to another switch ports and the behavior is the same.

What could be happening? Thanks.

[marce1000]

 - Did you also install the Supplementary AP Bundle  needed , for these model(s).

 M.

[Sathiyanarayanan Ravindran]

Hi,

You have to download the additional supplementary image to support the 1600 Series APs. Just refer the release notes Upgrade Process 8.5 for the same. 

Post installing the supplementary APs will download the image and join to the WLC.

[supportgns]

Hi Sathi,

Effectively I missed to install that supplementary image. However, when installing, the 1602 appears to extract the image, it gets DHCP and finds the WLC, but then this happens:

*Mar 1 00:01:48.002: %CAPWAP-5-DHCP_OPTION_43: Controller address 172.30.23.36 obtained through DHCP
examining image...
extracting info (291 bytes)
Image info:
Version Suffix: k9w8-.153-3.JA12
Image Name: ap1g2-k9w8-mx.153-3.JA12
Version Directory: ap1g2-k9w8-mx.153-3.JA12
Ios Image Size: 11602432
Total Image Size: 12155392
Image Feature: WIRELESS LAN|LWAPP
Image Family: AP1G2
Wireless Switch Management Version: 8.0.152.0
MwarVersion:08009800.First AP Supported Version:0703010B.

Image version check passed

Not enough free space to download.
Check for crashinfo/radio coredump and non used image files...
Not enough free space to download image first w/o extracting
deleting existing version(s)...
Deleting target version: flash:/ap1g2-k9w8-mx.153-3.JA12...
Set booting path to recovery image: 'flash:/ap1g2-rcvk9w8-mx/ap1g2-rcvk9w8-mx'.. .
*Apr 11 21:30:39.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_i p: 172.30.23.36 peer_port: 5246
*Apr 11 21:30:39.395: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 172.30.23.36 peer_port: 5246
*Apr 11 21:30:39.395: %CAPWAP-5-SENDJOIN: sending Join Request to 172.30.23.36pe rform archive download capwap:/ap1g2 tar file
*Apr 11 21:30:39.483: %CAPWAP-6-AP_IMG_DWNLD: Required image not found on AP. Do wnloading image from Controller.done.
Extracting files...
ap1g2-k9w8-mx.153-3.JA12/ (directory) 0 (bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/ap1g2-k9w8-xx.153-3.JA12 (10408663 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/S2.bin (15184 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/info (291 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/img_sign_rel.cert (1375 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/S5.bin (128480 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/K5.bin (98112 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/K2.bin (8176 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/final_hash.sig (512 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/swims_sign.log.31671 (220 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/8005.img (1187968 bytes)
ap1g2-k9w8-mx.153-3.JA12/html/ (directory) 0 (bytes)
ap1g2-k9w8-mx.153-3.JA12/html/level/ (directory) 0 (bytes)
ap1g2-k9w8-mx.153-3.JA12/html/level/15/ (directory) 0 (bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/15/officeExtendapSummary.htm (985 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/15/officeExtendapEvent.shtml.gz ( 988 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/15/officeExtendapConfig.shtml.gz (2864 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/15/officeExtendapBanner.htm (7514 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/15/officeExtendapMain.shtml.gz (3 350 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/15/officeExtendapHelp.htm (5721 b ytes)
ap1g2-k9w8-mx.153-3.JA12/html/level/1/ (directory) 0 (bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/sitewide.js (17250 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/ap_home.shtml.gz (1370 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/officeExtendap.css (41801 bytes )
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/config.js (28719 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/appsui.js (563 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/back.shtml (512 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/forms.js (20125 bytes)
ap1g2-k9w8-mx.153-3.JA12/html/level/1/images/ (directory) 0 (bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/images/info.gif (399 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/images/background_web41.jpg (73 2 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/images/cisco-logo-2007.gif (164 8 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/html/level/1/images/login_homeap.gif (19671 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/img_sign_rel_sha2.cert (1371 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/ap1g2-k9w8-mx.153-3.JA12 (123464 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/file_hashes (4337 bytes)
extracting ap1g2-k9w8-mx.153-3.JA12/final_hash (141 bytes)
extracting info.ver (291 bytes)
*Apr 11 21:33:56.474: Currently running a Release Image
validate_sha2_block: Failed to get certificate chain
*Apr 11 21:33:56.566: Using SHA-1 signed certificate for image signing validatio n.
*Apr 11 21:33:56.646: Image signing certificate validation succeeded.

New software image installed in flash:/ap1g2-k9w8-mx.153-3.JA12
Configuring system to use new image...done.
drchive
Writing out the event log too flash:/event.log ...
wnload: takes 206 seconds

*Apr 11 21:34:04.137: AP image integrity check PASSED

*Apr 11 21:34:04.229: image upgrade successfully, system is now reloading
*Apr 11 21:34:04.277: %SYS-5-RELOAD: Reload requested by capwap image download p roc. Reload Reason: NEW IMAGE DOWNLOAD.
*Apr 11 21:34:04.277: %LWAPP-5-CHANGED: CAPWAP changed state to DOWN

What in other words it means that the 1602 unit ran out of space, tries to download the image, extracts it, and then reloads. The big issue is that the AP stucks in a loop while doing this. In the WLC, behavior is exactly the same like initially mentioned: 1602 unit keeps in Downloading state.

In this case will I need to erase flash or factory reset the AP? Because it says the total storage capacity is near only 32MB.

I'm gonna try for now by downgrading to 8.3.143.0, that appears to be a stable release and without needing to install a supplementary image.

[Sathiyanarayanan Ravindran]

Hi,

It seems a normal behavior, 1600 Model APs don't have a backup image compatibility. When ever you try to upgrade the code of controller AP will delete the current code and will download it from the controller then it will reboot with new Code.

Degrade will not be required, Install the supplementary image so that your issue will be fixed.

[Leo Laohoo]

Upgrade to 8.5.140.0 and see if improve things.