Catalyst 9120 access point

[Maurice Ball]

I am super smart, so I wrote erase the NVRAM on my Catalyst 9120 access point.

Could someone please provide me with the commands or where to find the instructions on how to install the OS image back on the access point?

[Leo Laohoo]

Is the AP in u-boot?

If it is, console into the AP and reboot.  Post the entire boot-up process.  
We want to see with partition the AP is booting.

[Maurice Ball]

u-boot> ?
? - alias for 'help'
base - print or set address offset
bdinfo - print Board Info structure
boardinit- Download MFG boardinit bundle and burn images to its repective location
boot - boot default, i.e., run 'bootcmd'
boot_image- Boot Image
bootd - boot default, i.e., run 'bootcmd'
bootefi - Boots an EFI payload from memory
bootelf - Boot from an ELF image in memory
booti - boot arm64 Linux Image image from memory
bootm - boot application image from memory
bootp - boot image via network using BOOTP/TFTP protocol
bootvx - Boot vxWorks from an ELF image
bubt - Burn image to NOR flash boot device
chpart - change active partition
cisco_booti- Cisco modified boot arm64 Linux Image image from memory.
cmp - memory compare
coninfo - print console devices and information
cp - memory copy
crc32 - checksum calculation
dhcp - boot image via network using DHCP/TFTP protocol
dm - Driver model low level access
echo - echo args to console
editenv - edit environment variable
env - environment handling commands
erase - erase FLASH memory
erase_nvram- Erase NVRAM
erase_persistent_data- Erase Persistent Data
exit - exit script
false - do nothing, unsuccessfully
fdt - flattened device tree utility commands
fipsalgval- run algorithm validation on test vector bibnar in memory, default:2000000 (0x02000000)
flash_image- Flash Image
flinfo - print FLASH memory information
forceboot- force boot from u-boot image
fuse - Fuse sub-system
go - start application at address 'addr'
gpio - Read/Write Gpio Pins
help - print command description/usage
i2c - I2C sub-system
iminfo - print header information for application image
imxtract- extract a part of a multi-image
itest - return true/false on integer compare
ledstate- Set Led State
loadb - load binary file over serial line (kermit mode)
loads - load S-Record file over serial line
loadx - load binary file over serial line (xmodem mode)
loady - load binary file over serial line (ymodem mode)
loop - infinite loop on address range
lzmadec - lzma uncompress a memory region
md - memory display
meminfo - display memory information
mm - memory modify (auto-incrementing address)
mtdparts- define flash/nand partitions
mw - memory write (fill)
nand - NAND sub-system
nandboot- boot Linux from NAND partition
nboot - boot from NAND device
netboot - boot Linux from network using TFTP/bootp
nfs - boot image via network using NFS protocol
nm - memory modify (constant address)
pci - list and access PCI Configuration Space
ping - send ICMP ECHO_REQUEST to network host
printenv- print environment variables
protect - enable or disable FLASH write protection
pxe - commands to get and boot from pxe files
reset - Perform RESET of the CPU
run - run commands in an environment variable
saveenv - save environment variables to persistent storage
setboardparms- Set Board Params
setbootline- Set Boot Params
setenv - set environment variables
setexpr - set environment variable as the result of eval expression
sf - SPI flash sub-system
showvar - print local hushshell variables
sleep - delay execution for some time
source - run script from memory
sspi - SPI utility command
sysboot - command to get and boot from syslinux files
test - minimal test like /bin/sh
tftpboot- boot image via network using TFTP protocol
true - do nothing, successfully
ubi - ubi commands
ubifsload- load file from an UBIFS filesystem
ubifsls - list files in a directory
ubifsmount- mount UBIFS volume
ubifsumount- unmount UBIFS volume
usb - USB sub-system
usbboot - boot from USB device
version - print monitor, compiler and linker version
u-boot>

[Leo Laohoo]

I really need to see the boot-up process.

[Maurice Ball]

Resetting CPU ...

resetting ...

Resetting board...HELO
5.0205HNDRC1a-1.0.38-163.162
CPU0
L1CD
MMUI
MMUA
CODE
ZBBS
MAIN
Boot Strap Register: 0x6fc3b
NVRAM memcfg 0x41527
DDR3-1600 CL11 total 1024MB 2 16bits part[s] %1 SSC

DDR test done successfully
CFE Version: 5
Verifying MASTER U-Boot...
Launching MASTER U-Boot version 0x0036 ...

____ _
/ ___|(_) ___ ___ ___
| | | |/ __| / __|/ _ \
| |___ | |\__ \| (__| (_) |
\____||_||___/ \___|\___/
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|

U-Boot 2017.09 (Apr 23 2020 - 21:19:10 -0700) Broadcom BCM49408

Board: SS-i
I2C: ready
DRAM: 2 GiB
enable MMU ... OK
NAND: Status wait timeout: nandsts=0x0 mask=0x40000000, count=0
NAND ECC BCH-8, page size 4096 bytes, spare size used 216 bytes
1024 MiB
MMC:
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
In: serial
Out: serial
Err: serial
Platform: 4908
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
pmc_init:PMC using DQM mode
pmc_patch_4908:7 0 ff6b0438 34d034b
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 1
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-18) : 94908SV
Number of MAC Addresses (1-32) : 10
Base MAC Address : 00:10:18:00:00:00
PSI Size (1-128) KBytes : 128
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB) : 43
buffer memory allocation (MB) : 16
DHD 0 memory allocation (MB) : 0
DHD 1 memory allocation (MB) : 0
DHD 2 memory allocation (MB) : 0
Partition 1 Size (MB) : 0M
Partition 2 Size (MB) : 0M
Partition 3 Size (MB) : 0M
Partition 4 Size (MB) (Data) : 4M

BootImage: MASTER
Found external PHY firmware image
MTDPART Str = (mtdparts=nand:1m(nvram),5888k(bootfs),-(fs))
Net: Registering Ethernet Driver.....
Broadcom BCM 4908 Ethernet driver 0.1
pmc_switch_power_up: Rgmii Tx clock zone1 enable 0 zone2 enable 0.
Setting SGMII Calibration value to 0x8
swap_pair = 1
MDIO Error: MDIO got failure status on phy 30
MDIO Error: MDIO got failure status on phy 31
*** Invalid PHY ID, Check PHY Address ***
bcm4908_eth-0
MAC: 00:10:18:00:00:00

Hit ESC key to stop autoboot: 0
Mounting UBI device fs
ubi0: attaching mtd3
Correctable ECC Error detected: addr=0x11c00400, intrCtrl=0x00000090, accessCtrl=0xC388001B
ubi0: scanning is finished
ubi0: attached mtd3 (name "mtd=2", size 1017 MiB)
ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
ubi0: good PEBs: 4069, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 6/3, WL threshold: 4096, image sequence number: 598201020
ubi0: available PEBs: 33, total reserved PEBs: 4036, PEBs reserved for bad PEB handling: 80
Load Addr 0x10000000
Mount UBIFS PARTITION part2 ...
Loading file 'part2/part.bin' to addr 0x10000000...
Error reading file 'part2/part.bin'
** File not found part2/part.bin **
Unable to load image part2/part.bin
Trying alternate partition part1
Mount UBIFS PARTITION part1 ...
"Synchronous Abort" handler, esr 0x96000021
ELR: 7fee0470
LR: 7ff0b4ec
x0 : 0000000050128180 x1 : 5879d6d91542804e
x2 : 000000007ff4b000 x3 : 000000005007ce00
x4 : 0000000050128170 x5 : 5879d6d9655501be
x6 : 0000000000000001 x7 : 0000000050166180
x8 : 000000007ff4b5b8 x9 : 000000000000000c
x10: 000000004fea8585 x11: 0000000000000000
x12: 00000000ffffffff x13: 00000000ffffffff
x14: 0000000010433ff0 x15: 0000000000000010
x16: 000000000000014a x17: 0000000000000000
x18: 000000004fea9df8 x19: 000000004febecc0
x20: 000000004febec60 x21: 0000000000000000
x22: 000000004fecb4a0 x23: 000000007ff60468
x24: 0000000000000002 x25: 0000000000000000
x26: 0000000000000000 x27: 0000000000000000
x28: 000000004fec0a60 x29: 000000004fea8290

Resetting CPU ...

resetting ...

Resetting board...HELO
5.0205HNDRC1a-1.0.38-163.162
CPU0
L1CD
MMUI
MMUA
CODE
ZBBS
MAIN
Boot Strap Register: 0x6fc3b
NVRAM memcfg 0x41527
DDR3-1600 CL11 total 1024MB 2 16bits part[s] %1 SSC

DDR test done successfully
CFE Version: 5
Verifying MASTER U-Boot...
Launching MASTER U-Boot version 0x0036 ...

[Leo Laohoo]

---

@Maurice Ball wrote:

Mount UBIFS PARTITION part2 ...

---

Cool.  That's is helpful. 

Do the following: 

setshenv BOOT part1
saveshenv

NOTE:  
If the commands "setshenv" and "saveshenv" do not work, then use "setenv" and "saveenv".  

[Maurice Ball]

I was not able to enter the commands you provided but I was able to set the following commands listed below. I rebooted the access point after entering the commands but it is still stuck in the u-boot process. 

u-boot> env set ?
u-boot> env set BOOT part1
u-boot> env save
Saving Environment to SPI Flash...
Erasing SPI flash...Writing to SPI flash...done
u-boot>

By the way thanks very much for the help.

[Leo Laohoo]

---

@Maurice Ball wrote:

u-boot> env set ?
u-boot> env set BOOT part1

---

The commands entered are incorrect.

[Rich R]

But what do the boot logs show after setting that?

[Maurice Ball]

The same as before. Don't we need to copy the OS back onto the flash drive?

DDR test done successfully
CFE Version: 5
Verifying MASTER U-Boot...
Launching MASTER U-Boot version 0x0036 ...

____ _
/ ___|(_) ___ ___ ___
| | | |/ __| / __|/ _ \
| |___ | |\__ \| (__| (_) |
\____||_||___/ \___|\___/
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|

U-Boot 2017.09 (Apr 23 2020 - 21:19:10 -0700) Broadcom BCM49408

Board: SS-i
I2C: ready
DRAM: 2 GiB
enable MMU ... OK
NAND: Status wait timeout: nandsts=0x0 mask=0x40000000, count=0
NAND ECC BCH-8, page size 4096 bytes, spare size used 216 bytes
1024 MiB
MMC:
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
In: serial
Out: serial
Err: serial
Platform: 4908
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
pmc_init:PMC using DQM mode
pmc_patch_4908:7 0 ff900438 3500352
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 3
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-18) : 94908SV
Number of MAC Addresses (1-32) : 10
Base MAC Address : 00:10:18:00:00:00
PSI Size (1-128) KBytes : 128
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB) : 43
buffer memory allocation (MB) : 16
DHD 0 memory allocation (MB) : 0
DHD 1 memory allocation (MB) : 0
DHD 2 memory allocation (MB) : 0
Partition 1 Size (MB) : 0M
Partition 2 Size (MB) : 0M
Partition 3 Size (MB) : 0M
Partition 4 Size (MB) (Data) : 4M

BootImage: MASTER
Found external PHY firmware image
MTDPART Str = (mtdparts=nand:1m(nvram),5888k(bootfs),-(fs))
Net: Registering Ethernet Driver.....
Broadcom BCM 4908 Ethernet driver 0.1
pmc_switch_power_up: Rgmii Tx clock zone1 enable 0 zone2 enable 0.
Setting SGMII Calibration value to 0x8
swap_pair = 1
MDIO Error: MDIO got failure status on phy 30
MDIO Error: MDIO got failure status on phy 31
*** Invalid PHY ID, Check PHY Address ***
bcm4908_eth-0
MAC: 00:10:18:00:00:00

Hit ESC key to stop autoboot: 0
Mounting UBI device fs
ubi0: attaching mtd3
Correctable ECC Error detected: addr=0x11c00400, intrCtrl=0x00000090, accessCtrl=0xC388001B
ubi0: scanning is finished
ubi0: attached mtd3 (name "mtd=2", size 1017 MiB)
ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
ubi0: good PEBs: 4069, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 6/3, WL threshold: 4096, image sequence number: 598201020
ubi0: available PEBs: 33, total reserved PEBs: 4036, PEBs reserved for bad PEB handling: 80
Load Addr 0x10000000
Mount UBIFS PARTITION part1 ...
Loading file 'part1/part.bin' to addr 0x10000000...
Correctable ECC Error detected: addr=0xabda00, intrCtrl=0x00000090, accessCtrl=0xC388001B
Error reading file 'part1/part.bin'
** File not found part1/part.bin **
Unable to load image part1/part.bin
Trying alternate partition part2
Mount UBIFS PARTITION part2 ...
"Synchronous Abort" handler, esr 0x96000021
ELR: 7fee0470
LR: 7ff0b4ec
x0 : 0000000050128180 x1 : aff3bf62e97665c6
x2 : 000000007ff4b000 x3 : 0000000050071280
x4 : 0000000050128170 x5 : aff3bf633988e736
x6 : 0000000000000000 x7 : 0000000050166180
x8 : 000000007ff4b5b8 x9 : 000000000000000c
x10: 000000004fea8585 x11: 0000000000000000
x12: 00000000ffffffff x13: 00000000ffffffff
x14: 00000000ffffffff x15: 0000000000000008
x16: 000000000000000a x17: 0000000000000000
x18: 000000004fea9df8 x19: 000000004febecc0
x20: 000000004febf8a0 x21: 0000000000000000
x22: 000000004fecb4a0 x23: 000000007ff60468
x24: 0000000000000002 x25: 0000000000000000
x26: 0000000000000000 x27: 0000000000000000
x28: 000000004fec0a60 x29: 000000004fea8290

Resetting CPU ...

resetting ...

Resetting board...HELO
5.0205HNDRC1a-1.0.38-163.162
CPU0
L1CD
MMUI
MMUA
CODE
ZBBS
MAIN
Boot Strap Register: 0x6fc3b
NVRAM memcfg 0x41527
DDR3-1600 CL11 total 1024MB 2 16bits part[s] %1 SSC

DDR test done successfully
CFE Version: 5
Verifying MASTER U-Boot...
Launching MASTER U-Boot version 0x0036 ...

____ _
/ ___|(_) ___ ___ ___
| | | |/ __| / __|/ _ \
| |___ | |\__ \| (__| (_) |
\____||_||___/ \___|\___/
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|

U-Boot 2017.09 (Apr 23 2020 - 21:19:10 -0700) Broadcom BCM49408

Board: SS-i
I2C: ready
DRAM: 2 GiB
enable MMU ... OK
NAND: Status wait timeout: nandsts=0x0 mask=0x40000000, count=0
NAND ECC BCH-8, page size 4096 bytes, spare size used 216 bytes
1024 MiB
MMC:
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
In: serial
Out: serial
Err: serial
Platform: 4908
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
pmc_init:PMC using DQM mode
pmc_patch_4908:7 0 ff6e0438 3520352
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.100
Gateway IP address :
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 3
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-18) : 94908SV
Number of MAC Addresses (1-32) : 10
Base MAC Address : 00:10:18:00:00:00
PSI Size (1-128) KBytes : 128
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB) : 43
buffer memory allocation (MB) : 16
DHD 0 memory allocation (MB) : 0
DHD 1 memory allocation (MB) : 0
DHD 2 memory allocation (MB) : 0
Partition 1 Size (MB) : 0M
Partition 2 Size (MB) : 0M
Partition 3 Size (MB) : 0M
Partition 4 Size (MB) (Data) : 4M

BootImage: MASTER
Found external PHY firmware image
MTDPART Str = (mtdparts=nand:1m(nvram),5888k(bootfs),-(fs))
Net: Registering Ethernet Driver.....
Broadcom BCM 4908 Ethernet driver 0.1
pmc_switch_power_up: Rgmii Tx clock zone1 enable 0 zone2 enable 0.
Setting SGMII Calibration value to 0x8
swap_pair = 1
MDIO Error: MDIO got failure status on phy 30
MDIO Error: MDIO got failure status on phy 31
*** Invalid PHY ID, Check PHY Address ***
bcm4908_eth-0
MAC: 00:10:18:00:00:00

Hit ESC key to stop autoboot: 0
u-boot>

[Leo Laohoo]

---

@Maurice Ball wrote:

Loading file 'part1/part.bin' to addr 0x10000000...
Correctable ECC Error detected: addr=0xabda00, intrCtrl=0x00000090, accessCtrl=0xC388001B
Error reading file 'part1/part.bin'
** File not found part1/part.bin **
Unable to load image part1/part.bin
Trying alternate partition part2
Mount UBIFS PARTITION part2 ...
"Synchronous Abort" handler, esr 0x96000021
ELR: 7fee0470
LR: 7ff0b4ec
x0 : 0000000050128180 x1 : aff3bf62e97665c6
x2 : 000000007ff4b000 x3 : 0000000050071280
x4 : 0000000050128170 x5 : aff3bf633988e736
x6 : 0000000000000000 x7 : 0000000050166180
x8 : 000000007ff4b5b8 x9 : 000000000000000c
x10: 000000004fea8585 x11: 0000000000000000
x12: 00000000ffffffff x13: 00000000ffffffff
x14: 00000000ffffffff x15: 0000000000000008
x16: 000000000000000a x17: 0000000000000000
x18: 000000004fea9df8 x19: 000000004febecc0
x20: 000000004febf8a0 x21: 0000000000000000
x22: 000000004fecb4a0 x23: 000000007ff60468
x24: 0000000000000002 x25: 0000000000000000
x26: 0000000000000000 x27: 0000000000000000
x28: 000000004fec0a60 x29: 000000004fea8290

---

RMA the AP.  The flash is dead.

[Moamen.Elsayed]

did you find any solution ?

[Rich R]

Follow https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9120axi-access-point/217537-repairing-c9120-c9115-access-points-from.html

If that doesn't work then your only option is RMA.