Converting AP4800 from CAPWAP to ME

[benjmoor]

Alright community - SAVE ME!  I've been looking through all of the documentation and I'm stumped.  How do I convert a CAPWAP 4800 to mobility express?  I've looked through this: https://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/810/release_notes/b_ME_RN_810.html#me-supp-ap

and it says it is supported and I've downloaded the correct tar file and issued:

ap-type mobility-express tftp://10.72.222.55/AIR-AP4800-K9-ME-8-10-105-0.tar

I get:

Starting the ME image download...
It may take a few minutes to finish download.
If it is longer, please abort command, check network connection and try again

curl: (71) Error
transfer command failed
Image transfer failed. Please try again

I am sure that the TFTP process is correct because I put another AP on the same subnet and downloaded another image from the same TFTP server without an issue.  I'm looking at this:

https://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/810/user_guide/b_ME_User_Guide_810/about_mob_exp.html

and it appears that the 4800 is not supported as mobility express?  So which is it?

[Leo Laohoo]

What is the current firmware of the AP?

[benjmoor]

sho ver
Restricted Rights Legend

Use, duplication, or disclosure by the Government is subject to
restrictions as set forth in subparagraph (c) of the Commercial
Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and
subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

This product contains some software licensed under the
"GNU General Public License, version 2" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

This product contains some software licensed under the
"GNU Library General Public License, version 2" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Library
General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html

This product contains some software licensed under the
"GNU Lesser General Public License, version 2.1" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser
General Public License, version 2.1", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

This product contains some software licensed under the
"GNU General Public License, version 3" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, Version 3", available here:
http://www.gnu.org/licenses/gpl.html.

This product contains some software licensed under the
"GNU Affero General Public License, version 3" provided
with ABSOLUTELY NO WARRANTY under the terms of
"GNU Affero General Public License, version 3", available here:
http://www.gnu.org/licenses/agpl-3.0.html.

Cisco AP Software, (ap3g3), C4800, RELEASE SOFTWARE
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Thu May 24 12:50:23 PDT 2018

ROM: Bootstrap program is U-Boot boot loader
BOOTLDR: U-Boot boot loader Version 2013.01-gacaad15 (Aug 18 2019 - 20:12:19)

AP10B3.D6D2.434E uptime is 0 days, 0 hours, 49 minutes
Last reload time : Wed Nov 6 23:43:28 UTC 2019
Last reload reason : reload command

cisco AIR-AP4800-B-K9 ARMv7 Processor rev 1 (v7l) with 1028396/613476K bytes of memory.
Processor board ID FCW2334PFT0
AP Running Image : 8.7.106.0
Primary Boot Image : 8.7.106.0
Backup Boot Image : 0.0.0.0
Primary Boot Image Hash:
Backup Boot Image Hash:
1 Multigigabit Ethernet interfaces
1 Gigabit Ethernet interfaces
3 802.11 Radios
Radio Driver version : 9.0.5.5-W8964
Radio FW version : 9.1.8.1
NSS FW version : 2.4.23

Base ethernet MAC Address : 10:B3:D6:D2:43:4E
Part Number : 73-018776-02
PCA Assembly Number : 000-00000-00
PCA Revision Number :
PCB Serial Number : FOC23327EYK
Top Assembly Part Number : 068-100732-01
Top Assembly Serial Number : FCW2334PFT0
Top Revision Number : B0
Product/Model Number : AIR-AP4800-B-K9

[Haydn Andrews]

Hi Benjmoor

If the AP is an ME AP you should see in the show version:

cisco AIR-AP1852E-UXK9 ARMv7 Processor rev 0 (v71) with 997184/525160K bytes of memory.
Processor board ID RFDP2BCR021
AP Running Image : 8.2.100.0
Primary Boot Image : 8.2.100.0
Backup Boot Image : 8.1.106.33
AP Image type : MOBILITY EXPRESS IMAGE
AP Configuration : MOBILITY EXPRESS CAPABLE
0 Gigabit Ethernet interfaces
0 802.11 Radios
Radio FW version . 1401b63d12113073a3C08aa67f0c039c0
NSS FW version : NSS.AK.1.0.c4-0Z026-E_cust C-1.24160

Given your not seeing it i'm guessing maybe the datasheet is not correct, or the version of that 4800 doesn't support it.

Since I see your a Cisco Employee might be easier for you to reach out to one of the Wireless SEs or TMEs and ask

[Haydn Andrews · Accepted solution]

From the 4800 data sheet it says it can be a ME controller:

https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-4800-access-point/nb-09-air-4800-acces-ds-cte.html

Your commands look correct.

Can you try using ftp instead of TFTP - have found sometimes TFTP struggles with large transfers

Do a show version and see if it says 

AP Image type : MOBILITY EXPRESS IMAGE
AP Configuration : MOBILITY EXPRESS CAPABLE

Then its already converted

[benjmoor]

Definitely the FTP vs TFTP - little did I know that was even an option.  Thanks for the assistance!

[karlen]

I have a similar problem when converting from 8.7.106.0 CAPWAP to 8-10-190-0 ME
Error: Image update failed

sho ver
memory. -AP4800-E-K9 ARMv7 Processor rev 1 (v7l) with 1028396/636140K bytes of --More--
Processor board ID FCW2343PLWW
AP Running Image : 8.7.106.0
Primary Boot Image : 8.7.106.0
Backup Boot Image : 0.0.0.0
Primary Boot Image Hash:
Backup Boot Image Hash:
1 Multigigabit Ethernet interfaces
1 Gigabit Ethernet interfaces
3 802.11 Radios
Radio Driver version : 9.0.5.5-W8964
Radio FW version : 9.1.8.1
NSS FW version : 2.4.23

Base ethernet MAC Address : 7C:21:0E:AB:DA:A4
Part Number : 0-000000-00
PCA Assembly Number : 800-106461-01
PCA Revision Number : A0
PCB Serial Number : FOC23423AZZ
Top Assembly Part Number : 800-106461-01
Top Assembly Serial Number : FCW2343PLWW
Top Revision Number : A0
Product/Model Number : AIR-AP4800-E-K9

ap-type mobility-express tftp://10.0.0.1/AIR-AP4800-K9-ME-8-10-190-0.tar
Starting the ME image download...
It may take a few minutes to finish download.
If it is longer, please abort command, check network connection and try again
######################################### 57.5%[*10/28/2019 02:05:16.8636]
[*10/28/2019 02:05:16.8636] CAPWAP State: Discovery
[*10/28/2019 02:05:16.8679] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
######################################################################## 100.0%
Image transfer complete.
Image downloaded, writing to flash...
do CHECK_ME, part1 is active part
Image signing verify success.
upgrade.sh: part to upgrade is part2
tar: write error: No space left on device
upgrade.sh: Command "tar -xf /tmp/part.tar -C /bootpart/part2" failed.
upgrade.sh: df /bootpart/part2
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/ubivol/part2 58604 58596 8 100% /bootpart
upgrade.sh: du -h /bootpart/part2
0 /bootpart/part2
upgrade.sh: Writing image to disk...
upgrade.sh: Extract image failed.
+ do_upgrade CHECK_ME
+ [ ! -r /tmp/part.tar ]
+ [ 1 -lt 3 ]
+ local base_vol=/dev/ubivol
+ local action=CHECK_ME
+ cat /MERAKI_BOARD
+ local board=barbados
+ get_activepart
+ get_activepart_real
+ cat /proc/cmdline
+ local kcmdline=console=ttyS0,9600 activepart=part1 activeboot=0 bootver=0x14a boardid=0x26 nss_emac_map=0x3 wired0=0 phy0=mv2010 nfcConfig=4bitecc mtdparts=armada-nand:1m(oops),1m(reserved),-(fs) ubi.mtd=fs wired1=1 phy1=mvl crashkernel=500M-:128M@128M usbcore.authorized_default=0
+ echo console=ttyS0,9600
+ grep activepart
+ echo activepart=part1
+ grep activepart
+ echo activepart=part1
+ awk -F= {print $2}
+ echo activeboot=0
+ grep activepart
+ echo bootver=0x14a
+ grep activepart
+ echo boardid=0x26
+ grep activepart
+ echo nss_emac_map=0x3
+ grep activepart
+ echo wired0=0
+ grep activepart
+ echo phy0=mv2010
+ grep activepart
+ echo nfcConfig=4bitecc
+ grep activepart
+ echo mtdparts=armada-nand:1m(oops),1m(reserved),-(fs)
+ grep activepart
+ echo ubi.mtd=fs
+ grep activepart
+ echo wired1=1
+ grep activepart
+ echo phy1=mvl
+ grep activepart
+ echo crashkernel=500M-:128M@128M
+ grep activepart
+ echo usbcore.authorized_default=0
+ grep activepart
+ local part_active=part1
+ [ part1 != part1 -a part1 != part2 ]
+ echo part1
+ local active_part=part1
+ get_alternateboot part1
+ [ part1 == part2 ]
+ echo part2
+ local part_to_upgrade=part2
+ local eff_upgrade_master=false
+ local tftp_image_vers=
+ local skip_img_sign_verify=false
+ local skip_boot_upgrade=false
+ echo
+ tr , \n
+ echo dangerous 10355
+ sync
+ cd /tmp
+ [ barbados == barbados ]
+ tar -xf /tmp/part.tar info.ver info btldr.img setenv.gz
+ plat_is_bootloader_dev_version
+ cat /var/platform/bootloader_raw_version
+ local RAW_VERSION=0x14a
+ echo 0
+ [ 0 -ne 0 ]
+ [ CHECK_ME == CHECK_ME ]
+ tar -xvf /tmp/part.tar me_image
+ check_me
+ [ ! -r me_image ]
+ get_capwap_version
+ [ 0 -lt 1 ]
+ local version_file=/tmp/info.ver
+ [ -f /tmp/info.ver ]
+ grep ^ws_management_version /tmp/info.ver
+ sed s/.*: //g
+ echo 8.10.190.0
+ local capwap_version=8.10.190.0
+ /usr/sbin/getoffset /tmp/part.tar part.bin
+ local fileoffset= Filename part.bin Offset 62530560 Length 6385465 Errorcode 0
+ echo Filename part.bin Offset 62530560 Length 6385465 Errorcode 0
+ cut -f4 -d
+ local partfileoffset=62530560
+ echo Filename part.bin Offset 62530560 Length 6385465 Errorcode 0
+ cut -f6 -d
+ local partfilesize=6385465
+ echo Filename part.bin Offset 62530560 Length 6385465 Errorcode 0
+ cut -f8 -d
+ local errorcode=0
+ [[ 0 -ne 0 ]]
+ [ false != true ]
+ image_signing_verify 62530560
+ [ ! -r /tmp/part.tar ]
+ /usr/sbin/verify /tmp/part.tar part.bin
+ local retval= Filename part.bin Offset 62530560 Length 6385465 Errorcode 0
Verify returns 0
+ echo Filename part.bin Offset 62530560 Length 6385465 Errorcode 0 Verify returns 0
+ cut -f8 -d
+ local errorcode=0
+ [[ 0 -eq 0 ]]
+ echo Image signing verify success.
Image signing verify success.
+ return 0
+ local ret=0
+ [ 0 -ne 0 ]
+ [ false != true ]
+ [ barbados == barbados -a -e /usr/bin/btldr_upgrade ]
+ [ -f /lib/firmware/btldr.img ]
+ [ -f /lib/firmware/setenv.gz ]
+ barbados_boot_upgrade
+ plat_get_bootloader_booted
+ cat /var/platform/bootloader_booted
+ local BOOTED=0
+ plat_get_bootloader_version
+ cat /var/platform/bootloader_version
+ local BOOTVER=0x14a
+ [ /tmp != /tmp ]
+ [ -f btldr.img -a ! -z 0 -a ! -z 0x14a ]
+ [ -f setenv.gz ]
+ [ 1 -eq 0 ]
+ local CLEAR_ENV_FLAG=
+ local ENVUTIL=/usr/bin/shared_printenv
+ local NEW_ENVUTIL=./setenv
+ [ -e /usr/bin/shared_printenv -a -e ./setenv ]
+ /usr/bin/btldr_upgrade -b 0 -v 0x14a btldr.img
+ [ 0 -ne 0 ]
+ loudlog part to upgrade is part2
+ logger -p 0 -t upgrade part to upgrade is part2
+ pgrep switchdrvr
+ local pids=
+ [ -z ]
+ echo upgrade.sh: part to upgrade is part2
upgrade.sh: part to upgrade is part2
+ [ barbados == barbados ]
+ is_retry_allowed UPGRADE_8.10.190.0
+ local count_fname=/storage/UPGRADE_8.10.190.0_COUNT
+ cat /storage/UPGRADE_8.10.190.0_COUNT
+ local count=1
+ [ 1 -lt 3 ]
+ return 1
+ [ 1 -ne 1 ]
+ inc_retry_count UPGRADE_8.10.190.0
+ local count_fname=/storage/UPGRADE_8.10.190.0_COUNT
+ cat /storage/UPGRADE_8.10.190.0_COUNT
+ local count=1
+ [ 1 -le 0 ]
+ echo 2
+ clear_retry_count ACTIVATE
+ local count_fname=/storage/ACTIVATE_COUNT
+ rm -f /storage/ACTIVATE_COUNT
+ /usr/bin/resize_partitions.sh part2
+ extract_image_barbados /tmp/part.tar part2 /dev/ubivol
+ local extract_dir=/bootpart/part2[*10/28/2019 02:05:41.6164] PNP:Server not reachable, Start CAPWAP Discovery
[*10/28/2019 02:05:41.6164]
[*10/28/2019 02:05:41.6164] Lost connection to the controller, going to restart CAPWAP...
[*10/28/2019 02:05:41.6164]

[*10/28/2019 02:05:41.6165] Restarting CAPWAP State Machine.
[*10/28/2019 02:05:41.7214] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Discovery(2).
[*10/28/2019 02:05:41.7230]
[*10/28/2019 02:05:41.7230] CAPWAP State: DTLS Teardown
+ mount_boot_partition part2 /dev/ubivol
+ mkdir -p /bootpart
+ umount /bootpart
+ mount -t ubifs /dev/ubivol/part2 /bootpart
+ [ 0 -ne 0 ]
+ [ ! -d /bootpart/part2 ]
+ return 0
+ rm -rf /bootpart/part2/btldr_duplo_plus.img /bootpart/part2/file_hashes /bootpart/part2/final_hash /bootpart/part2/info /bootpart/part2/me_image /bootpart/part2/ramfs_data_cisco.cpio.lzma
+ tar -xf /tmp/part.tar -C /bootpart/part2
[*10/28/2019 02:05:56.5567]
[*10/28/2019 02:05:56.5567] CAPWAP State: Discovery
[*10/28/2019 02:05:56.5617] Discovery Request sent to 255.255.255.255, discovery type UNKNOWN(0)
tar: write error: No space left on device
+ status=1
+ [ 1 -ne 0 ]
+ loudlog Command "tar -xf /tmp/part.tar -C /bootpart/part2" failed.
+ logger -p 0 -t upgrade Command "tar -xf /tmp/part.tar -C /bootpart/part2" failed.
+ pgrep switchdrvr
+ local pids=
+ [ -z ]
+ echo upgrade.sh: Command "tar -xf /tmp/part.tar -C /bootpart/part2" failed.
upgrade.sh: Command "tar -xf /tmp/part.tar -C /bootpart/part2" failed.
+ loudlog df /bootpart/part2
+ logger -p 0 -t upgrade df /bootpart/part2
+ pgrep switchdrvr
+ local pids=
+ [ -z ]
+ echo upgrade.sh: df /bootpart/part2
upgrade.sh: df /bootpart/part2
+ df /bootpart/part2
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/ubivol/part2 58604 58600 4 100% /bootpart
+ loudlog du -h /bootpart/part2
+ logger -p 0 -t upgrade du -h /bootpart/part2
+ pgrep switchdrvr
+ local pids=
+ [ -z ]
+ echo upgrade.sh: du -h /bootpart/part2
upgrade.sh: du -h /bootpart/part2
+ du -h /bootpart/part2
0 /bootpart/part2
+ loudlog Writing image to disk...
+ logger -p 0 -t upgrade Writing image to disk...
+ pgrep switchdrvr
+ local pids=
+ [ -z ]
+ echo upgrade.sh: Writing image to disk...
upgrade.sh: Writing image to disk...
+ cat /proc/sys/kernel/hung_task_timeout_secs
+ local timeout=120
+ [ 120 -gt 0 ]
+ echo 1200
+ sync
+ echo 120
+ umount /bootpart
+ return 1
+ local status=1
+ [ 1 -ne 0 ]
+ loudlog Extract image failed.
+ logger -p 0 -t upgrade Extract image failed.
+ pgrep switchdrvr
+ local pids=
+ [ -z ]
+ echo upgrade.sh: Extract image failed.
upgrade.sh: Extract image failed.
+ return 1
+ status=1
+ set +x
Error: Image update failed.

[Rich R]

Always update the AP to the latest CAPWAP image before converting to ME.

So in your case: https://software.cisco.com/download/home/286319691/type/286288051/release/15.3.3-JK10

Also you will see the solution to the original problem was to use FTP not TFTP but you have still used TFTP!
Try using FTP.