Error downloading image from 5508 to 3602

[David Ritter]

I have a 3602 (maybe 2) that fail to load

Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-xx.153-3.JD5'

Error loading "flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-xx.153-3.JD5"

I have dir

ap: dir flash:/ap3g2-k9w8-mx.153-3.JD5
Directory of flash:/ap3g2-k9w8-mx.153-3.JD5/

6    -rwx  8176      <date>               U2.bin
8    -rwx  15184     <date>               F2.bin
11   -rwx  7973      <date>               file_hashes
12   -rwx  591317    <date>               8006.img
7    -rwx  2333      <date>               B5.bin
14   -rwx  1371      <date>               img_sign_rel_sha2.cert
15   -rwx  2213      <date>               E5.bin
17   -rwx  7008      <date>               Y2.bin
18   -rwx  512       <date>               final_hash.sig
19   -rwx  288       <date>               info
20   -rwx  8799      <date>               MCU.bin
21   -rwx  5840      <date>               HA2.bin
22   -rwx  141       <date>               final_hash
23   -rwx  4813      <date>               R5.bin
24   -rwx  16352     <date>               X2.bin
25   -rwx  1916      <date>               X5.bin
26   -rwx  2460      <date>               triggerfish_cpld.img
27   drwx  64        <date>               html
90   -rwx  8176      <date>               Q2.bin
91   -rwx  4220      <date>               F5.bin
92   -rwx  0         <date>               ap3g2-k9w8-xx.153-3.JD5
93   -rwx  12848     <date>               V2.bin
94   -rwx  215867    <date>               ap3g2-k9w8-mx.153-3.JD5
13   -rwx  2049      <date>               HA5.bin
96   -rwx  190140    <date>               ap3g2-bl-2600
97   -rwx  21024     <date>               C2.bin
98   -rwx  3609      <date>               U5.bin
99   -rwx  189183    <date>               ap3g2-bl-3600
95   -rwx  15184     <date>               R2.bin
122  -rwx  18818     <date>               uart_firmware_upgrade.bin
123  -rwx  73        <date>               ap3g2-k9w8-tx.153-3.JD5
124  -rwx  1875      <date>               Y5.bin
125  -rwx  572107    <date>               8004.img
100  -rwx  16146     <date>               C5.bin
134  -rwx  1375      <date>               img_sign_rel.cert
135  -rwx  514       <date>               V5.bin
136  -rwx  10512     <date>               B2.bin
137  -rwx  4235      <date>               Q5.bin
138  -rwx  19856     <date>               E2.bin

29114368 bytes available (2883584 bytes used)
ap:

when I change the target boot file the the -mx rather than -xx the result is the same.

How do I push an fresh image from my TFTP: server?

[Flavio Miranda]

Hi

 Should be archive download-sw /force-reload /overwrite tftp://x.x.x./xxxx.tar

Doesn't work or didn't try?

[David Ritter]

no archive command in an AP

ap: ?
           ? -- Present list of available commands
         arp -- Show arp table or arp-resolve an address
        boot -- Load and boot an executable image
         cat -- Concatenate (type) file(s)
 clear_ether -- clear ethernet port statistics
        copy -- Copy a file
      delete -- Delete file(s)
         dir -- List files in directories
   dump_regs -- dump reset registers
       etest -- test emac driver code
  ether_init -- initialize ethernet port
  flash_init -- Initialize flash filesystem(s)
      format -- Format a filesystem
        fsck -- Check filesystem consistency
        help -- Present list of available commands
    init_pci -- initialize pci bridge
    led_test -- cycle LED patterns
 load_helper -- Load and initialize a helper image
      memory -- Present memory heap utilization information
       mkdir -- Create dir(s)
        more -- Concatenate (display) file(s)
      rename -- Rename a file
       reset -- Reset the system
       rmdir -- Delete empty dir(s)
         set -- Set or display environment variables
    set_baud -- set baud rates
   set_sleep -- Pause (sleep) for a specified number of seconds
  show_ether -- show ethernet port statistics
    show_pci -- show pci setting
      switch -- report push button switch status
         tar -- extract or listing a tar file
   tftp_init -- Initialize tftp file system
        type -- Concatenate (type) file(s)
       unset -- Unset one or more environment variables
     version -- Display boot loader version
ap:

and the wlc has no awareness of the ap's presents..

[Flavio Miranda]

Take a look here:

https://supportforums.cisco.com/t5/wireless-mobility-documents/access-point-rommon-recovery-ap-prompt-recovery-example/ta-p/3119495

[Leo Laohoo]

---

@Flavio Miranda wrote:

archive download-sw /force-reload /overwrite tftp://x.x.x./xxxx.tar

---

When dealing with APs, exercise caution when using the "download-sw" option.  In some cases, this will cause the AP to crash (no Traceback generated). 

The best way is to use the "archive tar /x tftp://<TFTP IP address>/IOS_filename.tar flash:".

[Leo Laohoo]

Can you post the entire boot-up process? I want to see what error messages are generated. In 8.3 and 8.5 there are AP firmwares that would corrupt itself and the only way to go around this is to force the AP to boot the recovery image.

[David Ritter]

Leo, here be the entire boot output:

flashfs[0]: 77 files, 10 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 3012096
flashfs[0]: Bytes available: 28985856
flashfs[0]: flashfs fsck took 13 seconds.
Reading cookie from SEEPROM
Base Ethernet MAC address: f0:f7:55:ae:a1:d0
Ethernet speed is 1000 Mb - FULL Duplex
Loading "flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-mx.153-3.JD5"...#########################

File "flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-mx.153-3.JD5" uncompressed and installed, entry point: 0x2003000
executing...

Secondary Bootloader - Starting system.
Tide MB - 32MB of flash
Xmodem file system is available.
flashfs[0]: 77 files, 10 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 31997952
flashfs[0]: Bytes used: 3012096
flashfs[0]: Bytes available: 28985856
flashfs[0]: flashfs fsck took 8 seconds.
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 12257280
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 12256256
flashfs[1]: flashfs fsck took 0 seconds.
Base Ethernet MAC address: f0:f7:55:ae:a1:d0

2600/3600 AP, PID: 'AIR-CAP3602I-A-K9 '. Checking for BL upgrade...
BL: C3600 Boot Loader (AP3G2-BOOT-M) LoaderVersion 12.4(23)JY, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Compiled Thu 03-Oct-13 03:35 by sdcunha

BL Build year: 13
Boot CMD: 'boot  flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-xx.153-3.JD5'
Loading "flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-xx.153-3.JD5"...flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-xx.153-3.JD5: short read: bad mzip file

Error loading "flash:/ap3g2-k9w8-mx.153-3.JD5/ap3g2-k9w8-xx.153-3.JD5"

Interrupt within 5 seconds to abort boot process.
Boot process failed...

The system is unable to boot automatically.  The BOOT
environment variable needs to be set to a bootable
image.

C3600 Boot Loader (AP3G2-BOOT-M) LoaderVersion 12.4(23)JY, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Compiled Thu 03-Oct-13 03:35 by sdcunha
ap:

the device does not pull a IP and does NOT present a MAC to the attached 3750G switch.

the switch only registers interface connect and poe delivery, Ieee PD 15.4 w

[David Ritter]

Directory of flash:/

2 drwx 0 <date> configs
3 -rwx 58361 <date> event.log
4 -rwx 785 <date> lwapp_mobileconcierge.cfg
135 drwx 0 <date> update
9 -rwx 64 <date> sensord_CSPRNG1
10 -rwx 64 <date> sensord_CSPRNG0
16 drwx 576 <date> ap3g2-k9w8-mx.153-3.JD4
38 -rwx 128343 <date> event.r0
41 -rwx 146 <date> capwap-saved-config
97 -rwx 12312 <date> private-multiple-fs
101 -rwx 0 <date> config.txt
5 drwx 2496 <date> ap3g2-k9w8-mx.153-3.JD5
128 -rwx 146 <date> capwap-saved-config-bak
129 -rwx 0 <date> ce
119 -rwx 343 <date> env_vars

28985856 bytes available (3012096 bytes used)
ap:

I tried booting the other image with out success.

My take is that without an L2 (MAC) reply to the switch, this device is not recoverable.

[Leo Laohoo]

---

@David Ritter wrote:
bad mzip file

---

This looks like the IOS file is corrupt. 

Try to force upload the recovery image using the console port (HERE).

[David Ritter]

For the sake of discussion, I will mark your solution as good...
However, it does relie upon a function Ether_PHY chip. I can't get a heartbeat out of the AP plugged into my laptop.. 192.168.100.100 for the AP and 192.168.100.1 on the LT..
I concur with the corrupt IOS files.. neither image will load.
I get link lights on the switch but no mac handoff.
Thank you for the guidance

[Leo Laohoo · Accepted solution]

I have seen strange things happening. Some even in ROMmon. Recently, I just witnessed when the AP (in ROMmon) can't ping the default gateway. After about 30 minutes of cursing, we rebooted the AP. Copy-n-pasted the same commands in ... and works. We all looked at each other with a "WTF" look.

[David Ritter]

The boot cmd in my good units running .JD11 is:
Boot CMD: 'boot flash:/ap3g2-k9w8-mx.153-3.JD11/ap3g2-k9w8-xx.153-3.JD11;flash:/ap3g2-k9w8-mx.153-3.JD8/ap3g2-k9w8-xx.153-3.JD8'
Loading "flash:/ap3g2-k9w8-mx.153-3.JD11/ap3g2-k9w8-xx.153-3.JD11"...##################################################
File "flash:/ap3g2-k9w8-mx.153-3.JD11/ap3g2-k9w8-xx.153-3.JD11" uncompressed and installed, entry point: 0x1003000
executing...
The dir shows:
VIS.EOC.FA.AP05.d4bf#dir flash:/ap3g2-k9w8-mx.153-3.JD11
Directory of flash:/ap3g2-k9w8-mx.153-3.JD11/

64 -rwx 8176 Nov 9 2017 23:13:34 +00:00 U2.bin
65 -rwx 15184 Nov 9 2017 23:13:34 +00:00 F2.bin
66 -rwx 7976 Nov 9 2017 23:13:34 +00:00 file_hashes
67 -rwx 591738 Nov 9 2017 23:13:52 +00:00 8006.img
68 -rwx 2333 Nov 9 2017 23:13:52 +00:00 B5.bin
69 -rwx 1371 Nov 9 2017 23:13:52 +00:00 img_sign_rel_sha2.cert
70 -rwx 2213 Nov 9 2017 23:13:52 +00:00 E5.bin
71 -rwx 7008 Nov 9 2017 23:13:52 +00:00 Y2.bin
72 -rwx 512 Nov 9 2017 23:13:52 +00:00 final_hash.sig
73 -rwx 291 Nov 9 2017 23:13:53 +00:00 info
74 -rwx 8799 Nov 9 2017 23:13:53 +00:00 MCU.bin
75 -rwx 5840 Nov 9 2017 23:13:53 +00:00 HA2.bin
76 -rwx 141 Nov 9 2017 23:13:53 +00:00 final_hash
77 -rwx 4547 Nov 9 2017 23:13:53 +00:00 R5.bin
78 -rwx 16352 Nov 9 2017 23:13:53 +00:00 X2.bin
79 -rwx 1916 Nov 9 2017 23:13:53 +00:00 X5.bin
80 -rwx 2460 Nov 9 2017 23:13:54 +00:00 triggerfish_cpld.img
81 drwx 64 Nov 9 2017 23:13:54 +00:00 html
105 -rwx 8176 Nov 9 2017 23:14:01 +00:00 Q2.bin
106 -rwx 73 Nov 9 2017 23:14:01 +00:00 ap3g2-k9w8-tx.153-3.JD11
107 -rwx 4220 Nov 9 2017 23:14:01 +00:00 F5.bin
108 -rwx 12848 Nov 9 2017 23:14:02 +00:00 V2.bin
109 -rwx 2049 Nov 9 2017 23:14:02 +00:00 HA5.bin
110 -rwx 190140 Nov 9 2017 23:14:08 +00:00 ap3g2-bl-2600
111 -rwx 215867 Nov 9 2017 23:14:16 +00:00 ap3g2-k9w8-mx.153-3.JD11
112 -rwx 30368 Nov 9 2017 23:14:17 +00:00 C2.bin
113 -rwx 3609 Nov 9 2017 23:14:17 +00:00 U5.bin
114 -rwx 189183 Nov 9 2017 23:14:24 +00:00 ap3g2-bl-3600
115 -rwx 15184 Nov 9 2017 23:14:24 +00:00 R2.bin
116 -rwx 13071435 Nov 9 2017 23:23:22 +00:00 ap3g2-k9w8-xx.153-3.JD11
117 -rwx 18818 Nov 9 2017 23:23:26 +00:00 uart_firmware_upgrade.bin
118 -rwx 1875 Nov 9 2017 23:23:26 +00:00 Y5.bin
119 -rwx 571913 Nov 9 2017 23:25:01 +00:00 8004.img
127 -rwx 16361 Nov 9 2017 23:25:05 +00:00 C5.bin
128 -rwx 1375 Nov 9 2017 23:25:05 +00:00 img_sign_rel.cert
129 -rwx 514 Nov 9 2017 23:25:05 +00:00 V5.bin
130 -rwx 10512 Nov 9 2017 23:25:07 +00:00 B2.bin
131 -rwx 3957 Nov 9 2017 23:25:07 +00:00 Q5.bin
132 -rwx 19856 Nov 9 2017 23:25:11 +00:00 E2.bin

31739904 bytes total (1184768 bytes free)

in all the GOOD units (running .JD11) the -xx. file is
116 -rwx 13071435 Nov 9 2017 23:23:22 +00:00 ap3g2-k9w8-xx.153-3.JD11
in the Bad units the file size is zero
92 -rwx 0 <date> ap3g2-k9w8-xx.153-3.JD5

Certainly if layer 2 was working these could be refreshed.. However, since they present no function link to a switch we are SOL.