EWC 9800 | embedded "own" AP does not JOIN (C9120AXE)

[Schmoebel]

I have reflashed a Cisco 9120AXE (I did it before to other APs aswell) with a Cisco EWC-AP Firmware.

Firmware Package: C9800-AP-universalk9.17.09.04a   which includes:
>> EWC-Image:  C9800-AP-iosxe-wlc.bin
>> AP Image: ap1g7  ( C9115, C9120 )
 

The "EWC" Part has the IP 172.17.48.8
The "AP" Part has the IP 172.17.50.32
Note: This is the same Hardware which has "2" firmwares - EWC and AP .
Note2: They are in the same subnet 172.17.48.0/20

If I set the TFTP Server to the EWC (172.17.48.8) itself, the Download for its own / embedded AP fails.
 

conf t

wireless profile image-download default

 description "default image download profile"

 image-download-mode tftp

  tftp-image-path /

  tftp-image-server 172.17.48.8
 do wr

Dec  8 08:36:08.649:
%INSTALL-5-INSTALL_START_INFO: Chassis 1 R0/0: install_engine: Started install add tftp://172.17.48.8//ap1g7

Dec  8 08:36:49.904:
%CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APA488.7389.5438 Mac: a488.73be.a1c0 Session-IP: 172.17.50.32[5253] 172.17.48.8[5246] Disjoined Image Download Failed
 

--------------
 

If I change the TFTP Server to my Test-Notebook (172.17.48.217) which holds the needed Images something very strange happens:
The Image for the "embedded" AP starts to download immediatly, as soon as the download finishes the whole AP Reboots with both "sides / parts" (the EWC part and the AP part)
 

conf t

wireless profile image-download default

 description "default image download profile"

 image-download-mode tftp

  tftp-image-path /

  tftp-image-server 172.17.48.217
 

Dec  8 08:52:23.171:
%INSTALL-5-INSTALL_START_INFO: Chassis 1 R0/0: install_engine: Started install add tftp://172.17.48.217//ap1g7

Dec  8 08:52:50.895:
%INSTALL-5-INSTALL_COMPLETED_INFO: Chassis 1 R0/0: install_engine: Completed install add tftp://172.17.48.217//ap1g7

Dec  8 08:54:13.969:
%CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APA488.7389.5438 Mac: a488.73be.a1c0 Session-IP: 172.17.50.32[5253] 172.17.48.8[5246] Disjoined Image Download Success

And after  successful download  the EWC and the EWC-AP are rebooting but still cannot join the EWC-AP to the Controller.

This than happens in a endless loop.... until I make the tftp server unavailable again...

[pieterh]

Why are you doing this tftp download ?
AFAIK if you upgraded the EWC, the AP image also upgrades 
the EWC and the AP image are a "package" so you do not need manual tftp downloads ?
NB! the AP image MUST match the controller version

normal process for lightweight access points is to associate with your wireless controller (here the EWC) first
and then perform a (CAPWAP not TFTP) download , if needed

When you use the tftp server on your laptop, then the package with both firmware is downloaded  and all is well

[Schmoebel]

Hello Pieterh,

I did this because the embedded AP of the EWC failed to download the image from the ewc itself...
I reflashed a brand new 9120AXE with lightweight only firmware to EWC ... and now the "embedded" AP doesnt join its "own" Controller... 

Dec  8 08:52:50.895: %INSTALL-5-INSTALL_COMPLETED_INFO: Chassis 1 R0/0: install_engine: Completed install add tftp://172.17.48.217//ap1g7

Dec  8 08:54:13.969: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APA488.7389.5438 Mac: a488.73be.a1c0 Session-IP: 172.17.50.32[5253] 172.17.48.8[5246] Disjoined Image Download Success

Now both parts reboot (EWC and AP) ...

I even tried to copy the ap image to the WLC itself and the embedded AP of the EWC downloaded the AP image and made full reboot again...
copy tftp://172.17.48.217/ap1g7 flash:  (this stay even after a reboot of the EWC)
copy tftp://172.17.48.217/ap1g7 ap_images:  (this is removed after every reboot of the EWC ?! so maybe its not the right place for it?)

So I should remove the tftp cli entries?

conf t

wireless profile image-download default

 no description "default image download profile"

no  image-download-mode tftp

no   tftp-image-path /

no   tftp-image-server 172.17.48.8


CLI and GUI doesnt work .. I need to add the controller image aswell

[pieterh]

as said before the AP image is included in the EWC package

>>> I did this because the embedded AP of the EWC failed to download the image from the ewc itself... 
The "EWC" Part has the IP 172.17.48.8
The "AP" Part has the IP 172.17.50.32 <<<

=> you need some mechanism so the AP can locate the controller on your network
(I assume /24 networks?) as AP and WLC are in different networks  , the WLC cannot be found  by network broadcast (last method below)

Cisco Catalyst 9120AX Series Access Point Getting Started Guide - Cisco

Access points must be discovered by a controller before they can become an active part of the network. The access point supports these controller discovery processes:

Cisco WLAN_IOS-XE-17.6_AGD-v0.8.pdf (niap-ccevs.org)
section: Access Point Deployment 
The Access Points must be discovered by a Controller before they can become an active part of the network. Access Points support the following controller discovery methods:
■ Locally stored controller IP address discovery. If the access point was previously associated to a controller, the IP addresses of
the primary, secondary, and tertiary controllers are stored in the access point’s nonvolatile memory. This process of storing
controller IPv4 or IPv6 addresses on an access point for later deployment is called priming the access point. To prime an access
point for first time use follow the steps below.
1. Connect to the console port and power-up the AP.
2. Login using Cisco/Cisco credentials and enter privilege EXEC mode by entering enable followed by Cisco.
3. Provide the primary controller name and IP address. The primary controller name is the host name and the IP address are
the address of the management interface.
    # capwap ap primary-base <controller name> <ip address of management interface>
4. If you are not using DHCP provide the AP an IP address
    # capwap ap ip <ip address> <subnet mask> <default gateway>
5. Power-off the AP. The configuration will be saved automatically
■ DHCP server discovery. This feature uses DHCP option 43 to provide controller IP addresses to the access points. Cisco switches
support a DHCP server option that is typically used for this capability. For more information about DHCP option 43, see the
Configuring DHCP Option 43 .
■ DNS discovery. The access point can discover controllers through your domain name server (DNS). For the access point to do so,
you must configure your DNS to return controller IP addresses in response to CISCO-CAPWAP-CONTROLLER.localdomain, where
localdomain is the access point domain name. Configuring the CISCO-CAPWAP-CONTROLLER provides backwards compatibility in
an existing customer deployment. When an access point receives an IP address and DNS information from a DHCP server, it
contacts the DNS to resolve CISCO-CAPWAP-CONTROLLER.localdomain. When the DNS sends a list of controller IP addresses, the access point sends discovery requests to the controllers.
■ Layer 3 CAPWAP Discovery. After the AP gets an IP address from the DHCP server, the AP begins this discovery process. The LAP broadcasts a Layer 3 discovery message on the local IP subnet. Any WLC that is connected to the same local subnet receives the Layer 3 discovery message. Each of the WLCs that receives the discovery message replies with a unicast discovery response
message to the AP.

[Schmoebel]

Thank you for your detailed reply.

I only have 1 Accesspoint 9120AXE with was former installed with a capwap lightweight image. 
I reflashed it to the ewc and finished the dayzero config. I assigned IP address for ewc (172.17.48.8 and for ap 172.17.48.9 but for somehow it received a dhcp lease with 172.17.50.32 which is in the same local subnet (172.17.48.0 / 20)

The "AP" of the EWC somehow discovers the EWC successfully and tries to download the image... which fails ...

All what you have decribed was considerd by me already ... thats why I came here with my issue...

[Rich R]

What version of software was installed on the AP before you tried to upgrade to 17.9.4a? (and I bet the AP part is still running that version)

I expect you have probably upgraded from a much older version (earlier than 17.3) and therefore the flash partitions are incorrect size so new image install will always fail.

I recommended reverting the entire AP to CAPWAP using the process at https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9120axi-access-point/217537-repairing-c9120-c9115-access-points-from.html which will leave it running 8.10.130.0 CAPWAP image.

Edit: Then upgrade to 8.10.190.0 image then upgrade first to 17.3.5 (or later 17.3.x) or 17.6.x CAPWAP image and only then convert to 17.9.4a EWC which should install the EWC and AP images as Pieter described.

The flash partition problem is well known which is why the release notes describe the upgrade path to be followed:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/release-notes/rn-17-9-9800.html#Cisco_Concept.dita_59a2987f-2633-4630-8c7b-a8e8aecdeaf7

[Schmoebel]

Hey there,
i guess i was newer than 17.3.x  - I think it was 17.6 or smth. But I am not 100% sure anymore - nevertheless I'll  try the fixing steps and I will follow your described update path asap and Will get back here

I guess its Active version: 17.3.6.207 on the AP Side....


EDIT: I remember that I visited that page https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/release-notes/rn-17-9-9800.html#Cisco_Concept.dita_59a2987f-2633-4630-8c7b-a8e8aecdeaf7  and confirmed myself that I can directly update ...  but never say no that I maybe miss-understood something there ...

[Schmoebel]

Hello, 
I now finally had time to look at my EWC Problem again.

Here is the full Log of the Boot. The Version of the "AP" Side is  17.3.6.207

@Rich R  do you still think, that I should "repair" this AP?   Are those related log entries regarding the partition size? 

[*12/08/2023 08:55:21.5310] Error: Socket open failed
[*12/08/2023 08:55:21.9140] capwapd: reading file /click/nss_lag_control/lacp_state: No such file or directory
[*12/08/2023 08:55:21.9140]
[*12/08/2023 08:55:21.9140] !!!!! {/opt/cisco/bin/capwapd} reading /click/nss_lag_control/lacp_state failed [2]: No such file or directory
[*12/08/2023 08:55:21.9140] capwapd: reading file /click/nss_lag_control/capwap_state: No such file or directory
[*12/08/2023 08:55:21.9140]
[*12/08/2023 08:55:21.9140] !!!!! {/opt/cisco/bin/capwapd} reading /click/nss_lag_control/capwap_state failed [2]: No such file or directory

Spoiler

Hit ESC key to stop autoboot: 10
u▒▒▒▒9)P^-▒N-b{▒HELO
5.0205HNDRC1a-1.0.38-163.162
CPU0
L1CD
MMUI
MMUA
CODE
ZBBS
MAIN
Boot Strap Register: 0x6fc7b
NVRAM memcfg 0x60607
DDR3-1600 CL11 total 2048MB 4 8bits part[s]

DDR test done successfully
CFE Version: 5
Verifying MASTER U-Boot...
Launching MASTER U-Boot version 0x005e ...

____ _
/ ___|(_) ___ ___ ___
| | | |/ __| / __|/ _ \
| |___ | |\__ \| (__| (_) |
\____||_||___/ \___|\___/
_ _ ____ _
| | | | | __ ) ___ ___ | |_
| | | |___| _ \ / _ \ / _ \| __|
| |_| |___| |_) | (_) | (_) | |_
\___/ |____/ \___/ \___/ \__|

U-Boot 2017.09 (Jun 21 2023 - 10:35:58 -0700) Broadcom BCM49408

Board: VANC-e
I2C: ready
DRAM: 2 GiB
enable MMU ... OK
NAND: Status wait timeout: nandsts=0x0 mask=0x40000000, count=0
NAND ECC BCH-8, page size 4096 bytes, spare size used 216 bytes
1024 MiB
MMC:
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
*** Warning - bad CRC, using default environment

In: serial
Out: serial
Err: serial
Platform: 4908
SF: Detected mx25l6405d with page size 256 Bytes, erase size 4 KiB, total 8 MiB
pmc_init:PMC using DQM mode
pmc_patch_4908:7 0 fcc3044b 35d035f
Board IP address : 192.168.1.1:ffffff00
Host IP address : 192.168.1.200
Gateway IP address : 10.1.1.1
Run from flash/host/tftp (f/h/c) : f
Default host run file name : vmlinux
Default host flash file name : bcm963xx_fs_kernel
Boot delay (0-9 seconds) : 3
Default host ramdisk file name :
Default ramdisk store address :
Board Id (0-18) : VANC_54991
Number of MAC Addresses (1-32) : 11
Base MAC Address : a4:88:73:89:54:38
PSI Size (1-128) KBytes : 48
Enable Backup PSI [0|1] : 0
System Log Size (0-256) KBytes : 0
Auxillary File System Size Percent: 0
flow memory allocation (MB) : 43
buffer memory allocation (MB) : 16
DHD 0 memory allocation (MB) : 0
DHD 1 memory allocation (MB) : 0
DHD 2 memory allocation (MB) : 0
Partition 1 Size (MB) : 0M
Partition 2 Size (MB) : 0M
Partition 3 Size (MB) : 0M
Partition 4 Size (MB) (Data) : 4M

BootImage: MASTER
invalid image type 0 (Broadcom, Inc.
ņ▒e▒@▒▒,▒+▒ a▒▒&▒Q▒(dQ▒K0)
Found external PHY firmware image
MTDPART Str = (mtdparts=nand:1m(nvram),5888k(bootfs),-(fs))
Net: Registering Ethernet Driver.....
Broadcom BCM 4908 Ethernet driver 0.1
pmc_switch_power_up: Rgmii Tx clock zone1 enable 0 zone2 enable 0.
Setting SGMII Calibration value to 0x9
swap_pair = 0

Detecting PHYs...
84880 A0 ae02:5158 --> N/A
84881 A0 ae02:5150 --> N/A
84884 A0 ae02:5148 --> N/A
84884E A0 ae02:5168 --> N/A
84885 A0 ae02:5178 --> N/A
84886 A0 ae02:5170 --> N/A
84887 A0 ae02:5144 --> N/A
84888 A0 ae02:5140 --> N/A
84888E A0 ae02:5160 --> N/A
84888S A0 ae02:5174 --> N/A
84880 B0 ae02:5159 --> N/A
84881 B0 ae02:5151 --> N/A
84884 B0 ae02:5149 --> N/A
84884E B0 ae02:5169 --> N/A
84885 B0 ae02:5179 --> N/A
84886 B0 ae02:5171 --> N/A
84887 B0 ae02:5145 --> N/A
84888 B0 ae02:5141 --> N/A
84888E B0 ae02:5161 --> N/A
84888S B0 ae02:5175 --> N/A
84891 A0 3590:5090 --> N/A
54991 A0 3590:5094 --> N/A
54991E A0 3590:5098 --> N/A
84891L A0 3590:5080 --> N/A
54991L A0 3590:5084 --> N/A
54991EL A0 3590:5088 --> N/A
84892 A0 3590:50a0 --> N/A
54992 A0 3590:50a4 --> N/A
54992E A0 3590:50a8 --> N/A
84894 A0 3590:50b0 --> N/A
54994 A0 3590:50b4 --> N/A
54994E A0 3590:50b8 --> N/A
54991H A0 3590:50d0 --> N/A
54994H A0 3590:50f0 --> N/A
84891 B0 3590:5091 --> N/A
54991 B0 3590:5095 --> N/A
54991E B0 3590:5099 --> N/A
84891L B0 3590:5081 --> N/A
54991L B0 3590:5085 --> N/A
54991EL B0 3590:5089 --> 0x1f
84892 B0 3590:50a1 --> N/A
54992 B0 3590:50a5 --> N/A
54992E B0 3590:50a9 --> N/A
84894 B0 3590:50b1 --> N/A
54994 B0 3590:50b5 --> N/A
54994E B0 3590:50b9 --> N/A
54991H B0 3590:50d1 --> N/A
54994H B0 3590:50f1 --> N/A

Loading firmware into detected phys...
bcm4908_eth-0
MAC: a4:88:73:89:54:38

Hit ESC key to stop autoboot: 0
Mounting UBI device fs
ubi0: attaching mtd3
Correctable bitflips (1/8) detected at errased page=0x21ac1000, subpage=2048
ubi0: scanning is finished
ubi0: attached mtd3 (name "mtd=2", size 1017 MiB)
ubi0: PEB size: 262144 bytes (256 KiB), LEB size: 253952 bytes
ubi0: min./max. I/O unit sizes: 4096/4096, sub-page size 4096
ubi0: VID header offset: 4096 (aligned 4096), data offset: 8192
ubi0: good PEBs: 4069, bad PEBs: 0, corrupted PEBs: 0
ubi0: user volume: 3, internal volumes: 1, max. volumes count: 128
ubi0: max/mean erase counter: 1417/921, WL threshold: 4096, image sequence number: 1269052613
ubi0: available PEBs: 33, total reserved PEBs: 4036, PEBs reserved for bad PEB handling: 80
Load Addr 0x10000000
Mount UBIFS PARTITION part1 ...
Loading file 'part1/part.bin' to addr 0x10000000...
Done

Checking image signing.
Image signing verification success for part part1 continue to run...
Multi Image Header Found
Count = 0 Offset = 0x10000050 Len = 10969376
Count = 1 Offset = 0x10a76170 Len = 3146571
Count = 2 Offset = 0x10d764bc Len = 7202
Booting from Partition: part1
arg 0: 0x10000050
arg 1: 0x3000000
arg 2: 0x1800000
## Loading init Ramdisk from Legacy Image at 03000000 ...
Image Name: Simple Ramdisk Image
Created: 2022-12-14 20:08:26 UTC
Image Type: AArch64 Linux RAMDisk Image (lzma compressed)
Data Size: 3146507 Bytes = 3 MiB
Load Address: 00000000
Entry Point: 00000000
Verifying Checksum ... OK
## Flattened Device Tree blob at 01800000
Booting using the fdt blob at 0x1800000
load dtb from fixed memory location directly...
/memory = 0x80000000 bytes @ 0x0
Set Memory to 2147483648l
WARNING: Node's property /reserved-memory/dt_reserved_buffer is not defined
WARNING: Node's property /reserved-memory/dt_reserved_flow is not defined
Appending NVRAM to dtb, ret:0
Loaded DTB from 0x01800000 with size 7202l
Curr Boot Args: <NULL>
DTB Boot Args (coherent_pool=4M cpuidle_sysfs_switch pci=pcie_bus_safe rootwait crashkernel=128M@0M)
Bootargs set to setenv bootargs console=$consoledev,$baudrate activepart=part1 activeboot=0 bootver=0x5e boardid=0x3 forceboot=0 coherent_pool=4M cpuidle_sysfs_switch pci=pcie_bus_safe rootwait crashkernel=128M@0M $console $nandEcc $mtdparts ubi.mtd=fs BOOT_DEBUG=0
Cleanup Complete.... ARMv8_secure_init_done!!!
Loading Ramdisk to 4fba5000, end 4fea530b ... OK
reserving fdt memory region: addr=0 size=20000
Using Device Tree in place at 0000000001800000, end 0000000001804c21

Starting kernel ...

[01/01/1970 00:00:02.7280] hub 3-0:1.0: config failed, hub doesn't have any ports! (err -19)
[01/01/1970 00:00:02.8200] brcmboard registered
[*01/01/1970 00:00:13.7070] buginf() enabled.
[*01/01/1970 00:00:13.7140] Made it into bootsh: Dec 14 2022 19:46:42 T-943bdbd45120ba6e456ce14ec7e62633cd222e5a-g943bdbd4-aut
[*01/01/1970 00:00:22.2600] bootsh mini ramfs booted /bootpart/part1/ramfs_data_cisco.cpio.lzma

Welcome to Cisco.

Usage of this device is governed by Cisco's End User License Agreement,
available at:
http://www.cisco.com/c/en/us/td/docs/general/warranty/English/EU1KEN_.html.

Restricted Rights Legend

Use, duplication, or disclosure by the Government is subject to
restrictions as set forth in subparagraph (c) of the Commercial
Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and
subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

This product contains some software licensed under the
"GNU General Public License, version 2" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/gpl-2.0.html

This product contains some software licensed under the
"GNU Library General Public License, version 2" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Library
General Public License, version 2", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.0.html

This product contains some software licensed under the
"GNU Lesser General Public License, version 2.1" provided
with ABSOLUTELY NO WARRANTY under the terms of "GNU Lesser
General Public License, version 2.1", available here:
http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

This product contains some software licensed under the
"GNU General Public License, version 3" provided with
ABSOLUTELY NO WARRANTY under the terms of
"GNU General Public License, Version 3", available here:
http://www.gnu.org/licenses/gpl.html.

This product contains some software licensed under the
"GNU Affero General Public License, version 3" provided
with ABSOLUTELY NO WARRANTY under the terms of
"GNU Affero General Public License, version 3", available here:
http://www.gnu.org/licenses/agpl-3.0.html.

[*01/01/1970 00:00:45.7910] init: ioctl(SIOCGIFHWADDR): wired0: No such device
[*01/01/1970 00:00:45.7940] init: ioctl(SIOCGIFHWADDR): wired0: No such device
Press S for a shell, or another magic key...

[ OK ] Reached target Cisco File Systems (Pre).
[ OK ] Reached target Timers.
[ OK ] Created slice -.slice.
▒▒▒▒&▒ ] Listening on Delayed Shutdown Socket.
z-▒ ] Reached target Sockets.
[ OK ] Created slice system.slice.
Starting Cisco UBIFS reformat/mount...
[*01/01/1970 00:00:50.1690] root: Cisco Axel file system mounting
[ OK ] Created slice system-serial\x2dgetty.slice.
[ OK ] Created slice system-sshd\x2dkeygen.slice.
[ OK ] Reached target Slices.
[ OK ] Started Cisco UBIFS reformat/mount.
Starting Cisco early mount...
[ OK ] Started Cisco early mount.
[ OK ] Reached target Local File Systems (Pre).
Starting Cisco system time setup...
[*09/05/2020 23:59:59.0080] Last reload time: Dec 8 08:55:00 2023
[*12/08/2023 08:55:00.0000] Setting system time Fri Dec 8 08:55:00 UTC 2023
Starting Cisco platform file generation...
Starting Cisco fips check...
Starting Cisco seed generation...
[*12/08/2023 08:55:00.3060] GCM-128 POST passed
[*12/08/2023 08:55:00.3070] GCM-256 POST passed
[*12/08/2023 08:55:00.3420] Auxiliary radio device detected
[ OK ] Started Cisco system time setup.
[ OK ] Started Cisco platform file generation.
[ OK ] Started Cisco fips check.
[ OK ] Started Cisco seed generation.
Starting Cisco btldr service...
[*12/08/2023 08:55:00.7280]
[*12/08/2023 08:55:00.7280] [12/8/2023 8:56:1] : Shadow is now in-synced with master
[ OK ] Started Cisco btldr service.
[ OK ] Reached target Local File Systems.
Starting Security Auditing Service...
[*12/08/2023 08:55:00.9860] parameter passed without an option given
▒▒х▒ѥ▒▒▒Cisco system time saving...saving.
Starting Cisco S10 boot service...
Starting Cisco pkg install service...
[*12/08/2023 08:55:01.2900] 45
Starting Cisco act2 check...
[*12/08/2023 08:55:01.3630] Active version: 17.3.6.207
[*12/08/2023 08:55:01.3650] Backup version: 0.0.0.0
[ OK ] Started Security Auditin[12/08/2023 08:55:01.5390] bcmlibs: module license 'Proprietary' taints kernel.
[12/08/2023 08:55:01.6240] Disabling lock debugging due to kernel taint
g Service.
[*12/08/2023 08:55:01.5260] Loading BCM modules ...
[*12/08/2023 08:55:01.5260] Ignore pptp.ko
[*12/08/2023 08:55:01.5280] Ignore pktflow.ko
[*12/08/2023 08:55:01.5300] Ignore pktrunner.ko
[*12/08/2023 08:55:01.5320] Load bcmlibs.ko
[*12/08/2023 08:55:01.7010] BCMLIBS [12/08/2023 08:55:01.9990] bm_base_addr 0xffffffc006000000, size 67108864, bm_base_addr_phys 0x0000000006000000
[12/08/2023 08:55:02.1170] fm_base_addr 0xffffffc002e00000, size 12582912, fm_base_addr_phys 0x0000000002e00000
loaded...
[*12/08/2023 08:55:01.7110] Load wlcsm.ko
[*12/08/2023 08:55:01.7330] Load rdp_fpm.ko
[*12/08/2023 08:55:01.7720] Load bdmf.ko
[*12/08/2023 08:55:01.7950] Load proclikefs.ko
[*12/08/2023 08:55:01.8110] Load rdpa_gpl.ko
[*12/08/2023 08:55:01.8290] Load rdpa_gpl_ext.ko
[*12/08/2023 08:55:01.8460] Load rdpa.ko
[*12/08/2023 08:55:01.9060] Load rdpa_usr.ko
[*12/08/2023 08:55:01.9270] Load rdpa_mw.ko
[*12/08/2023 08:55:02.2350] RDP Physical address=0x82200000 Virtual address = 0xffffff8001c80000
[*12/08/2023 08:55:02.2470] configure_runner: NATC keysize 0x100070 key element size 16 contextsize 0x400000 context element size 64
[*12/08/2023 08:55:02.2480] ++++Runner [12/08/2023 08:55:02.9480] Broadcom Command List Driver v1.0
gso_desc_pool created succ[12/08/2023 08:55:03.0420] crossbar[0]: Allocated cb_idx=0 int_ep=0
[12/08/2023 08:55:03.1180] crossbar[0]: Add cb_idx=0 ext_ep=0 SERDES:6
[12/08/2023 08:55:03.1930]
[12/08/2023 08:55:03.1930] Detecting PHYs...
[12/08/2023 08:55:03.2710] Lift PHY at address 31 out of Reset by GPIO:31 Active Low
essfully
[*1[12/08/2023 08:55:03.3670] 54991EL B0 3590:5089 --> 0x1f
[12/08/2023 08:55:03.4380]
[12/08/2023 08:55:03.4380] Loading firmware into detected PHYs...
[12/08/2023 08:55:03.4380]
[12/08/2023 08:55:03.5690] Firmware version: Blackfin B0 v02-02-03-2020-03-16
[12/08/2023 08:55:03.6510] Loading firmware into PHYs: map=0x80000000 count=1
[12/08/2023 08:55:03.7330] Halt the PHYs processors operation
[12/08/2023 08:55:03.8010] Upload the firmware into the on-chip memory
2%700000er_nat_cache_key_ptr=0xffffffc003
4%tr=0xffffffc002e00000at_cache_context_p
6%ext_cont_ptr=0xffffffc003200000ner_cont
9%0x82c30000,virt_addr 0xffffff80018f8000
[*12/08/2023 08:55:02.7340]
13%enum <5>; Allocating <15360> bufs; RDP
14%oad chipinfo.ko:02.8880] L
16%entry brcmchipinfo: brcm_chipinfo_init
17% rdpa_cmd.ko:55:02.9090] Load
18%0] Load cmdlist.ko.935
19%03.0300] Load bcm_enet.ko
21%b_idx:0 int_ep 0 to ext_ep 0 connect c
23%ct cb_idx:0 int_ep 1 to ext_ep 2 conne
80%] Started Cisco pkg install service.
100%
[12/08/2023 08:55:07.4550] Reset the processors to start execution of the code in the on-chip memory
[12/08/2023 08:55:07.5600] Verify that the processors are running: OK
[12/08/2023 08:55:08.1090] Verify that the firmware has been loaded with good CRC: OK
[12/08/2023 08:55:08.1970] Firmware loading completed successfully
[12/08/2023 08:55:08.1970]
[12/08/2023 08:55:08.2990] Adjusted SF2 SGPHY: sphy_ctrl=0x00010c1b
[12/08/2023 08:55:08.3840] getrcal for res select 5, int 660, ext 643, ratio 124 ratio1 144, rcal 9
[12/08/2023 08:55:08.4830] Setting SGMII Calibration value to 0x9
[12/08/2023 08:55:08.5530] PLL_PON(8051): 0x0250; TX_PON(8067): 0x0048; RX_PON(80b2): 0x0980
[12/08/2023 08:55:09.1810] dgasp: kerSysRegisterDyingGaspHandler: bcmsw registered
[12/08/2023 08:55:09.2780] broadcomThermalDrv brcm-therm: init (CPU count 4 4 4 4)
[ OK ] Started Cisco S10 boot service.
Starting Cisco watchdog...
[*12/08/2023 08:55:06.0350]
[*12/08/2023 08:55:06.0350]
[*12/08/2023 08:55:06.0350]
[*12/08/2023 08:55:06.0350]
[*12/08/2023 08:55:06.0350] Authenticating ACT2 ID:C9120
[*12/08/2023 08:55:06.0350] Authenticating SN:FOC24343T4C
[*12/08/2023 08:55:06.0360]
[*12/08/2023 08:55:06.0360] (ACT2Boot) Hardware is Cisco (c) authentic
[*12/08/2023 08:55:06.0360]
[*12/08/2023 08:55:06.0410] Seeding /dev/urandom from ACT2
[*12/08/2023 08:55:07.4550] Reading ACT2 SUDI certificates
[*12/08/2023 08:55:08.3710] NOTE: Using Port Grouping for IMP ports : [ 0 --> 4 ] [ 1, 2 --> 5 ] [ 3, 7 --> 8 ]
[*12/08/2023 08:55:09.1810] eth0: Down <A4:88:73:89:54:38> <ExtSw P0, Logical 08> PHY_ID <0x0007f008:0x08: On-chip 1G GPHY> Cfg: ANG.1G; Down
[*12/08/2023 08:55:09.1810] eth1: Down <A4:88:73:89:54:38> <ExtSw P1, Logical 09> PHY_ID <0x0007f009:0x09: On-chip 1G GPHY> Cfg: ANG.1G; Down
[*12/08/2023 08:55:09.1810] eth2: Down <A4:88:73:89:54:38> <ExtSw P2, Logical 10> PHY_ID <0x0007f00a:0x0a: On-chip 1G GPHY> Cfg: ANG.1G; Down
[*12/08/2023 08:55:09.1810] eth3: Down <A4:88:73:89:54:38> <ExtSw P3, Logical 11> PHY_ID <0x0007f00b:0x0b: On-chip 1G GPHY> Cfg: ANG.1G; Down
[*12/08/2023 08:55:09.1810] eth4: Down <A4:88:73:89:54:38> <ExtSw P7, Logical 15>
[*12/08/2023 08:55:09.1810] Chip Port 9, CrossBar Port 0, PHY_ID <0x06100006:0x06: On-chip 2.5G SERDES> Cfg: ANG.2.5G; Down
[*12/08/2023 08:55:09.1810] PHY_ID <0x0388001f:0x1f:External Cascaded 10G EXT3> Cfg: ANG.2.5G; Down
[*12/08/2023 08:55:09.1810] ===> Activate Deep Green Mode
[*12/08/2023 08:55:09.1810] bcmswlpbk0 (Ext switch port: (Logical Port: Virtual link DOWN
[*12/08/2023 08:55:09.2720] Load bcm_thermal.ko
[*12/08/2023 08:55:09.3820] open </dev/fcache> error no 2
[*12/08/2023 08:55:09.3830] fcctl: failed to disable hw acceleration
[*12/08/2023 08:55:09.3830] fcctl: failed to configure Flow Cache
[*12/08/2023 08:55:09.3830] open </dev/fcache> error no 2
[*12/08/2023 08:55:09.3830] fcctl: failed to disable Flow Cache
[*12/08/2023 08:55:09.3840]
[*12/08/2023 08:55:09.3840] open </dev/fcache> error no 2
[*12/08/2023 08:55:09.3840] fcctl: failed to flush Flow Cache entries Broadcom Packet Flow Cache flushing the flows
[*12/08/2023 08:55:09.3980] ioctl command return error -1!
[*12/08/2023 08:55:09.7960] ret code = 0.
[*12/08/2023 08:55:09.8010] wired0 Link encap:Ethernet HWaddr A4:88:73:89:54:38
[*12/08/2023 08:55:09.8010] UP BROADCAST MULTICAST MTU:2044 Metric:1
[*12/08/2023 08:55:09.8010] RX packets:0 errors:0 dropped:0 overruns:0 frame:0
[*12/08/2023 08:55:09.8010] TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
[*12/08/2023 08:55:09.8010] collisions:0 txqueuelen:1000
[*12/08/2023 08:55:09.8010] RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
[*12/08/2023 08:55:09.8010]
[*12/08/2023 08:55:09.8040] A4:88:73:89:54:38
[*12/08/2023 08:55:09.8040] BCM11ax AP: MIC Certificate Present
[*09/05/2020 23:59:59.0070] Last reload time: Dec 8 08:55:00 2023
[*12/08/2023 08:55:00.0000] Setting system time Fri Dec 8 08:55:00 UTC 2023
[*12/08/2023 08:55:00.5470] Last reload reason : 0: unknown
[*12/08/2023 08:55:01.7150]
[*12/08/2023 08:55:01.7150] ACT2 Check passed
[*12/08/2023 08:55:01.7150]
[*12/08/2023 08:55:02.5650] wired0 (Ext switch port: 7) (Logical Port: 15) (phyId: 1f) Link Up at 1000 mbps full duplex
[*12/08/2023 08:55:02.5650] <=== Deactivate Deep Green Mode
[*12/08/2023 08:55:02.5650] bcmswlpbk0 (Ext switch port: (Logical Port: Virtual link UP
Starting Cisco nolan service...
Starting Cisco marlin_sia module service...
Starting Cisco nss service...
[ OK ] Started Cisco act2 check.
[ OK ] Started Cisco watchdog.
▒▒▒▒&▒ ] Started Cisco nolan service.
z-▒ ] Started Cisco marlin_sia module service.
[ OK ] Started Cisco nss service.
Starting Cisco Kclick...
Starting Cisco S15platform...
Starting Cisco nolan USB service...
[*12/08/2023 08:55:04.9470] Loading HND Module
[*12/08/2023 08:55:04.9950] stile module dp init successfully
[*12/08/2023 08:55:04.9950] NBAR [ OK ] Started Cisco nolan USB service.
[ OK ] Started Cisco pre-PoE negotiation.
Starting Cisco pre-PoE negotiation...
[ OK ] Started Cisco Kclick.
[ OK ] Started Cisco S15platform.
Starting Cisco ME service...
Starting Cisco certificate create service...
[*12/08/2023 08:55:06.7340] Starting check if backup WiFi NVRAM are available
[*12/08/2023 08:55:06.7340] WiFi backup nvram - crc = 202841319
[*12/08/2023 08:55:06.7340] WiFi active nvram - crc =617
[*12/08/2023 08:55:06.7340] [WARNING]ACTIVE and BACKUP NVRAM NOT use same data
[*12/08/2023 08:55:06.7530] restore done!
[*12/08/2023 08:55:06.7600] restore done!
[*12/08/2023 08:55:06.9380] MEMODE variable is already set - Just proceed
Starting Cisco Kclick...
Starting Cisco Sku service...
[ OK ] Started Cisco ME service.
[ OK ] Started Cisco certificate create service.
[ OK ] Started Cisco Sku service.
[ OK ] Started Cisco Tam service.
[*12/08/2023 08:55:07.7040] crypto worker thread started
[*12/08/2023 08:55:07.7120] crypto worker thread started
[*12/08/2023 08:55:07.7580] igs_module_init:867: IGS 18 create network socket successful
-▒х▒ѥ▒▒▒Cisco Tam service...
Starting Cisco certtime service...
[ OK ] Started Cisco Kclick.
Starting Cisco S16platfomm...
Starting rsyslog client...
[*12/08/2023 08:55:08.1620] Wifi Forwarding Driver is initialized!
[*12/08/2023 08:55:08.4130] wl_module_init: passivemode set to 0x1
[*12/08/2023 08:55:08.4130] wl_module_init: txworkq set to 0x0
[*12/08/2023 08:55:08.4160] initvars_cis_pci: Not CIS format
[*12/08/2023 08:55:08.4170] sprom_read_pci: buf[0] = 0xffff, returning bad-crc
[*12/08/2023 08:55:08.4170] srom read failed
[*12/08/2023 08:55:08.4170] srom rev:0
[*12/08/2023 08:55:08.4210] wl0: phy_radio_attach: RF Band Cap: 2G:1 5G:1
[*12/08/2023 08:55:08.4510] Creating CPU ring for queue number 0 with 1024 packets descriptor=0xffffffbffd15ba40
[*12/08/2023 08:55:08.4510] Creating CPU ring for queue number 1 with 1024 packets descriptor=0xffffffbffd15ba80
[*12/08/2023 08:55:08.4510] wfd_bind: Dev apr1v0 wfd_idx 0 wl_radio_idx 0 Type skb:def configured WFD thread wfd0-thrd minQId/maxQId (8/9), status (0) qmask 0x3
[*12/08/2023 08:55:08.4520] Instantiating WFD 0 thread
[*12/08/2023 08:55:08.4520] apr1v0: Broadcom BCM43684 802.11 Wireless Controller 17.18.2 (r782430 WLTEST)
[*12/08/2023 08:55:08.4550] initvars_cis_pci: Not CIS format
[*12/08/2023 08:55:08.4560] sprom_read_pci: buf[0] = 0xffff, returning bad-crc
[*12/08/2023 08:55:08.4560] srom read failed
[*12/08/2023 08:55:08.4560] srom rev:0
[*12/08/2023 08:55:08.4600] wl1: phy_radio_attach: RF Band Cap: 2G:1 5G:1
[*12/08/2023 08:55:08.4900] Creating CPU ring for queue number 2 with 1024 packets descriptor=0xffffffbffd15bac0
[*12/08/2023 08:55:08.4900] Creating CPU ring for queue number 3 with 1024 packets descriptor=0xffffffbffd15bb00
[*12/08/2023 08:55:08.4900] wfd_bind: Dev apr0v0 wfd_idx 1 wl_radio_idx 1 Type skb:def configured WFD thread wfd1-thrd minQId/maxQId (10/11), status (0) qmask 0xc
[*12/08/2023 08:55:08.4910] Instantiating WFD 1 thread
[*12/08/2023 08:55:08.4910] apr0v0: Broadcom BCM43684 802.11 Wireless Controller 17.18.2 (r782430 WLTEST)
[*12/08/2023 08:55:08.6480] pid 3352's current affinity mask: f
[*12/08/2023 08:55:08.6480] pid 3352's new affinity mask: e
[*12/08/2023 08:55:08.6510] pid 3351's current affinity mask: f
[*12/08/2023 08:55:08.6510] pid 3351's new affinity mask: e
[*12/08/2023 08:55:08.7030] wl: Not up
[*12/08/2023 08:55:08.7050] wl: Not up
[*12/08/2023 08:55:08.7110] wl: Bad Band
[*12/08/2023 08:55:08.7160] Success.
[*12/08/2023 08:55:08.7170] Success.
Starting Cisco syslog service...
[ OK ] Started Cisco S16platfomm.
[ OK ] Started rsyslog client.
[ OK ] Started Cisco syslog service.
Starting Cisco synclogd...
Starting RHL daemon...
[*12/08/2023 08:55:11.4280] rhl_reset : got minor 55
[ OK ] Started Cisco synclogd.
[12/08/2023 08:55:11.6640] NXP-RHL-Driver 0001:01:00.0: RHL: AP TYPE = 1
[12/08/2023 08:55:11.7630] NXP-RHL-Driver 0001:01:00.0: Final VSPA image size val 0xf0c000
[12/08/2023 08:55:12.6580] bcm963xx-pcie: RHL legacy interrupt initialized
[ OK ] Started RHL daemon.
[ OK ] Started Cisco certtime service.
[ OK ] Reached target System Initialization.
[*12/08/2023 08:55:11.8540] V2H call back init
[*12/08/2023 08:55:11.8540] V2H callback registered
[*12/08/2023 08:55:14.5700] starting tam services using ACT2...
[*12/08/2023 08:55:14.5700]
[*12/08/2023 08:55:14.5700] TAM init done
[*12/08/2023 08:55:14.7830] tams_init: INIT app Logging into TAM Server
[*12/08/2023 08:55:14.9480]
[*12/08/2023 08:55:14.9480] Click sched monitor: schedulers = 1
[*12/08/2023 08:55:14.9920] tams_init: Init App login SUCCESS
mm[32m OK ] Reached target Basic System.
Starting gRPC server daemon...
Starting Cisco led service...
Starting Cisco brain service...
Starting AP Trace daemon...
Starting Clean Air daemon...
Starting ME Install Script...
Starting Fast CGI daemon...
Starting Hostapd process...
Starting Cisco kexec...
Starting BLE init service...
Starting WCPD process...
Starting Cisco image/firmware updater service...
[*12/08/2023 08:55:16.3170]
[*12/08/2023 08:55:16.3170] [12/8/2023 8:56:17] updt_util: PHY firmware is up to date
[*12/08/2023 08:55:16.3230]
[*12/08/2023 08:55:16.3230] [12/8/2023 8:56:17] updt_util: All bootloaders are up to date
Starting capwapd...
[ OK ] Started NTP_PROC daemon.
Starting NTP_PROC daemon...
Starting Sensord daemon...
[ OK ] Started Serial Getty on ttyS0.
▒▒▒▒&▒ Starting Serial Getty on ttyS0...
z-▒ ] Reached target Login Prompts.
[ OK ] Started RHL monitor/reset daemon.
Starting RHL monitor/reset daemon...
[*12/08/2023 08:55:17.0320] reset device opened
Starting Cisco klogd...
Starting Cisco rtd service...
Starting Cisco printkd...
[ OK ] Started System Monitor service.
[*12/08/2023 08:55:17.2270] root: Systemd memory leak found Rss=8500, doing systemctl daemon-reexec
-▒х▒ѥ▒▒▒System Monitor service...
Starting RSYNC User Key Generation...
[ OK ] Started Cisco led service.
[ OK ] Started Cisco kexec.
[ OK ] Started Cisco image/firmware updater service.
[*12/08/2023 08:55:17.7310] Failed to get properties: Connection reset by peer
[*12/08/2023 08:55:17.7310] Failed to get properties: Connection reset by peer
[*12/08/2023 08:55:17.7340] Failed to get properties: Connection reset by peer
[*12/08/2023 08:55:17.7340] Failed to get properties: Connection reset by peer
[*12/08/2023 08:55:17.7410] Failed to get properties: Connection reset by peer
[*12/08/2023 08:55:17.8270] Failed to get properties: Connection reset by peer
[*12/08/2023 08:55:17.8270] Failed to reset failed state of unit printkd.service: Connection reset by peer
[*12/08/2023 08:55:17.8280] Failed to reset failed state of unit klogd.service: Connection reset by peer
[ OK ] Started AP Trace daemon.
[ OK ] Started Fast CGI daemon.
[ OK ] Started Cisco rtd service.
[FAILED] Failed to start Cisco klogd.
See 'systemctl status klogd.service' for details.
[*12/08/2023 08:55:17.8720] systemd[1]: Failed to start Cisco klogd.
[*12/08/2023 08:55:17.8720] systemd[1]: klogd.service failed.
[FAILED] Failed to start Cisco printkd.
See 'systemctl status printkd.service' for details.
[*12/08/2023 08:55:17.8730] systemd[1]: Failed to start Cisco printkd.
[*12/08/2023 08:55:17.8730] systemd[1]: printkd.service failed.
[ OK ] Started Hostapd process.
[ OK ] Started Sensord daemon.
[ OK ] Started Cisco brain service.
[ OK ] Started RSYNC User Key Generation.
[ OK ] Reached target sshd-keygen.target.
Starting OpenSSH server daemon...
[ OK ] Started OpenSSH server daemon.

Starting dnsmasq watcher...
Starting DNSmasq...
[ OK ] Started DNSmasq.
[ OK ] Started dnsmasq watcher.

User Access Verification
Username: [*12/08/2023 08:55:18.8890] EEPROM Size = 65536
[*12/08/2023 08:55:18.8890] loading pow table from EEPROM to scratch buf
[*12/08/2023 08:55:18.8890] 10200 bytes copied from RHL EEPROM to scratch buf
[ OK ] Stopped Cisco printkd.
Starting Cisco printkd...
[ OK ] Stopped Cisco klogd.
Starting Cisco klogd...
[ OK ] Started Cisco printkd.
[ OK ] Started Cisco klogd.
[*12/08/2023 08:55:19.3060] click-config/io-real.click:369: While configuring 'todev_wired0 :: ToDevice':
[*12/08/2023 08:55:19.3060] warning: device 'wired0' is down
[*12/08/2023 08:55:19.3590] click-config/io-real.click:369: While configuring 'fromdev_wired0 :: FromWiredSwNssDevice':
[*12/08/2023 08:55:19.3590] warning: device 'wired0' is down
[*12/08/2023 08:55:19.6840] click-config/io-real.click:369: While initializing 'tohost_wired0 :: ToHost':
[*12/08/2023 08:55:19.6840] warning: device 'wired0' is down
[*12/08/2023 08:55:19.7080] wired0 (Ext switch port: 7) (Logical Port: 15) (phyId: 1f) Link DOWN.
[*12/08/2023 08:55:19.7080] ===> Activate Deep Green Mode
[*12/08/2023 08:55:19.7080] bcmswlpbk0 (Ext switch port: (Logical Port: Virtual link DOWN
[*12/08/2023 08:55:19.8650]
[*12/08/2023 08:55:19.8650] !!!!! {/opt/cisco/bin/capwap_brain} failed writing /click/vrrp_elector/preferred_ap_name len 0 data: ""
Starting Lighttpd Watcher...
[ OK ] Started Lighttpd Watcher.
Starting dnsmasq watcher...
[*12/08/2023 08:55:20.0200] pid 5249's current affinity mask: f
[*12/08/2023 08:55:20.0200] pid 5249's new affinity mask: 2
[ OK ] Started gRPC server daemon.
Stopping DNSmasq...
[ OK ] Stopped DNSmasq.
Starting DNSmasq...
Starting dhcpv6 client watcher...
[ OK ] Started DNSmasq.
[*12/08/2023 08:55:20.0980] ip6_port srcr2, ip6local fe80::a688:73ff:fe89:5438, ip6 ::, plen 0, gw6 ::, gw6_mac 00:00:00:00:00:00, mtu 1500, vid 0, mode6 2(slaac)
Starting DHCPv6 client...
[ OK ] Started dnsmasq watcher.
[ OK ] Started DHCPv6 client.
[ OK ] Started dhcpv6 client watcher.
[ OK ] Started Clean Air daemon.
[ OK ] Started WCPD process.
[ OK ] Started capwapd.
[*12/08/2023 08:55:20.8120] wired0 (Ext switch port: 7) (Logical Port: 15) (phyId: 1f) Link Up at 1000 mbps full duplex
[*12/08/2023 08:55:20.8120] <=== Deactivate Deep Green Mode
[*12/08/2023 08:55:20.8120] bcmswlpbk0 (Ext switch port: (Logical Port: Virtual link UP
[*12/08/2023 08:55:21.0690] EEPROM Size = 65536
[*12/08/2023 08:55:21.0690] loading trx table from EEPROM to DTCM
[*12/08/2023 08:55:21.0690] 24480 bytes copied from RHL EEPROM to DTCM
[*12/08/2023 08:55:21.0690] EEPROM Size = 65536
[*12/08/2023 08:55:21.0690] loading ro1 table from EEPROM to DTCM
[*12/08/2023 08:55:21.0690] 12240 bytes copied from RHL EEPROM to DTCM
[*12/08/2023 08:55:21.0690] EEPROM Size = 65536
[*12/08/2023 08:55:21.0690] loading ro2 table from EEPROM to DTCM
[*12/08/2023 08:55:21.0690] 12240 bytes copied from RHL EEPROM to DTCM
[*12/08/2023 08:55:21.1860] chpasswd: password for user changed
[*12/08/2023 08:55:21.1990] DOT11_TXP[0]:Domain configured: 12 class:E
[*12/08/2023 08:55:21.2780] flags value is 0 process ble_init
[*12/08/2023 08:55:21.5310] Error: Socket open failed
[*12/08/2023 08:55:21.9140] capwapd: reading file /click/nss_lag_control/lacp_state: No such file or directory
[*12/08/2023 08:55:21.9140]
[*12/08/2023 08:55:21.9140] !!!!! {/opt/cisco/bin/capwapd} reading /click/nss_lag_control/lacp_state failed [2]: No such file or directory
[*12/08/2023 08:55:21.9140] capwapd: reading file /click/nss_lag_control/capwap_state: No such file or directory
[*12/08/2023 08:55:21.9140]
[*12/08/2023 08:55:21.9140] !!!!! {/opt/cisco/bin/capwapd} reading /click/nss_lag_control/capwap_state failed [2]: No such file or directory
[*12/08/2023 08:55:22.6620] DOT11_TXP[0]:Domain configured: 1 class:E
[*12/08/2023 08:55:22.9400] DOT11_TXP[1]:Domain configured: 12 class:E
[*12/08/2023 08:55:23.7640] Error: Socket open failed
[*12/08/2023 08:55:23.9710] Error: Socket open failed
[*12/08/2023 08:55:25.0580] DOT11_DRV[1]: BCM FIPS POST for CCMP-128 and GCMP-128 passed
[*12/08/2023 08:55:25.0580] DOT11_DRV[1]: Stop Radio1
[*12/08/2023 08:55:25.0580] Stopped Radio 1
[*12/08/2023 08:55:25.0850] GB (GB/0) UNITED KINGDOM
[*12/08/2023 08:55:25.0920] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:26.4120] DOT11_DRV[0]: BCM FIPS POST for CCMP-128 and GCMP-128 passed
[*12/08/2023 08:55:26.4120] DOT11_DRV[0]: Stop Radio0
[*12/08/2023 08:55:26.4120] Stopped Radio 0
[*12/08/2023 08:55:26.4370] GB (GB/0) UNITED KINGDOM
[*12/08/2023 08:55:26.4440] DOT11_DRV[0]: set_channel Channel set to 6/20
[*12/08/2023 08:55:27.2320] DOT11_DRV[2]: off_channel timeout but no req in progress
[*12/08/2023 08:55:27.9620] size: 17510 bytes (48026 left)
[*12/08/2023 08:55:28.2010] DOT11_DRV[0]: set_channel Channel set to 1/20
[*12/08/2023 08:55:28.4440] wl: Unsupported
[*12/08/2023 08:55:29.2340] DOT11_DRV[0]: set_channel Channel set to 1/20
[*12/08/2023 08:55:29.4860] wl: Unsupported
[*12/08/2023 08:55:30.3000] DOT11_DRV[0]: set_channel Channel set to 1/20
[*12/08/2023 08:55:30.5490] DOT11_DRV[0]: set_channel Channel set to 1/20
[*12/08/2023 08:55:30.8080] wl: Unsupported
[*12/08/2023 08:55:31.9950] DOT11_DRV[0]: set_channel Channel set to 1/20
[*12/08/2023 08:55:33.7650] size: 17510 bytes (48026 left)
[*12/08/2023 08:55:34.0020] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:34.2350] wl: Unsupported
[*12/08/2023 08:55:34.8470] ethernet_port wired0, ip 172.17.50.32, netmask 255.255.240.0, gw 172.17.48.1, mtu 1500, bcast 172.17.63.255, dns1 172.17.48.1, domain localdomain, vid 0, static_ip_failover false, dhcp_vlan_failover false
[*12/08/2023 08:55:35.1020] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:36.2570] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:37.4750] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:37.7220] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:39.5240] DOT11_DRV[1]: set_channel Channel set to 36/20
[*12/08/2023 08:55:40.1410] IOT Bootloader Flash Tool 1.4
[*12/08/2023 08:55:40.1410] Firmware upgrade initiated by ble_init
[*12/08/2023 08:55:40.1410] Opening serial console to.. /dev/ttyiot0
[*12/08/2023 08:55:40.1410] bundled_fw_ver = ['Lodestar', '2.7.16']
[*12/08/2023 08:55:40.1410] ls_fw_ver 2.7.20
[*12/08/2023 08:55:40.1410] upgrade false
[*12/08/2023 08:55:40.1410] FW version is latest. No need to upgrade
Starting dnsmasq watcher...
Starting ntp watcher...
Starting DNSmasq for host...
[ OK ] Started ntp watcher.
[ OK ] Started BLE init service.
[ OK ] Started DNSmasq for host.
[ OK ] Started dnsmasq watcher.
Starting dnsmasq watcher...
Stopping DNSmasq for host...
[ OK ] Stopped DNSmasq for host.
Starting DNSmasq for host...
[ OK ] Started DNSmasq for host.
[ OK ] Started dnsmasq watcher.
[*12/08/2023 08:55:41.1900] Discarding msg CAPWAP_WTP_EVENT_REQUEST(type 9) in CAPWAP state: Noop(0).
[*12/08/2023 08:55:41.4280] ip6_port srcr2, ip6local fe80::a688:73ff:fe89:5438, ip6 fd00::a688:73ff:fe89:5438, plen 64, gw6 ::, gw6_mac 00:00:00:00:00:00, mtu 1500, vid 0, mode6 2(slaac)
[*12/08/2023 08:55:41.4300] AP IPv6 Address updated from :: to fd00::a688:73ff:fe89:5438
Starting dnsmasq watcher...
Stopping DNSmasq for host...
[ OK ] Stopped DNSmasq for host.
Starting DNSmasq for host...
[ OK ] Started DNSmasq for host.
[ OK ] Started dnsmasq watcher.
[*12/08/2023 08:55:53.1900] OK
Stopping Cisco syslog service...
[ OK ] Stopped Cisco syslog service.
Starting Cisco syslog service...
[ OK ] Started Cisco syslog service.
[ OK ] Started ME Install Script.
[ OK ] Reached target Multi-User System.
[*12/08/2023 08:56:02.9750] chatter: tohost_virtual :: ToHost: device 'virtual' went down
Fri Dec 8 08:56:03 UTC 2023 SFri Dec 8 08:56:03 UTC 2023 Creating webauth tarball extract directory
Fri Dec 8 08:56:03 UTC 2023 IOSd monitor 8603 started
Fri Dec 8 08:56:03 UTC 2023 fromdev_wired0 count = 2008
systemd 246 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR -SMACK +SYSVINIT +UTMP -LIBCRYPTSETUP -GCRYPT -GNUTLS +ACL +XZ -LZ4 -ZSTD -SECCOMP +BLKID -ELFUTILS +KMOD -IDN2 -IDN -PCRE2 default-hierarchy=hybrid)
Detected virtualization container-other.
Detected architecture arm64.
Running with unpopulated /etc.
Initializing machine ID from random generator.
Populated /etc with preset unit settings.
Queued start job for default target BinOS.
system-check_storage.slice: unit configures an IP firewall, but the local system does not support BPF/cgroup firewalling.
(This warning is only shown for the first unit using IP firewalling.)

Both links down, not waiting for other chassis
Chassis number is 1

Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

Cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706

Cisco IOS Software [Cupertino], C9800-AP Software (C9800-AP-K9_IOSXE-UNIVERSALK9-M), Version 17.9.4a, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2023 by Cisco Systems, Inc.
Compiled Fri 20-Oct-23 10:18 by mcpre

This software version supports only Smart Licensing as the software licensing mechanism.

PLEASE READ THE FOLLOWING TERMS CAREFULLY. INSTALLING THE LICENSE OR
LICENSE KEY PROVIDED FOR ANY CISCO SOFTWARE PRODUCT, PRODUCT FEATURE,
AND/OR SUBSEQUENTLY PROVIDED SOFTWARE FEATURES (COLLECTIVELY, THE
"SOFTWARE"), AND/OR USING SUCH SOFTWARE CONSTITUTES YOUR FULL
ACCEPTANCE OF THE FOLLOWING TERMS. YOU MUST NOT PROCEED FURTHER IF YOU
ARE NOT WILLING TO BE BOUND BY ALL THE TERMS SET FORTH HEREIN.

Your use of the Software is subject to the Cisco End User License Agreement
(EULA) and any relevant supplemental terms (SEULA) found at
http://www.cisco.com/c/en/us/about/legal/cloud-and-software/software-terms.html.

You hereby acknowledge and agree that certain Software and/or features are
licensed for a particular term, that the license to such Software and/or
features is valid only for the applicable term and that such Software and/or
features may be shut down or otherwise terminated by Cisco after expiration
of the applicable license term (e.g., 90-day trial period). Cisco reserves
the right to terminate any such Software feature electronically or by any
other means available. While Cisco may provide alerts, it is your sole
responsibility to monitor your usage of any such term Software feature to
ensure that your systems and networks are prepared for a shutdown of the
Software feature.

FIPS: Flash Key Check : Key Not Found, FIPS Mode Not Enabled
platform initcisco C9120AXE-E (VXE) processor (revision VXE) with 225461K bytes of memory.
Processor board ID FGL2436LC6V
2048K bytes of non-volatile configuration memory.
1875420K bytes of physical memory.
100000K bytes of AP Images at ap_images:.
513300K bytes of Backup Controller Image at backup_image:.
7774207K bytes of virtual hard disk at bootflash:.
25000K bytes of Temp trace export at tmp_trace_export:.
Installation mode is BUNDLE

%Default route without gateway, if not a point-to-point interface, may impact performance
Num of cpu cores 4
Maximum number of AP's supported 100
%Default route without gateway, if not a point-to-point interface, may impact performance
No such file

Press RETURN to get started!

*Dec 8 08:57:41.999: %CRYPTO-5-SELF_TEST_START: Crypto algorithms release (Rel5a)
begin self-test
*Dec 8 08:57:43.027: %CRYPTO-5-SELF_TEST_END: Crypto algoritms self-test completed successfully
All tests passed.Adding registry invocations for the WLC platform

*Dec 8 08:57:47.326: WLC-HA-Notice: RF Progression event: RF_PROG_ACTIVE_FAST, Switchover triggered
*Dec 8 08:57:48.866: %TLSCLIENT-5-TLSCLIENT_BINOS: TLS Client is BINOS based
*Dec 8 08:57:49.313: %CRYPTO_ENGINE-5-CSDL_COMPLIANCE_ENFORCED: Cisco PSB security compliance is being enforced
*Dec 8 08:57:49.313: %CRYPTO_ENGINE-5-CSDL_COMPLIANCE_EXCEPTION_ADDED: Cisco PSB security compliance exception has been added by this platform for use of RSA Key Size
*Dec 8 08:57:50.143: %LINK-3-UPDOWN: Interface EOBC0, changed state to up
*Dec 8 08:57:50.146: %LINK-3-UPDOWN: Interface , changed state to up
*Dec 8 08:57:50.146: %LINK-3-UPDOWN: Interface LIIN0, changed state to up
*Dec 8 08:57:50.147: %LINK-3-UPDOWN: Interface GigabitEthernet0, changed state to up
*Dec 8 08:57:50.279: %CRYPTO_ENGINE-5-CSDL_COMPLIANCE_EXCEPTION_ADDED: Cisco PSB security compliance exception has been added by encrypt proc for use of 3DES
*Dec 8 08:57:50.279: %CRYPTO_ENGINE-5-CSDL_COMPLIANCE_EXCEPTION_ADDED: Cisco PSB security compliance exception has been added by encrypt proc for use of MD5
*Dec 8 08:57:50.279: %CRYPTO_ENGINE-5-CSDL_COMPLIANCE_EXCEPTION_ADDED: Cisco PSB security compliance exception has been added by encrypt proc for use of DES
*Dec 8 08:57:50.314: %PNP-6-PNP_DISCOVERY_STARTED: PnP Discovery started
*Dec 8 08:56:58.862: %RIF_MGR_FSM-6-RP_LINK_UP: Chassis 1 R0/0: rif_mgr: The RP link is UP.
*Dec 8 08:56:58.904: %STACKMGR-6-STACK_LINK_CHANGE: Chassis 1 R0/0: stack_mgr: Stack port 1 on Chassis 1 is cable-not-connected
*Dec 8 08:56:58.904: %STACKMGR-6-STACK_LINK_CHANGE: Chassis 1 R0/0: stack_mgr: Stack port 2 on Chassis 1 is down
*Dec 8 08:56:58.904: %STACKMGR-6-STACK_LINK_CHANGE: Chassis 1 R0/0: stack_mgr: Stack port 2 on Chassis 1 is cable-not-connected
*Dec 8 08:56:58.904: %STACKMGR-6-CHASSIS_ADDED: Chassis 1 R0/0: stack_mgr: Chassis 1 has been added to the stack.
*Dec 8 08:57:02.558: %STACKMGR-6-CHASSIS_ADDED: Chassis 1 R0/0: stack_mgr: Chassis 1 has been added to the stack.
*Dec 8 08:57:04.583: %STACKMGR-6-CHASSIS_ADDED: Chassis 1 R0/0: stack_mgr: Chassis 1 has been added to the stack.
*Dec 8 08:57:04.583: %STACKMGR-6-ACTIVE_ELECTED: Chassis 1 R0/0: stack_mgr: Chassis 1 has been elected ACTIVE.
*Dec 8 08:57:23.437: %TDLDB-3-DBPERSIST_OPERATION_FAILURE: Chassis 1 R0/0: repm: Operation: restore, DB: /tmp/rp/tdldb/0/EWLC_AP_UPGRADE_DB, Failure reason: Operation canceled
*Dec 8 08:57:38.983: %RIF_MGR_FSM-6-RP_LINK_DOWN: Chassis 1 R0/0: rif_mgr: Setting RP link status to DOWN
*Dec 8 08:57:39.011: %STACKMGR-1-DUAL_ACTIVE_CFG_MSG: Chassis 1 R0/0: stack_mgr: Dual Active Detection links are not available anymore
*Dec 8 08:57:51.143: %LINEPROTO-5-UPDOWN: Line protocol on Interface EOBC0, changed state to up
*Dec 8 08:57:51.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface , changed state to up
*Dec 8 08:57:51.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface LIIN0, changed state to up
*Dec 8 08:57:51.191: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Dec 8 08:57:53.728: %QUEUE-2-LINKED : Chassis 1 Bad queue_enqueue of ab6d1a6c in queue ab47ad8c
*Dec 8 08:57:56.445: %SYS-7-NVRAM_INIT_WAIT_TIME: Waited 0 seconds for NVRAM to be available
*Dec 8 08:57:57.028: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TP-self-signed-3898202644 has been generated or imported by crypto config
*Dec 8 08:57:57.459: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TP-self-signed-3898202644 created succesfully
*Dec 8 08:58:04.259: %SYS-5-CONFIG_I: Configured from memory by console
*Dec 8 08:58:04.311: %IOSXE_OIR-6-INSCARD: Card (rp) inserted in slot R1
*Dec 8 08:58:04.311: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F0
*Dec 8 08:58:04.311: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in s
*Dec 8 08:58:04.311: %IOSXE_OIR-6-INSCARD: Card (fp) inserted in slot F1
*Dec 8 08:58:04.312: %IOSXE_OIR-6-ONLINECARD: Card (fp) online in slot F1
*Dec 8 08:58:04.312: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 0
*Dec 8 08:58:04.312: %IOSXE_OIR-6-INSCARD: Card (cc) inserted in slot 1
*Dec 8 08:58:05.468: %CFMGR_LOG-4-COUNTRY_CFG_DEPRECATED_CLI: Chassis 1 R0/0: wncd: Deprecated CLI used: 'ap country <coutry-code>' is deprecated, instead use 'wireless country <country-code>'
*Dec 8 08:58:08.142: %SYS-5-RESTART: System restarted --
Cisco IOS Software [Cupertino], C9800-AP Software (C9800-AP-K9_IOSXE-UNIVERSALK9-M), Version 17.9.4a, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2023 by Cisco Systems, Inc.
Compiled Fri 20-Oct-23 10:18 by mcpre
*Dec 8 08:58:08.280: %SSH-5-ENABLED: SSH 1.99 has been enabled
*Dec 8 08:58:09.938: %PKI-2-NON_AUTHORITATIVE_CLOCK: PKI functions can not be initialized until an authoritative time source, like NTP, can be obtained.
*Dec 8 08:58:10.258: %SYS-5-CONFIG_P: Configured programmatically by process Ewlc cli mqipc handler from console as console
*Dec 11 13:20:56.084: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TEST_CISCO_IDEVID_SUDI created succesfully
*Dec 11 13:20:56.116: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TEST_CISCO_IDEVID_SUDI has been generated or imported by pki-sudi
*Dec 11 13:20:56.240: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TEST_CISCO_IDEVID_SUDI0 created succesfully
*Dec 11 13:20:56.261: %CRYPTO_ENGINE-5-KEY_DELETED: A key named TEST_CISCO_IDEVID_SUDI has been removed from key storage
*Dec 11 13:20:56.291: %PKI-6-TRUSTPOINT_DELETE: Trustpoint: TEST_CISCO_IDEVID_SUDI deleted succesfully
*Dec 11 13:20:56.297: %PKI-6-TRUSTPOINT_DELETE: Trustpoint: TEST_CISCO_IDEVID_SUDI0 deleted succesfully
*Dec 11 13:20:56.299: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: CISCO_IDEVID_SUDI created succesfully
*Dec 11 13:20:56.330: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named CISCO_IDEVID_SUDI has been generated or imported by pki-sudi
*Dec 11 13:20:56.458: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: CISCO_IDEVID_SUDI0 created succesfully
*Dec 11 13:20:56.953: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TEST_CISCO_IDEVID_SUDI created succesfully
*Dec 11 13:20:56.984: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TEST_CISCO_IDEVID_SUDI has been generated or imported by pki-sudi
*Dec 11 13:20:57.109: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TEST_CISCO_IDEVID_SUDI0 created succesfully
*Dec 11 13:20:57.117: %PKI-6-TRUSTPOINT_DELETE: Trustpoint: TEST_CISCO_IDEVID_SUDI deleted succesfully
*Dec 11 13:20:57.124: %CRYPTO_ENGINE-5-KEY_DELETED: A key named TEST_CISCO_IDEVID_SUDI has been removed from key storage
*Dec 11 13:20:57.125: %PKI-6-TRUSTPOINT_DELETE: Trustpoint: TEST_CISCO_IDEVID_SUDI0 deleted succesfully
*Dec 11 13:20:57.126: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: CISCO_IDEVID_SUDI_LEGACY created succesfully
*Dec 11 13:20:57.157: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named CISCO_IDEVID_SUDI_LEGACY has been generated or imported by pki-sudi
*Dec 11 13:20:57.279: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: CISCO_IDEVID_SUDI_LEGACY0 created succesfully
*Dec 11 13:20:57.720: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TEST_CISCO_IDEVID_SUDI created succesfully
*Dec 11 13:20:57.757: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TEST_CISCO_IDEVID_SUDI has been generated or imported by pki-sudi
*Dec 11 13:20:57.956: %PKI-6-TRUSTPOINT_CREATE: Trustpoint: TEST_CISCO_IDEVID_SUDI0 created succesfully
*Dec 11 13:20:57.967: %PKI-6-TRUSTPOINT_DELETE: Trustpoint: TEST_CISCO_IDEVID_SUDI deleted succesfully
*Dec 11 13:20:57.974: %CRYPTO_ENGINE-5-KEY_DMon Dec 11 13:21:03 UTC 2023 Created controller running file: Mon Dec 11 13:21:03 UTC 2023
ELETED: A key named TEST_CISCO_IDEVID_SUDI has been removed from key storage
*Dec 11 13:20:57.975: %PKI-6-TRUSTPOINT_DELETE: Trustpoint: TEST_CISCO_IDEVID_SUDI0 deleted succesfully
*Dec 11 13:20:58.715: %PNP-6-PNP_BEST_UDI_UPDATE: Best UDI [PID:C9120AXE-E,VID:V02,SN:FGL2436LC6V] identified via (entity-mibs)
*Dec 11 13:20:58.715: %PNP-6-PNP_CDP_UPDATE: Device UDI [PID:C9120AXE-E,VID:V02,SN:FGL2436LC6V] identified for CDP
*Dec 11 13:20:58.716: %PNP-6-PNP_DISCOVERY_STOPPED: PnP Discovery stopped (Startup Config Present)
*Dec 11 13:20:59.873: %CRYPTO_ENGINE-5-KEY_ADDITION: A key named TP-self-signed-3898202644.server has been generated or imported by crypto-engine

*Dec 11 13:21:18.817: %CAPWAPAC_SMGR_TRACE_MESSAGE-5-AP_JOIN_DISJOIN: Chassis 1 R0/0: wncd: AP Event: AP Name: APA488.7389.5438 Mac: a488.73be.a1c0 Session-IP: 172.17.50.32[5273] 172.17.48.8[5246] Disjoined Image Download Failed

[Rich R]

No I don't think that is a partition size - I'd say flash/software install is corrupted so yes I would do the repair to return it to a known good state.

[Schmoebel]

Okay thank you for your help.
Sadly I managed to get the AP to a state, that I cant even press "ESC" right after Cisco UBOOT Appears...
**bleep**

if I can go into uboot mode I would have another problem

 8.10.130.0  : found --> bundle-axel-SS-8_10_130_0.img

 8.10.190.0 : not found --> where can I find it 

17.3.5 (or later 17.3.x) or 17.6.x CAPWAP image --> I only find C9800-AP-universalk9.17.06.06.zip; but this seems not to be the capwap image or am I wrong... 

and only then convert to
17.9.4a EWC  -->  C9800-AP-universalk9.17.09.04a.zip  this seems correct

[Rich R]

Remember to use Cisco Wireless compatibility matrix to match WLC version to AP version.

8.10.190.0 : not found --> where can I find it 
https://software.cisco.com/download/home/286322979/type/286288051/release/15.3.3-JK10

17.3.5 (or later 17.3.x) or 17.6.x CAPWAP image
https://software.cisco.com/download/home/286322979/type/286288051/release/15.3.3-JPK7

17.9.4a EWC
https://software.cisco.com/download/home/286322979/type/286323077/release/17.9.4a

[Schmoebel]

Okay ?! how should I ever know this ... from where do you know this  ?
so 

 8.10.190.0  means  15.3.3-JK10  --> edit: it seems that I dont have a service contract for this but this is maybe a cisco bug currently because I have one ... which worked until 2 hours... **bleep**

and

17.3.5 (or later 17.3.x) or 17.6.x CAPWAP image means 15.3.3-JPK7  --> edit: it seems that I dont have a service contract for this but this is maybe a cisco bug currently because I have one ... which worked until 2 hours... **bleep**

[Rich R]

It's been that way since Cisco WLCs have been around <smile> - just one of those things you learn when working with them.  And you should be consulting the compatibility matrix whenever considering hardware or software upgrades or changes.

The only thing I can suggest for downloads is to try in a new private browser window.  Cisco web site cookie and session state handling is atrocious and it often gets "confused". I highlighted this to Cisco web team at Cisco Live in February and they claimed to be unaware of such problems but I assured them it happens frequently.

[Schmoebel]

Hm, even now after I slept about your message I cannot download due to missing service contract.
I love cisco so much.

The last big issue with C9300 switches and "speed nonegotiate"   brought us very very serious trouble and now a simple reflash task from capwap to ewc (which I have done multiple times without any issues) fails .

I cannot enter U-BOOT with ESC and I cannot factory reset the AccessPoint with "Mode" Button. 
Serial Output: 

[Rich R]

That would normally be from an incompatible console cable - see my many other posts about using a cable with FTDI chipset.

But if you are sure the AP is beyond help then remember the APs have a Limited Lifetime Warranty so you can simply RMA the AP by following the LLW process.