SW update failure - 1702i can`t update SW from 2802i ME controller

[Dmitry Z.]

Hello everybody, 

We have been trying integrate 1702i LWAP into existing WiFi network running on 2802 (AIR-AP2802I-A-K9) ME controller. 

1702i joins the controller, but then failed to update SW and goes to reboot.

2802 ME is running 8.10.151.0 release.

1702 is loaded with LWAPP.

Would appreciate any guidance what should be checked and what is workaround.

Thanks,

Dmitry

[Flavio Miranda]

You need to convert the 1702i  to ME first.

https://semfionetworks.com/blog/convert-a-cisco-capwap-ap-to-a-mobility-express-ap/ 

[Dmitry Z.]

But there are no ME images available for 1702i , just LWAP and Autonomous IOS options.

[Flavio Miranda]

Yeah, you are right. But on this doc it is supported.

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwi-xPOS-4L3AhXQjZUCHcqTAWYQFnoECAQQAQ&url=https%3A%2F%2Fwww.cisco.com%2Fc%2Fen%2Fus%2Ftd%2Fdocs%2Fwireless%2Fcontroller%2Ftechnotes%2F8-5%2Fb_cisco_mobility_express_8_5%2Fb_cisc... 

Cisco discontinued the AP as ME but did not updated the docs. Sorry, but will not be possible to get this into your ME WLC.

[Dmitry Z.]

Well,

But 1702i is AP which should join to WLC on ME 2802i.

1702 acts as AP , not controller.

[Flavio Miranda]

It needs to have ME software for WLC or AP and cisco is not providing any more. It seems they are not using this model anymore for ME and probably because this AP is end of life.

[Dmitry Z.]

APe865.4944.e50c#sh ver
Cisco IOS Software, C1700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JA3, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Thu 19-Feb-15 10:27 by prod_rel_team

ROM: Bootstrap program is C1700 boot loader
BOOTLDR: C1700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.3() [ TRUE]

APe865.4944.e50c uptime is 2 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx

[Flavio Miranda]

That´s right.  The code  rcvk9w8 (AP3G2-RCVK9W8-M) – means lightweight recovery image – this is factory installed on

AP.

This is a capwap AP.

[Rich R]

1. 1702 is supported as subordinate AP on ME WLC https://www.cisco.com/c/en/us/solutions/collateral/enterprise-networks/mobility-express/q-and-a-c67-734485.html

Q.  Can 802.11ac Wave 1 access points (Aironet 1700, 2700, and 3700 Series) join a Mobility Express network?

A.  Yes, 802.11ac Wave 1 access points can join a Mobility Express network and service clients, but they cannot run the wireless LAN controller function on the access points.

Also here:

 https://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/810/user_guide/b_ME_User_Guide_810/about_mob_exp.html Table 1

and https://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/810/release_notes/b_ME_RN_810.html Table 1

and https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html#mobility_express_solution Table 15

2. For ME you need to have a TFTP server hosting the AP images so that the APs can download the correct image (or manually load the correct image onto the AP yourself).  The ME WLC does NOT host the images like a regular WLC.  It just provides the image name and TFTP server address to the AP to download.  Do you have the correct image (ap3g2) on your TFTP server?

The images are found in the ME .zip file which you should have extracted on your TFTP server.

https://software.cisco.com/download/home/286304510/type/286289839/release/8.10.151.0

[Dmitry Z.]

Thank you very much for explanation!

What is the image should I use for manual update and procedure to upload correct SW locally , without controller? 

Unfortunately I don`t have access to download the bundle image, i have that one available : ap3g2-k9w8-tar.153-3.JPL.tar

Thanks,

[Rich R · Accepted solution]

You need 15.3(3)JK5 ap3g2-k9w8-tar.153-3.JK5.tar for manual install.  The version must exactly match the WLC version so you can't use the image you have.
https://software.cisco.com/download/home/286281141/type/280775090/release/15.3.3-JK5

If you don't have download access yourself talk to your Cisco partner/reseller or sometimes you can find things by searching.

The download command is in https://mrncciew.com/2012/10/20/lightweight-to-autonomous-conversion/

You'll need to use your PC as TFTP server.

[Dmitry Z.]

Should I set AP mode to local or bridge?

I have issues with pinging locally attached PC

Int g0 is assigned 10.10.10.102/24 and Local PC is assigned 10.10.10.1/24

Interface IP-Address OK? Method Status Protocol
BVI1 unassigned YES DHCP up up
GigabitEthernet0 10.10.10.102 YES manual up up
GigabitEthernet1 unassigned NO unset administratively down down

There is BVI1 interface and bridge irb configured by default.

Could you advise what to do? 

[Dmitry Z.]

There were the issues with Win11 and tftpd64, fixed.

Image is loaded with error 

Premature end of tar file
ERROR: Problem extracting files from archive.

Does it mean that archive is broken? 

[Dmitry Z.]

Hi , Thank you for your help.

I have uploaded succecfully the image , but after restart AP has been starting to look for another image named 3700 , have a look below:

*Apr 8 16:59:02.247: %CAPWAP-5-SENDJOIN: sending Join Request to 10.224.4.3
*Apr 8 16:59:07.247: %CAPWAP-5-SENDJOIN: sending Join Request to 10.224.4.3
APe865.4944.e50c#
examining image...
*Apr 8 17:00:21.707: AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS.

*Apr 8 17:00:22.000: %CAPWAP-5-DTLSREQSEND: DTLS connection request sent peer_ip: 10.224.4.3 peer_port: 5246
*Apr 8 17:00:22.251: %CAPWAP-5-DTLSREQSUCC: DTLS connection created sucessfully peer_ip: 10.224.4.3 peer_port: 5246
*Apr 8 17:00:22.251: %CAPWAP-5-SENDJOIN: sending Join Request to 10.224.4.3perform archive download capwap:/c3700 tar file
*Apr 8 17:00:22.275: %CAPWAP-6-AP_IMG_DWNLD: Required image not found on AP. Downloading image from Controller.
*Apr 8 17:00:22.279: Loading file /c3700...

Should I upload one more image ? 

[Rich R]

This is the very irritating "double download" on the x700 APs (because Cisco changed the names at some point for some reason)

The files are actually identical so just copy the ap3g2 file to "c3700" (the file name is simply c3700) and it will work.