wap321 (AIR-CAP1702I-Z-K9) initial setup

[rsantos02]

Hi,

We received a new wap321 and want to install in standalone mode, without wireless controller.

Can not access the web interface. (Page not found). It looks like the http service on the AP is not running.

I tried to access via serial cable. I can follow starting... After the boot process, it loops and does not provide the prompt to accept typing, so is not possible issue any command.

Not in Bound state.
*Mar 1 00:01:07.227: %LWAPP-4-CLIENTEVENTLOG: Invoking capwap discovery
*Mar 1 00:01:10.299: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.71.86, mask 255.255.255.0, hostname APa03d.6fa9.76a0

I also tried to load the firmware through the TFTP server method:

I reserved the Mac address of WAP321 on my DHCP server and configured options 66, 77 and 150 pointing to a TFTP server containing the ap3g2-k9w7-tar.default image. I did not succeed.

Here is a copy of the complete boot log for analysis.

IOS Bootloader - Starting system.
flash is writable
Antigua Lite Board P2
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 13 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 7269888
flashfs[0]: Bytes available: 33888768
flashfs[0]: flashfs fsck took 10 seconds.
Base Ethernet MAC address: a0:3d:6f:a9:76:a0
Ethernet speed is 1000 Mb - FULL Duplex
button pressed for 3 seconds
process_config_recovery: set IP address and config to default 10.0.0.1
Loading "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-mx"...#########################
 
File "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-mx" uncompressed and installed, entry point: 0x2003000
executing...
 
Secondary Bootloader - Starting system.
Antigua Lite Board P2
40MB format
Tide XL MB - 40MB of flash
Xmodem file system is available.
flashfs[0]: 12 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 41158656
flashfs[0]: Bytes used: 7269888
flashfs[0]: Bytes available: 33888768
flashfs[0]: flashfs fsck took 10 seconds.
flashfs[1]: 0 files, 1 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 12257280
flashfs[1]: Bytes used: 1024
flashfs[1]: Bytes available: 12256256
flashfs[1]: flashfs fsck took 0 seconds.
Base Ethernet MAC address: a0:3d:6f:a9:76:a0
Unable to locate IOS image with name **xx**.
Boot CMD: 'boot flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx'
Loading "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx"...############################
File "flash:/ap3g2-rcvk9w8-mx/ap3g2-rcvk9w8-xx" uncompressed and installed, entry point: 0x1003000
executing...
 
 Restricted Rights Legend
 
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
 
 cisco Systems, Inc.
 170 West Tasman Drive
 San Jose, California 95134-1706
 
 
 
Cisco IOS Software, C1700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JC, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Fri 11-Dec-15 11:55 by prod_rel_team
 
Antigua Lite Board P2
40MB format
Tide XL MB - 40MB of flash
Initializing flashfs...
 
flashfs[2]: 12 files, 2 directories
flashfs[2]: 0 orphaned files, 0 orphaned directories
flashfs[2]: Total bytes: 40900608
flashfs[2]: Bytes used: 7269888
flashfs[2]: Bytes available: 33630720
flashfs[2]: flashfs fsck took 11 seconds.
flashfs[2]: Initialization complete.
flashfs[3]: 0 files, 1 directories
flashfs[3]: 0 orphaned files, 0 orphaned directories
flashfs[3]: Total bytes: 11999232
flashfs[3]: Bytes used: 1024
flashfs[3]: Bytes available: 11998208
flashfs[3]: flashfs fsck took 0 seconds.
flashfs[3]: Initialization complete....done Initializing flashfs.
 
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
 
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
 
If you require further assistance please contact us by sending email to
export@cisco.com.
 
cisco AIR-CAP1702I-Z-K9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID TSP2039AAZG
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
LWAPP image version 8.2.100.0
1 Gigabit Ethernet interface
 
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: A0:3D:6F:A9:76:A0
Part Number : 73-16776-01
PCB Serial Number : TSP20390314
Top Assembly Part Number : 068-05568-02
Top Assembly Serial Number : TSP2039AAZG
Top Revision Number : A0
Product/Model Number : AIR-CAP1702I-Z-K9
% Please define a domain-name first.
ipv6 enable
 ^
% Invalid input detected at '^' marker.
 
ipv6 address autoconfig
 ^
% Invalid input detected at '^' marker.
 
ipv6 address dhcp
 ^
% Invalid input detected at '^' marker.
 
 
 
Press RETURN to get started!
 
 
*Mar 1 00:00:13.099: APAVC: Initial WLAN Buffers Given to System is 2500
 
*Mar 1 00:00:13.147: APAVC: WlanPAKs 42878 RadioPaks 42270
 
*Mar 1 00:00:13.147: Starting Ethernet promiscuous modeFailed to check if timer is initialized, NULL timer handler
 
*Mar 1 00:00:13.155: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
*Mar 1 00:00:13.155: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...
*Mar 1 00:00:14.475: %LWAPP-4-CLIENTEVENTLOG: PnP waiting for capwap init
*Mar 1 00:00:15.147: %LINK-6-UPDOWN: Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:15.147: %LINK-6-UPDOWN: Interface GigabitEthernet1, changed state to up
*Mar 1 00:00:15.211: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1700 Software (AP3G2-RCVK9W8-M), Version 15.3(3)JC, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2015 by Cisco Systems, Inc.
Compiled Fri 11-Dec-15 11:55 by prod_rel_team
*Mar 1 00:00:15.211: %SNMP-5-COLDSTART: SNMP agent on host ap is undergoing a cold start
*Mar 1 00:00:15.223: %CDP_PD-4-POWER_OK: Full power - HIGH_POWER inline power sourceFailed to check if timer is initialized, NULL timer handler
 
*Mar 1 00:00:15.367: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
*Mar 1 00:00:15.371: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...
*Mar 1 00:00:15.371: spamInitRadCfg: recovery image default mode 0
lwapp_crypto_init: MIC Present and Parsed Successfully
 
*Mar 1 00:00:15.535: %SSH-5-ENABLED: SSH 2.0 has been enabled
*Mar 1 00:00:16.331: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:00:17.223: %LINK-5-CHANGED: Interface GigabitEthernet1, changed state to administratively down
*Mar 1 00:00:20.203: DPAA Initialization Complete
*Mar 1 00:00:20.203: %SYS-3-HARIKARI: Process DPAA INIT top-level routine exited
*Mar 1 00:00:21.203: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0, changed state to up
*Mar 1 00:00:23.203: %LINK-6-UPDOWN: Interface BVI1, changed state to down
*Mar 1 00:00:24.203: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to down
*Mar 1 00:00:27.335: %LINK-6-UPDOWN: Interface BVI1, changed state to up
*Mar 1 00:00:28.335: %LINEPROTO-5-UPDOWN: Line protocol on Interface BVI1, changed state to up
*Mar 1 00:00:28.407: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.71.86, mask 255.255.255.0, hostname APa03d.6fa9.76a0
 
bridge-group 1 source-learning
 ^
% Invalid input detected at '^' marker.
%Default route without gateway, if not a point-to-point interface, may impact performance
*Mar 1 00:00:34.175: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg config failed, trying backup...
*Mar 1 00:00:34.175: %LWAPP-3-CLIENTERRORLOG: Load nvram:/lwapp_ap.cfg.bak config failed...
*Mar 1 00:00:34.175: %CAPWAP-3-EVENTLOG: No Config Present. PNP required
*Mar 1 00:00:34.179: Cert ISSUER (39): cn=Cisco Manufacturing CA SHA2,o=Cisco
 
%Error opening flash:/capwap-saved-config (No such file or directory)
%Error opening flash:/capwap-saved-config-bak (No such file or directory)
Not in Bound state.
*Mar 1 00:00:52.779: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.71.86, mask 255.255.255.0, hostname APa03d.6fa9.76a0
 
Not in Bound state.
*Mar 1 00:01:07.227: %LWAPP-4-CLIENTEVENTLOG: Invoking capwap discovery
*Mar 1 00:01:10.299: %DHCP-6-ADDRESS_ASSIGN: Interface BVI1 assigned DHCP address 192.168.71.86, mask 255.255.255.0, hostname APa03d.6fa9.76a0
 

[Michael Combs]

Hi there,

The AP will only use DHCP option 43 to help discover a WLC, it won't utilize option 150 or the like to reach out to a TFTP server directly.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-Guide/Enterprise_Mobility_8-1_Deployment_Guide/cuwn.html#pgfId-1259523

Easiest way to convert your lightweight IOS AP to standalone (i.e. autonomous), is to follow the steps outlined at the below article:

https://supportforums.cisco.com/document/57476/lwapp-autonomous-conversion-and-vice-versa-access-points#LWAPP_to_IOS

Once the steps are followed, and assuming your AP can communicate with the TFTP server in use. You should be good to go.

[rsantos02]

Thanks, Michael

I'm afraid I can not apply the instructions contained in the second link provided.
I am connected to the WAP321 console via serial cable and no keyboard input is recognized. You can see messages at bottom of log.

For this reason, I've tried the strategy of putting the firmware file on the TFTP server, I would like to address WAP321 to load itself the firmware image file on tftp server.
Any idea?

[Michael Combs]

Sure thing, my pleasure.

If you're not getting any keyboard input recognized whatsoever, then this is likely attributed to a) incorrect settings on your terminal emulator program of choice (i.e. putty, secureCRT, etc.), or b) bad hardware (either Cisco console cable, USB-to-Serial adapter, etc.).

Let's move forward in tribute to Occam's razor to start, and double-check that your terminal emulator program is using the following settings:

• 9600 baud
• 8 data bits
• 1 stop bit
• No parity

While you're at it, make sure that for the serial settings that the terminal emulator program is using is correct. For instance, when using USB-to-Serial adapters the COM port designation can change from time to time for driver related events, so if you were using COM3 previously but now the adapter is recognized as COM4. We'll want to update the setting accordingly in Putty or similar (can check COM port mappings in Windows device manager, etc.).

Go ahead and also double-check the connections to make sure that your console cable is properly re-seated in the console port of the AP, securely connected to the USB-to-Serial adapter if applicable, and so forth.

After that, your keyboard input will hopefully be able to be recognized on the AP console. If all else fails a restart of the terminal emulator program and/or reboot of the PC in question might be called for to rule out any other idiosyncrasies. You could also use another blue Cisco console cable if needed, out of an abundance of caution and/or confirm that it works on another Cisco device like a switch, router, or better yet, another AP if you have one handy.

[rsantos02]

Great!

Problem was USB-Serial cable. I also have to change blut console cable to another black cable. At end keyboard is working.

I have a tftpd server working with image file. 

Is there any cake recipe command for a beginner like me can configure the interface addresses and upload the firmware?

[Michael Combs · Accepted solution]

That's great to hear! Glad the console is now responsive to your whims.

Since your AP is running a lightweight recovery image, sadly no such luck. There is no GUI or the like you can access for the AP even after manually configuring a BVI address and the like to use to upload an image directly thereafter. Given your previous note, the AP should be pulling a DHCP address at this point, but do ping the IP address of your TFTP server in question from the console of the AP to confirm it can reach it over the network.

Best thing to do thereafter is the following from the CLI of the AP you are consoled into (default credentials are Cisco / Cisco):

• en
• debug capwap console cli
• debug capwap client no-reload
• archive download-sw /force-reload /overwrite tftp://<TFTP-Server_IP-address>/<AP-image-name.tar>

Once the last command above is entered, the AP will reach out to the TFTP server and download the referenced tar file (latest autonomous IOS is ap3g2-k9w7-tar.153-3.JD4.tar), install it and reboot. From there, you'll have yourself an autonomous AP that you can configure standalone from a WLC or the like, to your heart's content.

https://supportforums.cisco.com/document/61936/autonomous-ap-and-bridge-basic-configuration-template

[rsantos02]

Michael,

You made me free of a great trouble. I will follow the template to finish setup. 
Thank you very much!

Just a last...

How can I undo this command? I was following some instructions and typed this, so boot is manual. How can set up do automatic again?

boot manual