What state is my 9124AXD AP in?

[kenneth.gregersen]

Hi

We have 3 x 9124AXD APs that were struck with a bug during WLC upgrade.

We managed to fix them looking at this guide: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/220443-how-to-avoid-boot-loop-due-to-corrupted.html

However, when we now try to connect them they are not working.
When I connect them to console it just reboots continously, and it shows something I've never seen before.
There is no way to break/stop the boot process.

Can the APs be fixed?

Format: Log Type - Time(microsec) - Message - Optional Info
Log Type: B - Since Boot(Power On Reset), D - Delta, S - Statistic
S - QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
S - IMAGE_VARIANT_STRING=HAABANAZA
S - OEM_IMAGE_VERSION_STRING=CRM
S - Boot Config, 0x000002e1
B - 203 - PBL, Start
B - 2738 - bootable_media_detect_entry, Start
B - 2884 - bootable_media_detect_success, Start
B - 2888 - elf_loader_entry, Start
B - 11377 - auth_hash_seg_entry, Start
B - 49473 - auth_hash_seg_exit, Start
B - 287992 - elf_segs_hash_verify_entry, Start
B - 348510 - PBL, End
B - 557387 - SBL1, Start
B - 637572 - GCC [RstStat:0x10, RstDbg:0x600000] WDog Stat : 0x4
B - 647545 - pm_device_init, Start
B - 830789 - PM_SET_VAL:Skip
D - 181078 - pm_device_init, Delta
B - 833046 - pm_driver_init, Start
D - 5307 - pm_driver_init, Delta
B - 839512 - clock_init, Start
D - 2104 - clock_init, Delta
B - 843538 - boot_flash_init, Start
D - 3934 - boot_flash_init, Delta
B - 851255 - boot_config_data_table_init, Start
D - 1006 - boot_config_data_table_init, Delta - (575 Bytes)
B - 861076 - Boot Setting : 0x00000601
B - 864888 - CDT version:2,Platform ID:8,Major ID:1,Minor ID:0,Subtype:1
B - 871720 - sbl1_ddr_set_params, Start
B - 875533 - CPR configuration: 0x300
B - 878979 - cpr_init, Start
B - 881755 - Rail:0 Mode: 5 Voltage: 792000
B - 886970 - CL CPR settled at 744000mV
B - 889807 - Rail:1 Mode: 5 Voltage: 880000
B - 893985 - Rail:1 Mode: 7 Voltage: 888000
D - 16531 - cpr_init, Delta
B - 900878 - Pre_DDR_clock_init, Start
B - 904874 - Pre_DDR_clock_init, End
B - 908290 - DDR Type : PCDDR4
B - 914939 - do ddr sanity test, Start
D - 1067 - do ddr sanity test, Delta
B - 918751 - DDR: Start of HAL DDR Boot Training
B - 923387 - DDR: End of HAL DDR Boot Training
B - 929152 - DDR: Checksum to be stored on flash is -53629413
B - 939369 - Image Load, Start
D - 618510 - QSEE Image Loaded, Delta - (1380336 Bytes)
B - 1557970 - Image Load, Start
D - 61 - SEC Image Loaded, Delta - (0 Bytes)
B - 1565656 - Image Load, Start
D - 293685 - DEVCFG Image Loaded, Delta - (32404 Bytes)
B - 1859432 - Image Load, Start
D - 314669 - RPM Image Loaded, Delta - (112364 Bytes)
B - 2174162 - Image Load, Start
D - 453260 - APPSBL Image Loaded, Delta - (700124 Bytes)
B - 2627544 - QSEE Execution, Start
D - 61 - QSEE Execution, Delta
B - 2633339 - USB D+ check, Start
D - 0 - USB D+ check, Delta
B - 2639744 - SBL1, End
D - 2084645 - SBL1, Delta
S - Flash Throughput, 4430 KB/s (2226475 Bytes, 502479 us)
S - DDR Frequency, 600 MHz
S - Core 0 Frequency, 1651 MHz

[marce1000]

 - Ref  : C_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
            + To me it looks like a wrong image has been installed on the AP during the
               recovery process , can you also provide 
               a screenshot of the 'halt and reboot sequence'

 M.

[kenneth.gregersen]

@marce1000  - this is actually the only thing I see.

I have tried do power off/on several time, and this is the only output.

Never seen this before.

[marce1000]

  - Could you try the recovery procedure which you used again , but with another (but compatible) AP image version (?)

  M.

[kenneth.gregersen]

There is no way to get a prompt at this AP.

I have tried all possible break commands, but to no avail.

Smells like RMA.

[marce1000]

                                                     >...Smells like RMA.
   - It does indeed ; if we note the beginning :  QC_IMAGE_VERSION_STRING=BOOT.BF.3.3.1-00147
     The QC Image refers to the firmware of the radio(s) ; then a  number of tests are shown.
                            So it could be a failed radio , or something else failing !

   It's even mention on a device from another vendor !:
          https://openwrt.org/toh/buffalo/wxr-5950ax12

  M.

[Leo Laohoo · Accepted solution]

RMA the AP.