Cisco Wireless AP

on

AP 2700 image recovery

ap power up with empty flash:

ap:dir flash:

set IP_ADDR 10.0.0.1
set NETMASK 255.255.255.0
set DEFAULT_ROUTER             --- optional
tftp_init

tar -xtract tftp://10.0.0.88/ap3g2-rcvk9w8-tar.153-3.JPO.tar flash:
boot flash:ap3g2-rcvk9w8-mx



Reset the CAPWAP Configuration on Cisco IOS and Cisco APs

https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/99763-reset-lwappconfig-lap.html#toc-hId--466648378

===

  • Connect the console cable
  • Unplug the power or network cable if connected to a POE switch
  • Press and hold the Mode button
  • Plug the power back into the AP
  • Wait until the output on the console says button is pressed. Wait for button to be released…
  • Once that message is displayed release the button and allow the AP to boot

You should now be at the ap: prompt

  • Type dir flash:
  • Enter the command delete flash:private-multiple-fs
  • Press y when prompted
  • Type reset to reboot the AP

Username: Cisco
Password: Cisco


If auto discovery fails,  can manually configure AP IP address and WLC IP address


- capwap ap ip address AP_IP_ADDRESS MASK

- capwap ap ip default-gateway WLC_IP_ADDRESS  --- Optional

- capwap ap controller ip address WLC_IP_ADDRESS


====
Reset AP:

on Linux box:
screen /dev/ttyS0

debug capwap console cli
erase /all nvram:
undebug all
reload
need manually delete IPs
clear capwap ip ...
clear capwap controller ....


Error on AP:
Jun  5 23:43:09.009: %CAPWAP-1-SSC_CERT_AUTH_FAILED: Failed to authorize controller, SSC certificate validation failed.Peer certificate verification failed 

Solution:
clear capwap private-config
and reboot the AP

=============
Config AP with static IP

- capwap ap ip address AP_IP_ADDRESS MASK

- capwap ap ip default-gateway WLC_IP_ADDRESS

- capwap ap controller ip address WLC_IP_ADDRESS



=============
Lightweight to Autonomous Conversion…
Lab AP 3502I,  2702I has same steps

1. Convert to standalone mode 

Check image:
show version
  • If you see k9w8 → lightweight (needs conversion)
  • If you see k9w7 → already standalone
    • If AP is already received IP from DHCP server
    archive download-sw /force-reload /overwrite tftp://192.168.2.100/ap3g1-k9w7-tar.152-4.JA1.tar
    To manually set AP IP from console:
    set IP_ADDR 192.168.2.10
    set NETMASK 255.255.255.0

    Or configure IP on BVI1 interface

    --- After AP is rebooted to standalone mode ---

    2. Configure SSID

    To create a single ssid, bridge wireless to wired network

    ! Configure management interface (BVI1):
    interface BVI1
    ip address 192.168.2.2 255.255.255.0
    no shutdown

    dot11 ssid LAB-WIFI
    authentication open
    authentication key-management wpa version 2
    guest-mode
    wpa-psk ascii 0 YourPassword123
    exit

    ! 2.4 GHz Radio
    interface Dot11Radio0
    no shutdown
    ssid LAB-WIFI
    bridge-group1
    station-role root
    encryption mode ciphers aes-ccm
    exit
    ! 5 GHz Radio
    interface Dot11Radio1
    no shutdown
    ssid LAB-WIFI
    bridge-group1
    station-role root
    encryption mode ciphers aes-ccm
    exit

    interface GigabitEthernet0
    bridge-group 1


    https://mrncciew.com/2012/10/20/lightweight-to-autonomous-conversion/
    https://blog.router-switch.com/2014/12/how-to-convert-a-cisco-3502i-ap-to-operate-in-an-autonomous-mode/













    Comments

    Post a Comment