The AP is Unable to Upgrade to theArubaOSImage

There are several reasons why an AP may not be able to upgrade to theArubaOSimage, even when amanaged deviceis configured.

ADP is disabled

If theADPAruba Discovery Protocol. ADP is an Aruba proprietary Layer 2 protocol. It is used by the APs to obtain the IP address of the TFTP server from which it downloads the AP boot image.is disabled on themanaged device, the AP will not be able to locate anymanaged deviceon its own. Execute theadp discovery enablecommand in theCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.to enableADPAruba Discovery Protocol. ADP is an Aruba proprietary Layer 2 protocol. It is used by the APs to obtain the IP address of the TFTP server from which it downloads the AP boot image..

The AP preference role is set tocontroller-less

If the AP preference role is set tocontroller-less, the AP bypassescontrollerdiscovery and immediately initiates Instant discovery. Use one of the following methods to check if the AP preference role has been set tocontroller-less:

Execute theapboot> printenvcommand on the AP console to view the current environment variable settings. Theuap_controller_lessfield indicates if the preference role is set tocontroller-less:

uap_controller_less=1: Thecontroller-less preference role is enabled.

uap_controller_less=0: Thecontroller-less preference role is disabled.

See“Managing AP Console Settings” on page 1for more details on APBoot commands.

Check the boot up log from the AP console. If the preference role is set tocontroller-less, the“ADP is disabled by uap_controller_less”message appears.

Execute theshow log provisioncommand on the AP console to view the AP provisioning logs. If the preference role is set tocontroller-less, the“Controller discovery is disabled by ap-env uap_controller_less”message appears.

The AP is not factory default

如果不设置为出厂默认值(美联社manufacturing image in unprovisioned mode), it cannot enter thecontrollerdiscovery process. Use one of the following methods to check if the AP is factory default:

Check the boot up log from the AP console. If the AP is not factory default, the“Not factory_default ap. Do not run ADP.”message appears.

Execute theshow log provisioncommand on the AP. If the AP is not factory default, the“Controller discovery is disabled since UAP is not factory default status”message appears.

APs remain in unprovisioned mode after failing bothcontrollerand Instant discovery. If the AP is unable to upgrade to theArubaOSor Instant image through thecontrollerand Instant discovery process, it can be upgraded manually using theSetMeUp-xx:xx:xxprovisioningSSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network.. Execute theshow networkcommand on the AP to check if the AP is connected to theSetMeUp-xx:xx:xxprovisioningSSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network.. If the AP is connected to a differentSSIDService Set Identifier. SSID is a name given to a WLAN and is used by the client to access a WLAN network., it is not factory default.

Themanaged deviceis not running the correct image version

An AP can only be converted into acontroller-based AP if themanaged deviceto which it connects is runningArubaOS8.2.0.0.Managed devicesthat run a different version ofArubaOSdo not support the AP discovery logic and cannot convert the AP tocontroller-based mode.

The AP is attempting to connect to a fakecontroller

If the AP fails to convert into acontroller-based AP, themanaged deviceto which it attempted to connect may be fake. Execute theshow log provisioncommand on themanaged deviceto check if the AP failed to connect after 10 attempts.

FTP or TFTP permission is denied on themanaged device

In order to download theArubaOSimage from themanaged device, the AP must establish aFTPFile Transfer Protocol. A standard network protocol used for transferring files between a client and server on a computer network.orTFTPTrivial File Transfer Protocol. The TFTP is a software utility for transferring files from or to a remote host.connection to themanaged device. IfFTPFile Transfer Protocol. A standard network protocol used for transferring files between a client and server on a computer network.orTFTPTrivial File Transfer Protocol. The TFTP is a software utility for transferring files from or to a remote host.permission is denied on themanaged device, the connection attempt is dropped, and the AP cannot download theArubaOSimage.

Use one of the following methods to check ifFTPFile Transfer Protocol. A standard network protocol used for transferring files between a client and server on a computer network.orTFTPTrivial File Transfer Protocol. The TFTP is a software utility for transferring files from or to a remote host.permission is denied on themanaged device:

Execute theshow log upgradecommand on the AP. IfFTPFile Transfer Protocol. A standard network protocol used for transferring files between a client and server on a computer network.orTFTPTrivial File Transfer Protocol. The TFTP is a software utility for transferring files from or to a remote host.permission is denied, the AP fails to connect to themanaged device, and the following messages appear in the upgrade log:

Connecting to … failed: Connection time out.

Error: failed to retrieve image

Info: try with tftp to download the image.

Access controls can be applied to amanaged deviceport to filter traffic between themanaged deviceand the APs. Traffic must meet all criteria on theACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.in order to reach themanaged deviceor AP. If it does not meet the criteria, the connection is dropped.

Execute theshow interface fastethernet access-groupcommand to view theACLsAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.that have been applied to the port.

Execute theshow ip access-list command on thecontrollerto view the detailed configuration for theACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.that has been applied to the port.

Execute theinterface fastethernet|gigabitethernet} ip access-group {in|out|session {vlan }}command to apply anACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.to a port.

Execute theno interface {fastethernet|gigabitethernet} ip access-group {in|out|session {vlan }}command to remove anACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.from a port.

Execute theip access-list extended {|} deny command to reject traffic for a specific protocol. If you reject traffic for theUDPUser Datagram Protocol. UDP is a part of the TCP/IP family of protocols used for data transfer. UDP is typically used for streaming media. UDP is a stateless protocol, which means it does not acknowledge that the packets being sent have been received.,TFTPTrivial File Transfer Protocol. The TFTP is a software utility for transferring files from or to a remote host.traffic is dropped. If you reject traffic for theTCPTransmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data.,FTPFile Transfer Protocol. A standard network protocol used for transferring files between a client and server on a computer network.traffic is dropped.

Execute theip access-list extended {|} permit command to allow traffic for a specific protocol. If you allow traffic for theUDPUser Datagram Protocol. UDP is a part of the TCP/IP family of protocols used for data transfer. UDP is typically used for streaming media. UDP is a stateless protocol, which means it does not acknowledge that the packets being sent have been received.,TFTPTrivial File Transfer Protocol. The TFTP is a software utility for transferring files from or to a remote host.traffic can reach themanaged deviceor AP. If you allow traffic for theTCPTransmission Control Protocol. TCP is a communication protocol that defines the standards for establishing and maintaining network connection for applications to exchange data.,FTPFile Transfer Protocol. A standard network protocol used for transferring files between a client and server on a computer network.traffic can reach themanaged deviceor AP.