第一部分：设备初始化
设备开机上电：
Enter Administrative User Name (24 characters max): lcj Enter Administrative Password (3 to 24 characters): **************** Re-enter Administrative Password : **************** System Name [Cisco_6c:af:c0] (31 characters max): ME-WLC Enter Country Code list (enter 'help' for a list of countries) [US]: Configure a NTP server now? [YES][no]: no Configure the system time now? [YES][no]: yes Enter the date in MM/DD/YY format: 03/24/20 Enter the time in HH:MM:SS format: 15:52:30 Enter timezone location index (enter 'help' for a list of timezones): help 1. (GMT-12:00) International Date Line West 2. (GMT-11:00) Samoa 3. (GMT-10:00) Hawaii 4. (GMT -9:00) Alaska 5. (GMT -8:00) Pacific Time (US and Canada) 6. (GMT -7:00) Mountain Time (US and Canada) 7. (GMT -6:00) Central Time (US and Canada) 8. (GMT -5:00) Eastern Time (US and Canada) 9. (GMT -4:00) Altantic Time (Canada) 10. (GMT -3:00) Buenos Aires (Agentina) 11. (GMT -2:00) Mid-Atlantic 12. (GMT -1:00) Azores 13. (GMT) London, Lisbon, Dublin, Edinburgh 14. (GMT +1:00) Amsterdam, Berlin, Rome, Vienna 15. (GMT +2:00) Jerusalem 16. (GMT +3:00) Baghdad 17. (GMT +4:00) Muscat, Abu Dhabi 18. (GMT +4:30) Kabul 19. (GMT +5:00) Karachi, Islamabad, Tashkent 20. (GMT +5:30) Colombo, Kolkata, Mumbai, New Delhi 21. (GMT +5:45) Katmandu 22. (GMT +6:00) Almaty, Novosibirsk 23. (GMT +6:30) Rangoon 24. (GMT +7:00) Saigon, Hanoi, Bangkok, Jakatar 25. (GMT +8:00) HongKong, Beijing, Chongqing 26. (GMT +9:00) Tokyo, Osaka, Sapporo 27. (GMT +9:30) Darwin 28. (GMT+10:00) Sydney, Melbourne, Canberra 29. (GMT+11:00) Magadan, Solomon Is., New Caledonia 30. (GMT+12:00) Kamchatka, Marshall Is., Fiji 31. (GMT+12:00) Auckland (New Zealand) 32. (GMT+10:30) Adelaide, South Australia Enter timezone location index (enter 'help' for a list of timezones): 25 Management Interface IP Address Configuration [STATIC][dhcp]: STATIC Management Interface IP Address: 192.168.1.254 Management Interface Netmask: 255.255.255.0 Management Interface Default Router: 192.168.1.1 Cleaning up Provisioning SSID As the Mgmt Address is updated, all the DHCP scopes with Central NAT enabled will be disabled and enabled As the Mgmt Address is updated, all the WLANs associated with central NAT enabled scopes will be enabled and disabled Create Management DHCP Scope? [yes][NO]: no Employee Network Name (SSID)?: eStarPro-Cat Employee Network Security? [PSK][enterprise]: PSK Employee PSK Passphrase (8-63 characters)?: *********** Re-enter Employee PSK Passphrase: *********** Enable RF Parameter Optimization? [YES][no]: Yes Client Density [TYPICAL][Low][High]: TYPICAL Traffic with Voice [NO][Yes]: no Configuration correct? If yes, system will save it and reset. [yes][NO]: yes Cleaning up Provisioning SSID Configuration saved! Resetting system with new configuration... Writing reload timestamp (Tue Mar 24 15:54:29 UTC 2020) to disk
发现Internal的AP无法注册。开启debug查看发现Country Code问题
*spamApTask0: Mar 25 00:02:48.938: 00:ee:ab:e2:af:40 Updating IP info for AP 00:ee:ab:e2:af:40 -- static 1, 192.168.1.11/255.255.255.0, gtw 192.168.1.1 *spamApTask0: Mar 25 00:02:48.939: 00:ee:ab:e2:af:40 Updated IP Domain info for AP 00:ee:ab:e2:af:40 -- set 0, Domain *spamApTask0: Mar 25 00:02:48.941: 00:ee:ab:e2:af:40 Setting MTU to 1485 *spamApTask0: Mar 25 00:02:48.942: 00:ee:ab:e2:af:40 Regulatory Domain Mismatch: AP 00:ee:ab:e2:af:40 not allowed to join. Allowed domains: 802.11bg:-A 802. <<<<<<<<<< *spamApTask0: Mar 25 00:02:48.942: 00:ee:ab:e2:af:40 Finding DTLS connection to delete for AP (192:168:1:11/5272) *spamApTask0: Mar 25 00:02:48.942: 00:ee:ab:e2:af:40 Disconnecting DTLS Capwap-Ctrl session 0x7d51e78 for AP (192:168:1:11/5272). Notify(true) *spamApTask0: Mar 25 00:02:48.942: 00:ee:ab:e2:af:40 CAPWAP State: Dtls tear down
(Cisco Controller) >show country Configured Country............................. US - United States Configured Country Codes US - United States............................. 802.11a Indoor,Outdoor / 802.11b / 802.11g
添加Country需要先关闭Radio
(Cisco Controller) >config 802.11a disable network Disabling the 802.11a network may strand mesh APs. Are you sure you want to continue? (y/n)y (Cisco Controller) >config 802.11b disable network Disabling 802.11b network may strand mesh APs. Are you sure you want to continue? (y/n)y
添加Country Code
(Cisco Controller) >config countries-list add CN,US Changing country code could reset channel & RRM grouping configuration. If running in RRM One-Time mode, reassign channels after this command. Check customized APs for valid channel values after this command. Are you sure you want to continue? (y/n) y Configured Country............................. Multiple Countries : CN,US KEY: * = Channel is legal in this country and may be configured manually. A = Channel is the Auto-RF default in this country. . = Channel is not legal in this country. C = Channel has been configured for use by Auto-RF. x = Channel is available to be configured for use by Auto-RF. (-,-) = (indoor, outdoor) regulatory domain allowed by this country. -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+- 802.11bg : Channels : 1 1 1 1 1 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4 -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+- CN (-CE ,-CE ): A * * * * A * * * * A * * . US (-A ,-AB ): A * * * * A * * * * A . . . Auto-RF : C x x x x C x x x x C x x . -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- 802.11a : 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Channels : 3 3 3 4 4 4 4 4 5 5 6 6 0 0 0 1 1 2 2 2 3 3 4 4 4 5 5 6 6 6 7 : 4 6 8 0 2 4 6 8 2 6 0 4 0 4 8 2 6 0 4 8 2 6 0 4 9 3 7 1 5 9 3 -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- --More-- or (q)uit CN (-CH ,-CH ): . A . A . A . A A A A A . . . . . . . . . . . . A A A A * . . US (-AB ,-AB ): . A . A . A . A A A A A A A A A A A A A A A A A A A A A * . . Auto-RF : . C . C . C . C C C C C C C C C C C C C C C C C C C C C x . . -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- 4.9GHz 802.11a : Channels : 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- CN (-CH ,-CH ): . . . . . . . . . . . . . . . . . . . . . . . . . . US (-AB ,-AB ): * * * * * * * * * * * * * * * * * * * A * * * * * A Auto-RF : . C . C . C . C C C C C C C C C C C C C C C C C C C C C x . . -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- (Cisco Controller) > (Cisco Controller) > (Cisco Controller) >show country Configured Country............................. Multiple Countries : CN,US Configured Country Codes CN - China..................................... 802.11a Indoor,Outdoor / 802.11b / 802.11g US - United States............................. 802.11a Indoor,Outdoor / 802.11b / 802.11g
随后可以看到AP可以注册：
(Cisco Controller) >show ap summary Number of APs.................................... 1 Global AP User Name.............................. lcj Global AP Dot1x User Name........................ Not Configured * prefix indicates Cisco Internal AP AP Name Slots AP Model Ethernet MAC Location Country IP Address Clients DSE Location ------------------------------ ----- -------------------- ----------------- -------------------- ---------- --------------- ------- -------------- *AP70EA.1A6C.AFC8 2 AIR-AP1815M-H-K9 70:ea:1a:6c:af:c8 default location CN 192.168.1.11 0 [0 ,0 ,0 ]
第二部分：设备升级
配置升级的基本参数（前提准备好.zip的镜像文件包解压缩放在TFTP Server根目录）
(Cisco Controller) >transfer download datatype ap-image (Cisco Controller) >transfer download ap-images mode tftp (Cisco Controller) >transfer download ap-images serverIp 192.168.1.10 (Cisco Controller) >transfer download ap-images imagePath / (Cisco Controller) >transfer download start Mode............................................. TFTP Data Type........................................ ap-image TFTP Server IP................................... 192.168.1.10 TFTP Packet Timeout.............................. 6 TFTP Max Retries................................. 10 TFTP Path........................................ / Do you want to Auto-Reboot after Complete? (y/N) y Auto-Reboot check ENABLED!! System will reboot within 5secs, ONLY upon Download COMPLETION to all Aps. Configuration will be Saved before Auto-Reboot DOWNLOAD may take some time...... Are you sure you want to start? (y/N) y TFTP Code transfer starting. Triggered APs to pre-download the image. Controller will AUTOREBOOT once AP Image pre-download is complete.
查看此时AP的镜像：
(Cisco Controller) >show ap image all Total number of APs.............................. 1 Number of APs Initiated....................................... 0 Downloading..................................... 0 Predownloading.................................. 1 Completed predownloading........................ 0 Not Supported................................... 0 Failed/Waiting to Predownload................... 0 Predownload Predownload Flexconnect Failure Download AP Name Primary Image Backup Image Status Version Next Retry Time Retry Count Predownload Reason Progress ------------------ -------------- -------------- --------------- -------------- ---------------- ------------ -------------- -------------------- ---------- Internal-AP 8.5.160.0 8.5.131.0 Predownloading -- NA 0 NA NA 11%
同时此时TFTP的传输情况：
该过程AP的LED灯应该为橙色闪烁状态
确认AP下载完成了镜像。
(Cisco Controller) >show ap image all Total number of APs.............................. 1 Number of APs Initiated....................................... 0 Downloading..................................... 0 Predownloading.................................. 0 Completed predownloading........................ 1 Not Supported................................... 0 Failed/Waiting to Predownload................... 0 Predownload Predownload Flexconnect Failure Download AP Name Primary Image Backup Image Status Version Next Retry Time Retry Count Predownload Reason Progress ------------------ -------------- -------------- --------------- -------------- ---------------- ------------ -------------- -------------------- ---------- Internal-AP 8.5.160.0 8.5.131.0 Complete -- NA NA NA NA
确认当前版本并重启
(Cisco Controller) >show sysinfo Manufacturer's Name.............................. Cisco Systems Inc. Product Name..................................... Cisco Controller Product Version.................................. 8.5.160.0 <snip> (Cisco Controller) >reset system The system has unsaved changes. Would you like to save them now? (y/N) y Predownload COMPLETE!! Trigerring the REBOOT in 5secs. Configuration Saved! System will now restart! (Cisco Controller) > Writing reload timestamp (Tue Mar 24 16:21:03 UTC 2020) to disk [03/24/2020 16:21:06.4999] reboot: Restart Board type: AP1815M smem ram ptable found: ver: 1 len: 3 ......
重启完成之后检查此时的版本，升级成功
(Cisco Controller) >show sysinfo Manufacturer's Name.............................. Cisco Systems Inc. Product Name..................................... Cisco Controller Product Version.................................. 8.10.112.0 OUI File Last Update Time........................ N/A <snip>