Cisco 1200 series upgrade failure

I have a Cisco 1200 Series (AIR-AP1231G-A-K9) access point, I have been upgrading these models to lightweight mode but are having issues with one in particular, this access point keeps "rebooting" itself, I am assuming that the upgrade faild, how can I get the access point upgraded?
Here is a capture.
Cisco IOS Software, C1200 Software (C1200-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Mon 17-Jul-06 11:41 by alnguyen
Image text-base: 0x00003000, data-base: 0x00359FC0
Initializing flashfs...
flashfs[1]: 4 files, 2 directories
flashfs[1]: 0 orphaned files, 0 orphaned directories
flashfs[1]: Total bytes: 7741440
flashfs[1]: Bytes used: 1862656
flashfs[1]: Bytes available: 5878784
flashfs[1]: flashfs fsck took 2 seconds.
flashfs[1]: Initialization complete....done Initializing flashfs.
cisco AIR-AP1231G-A-K9 (PowerPC405GP) processor (revision B0) with 15038K/1336K bytes of memory.
Processor board ID FTX0914J0Z1
PowerPC405GP CPU at 196Mhz, revision number 0x0145
Last reset from reload
LWAPP image version 3.0.51.0
1 FastEthernet interface
32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: 00:13:7F:E2:34:DB
Part Number : 73-8704-08
PCA Assembly Number : 800-23211-09
PCA Revision Number : A0
PCB Serial Number : FOC09100NH1
Top Assembly Part Number : 800-23304-08
Top Assembly Serial Number : FTX0914J0Z1
Top Revision Number : A0
Product/Model Number : AIR-AP1231G-A-K9
Press RETURN to get started!
*Mar 1 00:00:04.505: %SYS-5-RESTART: System restarted --
Cisco IOS Software, C1200 Software (C1200-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2006 by Cisco Systems, Inc.
Compiled Mon 17-Jul-06 11:41 by alnguyen
*Mar 1 00:00:05.442: %LINK-3-UPDOWN: Interface FastEthernet0, changed state to up
*Mar 1 00:00:06.442: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to down
ap>
ap>
*Mar 1 00:00:14.441: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0, changed state to up
*Mar 1 00:00:23.516: %LWAPP-5-CHANGED: LWAPP changed state to DISCOVERY
*Mar 1 00:00:23.544: LWAPP_CLIENT_ERROR_DEBUG: lwapp_crypto_init_ssc_keys_and_certs no certs in the SSC Private File
*Mar 1 00:00:23.544: LWAPP_CLIENT_ERROR_DEBUG:
*Mar 1 00:00:23.544: lwapp_crypto_init: PKI_StartSession failed
*Mar 1 00:00:23.698: %SYS-5-RELOAD: Reload requested by LWAPP CLIENT. Reload Reason: FAILED CRYPTO INIT.
*Mar 1 00:00:23.698: %LWAPP-5-CHANGED: LWAPP changed state to DOWNXmodem file system is available.
flashfs[0]: 4 files, 2 directories
flashfs[0]: 0 orphaned files, 0 orphaned directories
flashfs[0]: Total bytes: 7741440
flashfs[0]: Bytes used: 1862656
flashfs[0]: Bytes available: 5878784
flashfs[0]: flashfs fsck took 9 seconds.
Reading cookie from flash parameter block...done.
Base ethernet MAC Address: 00:13:7f:e2:34:db
Initializing ethernet port 0...
Reset ethernet port 0...
Reset done!
ethernet link up, 100 mbps, full-duplex
Ethernet port 0 initialized: link is up
Loading "flash:/c1200-rcvk9w8-mx/c1200-rcvk9w8-mx"...#########################################################################################################################################################################
File "flash:/c1200-rcvk9w8-mx/c1200-rcvk9w8-mx" uncompressed and installed, entry point: 0x3000
executing...
Restricted Rights Legend

I might have an answer for you... or I might be COMPLETELY WRONG
If it isn't just a "failed" upgrade, as in you've tried the upgrade again and it still is happening.... I was reading something about older APs not have a Manufacturing-installed certificate (MIC) and these AP's generating a Self-signed Certificate (SSC).
The error you have is referring to SSC so I'm writing this as if you have not had to previously do this step for your other conversions.
I believe a couple of things needs to happen for SSC AP's.
1) Must enable controller to accept self-signed certificated.
Security > AAA > AP Polices > Accept Self Signed Certificate > Apply
2) Add AP to Authorization List in Security > AAA > AP Polices > Add AP To Authrorization List
Enter MAC Address of the AP
Certificate type = SSC
SHA1 Key Hash can be obtained from the controller by issueing this command:
"debug pm pki enable"
Look for the line: sshpmGetIssuerHandles: SSC Key Hash is XXXXXXXXXXXXXXXXXXXXXXXXXX
I believe you use the XXXXXXXXXXXXXXXXXXXXX as the SHA1 Key Hash.
3) If required, you may also need to add the AP MAC Address in the Mac-Filter: Security > AAA > MAC Filtering > New >
Hopefully its either a reload of the software or this SSC thing that fixes the problem....

Similar Messages

The maximum cable distance from antenna and Cisco 1200 series.

Hello all!
I?m using the Cisco 1200 Access Points Series with two 2.2dBi dipole antennas. I have read the installation guide for that Access Points and that can be installed with the antennas in separated places. But this guide didn't mention the maximum distance for the antenna cable...
Somebody here can say me this maximum distance?
Had somebody here made this kind of antenna installation with cable?
Thanks.

Oh Yeah!, I absolutely agree on "shorter is way better"
Given any chance / choice at all, I'd try to keep the cable length under 25 feet. If the option is available for a NEMA cabinet to get the cable shorter, I'd probably do that too.
Since it's good practice to use a chunk of fiber optic cabling between the external stuff and the inside network, you may as well put the AP as close to the antennas as possible and convert the copper to fiber for the long haul.
You get some lightning protection (at least you won't smoke all of the systems sitting on your LAN) and better signal strength (and probably signal quality too).
For something like a 200' run, if forced to do it (we're talking "gun to the head" forced here), I'd probably be looking for something like Andrew LDF4-50 1/2" Heliax with probably a weeeeee bit O' amp tossed in for good measure.
That would also imply that the system would also have to be re-certified, because of the non-standard components ...and a pretty good budget to boot.
Sometimes you gotta do what you gotta do.
FWIW
Scott

Symbol Netvision Phone w/Cisco 1200 series Access Point

I am running 802.11b access point my phone can associate and get an ip address from my call manager but I keep getting "not registered" "registered". I and then I lose association to the access point. I have 2 vlans on one access point one for voice and one for data. Please let me know if someone has a work around or a fix.
Stan

Stan,
Sounds like you have an interference problem.
What did your site survey show up in terms of other AP's and overlapping coverage areas ? Try a new channel that has the 2 channel separation from other busy channels and maybe even try a new/better placement of the AP
effectivly what you have now is the equivalent of pulling out the cable and plugging it back in constantly on a standard IP phone this means you will not be able to make calls
What firmware you running on the AP ?

Conifuting cisco 1200 series

Connection through hyperterminal, I am getting "system running-config write error; configuration failed. How do I resolve this. thanks

Using the "mode" button method, re-install the IOS.

Cisco 1200 on long distances

I need to know (if anyone have in practice). What will be maximal distance in ideal conditions with Cisco 1200 series AP for outdoor point-to-point connections in WGB mode with high gain directional antennas ?

Console into the AP and post the log. This will help understand the issue better.

Cisco 1200 as bridge

Hi everyone
I am about to use Cisco 1200 series AP as bridge , but I have seen and I have compared it with Cisco 1300 and 1400 outdoor models , and I saw that 1200 is mainly for indoor (LW).
Now the question is :
1. Can I use it as outdoor bridge for Point to Point linking ?
2. What will be maximum distance with reflector grid antennas (and patch antennas)?
3. If in practice , is it stabile ?
Thank you

Again I stress I can only go by what I'd install in the UK so it may not be applicable wherever you are! Also, I always try and avoid mixing vendors equipment if at all possible so I would use either one of two Cisco antenna, I've also listed antenna cables, use the shortest you can:
AIR-ANT1949 Yagi mast mount 2MB at 29.49 km.
AIR-ANT3338 Solid Dish 2MB at 42.62 km.
AIR-CAB020LL-R 6m antenna cable 1.3db loss
AIR-CAB050LL-R 15m antenna cable 3.4db loss
AIR-CAB100ULL-R 30m antenna cable 4.4db loss
Ranges and throughputs are Cisco's, you may find the biggest problem is clear line of sight over that sort of distance.
For more information check the antenna guide here:
http://www.cisco.com/en/US/products/hw/wireless/ps469/products_data_sheet09186a008022b11b.html
You can have this one free of charge : ) just don't forget to award points if it's of use : )

Need a tool for flash backup on Cisco 2821 series routers

Hello Folks,
We have around 1200-1500 cisco 2821 series routers on those we are performing the hardware upgrade so we are taking the backup of all the files available in the flash of all the routers, we just want to know is there any trusted tool available to make this task easy to schedule and take the backups.
Please let me know if you know any tool name.
Thanks,
Raja.

Sorry, I don't know any tool that makes a backup of the whole flash...
You could fo it with from ios cli maybe execute it automatically...
To flash:
archive tar /create flash:/backup.tar flash:/
copying directly to ftp should also work:
archive tar /create ftp://test:[email protected]/backup.tar flash:/

Recomended ios for 1200 series?

Any suggestions for most stable and bugfree ios to use on the AP1200 series?
For me it looks like the 12.3(8)JEA3 should be ok after reading about caveats in the release notes. Only something about shared authentication in non-native vlans and two other minor things. Our setup has 8 ssids with 4 of them with wpa-psk authentication that works ok with this version.
Its a little confusing wich version to choose with all that numbers and release dates.

Only some versions can be upgraded:
For all IOS-based 1200 series modular access point (1200/1220 Cisco IOS Software Upgrade, 1210 and 1230 AP) platforms, it depends on the radio:
–if 802.11G, MP21G and MP31G are supported
–if 802.11A, RM21A and RM22A are supported
The 1200 series access points can be upgraded with any combination of supported radios: G only, A only, or both G and A.
http://www.cisco.com/en/US/docs/wireless/access_point/conversion/lwapp/upgrade/guide/lwapnote.html#wp157130

Trying to Download a Software Image to Cisco 2800 series router through TFTP Using the tftpdnld ROMmon Command

Trying to Download a Software Image to Cisco 2800 series router through TFTP Using the tftpdnld ROMmon Command
and I am getting an Error , I cant figure out what I am doing wrong. I have also pasted my display down here can someone help me out, thanks in advance, I am still new to this utility.
My questions are How do you direct this utility to point to the desktop or the TFTP folder
does FE_PORT: Fast Ethernet 0 imply or point to Fa0/0 on my router
My router is suppose to have 10.0.0.3 255.0.0.0
Gateway of 10.0.0.1 255.0.0.0
My TFTP Server 10.0.0.2 255.0.0.0
How do I get the MAC address of the Router or the TFTP Server and which one is required?
my Ethernet port is 100Mb/Sec I cant tell whether it is full duplex or not so How do i set this FE_SPEED_MODE: Auto???
=====================================================================================
rommon 10 >
rommon 10 > set
PS1=rommon ! >
FE_PORT=0
WARM_REBOOT=
RET_2_RTS=20:35:55 UTC Thu Sep 25 2014
BSI=0
RET_2_RCALTS=
RANDOM_NUM=1600357627
?=0
IP_ADDRESS=10.0.0.3
IP_SUBNET_MASK=255.0.0.0
DEFAULT_GATEWAY=10.0.0.1
TFTP_SERVER=10.0.0.2
TFTP_FILE=
rommon 11 > TFTP_FILE=c2800nm-adventerprisek9-mz.124-24.T4
rommon 12 > TFTP_CHECKSUM=0
rommon 13 > SET
monitor: command "SET" not found
rommon 14 > set
PS1=rommon ! >
FE_PORT=0
WARM_REBOOT=
RET_2_RTS=20:35:55 UTC Thu Sep 25 2014
BSI=0
RET_2_RCALTS=
RANDOM_NUM=1600357627
IP_ADDRESS=10.0.0.3
IP_SUBNET_MASK=255.0.0.0
DEFAULT_GATEWAY=10.0.0.1
TFTP_SERVER=10.0.0.2
?=0
TFTP_FILE=c2800nm-adventerprisek9-mz.124-24.T4
TFTP_CHECKSUM=0
rommon 15 > tftpdnld
          IP_ADDRESS: 10.0.0.3
      IP_SUBNET_MASK: 255.0.0.0
     DEFAULT_GATEWAY: 10.0.0.1
         TFTP_SERVER: 10.0.0.2
           TFTP_FILE: c2800nm-adventerprisek9-mz.124-24.T4
        TFTP_VERBOSE: Progress
    TFTP_RETRY_COUNT: 18
        TFTP_TIMEOUT: 7200
       TFTP_CHECKSUM: No
        TFTP_MACADDR: 30:37:a6:49:35:a8
             FE_PORT: Fast Ethernet 0
       FE_SPEED_MODE: Auto
Invoke this command for disaster recovery only.
WARNING: all existing data in all partitions on flash: will be lost!
Do you wish to continue? y/n: [n]: y
ARP: address resolution for 10.0.0.2 timed out.
ARP failed with failure code 1. TFTP transfer aborted.
TFTP: Operation terminated prematurely.
rommon 16 >       " not found
rommon 17 >FE_SPEED_MODE=2
variable name contains illegal (non-printable) characters
rommon
rommon 18 > set
PS1=rommon ! >
FE_PORT=0
WARM_REBOOT=
RET_2_RTS=20:35:55 UTC Thu Sep 25 2014
BSI=0
RET_2_RCALTS=
RANDOM_NUM=1600357627
IP_ADDRESS=10.0.0.3
IP_SUBNET_MASK=255.0.0.0
DEFAULT_GATEWAY=10.0.0.1
TFTP_SERVER=10.0.0.2
TFTP_FILE=c2800nm-adventerprisek9-mz.124-24.T4
TFTP_CHECKSUM=0
?=0
rommon 19 > tftpdnld [ur]
usage: tftpdnld [-hr]
Use this command for disaster recovery only to recover an image via TFTP.
Monitor variables are used to set up parameters for the transfer.
(Syntax: "VARIABLE_NAME=value" and use "set" to show current variables.)
"ctrl-c" or "break" stops the transfer before flash erase begins.
The following variables are REQUIRED to be set for tftpdnld:
            IP_ADDRESS: The IP address for this unit
        IP_SUBNET_MASK: The subnet mask for this unit
       DEFAULT_GATEWAY: The default gateway for this unit
           TFTP_SERVER: The IP address of the server to fetch from
             TFTP_FILE: The filename to fetch
The following variables are OPTIONAL:
          TFTP_VERBOSE: Print setting. 0=quiet, 1=progress(default), 2=verbose
      TFTP_RETRY_COUNT: Retry count for ARP and TFTP (default=18)
          TFTP_TIMEOUT: Overall timeout of operation in seconds (default=7200)
         TFTP_CHECKSUM: Perform checksum test on image, 0=no, 1=yes (default=1)
          TFTP_MACADDR: The MAC address for this unit
               FE_PORT: 0= (default), 1
         FE_SPEED_MODE: 0=10/hdx, 1=10/fdx, 2=100/hdx, 3=100/fdx,
                        5=Auto (default)
      TFTP_DESTINATION: The flash destination device for the file
                        flash:(default), usbflash0:, usbflash1:
Command line options:
   -h: this help screen
   -r: do not write flash, load to DRAM only and launch image
rommon 20 > tftpdnld
          IP_ADDRESS: 10.0.0.3
      IP_SUBNET_MASK: 255.0.0.0
     DEFAULT_GATEWAY: 10.0.0.1
         TFTP_SERVER: 10.0.0.2
           TFTP_FILE: c2800nm-adventerprisek9-mz.124-24.T4
        TFTP_VERBOSE: Progress
    TFTP_RETRY_COUNT: 18
        TFTP_TIMEOUT: 7200
       TFTP_CHECKSUM: No
        TFTP_MACADDR: 30:37:a6:49:35:a8
             FE_PORT: Fast Ethernet 0
       FE_SPEED_MODE: Auto
Invoke this command for disaster recovery only.
WARNING: all existing data in all partitions on flash: will be lost!
Do you wish to continue? y/n: [n]: y
ARP: address resolution for 10.0.0.2 timed out.
ARP failed with failure code 1. TFTP transfer aborted.
TFTP: Operation terminated prematurely.
rommon 21 >

What I notice in the original post is this error
ARP: address resolution for 10.0.0.2 timed out.
which says that the router is looking for the 10.0.0.2 server but not getting response to its arp request. Can the original poster clarify for us how the device that has the image file is connected to the router that has the problem? Also what kind of device is 10.0.0.2? Is it a PC running TFTP server software or is it something else?
HTH
Rick

Using CLI to enter Mac local list on 1200 Series

I have a number of 1200 series Ap's that are set up for MAC Authentication based on a local list only. From the GUI these addresses are entered from the Advanced Security Screen.
I wnt to find a method for entering them from the CLI but am running into a problem with the level 7 passwords that seem to be automaticly applied when the MAC addresses are added from the GUI.
If I enter MAC 0011.22aa.33ff from the GUI and then look at the config from the CLI it looks like this:
username xxx password xxxx
username xxxx autocommand exit
how do I do this from the CLI?

Hi,
I think if you need to enter lots of MAC Addresses into AP, the fastest way is to use CLI.
Refer to the following doc on how to configure MAC from CLI. Look under "Local Authenticator Access Point - Step 11"
http://www.cisco.com/en/US/partner/products/hw/wireless/ps4570/products_configuration_guide_chapter09186a0080341e72.html#wp1039558
If authentication is purely done via MAC, then you can do like the following example:
AP#config t
AP(config-radsrv)# user xxx password xxx group clerks mac-auth-only
Probably you need to use notepad to list all MAC (as username & password), then copy &paste to your AP's CLI.
Hope this helps.
Rgds,
AK

1200 Series - Tagged Management VLAN Traffic

Hi,
As per my understanding the 1200 Series Access points running IOS (12.2(15)XR) send the management traffic (RADIUS,Accouting NTP etc) un-tagged i.e. using VLAN 1.
As per our current setup, we assign this un-tagged traffic to a different VLAN (by changing native vlan to x for the Trunk Port) on the cisco switch.
Is it possible to configure the Access Point to send Management Traffic as tagged with a particular VLAN id ? (Similar to what it does for Wireless Traffic, when SSID are associated to specific VLANs)
We are trying to set this up with a 3-Com 4400 series switch i have been unable to configure the 3-Com switch, so that it can assign the untagged traffic to different VLAN instead of VLAN 1.
Regards \\ Naman

Changing the Native VLAN doesn't make a difference. I can create any VLAN and make it native but management traffic is still being sent un-tagged.
Below was the setup i tested
AP--->Trunk Link<->Switch Port(Native VLAN=15)
Switch Port --->Trunk Link<->Router with VLAN15
I can make any VLAN as native VLAN on the AP and it doesn't effect the functionality as long as the Switch Native VLAN matches to the corresponding VLAN on the router.

Multilink limitations application on Cisco 7200 Series

Hi,
Can someone please mention if Multilink can be supported on Cisco 7200 Series?
IOS version:
IOS 7200 Software (C7200-P-M), Version 12.3(16a), SOFTWARE (fc2)
cisco 7206VXR
Any comment will be appreciated.
Thank you.

Hi -
Our s/w development group is in the process of implementing ipv6 support in our products, and would like to use our Cisco 2650XM running ITP s/w for ipv6 interoperability tests.
However, it appears that ipv6 is not supported in this s/w version:
ITP1#sh version
Cisco IOS Software, C2600 Software (C2600-ITPK9-M), Version 12.4(15)SW2, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2008 by Cisco Systems, Inc.
Compiled Tue 23-Sep-08 19:48 by prod_rel_team
ROM: System Bootstrap, Version 12.2(7r) [cmong 7r], RELEASE SOFTWARE (fc1)
ITP1#config
Configuring from terminal, memory, or network [terminal]?
Enter configuration commands, one per line. End with CNTL/Z.
ITP1(config)#ipv6 ?
% Unrecognized command
My question is: Can I use this s/w version on the 2650XM in an ipv6 network? Do I need to upgrade the s/w?
Thanks,
Matt

Cisco 1200 empty .csv file

I have flashed the cisco 1200 ap using the upgrade utility. Everything checks out ok but the .csv file is empty.Did i miss something here?
Details
Model:AIR-AP1232AG-S-K9
Autonomous IOS:12.3(7)JA2
Lightweight IOS:
c1200-rcvk9w8-tar.123-11JX1

The MIC is a Machine Installed Certificate. The AP has the certificate already installed, there is no need to
generate a self-signed certificate. That is why the .csv file is empty. You will not have to put any certificate information on WLC/WCS for this AP.

Specific OID for A radio modules on 1200 series access points

Is there a specific OID for A radio module cards of the following type:
Flap - AIR-RM21A-A-K9
Dipoles - AIR-RM22A-A-K9

No switches in Cisco's current product line provide enough power to support both radio modules in the 1200 series. The (now optional) power injector for the 1200 will provide enough inline power for both radios, if that is an acceptible option.
Cisco has plans for several switches that will be able to provide inline power to both radios, but I am not aware of ETA's on these.

Bandwidth throughput Cisco 1800 Series

Hi All,
Currently looking at upgrading our 10mb leased line to 30mb. We currently have a a Cisco 1800 series which Cisco's technical manual says supports up to 40mb throughput, however our ISP are saying we should upgrade to a Cisco 1921 to support the additional bandwidth.. Has anyone run into this before? Any ideas if what our ISP are telling us is correct?
Thanks in advance,
J

Dear Joe,
Thank you for reaching the Small Business Support Community.
I am afraid you posted your comment, or request for comment, on the wrong community forum. This one is only for Small Business routers where your inquiry is about enterprise ones. I suggest you to move over this post to the LAN, Switching and Routing group from the "Actions" panel on the top right corner of this window or just open up a new one there;
https://supportforums.cisco.com/community/netpro/network-infrastructure/switching
I apologize for the inconvenience and please do not hesitate to reach me back if there is any further assistance we may help you with.
Kind regards,
Jeffrey Rodriguez S. .:|:.:|:.
Cisco Customer Support Engineer
*Please rate the Post so other will know when an answer has been found.

Cisco 1200 series upgrade failure

Similar Messages

Maybe you are looking for