История страницы

...

|| DeviceType | ESRWireless seriesaccess sevicecontrollers routers |
|| DeviceName1 | ESRWLC-15, ESRWLC-15R30, ESRWLC-303200, ESR-3200vWLC |
|| DeviceType2 | WirelessESR accessseries controllerssevice routers |
|| DeviceName2 | WLCESR-15, ESR-15R, WLCESR-30, WLCESR-3200, vWLC |
|| DocTitleAdditional | Firmware verion update guide |
|| fwversion | 1.30.2 |

...

This guide provides instructions on how to update the firmware components of the WLC series controllers, sonsidering considering the specific models and previous firmware versions of the device being update. 

...

Text box

Scroll Pagebreak

Notes, warnings and information

...

Files used for the

...

update

Якорь
files_for_FW files_for_FW

Depending on the model and upgrade update component, the following files should be used later in the guide body:

...

Prior to initiating the firmware update on WLC controllers, it is necessary to create a backup of the current
configuration.
Copying  Copying the current configuration from the WLC controllers is possible both using remote file copying
protocols copying protocols and to locally connected USB/MMC media. 

Preparation

To create a backup copy of the current configuration of the controller using remote file copy servers, do
the do the following: 

1. Start the corresponding server on the PC/server in the network.
2. Provide the ability to save files in the server working directory.
3. Provide IP connectivity between the upgraded upgdated WLC controller and the remote file copy server
   (routing).
4. Ensure operation of the remote copy protocol between the WLC and the remote file copy server
   server (intermediate firewalls). 
5. If necessary (for ftp, sftp, scp, http protocols), find out the username and password to write the
   required the required file.

To create a backup copy of the current configuration of the service router on a locally connected USB/MMC
storageMMC storage: 

1. Format USB/MMC partition as FAT32. 
2. Connect the USB/MMC storage to the appropriate WLC slot. 

Copying the configuration backup file 

...

2. Copy the file to the USB/MMC storage that is currently in use.

...

Copying a configuration backup to the WLC controllers is possible both using remote file copying protocols
and protocols and to locally connected USB/MMC media. 

...

1. Start the corresponding server on the PC/server on the network. 
2. Place the file with the previously created backup copy of the controller in the server working directory .
3. Configure the controller to establish IP connectivity with the remote file copy server. 
4. Provide IP connectivity between the upgraded updated WLC controller and the remote file copy server
   (routing). 
5. Ensure operation of the remote copy protocol between the WLC and the remote file copy server
   server (intermediate firewalls). 
6. If necessary (for ftp, sftp, scp, http protocols), find out the username and password to write the
   required the required file. 

To restore the controller configuration from a backup copy from a locally connected USB/MMC storage,
do  do the following: 

1. Format USB/MMC partition as FAT32.
2. File with a previously created backup copy of the controller configuration must be placed on the
   USBthe USB/MMC media.
3. Connect the USB/MMC storage to the appropriate ESR WLC slot. 

Copying configuration backup file 

...

2. Copy the file to the USB/MMC storage that is currently in use: 

...

Currently used secondary bootloader (U-Boot) and main firmware versions can be checked: 

• n in the CLI of the main firmware; 
• in the console interface output when loading the controller. 

Checking current

...

firmware version and version of the secondary bootloader (U-boot) in the

...

main firmware CLI 

To check the current firmware version and the version of the secondary bootloader (U-boot) in the CLI of the main softwarethe main firmware, execute the 'show version' command: 

Checking the current firmware version and the version of the primary (sbi, bl1) and

...

secondary (U-boot)

...

bootloaders in the output of the console interface when loading the service router 

To check the current firmware version and the version of the secondary bootloader (U-boot) in the output of the console interface when loading the controller, do the following: 

1. Connect to the WLC controller via the Console interface on the front panel of the controller using the
following the following parameters of the PC RS-232 interface: 

...

• Switch the power off and then switch it back on. The interval between switching off and on must be at least 20 seconds. 
  Briefly press the function button F on the front panel of the controller.
• Execute the 'reload system' command in the CLI of the main firmware of the controller. 
  

  Scroll Pagebreak

...

3. During the loading, information about the versions will be displayed in the console: 

• Primary loader bootloader (sbi, bl1 depending on the controller model): 

  панель
  title Primary bootloader version on WLC-15
  SBI:1.17.3.11 (14/11/2022 - 12:55:55)   Chip is NSP B1   Booting from SPI-NOR

   

  панель
  title Primary bootloader version on WLC-30
  NOTICE: Cold boot NOTICE: BL1:1.15.3.2 (28/12/2022 - 15:56:46)

  
  

  панель
  title Primary bootloader version on WLC-3200
  BRCM XLP Stage 1 Loader (X-Loader:1.17.3.11) [Big-Endian] (14/11/2022 - 13:21:58) XLP316B2: Node 0 frequency: CPU=1400MHz, SOC=1999MHz, REF=133MHz POWER ON RESET CFG:43F94FA8,VRM: 0x6868, PRID: 0xC1104

  
  

• Secondary bootloader (U-boot):

  панель
  title Secondary bootloader version
  NOTICE: BL31:1.15.3.2 (28/12/2022 - 15:56:46) U-Boot:1.15.3.2 (28/12/2022 - 15:56:46)

  
  

• Main firmware version: 

  панель
  title Main firmware version:
  [ 0.000000] Booting Linux on physical CPU 0x0 [ 0.000000] Software version: 1.15.3 build 3[2555a4e8a] date 28/12/2022 time 17:44:53

...

Firmware version 1.30.2 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:

...

...

The firmware for the AP must be downloaded to the controller before updating it. Then after rebooting the WLC, the AP will automatically update to the new firmware. If the firmware has been downloaded to the controller after it has been updated, then the clear wlc ap command must be executed to reconnect the APs and update the firmware.

Firmware update from version 1.26.1 to 1.30.0

...

Firmware version 1.30.2 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:

...

...

The firmware for the AP must be downloaded to the controller before updating it. Then after rebooting the WLC, the AP will automatically update to the new firmware. If the firmware has been downloaded to the controller after it has been updated, then the clear wlc ap command must be executed to reconnect the APs and update the firmware.

...

Firmware version 1.26.1 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:

...

...

The firmware for the AP must be downloaded to the controller before updating it. Then after rebooting the WLC, the AP will automatically update to the new firmware. If the firmware has been downloaded to the controller after it has been updated, then the clear wlc ap command must be executed to reconnect the APs and update the firmware.

Firmware update from version 1.19.1 to 1.19.2

...

• Make a backup copy of the configuration.
• Download the firmware for the AP to the controller.
• Download the firmware file for the WLC controller.
• Select fimware image version 1.19.2 for the next download.
• Reboot the controller.
• Check parameters in the configuration.

В версии In version 1.19.2 произведен переход от персональных board-profile к универсальным radio-profile, при переходе произойдет конвертация конфигурации, board-profile будут заменены на преднастроенные radio-profile, нужно проверить настройку radio-profile.there is a transition from personal board-profiles to universal radio-profiles, the transition will convert the configuration, board-profiles will be replaced by pre-configured radio-profiles, you should check the radio-profile configuration.

If you have customized individual profiles for access points and have redefined board-profiles (settings of radio interfaces of access points), in which auto channel selection was enabled and the list of channels in the parameter limit-channel was not set, then after the update the list of channels from the common radio-profiles will be used. If it is necessary to change channels – set the required limit-channel list in the individual profile of the required access pointЕсли у вас были настроены индивидуальные профили для точек доступа и были переопределены board-profile (настройки радио интерфейсов точки доступа), в которых был включен автовыбор каналов и не задан список каналов в параметре limit-channel, то после обновления будет использован список каналов из общих radio-profile. При необходимости изменить каналы – задайте нужный список limit-channel в индивидуальном профиле необходимой точки доступа.

Minimal firmware version of AP:

• WEP-1L/2L/30L/200L and WOP-2L/20L/30L/30LS — 2.3.2
• WEP-3ax — 1.11.0

Нужно загрузить ПО для ТД на контроллер. ТД обновится автоматически после подключенияIt is necessary to download the firmware for the AP to the controller. The AP will be updated automatically after connection.

Firmware update from version 1.19.0 to 1.19.1

После обновления необходимо отредактировать конфигурацию в соответствии с изменениями:

After the update, you need to edit the configuration according to the changes:

1. In В 1.19.1 поддержано избирательное включение vlan в SoftGRE-туннели. Добавлена команда service-vlan в разделе , selective inclusion of vlan in SoftGRE tunnels is supported. service-vlan command is added in softgre-controller , указанные vlan будут включены в туннели после обновления. В section, the specified vlans will be included in tunnels after update. In 1.19.0 все созданные vlan включались в туннели. Нужно добавить используемые vlan для Wi-Fi в конфигурациюall created vlans were included in tunnels. Need to add used vlans for Wi-Fi to the configuration.
   

   Блок кода
   softgre-controller service-vlan add 3 exit

2. Поддержана настройка Configuration of telnet, ssh, web, snmp сервисов на ТД, после обновления они будут отключены. Их можно включить в профиле apservices on AP is supported, after update they will be disabled. They can be enabled in ap-profile.

   Информация
   На ТД web отключается/включается одновременно для On AP web is disabled/enabled simultaneously for HTTP/HTTPS -сервисовservices.

   Для включения нужно перейти в раздел конфигурации To enable, go to wlc → ap-profile default-ap → servicesprofile default-ap → services.

   Блок кода
   wlc(config-wlc-ap-profile)# services wlc(config-wlc-ap-profile-services)# snmp-server Enable SNMP service wlc(config-wlc-ap-profile-services)# ip http Configure web-configurator service https Configure web-configurator service ssh Configure SSH service telnet Configure telnet service

...

Firmware update from version 1.15.3 to 1.19.0

В отличие от ПО версии Unlike firmware version 1.19.0 и более поздних, более ранние версии не поддерживают кумулятивное обновление. Поэтому, кроме основного ПО необходимо обновить также вторичный загрузчик. В результате, процесс обновления будет следующий:and later, earlier versions do not support cumulative updates. Therefore, in addition to the main firmware, the secondary bootloader must also be updated. As a result, the update process is as follows:

• Upload the secondary bootloader Загрузить вторичный загрузчик (U-boot) на контроллер to the WLC controller.
• Загрузить ПО (firmware-файл) на контроллер WLC.
• Выбрать образ ПО обновленной версии для следующей загрузки.
• Перезагрузить контроллер.
• Upload the firmware file to the WLC controller.
• Select the updated version firmware image for the next download.
• Reboot the controller.

1. After the update it is necessary to edit the configuration according to the changes. The scheme of access point registration on the controller has been changed. Now not only port 8043 but also port 8044 is used. It is necessary to add port 8044 to objectПосле обновления необходимо отредактировать конфигурацию в соответствии с изменениями. Изменена схема регистрации точек доступа на контроллере. Теперь используется не только порт 8043, но и 8044. Необходимо добавить порт 8044 в object-group service sa:

   Блок кода
   object-group service sa port-range 8044 exit

   После обновления WLC точки доступа попадут в список сервиса инициализации и будут ожидать авторизации. Просмотр списка неавторизованных точек осуществляется командойAfter the WLC is updated, the APs will be listed in the provisioning service and will be waiting for authorization. To view the list of unauthorized access points, use the command:

   Блок кода
   show wlc service-activator aps

   Для авторизации всех точек доступа из списка используется командаThe following command is used to authorize all AP in the list:

   Блок кода
   join wlc ap

   Для авторизации конкретной точки используется командаThe following command is used to authorize a specific AP:

   Блок кода
   join wlc ap <MAC_AP>

   Есть возможность включить в конфигурации режим автоматической авторизацииIt is possible to enable automatic authorization mode in the configuration:

   Блок кода
   wlc# configure wlc(config)# wlc wlc(config-wlc)# service-activator wlc(config-wlc-service-activator)# aps join auto wlc(config-wlc-service-activator)# do commit wlc(config-wlc-service-activator)# do confirm

   Scroll Pagebreak

2. The scheme of SoftGRE tunnels enabling has been changed:

   In

   Изменена схема включения туннелей SoftGRE:В версии

   1.15.3 version:

   Клиентский трафик приходит с ТД в gre-туннель с заданным тегом vlan, на стороне WLC для каждого vlan создается отдельный subgre-туннель и включается в заданные Bridge, при выходе из subgre метка vlan снимается. При такой реализации для каждого vlan нужно создавать subgre-туннель и включать его в один из Bridge. WLC не знает vlan, которые выдаются в момент авторизации по radius (если используются c-vlan с внешним radius-сервером), и не может поднять туннели для таких клиентовClient traffic comes from the AP to a gre-tunnel with a specified vlan tag, on the WLC side a separate subgre-tunnel is created for each vlan and included in the specified Bridges, when leaving the subgre the vlan tag is removed. With this implementation, a subgre-tunnel must be created for each vlan and included in one of the Bridges. WLC does not know vlans that are issued at the moment of radius authorization (if c-vlans with external radius server are used), and cannot raise tunnels for such clients. 

   draw.io Diagram
   border true viewerToolbar true fitWindow false diagramName gre_1.15.3 simpleViewer false width diagramWidth 798 revision 12

   
   В версии In 1.19.0 version:

   Изменена логика работы SoftGRE-туннелей в режиме wlc. Ранее subgre безусловно включался в Bridge по конфигурации WLC, в новой реализации subgre-туннели отсутствуют. Vlan, указанный в настройках SSID, попадает в WLC без терминации sub-туннеля в Bridge. Поддержано использование c-vlan в схеме c туннелированием клиентского трафика. Для корректной работы vlan должен быть создан в настройках WLC и должен быть членом Bridge или интерфейсаThe logic of SoftGRE tunnels operation in wlc mode has been changed. Previously subgre was unconditionally included in Bridge by WLC configuration, in the new implementation subgre tunnels are absent. Vlan specified in SSID configuration is included in WLC without sub-tunnel termination in Bridge. The use of c-vlan in client traffic tunneling scheme is supported. For correct operation, the vlan must be created in the WLC settings and must be a member of the Bridge or interface.
   

   draw.io Diagram
   border true viewerToolbar true fitWindow false diagramName gre_1.19.0 simpleViewer false width diagramWidth 798 revision 12

   
   
   

   Scroll Pagebreak

3. Для поднятия туннелей теперь не используется параметр location, который ранее задавался на Bridge и в ap-location для SSID. Вместо этого необходимо включить mode tunnel в ap-location.
   Vlan-id в ssid-profile должен совпадать с vlan-id в bridge пользователейTo raise tunnels, the location parameter, which was previously set on Bridge and in ap-location for SSIDs, is no longer used. Instead, you must enable tunnel mode in ap-location. The vlan-id in ssid-profile must match the vlan-id in bridge users.

   Firmware version 1.15.3	Firmware version 1.19.0
   bridge 3   security-zone users   ip address 192.168.2.1/24   location default   enable exit	bridge 3   vlan 3 (=vlan-id в SSID-profile)   mtu 1458   security-zone users   ip address 192.168.2.1/24   enable exit
   ap-location default-location   description default-location   board-profile WEP-1L default_wep-1l_profile   board-profile WEP-20L default_wep-20l_profile   board-profile WEP-2L default_wep-2l_profile   board-profile WEP-3ax default_wep-3ax_profile   board-profile WEP-3ax-Z default_wep-3ax-z_profile   board-profile WOP-20L default_wop-20l_profile   board-profile WOP-2L default_wop-2l_profile   board-profile WOP-3ax default_wop-3ax_profile   ssid-profile default-ssid default exit	ap-location default-location   description default-location   mode tunnel   ap-profile default-ap   board-profile WEP-1L default_wep-1l_profile   board-profile WEP-200L default_wep-200l_profile   board-profile WEP-20L default_wep-20l_profile   board-profile WEP-2L default_wep-2l_profile   board-profile WEP-30L default_wep-30l_profile   board-profile WEP-3ax default_wep-3ax_profile   board-profile WEP-3ax-Z default_wep-3ax-z_profile   board-profile WOP-20L default_wop-20l_profile   board-profile WOP-2L default_wop-2l_profile   board-profile WOP-30L default_wop-30l_profile   board-profile WOP-3ax default_wop-3ax_profile   ssid-profile default-ssid exit
   	vlan 3   force-up exit

   
   

4. Wireless-controller переименован в is renamed to softgre-controller:

   Firmware version 1.15.3	Firmware version 1.19.0
   wireless-controller   nas-ip-address 127.0.0.1   data-tunnel configuration wlc   aaa radius-profile default_radius   keepalive-disable   enable exit	softgre-controller   nas-ip-address 127.0.0.1   data-tunnel configuration wlc   aaa radius-profile default_radius   keepalive-disable   enable exit

   Scroll Pagebreak

5. WLC monitoring commands have been changed:

   In

   Изменились команды мониторинга WLC:

   Формат в версии ПО 1.15.3 versionФормат в версии ПО	In 1.19.0 version	Назначение командыCommand description
   show wlc connected-ap	show wlc apПросмотр списка обслуживаемых контроллером точек доступа	View the list of access points monitored by the controller
   show wlc connected-ap detailed	sh wlc ap detailedПросмотр детальной информации по всем авторизованным точкам доступа	View detailed information on all authorized access points
   show wlc connected-ap detailed <MAC_AP>	sh wlc ap detailed <MAC_AP>Просмотр детальной информации по одной из авторизованных точек доступа	View detailed information on one of the authorized access points
   show wlc connected-ap-clients <MAC_AP>	sh wlc clients ap <MAC_AP>Просмотр информации о подключениях беспроводных клиентов определенной точки доступа	View information about the wireless client connections of a specific access point
   show wlc connected-ap-clients <MAC_AP> detailed	sh wlc clients ap <MAC_AP> detailedПросмотр детальной информации о подключениях беспроводных клиентов определенной точки доступа	View detailed information about the wireless client connections of a specific access point
   show wlc connected-client <MAC_STA>	sh wlc clients <MAC_STA>	Просмотр информации о подключении беспроводного клиента по его MAC-адресуView wireless client connection information by its MAC address
   show wlc connected-client <MAC_STA> detailed	sh wlc clients <MAC_STA> detailed	Просмотр детальной информации о подключении беспроводного клиента по его MAC-адресуView detailed connection information of a wireless client by its MAC address
   show wlc connected-ap-interfaces <MAC_AP>	show wlc ap interfaces <MAC_AP>Просмотр	информации и счетчиков по интерфейсам точки доступаView information and counters on access point interfaces
   show wlc connected-ap-radios <MAC_AP>	show wlc ap radios <MAC_AP>	Просмотр основных параметров радиоинтерфейсов точки доступа

...

1. View the basic parameters of the access point's radio interfaces

Secondary bootloader update

Якорь
вторичный загрузчик вторичный загрузчик

Для обновления вторичного загрузчика требуется загрузить файл на контроллер и перезагрузить контроллер. Операцию можно совмещать с обновлением основного ПО.

При загрузке вторичного загрузчика с использованием серверов удаленного копирования файлов необходимо:

Updating the secondary bootloader requires uploading the file to the controller and rebooting the controller. The operation can be combined with updating the main firmware.

When downloading the secondary bootloader using remote file copying servers, it is necessary to:

1. Start the appropriate server on the network Запустить соответствующий сервер в сети (tftp/ftp/sftp/http/https/scp).
2. Скопировать файл Copy the <uboot-file> в рабочий раздел сервера удаленной загрузки файлов.
3. Обеспечить IP-связность между обновляемым контроллером WLC и сервером удаленного копирования файлов (маршрутизация).
4. Обеспечить работу протокола удаленного копирования между WLC и сервером удаленного копирования файлов (промежуточные firewall).
5. file to the working partition of the remote file upload server.
6. Provide IP connectivity between the WLC controller being upgraded and the remote file copy server (routing).
7. Provide remote copy protocol operation between the WLC and the remote file copy server (intermediate firewall).
8. If necessary (for При необходимости (для протоколов ftp, sftp, scp, http, https ) узнать имя пользователя и пароль для скачивания необходимого файлаprotocols) find out the username and password for downloading the required file.

загрузке вторичного загрузчика с использованием When loading the secondary bootloader using a USB/MMC -носителя необходимоkey, it is necessary to:

1. Отформатировать раздел Format the USB/MMC -носителя в формате FAT32 или exFAT.
2. Скопировать файл <uboot-file> в корневой раздел USB/MMC-носителя. 
3. Подключить USB/MMC-носитель в соответствующий слот контроллера.
4. Определить метку тома подключенного USB/MMC-накопителя.

...

1. key partition in FAT32 or exFAT format.
2. Copy the <uboot-file> file to the root partition of the USB/MMC key.
3. Plug the USB/MMC drive into the appropriate slot on the controller.
4. Determine the volume label of the connected USB/MMC drive.

Loading the secondary bootloader using one of the remote file upload protocols

...

The rules for using firmware files for the different models are described in the section Files used for the upgradeupdate.

...

Secondary bootloader update using USB/MMC

...

storage

1. Define the volume label of the connected USB/MMC storage: 

...

...

1. Start the corresponding server on the network (tftp/ftp/sftp/http/https/scp).
2. Copy the firmware file (<firmware-file>) to the working directory of the remote file copy server. The names of the required files depending on the model and hardware version of the device are listed in the  section section Files used for the upgradeupdate.
3. Provide IP connectivity between the upgraded upddated WLC controller and the remote file copy server
   (routing). 
4. Ensure operation of the remote copy protocol between the WLC and the remote file copy server
   server (intermediate firewalls). 
5. If necessary (for ftp, sftp, scp, http, https protocols), find out the username and password to write the
   required the required file. 

When loading the firmware using a USB/MMC media: 

1. Format USB/MMC media partition as FAT32 or exFAT.
2. Copy the firmware file (<firmware-file>) to the root of the USB/MMC drive. The names of the required files depending on the model and hardware version of the device are listed in the  section section Files used for the upgradeupdate.
3. Connect the USB/MMC storage to the appropriate WLC slot. 
4. Define the volume label of the connected USB/MMC storage. 

...

...

The rules for using firmware files for the different models are described in the section Files used for the upgradeupdate.

Using USB/MMC media 

1. Define the volume label of the connected USB/MMC storage: 

...

...

When loading a firmware file to the system:firmware partition, the upload is always made to the currently
inactive currently inactive partition.

2. Select the partition containing firmware version 1.30.2 as bootable: 

...