Introduction
Abstract
This guide provides instructions on how to update the firmware components of the WLC series controllers, sonsidering the specific models and previous firmware versions of the device being update.
Target audience
This guide is intended for technical personnel who perform device updates through the command line interface (CLI).
Symbols
Designation | Description |
|---|---|
[ ] | In the command line, optional parameters are shown in square brackets; when entered, they provide additional options. |
{ } | In the command line, mandatory parameters are shown in curly braces. Select one of the parameters. |
«,» «-» | In the command description, these characters are used to define ranges. |
«|» | In the description of the command, this sign means 'or'. |
Semibold font | Notes, warnings, or information are shown in bold |
<Semibold italic> | Keyboard keys are shown in bold italic within angle brackets |
Text box | Examples and results of the commands are given within the text boxes |
Notes, warnings and information
Notes contain important information, tips or recommendations on device operation and setup
Warnings inform users about hazardous conditions which may cause injuries or device damage and
may lead to the device malfunctioning or data loss.
The information block contains information on the use of the device.
Files used for the upgrade
Depending on the model and upgrade component, the following files should be used later in the guide body:
| WLC model | HW version | Firmware | Secondary bootloader | Primary bootloader |
|---|---|---|---|---|
| WLC-15 | all | wlc15-1.30.2-build14.firmware | wlc15-1.30.2-build1.uboot | none |
| WLC-30 | all | wlc30-1.30.2-build14.firmware | wlc30-1.30.2-build1.uboot | none |
WLC-3200 | all | wlc3200-1.30.2-build13.firmware | wlc3200-1.30.2-build1.uboot | wlc3200-1.30.2-build1.bdk |
| ESR-15 | all | esr15-1.30.2-build15.firmware | esr15-1.30.2-build1.uboot | none |
| ESR-15R | all | esr15-1.30.2-build15.firmware | esr15-1.30.2-build1.uboot | none |
| ESR-30 | all | esr3x-1.30.2-build15.firmware | esr30-1.30.2-build1.uboot | none |
ESR-3200 | all | esr3200-1.30.2-build14.firmware | esr3200-1.30.2-build1.uboot | esr3200-1.30.2-build1.bdk |
| vWLC | — | vwlc-1.30.2-build14.firmware | — | — |
Creating a backup copy of the current configuration
Prior to initiating the firmware update on WLC controllers, it is necessary to create a backup of the current
configuration.
Copying the current configuration from the WLC controllers is possible both using remote file copying
protocols and to locally connected USB/MMC media.
When migrating from a newer version of the firmware to an older one (downgrade), it is possible that
the older version of the firmware will not be able to apply the configuration saved in the newer
version. As a result, the configuration will be lost and the WLC controller will boot with an empty
configuration
Preparation
To create a backup copy of the current configuration of the controller using remote file copy servers, do
the following:
- Start the corresponding server on the PC/server in the network.
- Provide the ability to save files in the server working directory.
- Provide IP connectivity between the upgraded WLC controller and the remote file copy server
(routing). - Ensure operation of the remote copy protocol between the WLC and the remote file copy server
(intermediate firewalls). - If necessary (for ftp, sftp, scp, http protocols), find out the username and password to write the
required file.
To create a backup copy of the current configuration of the service router on a locally connected USB/MMC
storage:
- Format USB/MMC partition as FAT32.
- Connect the USB/MMC storage to the appropriate WLC slot
Copying the configuration backup file
Using remote file copy protocols
Depending on the remote file copy protocol, one of the following commands must be executed in the CLI of the controller:
wlc# copy system:running-config tftp://<tftp-server-ip>:/<config-file-name>
wlc# copy system:running-config ftp://<ftp-username>:<ftp-userpassword>@<ftp-server-ip>:/<config-file-name>
wlc# copy system:running-config sftp://<sftp-username>:<sftp-userpassword>@<sftp-server-ip>:/<config-file-name>
wlc# copy system:running-config scp://<scp-username>:<scp-userpassword>@<scp-server-ip>:/<config-file-name>
wlc# copy system:running-config http://<http-username>:<http-userpassword>@<http-server-ip>:/<config-file-name>
- <config-file-name> – file name with which the current configuration of the controller will be saved;
- <tftp-server-ip> – IP address of the TFTP server in use;
- <ftp-username> – user name on the FTP server;
- <ftp-userpassword> – user password on the FTP server;
- <ftp-server-ip> – IP address of the FTP server in use;
- <sftp-username> – user name on the SFTP server;
- <sftp-userpassword> – user password on the SFTP server;
- <sftp-server-ip> – IP address of the SFTP server in use;
- <scp-username> – user name on the SCP server;
- <ftp-userpassword> – user password on the FTP server;
- <scp-server-ip> – IP address of the SCP server in use;
- <http-username> – user name on the HTTP server;
- <http-userpassword> – user password on the HTTP server;
- <http-server-ip> – IP address of the HTTP server in use.
To a locally connected USB/MMC storage
1. Define the volume label of the connected USB/MMC storage.
wlc# show storage-devices usb
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<USB_DISK> vfat 7664.01 6391.69 1272.32
wlc# show storage-devices mmc
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<MMC_DISK> vfat 7664.01 6391.69 1272.32
2. Copy the file to the USB/MMC storage that is currently in use.
When executing copy commands to USB/MMC media, instead of the <USB_DISK> or <MMC_DISK>
fields, use the real volume labels defined in step 1.
wlc# copy system:running-config usb://<USB_DISK>:/<config-file-name>
|******************************************| 100% (576B) Success!
wlc# copy system:running-config mmc://<MMC_DISK>:/<config-file-name>
|******************************************| 100% (576B) Success!
- <config-file-name> – file name with which the current configuration of the controller will be saved;
- <USB_DISK> – partition name on the USB storage;
- <MMC_DISK> – partition name on the MMC storage.
Restoring configuration from a backup
In case of configuration loss on the controller due to operational issues, firmware update, or rollback to a previous firmware version, the controller configuration can be restored using a previously created backup copy.
Copying a configuration backup to the WLC controllers is possible both using remote file copying protocols
and to locally connected USB/MMC media.
When migrating from a newer version of the firmware to an older one (downgrade), it is possible that the older version of the firmware will not be able to apply the configuration saved in the newer version. As a result, the configuration will be lost and the WLC controller will boot with an empty configuration.
If the configuration is empty, the controller can only be connected to using a console connection and the default login/password (admin/password).
Preparation
To restore the configuration of the service router from a backup copy using remote file copy servers, do the following:
- Start the corresponding server on the PC/server on the network.
- Place the file with the previously created backup copy of the controller in the server working directory
- Configure the controller to establish IP connectivity with the remote file copy server.
- Provide IP connectivity between the upgraded WLC controller and the remote file copy server
(routing). - Ensure operation of the remote copy protocol between the WLC and the remote file copy server
(intermediate firewalls). - If necessary (for ftp, sftp, scp, http protocols), find out the username and password to write the
required file.
To restore the controller configuration from a backup copy from a locally connected USB/MMC storage,
do the following:
- Format USB/MMC partition as FAT32.
- File with a previously created backup copy of the controller configuration must be placed on the
USB/MMC media. - Connect the USB/MMC storage to the appropriate ESR slot.
Copying configuration backup file
Using remote file copy protocols
Depending on the protocol for remote file copying, run one of the following commands in the CLI of the controller:
wlc# copy tftp://<tftp-server-ip>:/<config-file-name> system:candidate-config
wlc# copy ftp://<ftp-username>:<ftp-userpassword>@<ftp-server-ip>:/<config-file-name> system:candidate-config
wlc# copy sftp://<sftp-username>:<sftp-userpassword>@<sftp-server-ip>:/<config-file-name> system:candidate-config
wlc# copy scp://<scp-username>:<scp-userpassword>@<scp-server-ip>:/<config-file-name> system:candidate-config
wlc# copy http://<http-username>:<http-userpassword>@<http-server-ip>:/<config-file-name> system:candidate-config
- <config-file-name> – name of the service router configuration backup file;
- <tftp-server-ip> – IP address of the TFTP server in use;
- <ftp-username> – user name on the FTP server;
- <ftp-userpassword> – user password on the FTP server;
- <ftp-server-ip> – IP address of the FTP server in use;
- <sftp-username> – user name on the SFTP server;
- <sftp-userpassword> – user password on the SFTP server;
- <sftp-server-ip> – IP address of the SFTP server in use;
- <scp-username> – user name on the SCP server;
- <ftp-userpassword> – user password on the FTP server;
- <scp-server-ip> – IP address of the SCP server in use;
- <http-username> – user name on the HTTP server;
- <http-userpassword> – user password on the HTTP server;
- <http-server-ip> – IP address of the HTTP server in use.
From locally connected USB/MMC media
1. Define the volume label of the connected USB/MMC storage.
wlc# show storage-devices usb
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<USB_DISK> vfat 7664.01 6391.69 1272.32
wlc# show storage-devices mmc
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<MMC_DISK> vfat 7664.01 6391.69 1272.32
2. Copy the file to the USB/MMC storage that is currently in use:
When executing copy commands to USB/MMC media, instead of the <USB_DISK> or <MMC_DISK> fields, use the real volume labels defined in step 1.
wlc# copy usb://<USB_DISK>:/<config-file-name> system:candidate-config
|******************************************| 100% (576B) Success!
wlc# copy mmc://<MMC_DISK>:/<config-file-name> system:candidate-config
|******************************************| 100% (576B) Success!
- <config-file-name> – name of the controller configuration backup file;
- <USB_DISK> – partition name on the USB storage;
- <MMC_DISK> – partition name on the MMC storage.
Applying and confirming the loaded configuration
To apply and confirm operation of the configuration loaded earlier in the 'system:candidate-config' section, run the following commands:
wlc# commitConfiguration has been successfully applied and saved to flash. Commit timer started, changes will be.wlc# confirmConfiguration has been confirmed. Commit timer canceled.
Checking the current firmware version and secondary bootloader (U-boot) version
Currently used secondary bootloader (U-Boot) and main firmware versions can be checked:
- n the CLI of the main firmware;
- in the console interface output when loading the controller.
Checking current software version and version of the secondary bootloader (U-boot) in the main firmware CLI
To check the current firmware version and the version of the secondary bootloader (U-boot) in the CLI of the main software, execute the 'show version' command:
wlc# show version
Boot version:
1.15.3.3 (date 14/11/2022 time 13:30:27) <-- secondary bootloader (U-Boot) version
SW version:
1.15.3 build 3[a813b5c65] (date 14/11/2022 time 13:20:25) <-- active image version of the controller main firmware
HW version:
1v2 <-- hardware version of the controller
Checking the current firmware version and the version of the primary (sbi, bl1) and secondary (U-boot) loaders in the output of the console interface when loading the service router
To check the current firmware version and the version of the secondary bootloader (U-boot) in the output of the console interface when loading the controller, do the following:
1. Connect to the WLC controller via the Console interface on the front panel of the controller using the
following parameters of the PC RS-232 interface:
- Baud rate: 115200 bps;
- Data bits: 8 bits;
- Parity: no;
- Stop bits: 1;
- Flow control: no.
2. Reboot the controller using one of the following methods:
- Switch the power off and then switch it back on. The interval between switching off and on must be at least 20 seconds.
- Briefly press the function button F on the front panel of the controller.
- Execute the 'reload system' command in the CLI of the main firmware of the controller.
WLC# reload system Do you really want to reload system ? (y/N): y
3. During the loading, information about the versions will be displayed in the console:
Primary loader (sbi, bl1 depending on the controller model):
Primary bootloader version on WLC-15SBI:1.17.3.11(14/11/2022 - 12:55:55)Chip is NSP B1Booting from SPI-NORPrimary bootloader version on WLC-30NOTICE: Cold bootNOTICE: BL1:1.15.3.2 (28/12/2022 - 15:56:46)Primary bootloader version on WLC-3200BRCM XLP Stage 1 Loader (X-Loader:1.17.3.11) [Big-Endian] (14/11/2022 - 13:21:58)XLP316B2: Node 0 frequency: CPU=1400MHz, SOC=1999MHz, REF=133MHzPOWER ON RESET CFG:43F94FA8,VRM: 0x6868, PRID: 0xC1104Secondary bootloader (U-boot):
Secondary bootloader versionNOTICE: BL31:1.15.3.2 (28/12/2022 - 15:56:46)U-Boot:1.15.3.2 (28/12/2022 - 15:56:46)Main firmware version:
Main firmware version:[ 0.000000] Booting Linux on physical CPU 0x0[ 0.000000] Software version: 1.15.3 build 3[2555a4e8a] date 28/12/2022 time 17:44:53
Firmware update via CLI of the WLC main firmware
Firmware update from version 1.30.0 to 1.30.2
ESR-15, ESR-30, ESR-3200, vWLC are updated using the same algorithm.
Before updating, make sure that the correct date and time are set on the device. Use the show date command to verify.
If an incorrect date is set on the controller, certificate validation will prevent the configuration changes from being applied after the upgrade.
Firmware version 1.30.2 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:
- Make a backup copy of the configuration.
- Check that the date and time on the controller are correct.
- Download the firmware for the AP to the controller.
- Download the firmware for the WLC controller.
- Select fimware image version 1.30.2 for the next download.
Turning off the power before the “boot system {image-1|image-2}” command is finished may cause the controller to malfunction.
- Reboot the controller.
Minimal firmware version of AP:
- WEP-1L/2L and WOP-2L — 2.5.6 or higher
- WEP-30L/30L-Z/200L and WOP-20L/30L/30LI/30LS — 2.6.0 or higher
- WEP-3L — 2.5.3 or higher
- WEP-3ax — 1.14.0 or higher
- WEP-2ac/2ac Smart, WOP-2ac/2ac rev.B/2ac rev.C — 1.25.2 or higher
The firmware for the AP must be downloaded to the controller before updating it. Then after rebooting the WLC, the AP will automatically update to the new firmware. If the firmware has been downloaded to the controller after it has been updated, then the clear wlc ap command must be executed to reconnect the APs and update the firmware.
Upgrading to version 1.30.2 can be done from any previous version, but the recommendations for each version described below must be followed.
When upgrading from version 1.15.3, the secondary loader must be upgraded at the same time as the main firmware (see section "Обновление вторичного загрузчика").
Firmware update from version 1.26.1 to 1.30.0
ESR-15, ESR-30, ESR-3200, vWLC (started with 1.27.0 version) are updated using the same algorithm.
Before updating, make sure that the correct date and time are set on the device. Use the show date command to verify.
If an incorrect date is set on the controller, certificate validation will prevent the configuration changes from being applied after the upgrade.
Firmware version 1.30.2 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:
- Make a backup copy of the configuration.
- Check that the date and time on the controller are correct.
- Download the firmware for the AP to the controller.
- Download the firmware for the WLC controller.
- Select fimware image version 1.30.2 for the next download.
Turning off the power before the “boot system {image-1|image-2}” command is finished may cause the controller to malfunction.
- Reboot the controller.
Minimal firmware version of AP:
- WEP-1L/2L and WOP-2L — 2.5.6 or higher
- WEP-30L/30L-Z/200L and WOP-20L/30L/30LI/30LS — 2.6.0 or higher
- WEP-3L — 2.5.3 or higher
- WEP-3ax — 1.14.0 or higher
- WEP-2ac/2ac Smart, WOP-2ac/2ac rev.B/2ac rev.C — 1.25.2 or higher
The firmware for the AP must be downloaded to the controller before updating it. Then after rebooting the WLC, the AP will automatically update to the new firmware. If the firmware has been downloaded to the controller after it has been updated, then the clear wlc ap command must be executed to reconnect the APs and update the firmware.
Upgrading to version 1.30.0 can be done from any previous version, but the recommendations for each version described below must be followed.
When upgrading from version 1.15.3, the secondary loader must be upgraded at the same time as the main firmware (see section "Обновление вторичного загрузчика").
After updating to version 1.30.0 it will be possible to update the controller and AP firmware via WEB interface.
Firmware update from version 1.19.2 to 1.26.1
ESR-15, ESR-15R, ESR-30, ESR-3200 are updated using the same algorithm.
Before updating, make sure that the correct date and time are set on the device. Use the show date command to verify.
If an incorrect date is set on the controller, certificate validation will prevent the configuration changes from being applied after the upgrade.
Firmware version 1.26.1 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:
- Make a backup copy of the configuration.
- Download the firmware for the AP to the controller.
- Download the firmware for the WLC controller.
- Select fimware image version 1.26.1 for the next download.
Turning off the power before the “boot system {image-1|image-2}” command is finished may cause the controller to malfunction.
- Reboot the controller.
Minimal firmware version of AP:
- WEP-1L/2L/30L/30L-Z/200L and WOP-2L/20L/30L/30LS — 2.5.0 or higher
- WEP-3ax — 1.12.0 or higher
- WEP-2ac/2ac Smart, WOP-2ac/2ac rev.B/2ac rev.C — 1.25.0 or higher
The firmware for the AP must be downloaded to the controller before updating it. Then after rebooting the WLC, the AP will automatically update to the new firmware. If the firmware has been downloaded to the controller after it has been updated, then the clear wlc ap command must be executed to reconnect the APs and update the firmware.
Upgrading to version 1.26.1 can be done from any previous version, but the recommendations for each version described below must be followed.
When upgrading from version 1.15.3, the secondary loader must be upgraded at the same time as the main firmware (see section "Обновление вторичного загрузчика").
Firmware update from version 1.19.1 to 1.19.2
ESR-15, ESR-15R, ESR-3200 are updated using the same algorithm.
Firmware version 1.19.2 is cumulative (it contains updated versions of the primary and secondary loaders), so it will be enough to:
- Make a backup copy of the configuration.
- Download the firmware for the AP to the controller.
- Download the firmware file for the WLC controller.
- Select fimware image version 1.19.2 for the next download.
- Reboot the controller.
- Check parameters in the configuration.
В версии 1.19.2 произведен переход от персональных board-profile к универсальным radio-profile, при переходе произойдет конвертация конфигурации, board-profile будут заменены на преднастроенные radio-profile, нужно проверить настройку radio-profile.
Если у вас были настроены индивидуальные профили для точек доступа и были переопределены board-profile (настройки радио интерфейсов точки доступа), в которых был включен автовыбор каналов и не задан список каналов в параметре limit-channel, то после обновления будет использован список каналов из общих radio-profile. При необходимости изменить каналы – задайте нужный список limit-channel в индивидуальном профиле необходимой точки доступа.
Minimal firmware version of AP:
- WEP-1L/2L/30L/200L and WOP-2L/20L/30L/30LS — 2.3.2
- WEP-3ax — 1.11.0
Нужно загрузить ПО для ТД на контроллер. ТД обновится автоматически после подключения.
Upgrading to version 1.19.2 can be done from any previous version, but the recommendations for each version described below must be followed.
Firmware update from version 1.19.0 to 1.19.1
После обновления необходимо отредактировать конфигурацию в соответствии с изменениями:
В 1.19.1 поддержано избирательное включение vlan в SoftGRE-туннели. Добавлена команда service-vlan в разделе softgre-controller, указанные vlan будут включены в туннели после обновления. В 1.19.0 все созданные vlan включались в туннели. Нужно добавить используемые vlan для Wi-Fi в конфигурацию.
softgre-controller service-vlan add 3 exit
Поддержана настройка telnet, ssh, web, snmp сервисов на ТД, после обновления они будут отключены. Их можно включить в профиле ap-profile.
На ТД web отключается/включается одновременно для HTTP/HTTPS-сервисов.
Для включения нужно перейти в раздел конфигурации wlc → ap-profile default-ap → services.
wlc(config-wlc-ap-profile)# services wlc(config-wlc-ap-profile-services)# snmp-server Enable SNMP service wlc(config-wlc-ap-profile-services)# ip http Configure web-configurator service https Configure web-configurator service ssh Configure SSH service telnet Configure telnet service
Firmware update from version 1.15.3 to 1.19.0
В отличие от ПО версии 1.19.0 и более поздних, более ранние версии не поддерживают кумулятивное обновление. Поэтому, кроме основного ПО необходимо обновить также вторичный загрузчик. В результате, процесс обновления будет следующий:
- Загрузить вторичный загрузчик (U-boot) на контроллер WLC.
- Загрузить ПО (firmware-файл) на контроллер WLC.
- Выбрать образ ПО обновленной версии для следующей загрузки.
- Перезагрузить контроллер.
После обновления необходимо отредактировать конфигурацию в соответствии с изменениями. Изменена схема регистрации точек доступа на контроллере. Теперь используется не только порт 8043, но и 8044. Необходимо добавить порт 8044 в object-group service sa:
object-group service sa port-range 8044 exit
После обновления WLC точки доступа попадут в список сервиса инициализации и будут ожидать авторизации. Просмотр списка неавторизованных точек осуществляется командой:
show wlc service-activator aps
Для авторизации всех точек доступа из списка используется команда:
join wlc ap
Для авторизации конкретной точки используется команда:
join wlc ap <MAC_AP>
Есть возможность включить в конфигурации режим автоматической авторизации:
wlc# configure wlc(config)# wlc wlc(config-wlc)# service-activator wlc(config-wlc-service-activator)# aps join auto wlc(config-wlc-service-activator)# do commit wlc(config-wlc-service-activator)# do confirm
- Изменена схема включения туннелей SoftGRE:
В версии 1.15.3:
Клиентский трафик приходит с ТД в gre-туннель с заданным тегом vlan, на стороне WLC для каждого vlan создается отдельный subgre-туннель и включается в заданные Bridge, при выходе из subgre метка vlan снимается. При такой реализации для каждого vlan нужно создавать subgre-туннель и включать его в один из Bridge. WLC не знает vlan, которые выдаются в момент авторизации по radius (если используются c-vlan с внешним radius-сервером), и не может поднять туннели для таких клиентов.
В версии 1.19.0:Изменена логика работы SoftGRE-туннелей в режиме wlc. Ранее subgre безусловно включался в Bridge по конфигурации WLC, в новой реализации subgre-туннели отсутствуют. Vlan, указанный в настройках SSID, попадает в WLC без терминации sub-туннеля в Bridge. Поддержано использование c-vlan в схеме c туннелированием клиентского трафика. Для корректной работы vlan должен быть создан в настройках WLC и должен быть членом Bridge или интерфейса.
Для поднятия туннелей теперь не используется параметр location, который ранее задавался на Bridge и в ap-location для SSID. Вместо этого необходимо включить mode tunnel в ap-location.
Vlan-id в ssid-profile должен совпадать с vlan-id в bridge пользователей.Firmware version 1.15.3 Firmware version 1.19.0 bridge 3
security-zone users
ip address 192.168.2.1/24
location default
enable
exitbridge 3
vlan 3 (=vlan-id в SSID-profile)
mtu 1458
security-zone users
ip address 192.168.2.1/24
enable
exitap-location default-location
description default-location
board-profile WEP-1L default_wep-1l_profile
board-profile WEP-20L default_wep-20l_profile
board-profile WEP-2L default_wep-2l_profile
board-profile WEP-3ax default_wep-3ax_profile
board-profile WEP-3ax-Z default_wep-3ax-z_profile
board-profile WOP-20L default_wop-20l_profile
board-profile WOP-2L default_wop-2l_profile
board-profile WOP-3ax default_wop-3ax_profile
ssid-profile default-ssid default
exitap-location default-location
description default-location
mode tunnel
ap-profile default-ap
board-profile WEP-1L default_wep-1l_profile
board-profile WEP-200L default_wep-200l_profile
board-profile WEP-20L default_wep-20l_profile
board-profile WEP-2L default_wep-2l_profile
board-profile WEP-30L default_wep-30l_profile
board-profile WEP-3ax default_wep-3ax_profile
board-profile WEP-3ax-Z default_wep-3ax-z_profile
board-profile WOP-20L default_wop-20l_profile
board-profile WOP-2L default_wop-2l_profile
board-profile WOP-30L default_wop-30l_profile
board-profile WOP-3ax default_wop-3ax_profile
ssid-profile default-ssid
exitvlan 3
force-up
exitWireless-controller переименован в softgre-controller:
Firmware version 1.15.3 Firmware version 1.19.0 wireless-controller
nas-ip-address 127.0.0.1
data-tunnel configuration wlc
aaa radius-profile default_radius
keepalive-disable
enable
exitsoftgre-controller
nas-ip-address 127.0.0.1
data-tunnel configuration wlc
aaa radius-profile default_radius
keepalive-disable
enable
exitИзменились команды мониторинга WLC:
Формат в версии ПО 1.15.3 Формат в версии ПО 1.19.0 Назначение команды show wlc connected-ap show wlc ap Просмотр списка обслуживаемых контроллером точек доступа show wlc connected-ap detailed sh wlc ap detailed Просмотр детальной информации по всем авторизованным точкам доступа show wlc connected-ap detailed <MAC_AP> sh wlc ap detailed <MAC_AP> Просмотр детальной информации по одной из авторизованных точек доступа show wlc connected-ap-clients <MAC_AP> sh wlc clients ap <MAC_AP> Просмотр информации о подключениях беспроводных клиентов определенной точки доступа show wlc connected-ap-clients <MAC_AP> detailed sh wlc clients ap <MAC_AP> detailed Просмотр детальной информации о подключениях беспроводных клиентов определенной точки доступа show wlc connected-client <MAC_STA> sh wlc clients <MAC_STA> Просмотр информации о подключении беспроводного клиента по его MAC-адресу show wlc connected-client <MAC_STA> detailed sh wlc clients <MAC_STA> detailed Просмотр детальной информации о подключении беспроводного клиента по его MAC-адресу show wlc connected-ap-interfaces <MAC_AP> show wlc ap interfaces <MAC_AP> Просмотр информации и счетчиков по интерфейсам точки доступа show wlc connected-ap-radios <MAC_AP> show wlc ap radios <MAC_AP> Просмотр основных параметров радиоинтерфейсов точки доступа
Обновление вторичного загрузчика
Для обновления вторичного загрузчика требуется загрузить файл на контроллер и перезагрузить контроллер. Операцию можно совмещать с обновлением основного ПО.
При загрузке вторичного загрузчика с использованием серверов удаленного копирования файлов необходимо:
- Запустить соответствующий сервер в сети (tftp/ftp/sftp/http/https/scp).
- Скопировать файл <uboot-file> в рабочий раздел сервера удаленной загрузки файлов.
- Обеспечить IP-связность между обновляемым контроллером WLC и сервером удаленного копирования файлов (маршрутизация).
- Обеспечить работу протокола удаленного копирования между WLC и сервером удаленного копирования файлов (промежуточные firewall).
- При необходимости (для протоколов ftp, sftp, scp, http, https) узнать имя пользователя и пароль для скачивания необходимого файла.
При загрузке вторичного загрузчика с использованием USB/MMC-носителя необходимо:
- Отформатировать раздел USB/MMC-носителя в формате FAT32 или exFAT.
- Скопировать файл <uboot-file> в корневой раздел USB/MMC-носителя.
- Подключить USB/MMC-носитель в соответствующий слот контроллера.
- Определить метку тома подключенного USB/MMC-накопителя.
Загрузка вторичного загрузчика с использованием одного из протоколов удаленной загрузки файлов
wlc# copy tftp://<tftp-server-ip>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
wlc# copy ftp://<ftp-username>:<ftp-userpassword>@<ftp-server-ip>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
wlc# copy sftp://<sftp-username>:<sftp-userpassword>@<sftp-server-ip>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
wlc# copy scp://<scp-username>:<scp-userpassword>@<scp-server-ip>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
wlc# copy http://<http-username>:<http-userpassword>@<http-server-ip>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Firmware updated successfully.
wlc# copy https://<https-username>:<https-userpassword>@<http-server-ip>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
- <tftp-server-ip> – IP-адрес используемого TFTP-сервера;
- <ftp-username> – имя пользователя на FTP-сервере;
- <ftp-userpassword> – пароль пользователя на FTP-сервере;
- <ftp-server-ip> – IP-адрес используемого FTP-сервера;
- <sftp-username> – имя пользователя на SFTP-сервере;
- <sftp-userpassword> – пароль пользователя на SFTP-сервере;
- <sftp-server-ip> – IP-адрес используемого SFTP-сервера;
- <scp-username> – имя пользователя на SCP-сервере;
- <ftp-userpassword> – пароль пользователя на FTP-сервере;
- <scp-server-ip> – IP-адрес используемого SCP-сервера;
- <http-username> – имя пользователя на HTTP-сервере;
- <http-userpassword> – пароль пользователя на HTTP-сервере;
- <http-server-ip> – IP-адрес используемого HTTP-сервера.
The rules for using firmware files for the different models are described in the section Files used for the upgrade.
Загрузка вторичного загрузчика с использованием USB/MMC-накопителя
1. Определение имени метки тома подключенного USB/MMC-накопителя:
wlc# show storage-devices usb
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<USB_DISK> vfat 7664.01 6391.69 1272.32
wlc# show storage-devices mmc
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<MMC_DISK> vfat 7664.01 6391.69 1272.32
2. Копирование файла с используемого USB/MMC-накопителя:
При выполнении команд копирования с USB/MMC-носителей необходимо вместо полей <USB_DISK> или <MMC_DISK> использовать настоящие метки тома, определенные выше.
wlc# copy usb://<USB_DISK>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
wlc# copy usb://<MMC_DISK>:/<uboot-file> system:boot-2
|******************************************| 100% (697kB) Bootloader updated successfully.
- <USB_DISK> – имя раздела на USB-носителе;
- <MMC_DISK> – имя раздела на MMC-носителе.
Preparation for firmware upload
When uploading firmware using remote file copy servers:
- Start the corresponding server on the network (tftp/ftp/sftp/http/https/scp).
- Copy the firmware file (<firmware-file>) to the working directory of the remote file copy server. The names of the required files depending on the model and hardware version of the device are listed in the section Files used for the upgrade.
- Provide IP connectivity between the upgraded WLC controller and the remote file copy server
(routing). - Ensure operation of the remote copy protocol between the WLC and the remote file copy server
(intermediate firewalls). - If necessary (for ftp, sftp, scp, http, https protocols), find out the username and password to write the
required file.
When loading the firmware using a USB/MMC media:
- Format USB/MMC media partition as FAT32 or exFAT.
- Copy the firmware file (<firmware-file>) to the root of the USB/MMC drive. The names of the required files depending on the model and hardware version of the device are listed in the section Files used for the upgrade.
- Connect the USB/MMC storage to the appropriate WLC slot.
- Define the volume label of the connected USB/MMC storage.
Firmware upload
Using one of the remote file upload protocols
wlc# copy tftp://<tftp-server-ip>:/<firmware-file> system:firmware|******************************************| 100% (0B) Firmware updated successfully.
wlc# copy ftp://<ftp-username>:<ftp-userpassword>@<ftp-server-ip>:/<firmware-file> system:firmware
|******************************************| 100% (0B) Firmware updated successfully.
wlc# copy sftp://<sftp-username>:<sftp-userpassword>@<sftp-server-ip>:/<firmware-file> system:firmware
|******************************************| 100% (0B) Firmware updated successfully.
wlc# copy scp://<scp-username>:<scp-userpassword>@<scp-server-ip>:/<firmware-file> system:firmware
|******************************************| 100% (0B) Firmware updated successfully.
wlc# copy http://<http-username>:<http-userpassword>@<http-server-ip>:/<firmware-file> system:firmware
|******************************************| 100% (0B) Firmware updated successfully.
wlc# copy https://<https-username>:<https-userpassword>@<http-server-ip>:/<firmware-file> system:firmware
|******************************************| 100% (0B) Firmware updated successfully.
- <tftp-server-ip> — IP address of the TFTP server in use;
- <ftp-username> — user name on the FTP server;
- <ftp-userpassword> — user password on the FTP server;
- <ftp-server-ip> — IP address of the FTP server in use;
- <sftp-username> — user name on the SFTP server;
- <sftp-userpassword> — user password on the SFTP server;
- <sftp-server-ip> — IP address of the SFTP server in use;
- <scp-username> — user name on the SCP server;
- <ftp-userpassword> — user password on the FTP server;
- <scp-server-ip> — IP address of the SCP server in use;
- <http-username> — user name on the HTTP server;
- <http-userpassword> — user password on the HTTP server;
- <http-server-ip> — IP address of the HTTP server in use.
The rules for using firmware files for the different models are described in the section Files used for the upgrade.
Using USB/MMC media
1. Define the volume label of the connected USB/MMC storage:
wlc# show storage-devices usb
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<USB_DISK> vfat 7664.01 6391.69 1272.32
wlc# show storage-devices mmc
Name Filesystem Total, MB Used, MB Free, MB
------------------------------ ---------- ---------- ---------- ----------
<MMC_DISK> vfat 7664.01 6391.69 1272.32
2. Copying file from the USB/MMC storage:
When executing copy commands to USB/MMC media, instead of the <USB_DISK> or <MMC_DISK>
fields, use the real volume labels defined above.
wlc# copy usb://<USB_DISK>:/<firmware-file> system:firmware
|******************************************| 100% (73786kB) Firmware updated successfully
wlc# copy mmc://<MMC_DISK>:/<firmware-file> system:firmware
|******************************************| 100% (73786kB) Firmware updated successfully.
- <USB_DISK> – partition name on the USB storage;
- <MMC_DISK> – partition name on the MMC storage.
Selecting version 1.30.2 firmware image for the next upload
WLC controllers store two firmware images (image-1 and image-2) at the same time.
1. Check the contents of the firmware images uploaded to the controller:
wlc# show bootvar
Image Version Date Status After reboot ----- ------------------------- -------------------- ------------ ------------
1 1.30.0 build 2024-12-18 09:24:58 Active * 16[f23466fadf]
2 1.30.2 build 2025-03-05 16:01:09 Not Active 14[a1ba88a123]
When loading a firmware file to the system:firmware partition, the upload is always made to the currently
inactive partition.
2. Select the partition containing firmware version 1.30.2 as bootable:
wlc# boot system image-2This command cannot be interrupted, do not turn off device during process.Continue? (y/N): y
3. Check that the image containing firmware version 1.30.2 is selected for upload:
wlc# show bootvar
Image Version Date Status After reboot ----- ------------------------- -------------------- ------------ ------------
1 1.30.0 build 2024-12-18 09:24:58 Not Active 16[f23466fadf]
2 1.30.2 build 2025-03-05 16:01:09 Active * 14[a1ba88a123]
Если для последующей загрузки будет выбрана версия ПО, которая была выпущена ранее версии ПО, используемой в данный момент, после перезагрузки станет невозможна конвертация текущей конфигурации и будет применена пустая конфигурация (без заводских настроек). При пустой конфигурации к контроллеру можно подключиться только используя консольное подключение и логин/пароль по умолчанию (admin/password).
Rebooting the controller
Reboot the controller using the following command:
wlc# reload system
Do you really want to reload system ? (y/N): y