Upgrading an Instant AP

This topic describes the Instant software upgrade procedures and the different methods for upgrading the image on the Instant AP.

While upgrading anInstant AP, you can use the image check feature to allow the Instant AP to find new software image versions available on a cloud-based image server hosted and maintained by Aruba. The location of the image server is fixed and cannot be changed by the user. The image server is loaded with the latest versions of the Instant software.

Topics in this chapter include:

Upgrading an Instant AP and Image Server

Instant supports mixed Instant AP class Instant deployment with all Instant APs as part of the same virtual controller cluster.

Image Management Using AirWave

If the multi-class Instant AP network is managed by AirWave, image upgrades can only be done through the AirWave WebUI. The Instant AP images for different classes must be uploaded on the AMP server. If new Instant APs joining the network need to synchronize their software with the version running on the virtual controller, and if the new Instant AP belongs to a different class, the image file for the new Instant AP is provided by AirWave. If AirWave does not have the appropriate image file, the new Instant AP will not be able to join the network.

The virtual controller communicates with the AirWave server if AirWave is configured. If AirWave is not configured on the Instant AP, the image is requested from the Image server.

Image Management Using Cloud Server

If the multi-class Instant AP network is not managed by AirWave, image upgrades can be done through the Cloud-Based Image Check feature. If a new Instant AP joining the network needs to synchronize its software version with the version on the virtual controller and if the new Instant AP belongs to a different class, the image file for the new Instant AP is provided by the cloud server.

Configuring HTTP Proxy on an Instant AP

If your network requires a proxy server for Internet access, ensure that you configure the HTTP proxy on the Instant AP to download the image from the cloud server. The Username and Password configuration is supported only for cloud services. After setting up the HTTP proxy settings, the Instant AP connects to the Activate server, AMP, Central, OpenDNS, or web content classification server through a secure HTTP connection. The proxy server can also be configured and used for cloud services. You can also exempt certain applications from using the HTTP proxy (configured on an Instant AP) by providing their host name or IP address under exceptions.

In the Old WebUI

To configure the HTTP proxy settings:

  1. Navigate to System > Proxy. The Proxy configuration window is displayed.
  2. Enter the HTTP proxy server IP address in the Server text box.
  3. Enter the port number in the Port text box.
  4. If you want to set an authentication username and password for the proxy server, select the Proxy requires authentication checkbox.
  5. Enter a username in the Username text box.
  6. Enter a password in the Password text box.
  7. If you do not want the HTTP proxy to be applied for a particular host, click New to enter that IP address or domain name of that host in the Exceptions section.

In the New WebUI

To configure the HTTP proxy settings:

  1. Navigate to Configuration > System > Proxy.
  2. Enter the HTTP proxy server IP address in the Auth Server text box.
  3. Enter the port number in the Port text box.
  4. If you want to set an authentication username and password for the proxy server, enable the Proxy requires authentication toggle switch.
  5. Enter a username in the Username text box.
  6. Enter a password in the Password text box.
  7. If you do not want the HTTP proxy to be applied for a particular host, click + to enter that IP address or domain name of that host in the Exceptions section.
  8. Click Save.

In the CLI

To configure the HTTP proxy settings:

(Instant AP)(config)# proxy server 192.0.2.1 8080 example1 user123

(Instant AP)(config)# proxy exception 192.0.2.2

(Instant AP)(config)# end

(Instant AP)# commit apply

HTTP Proxy Support through Zero Touch Provisioning

Instant APs experience issues when connecting to AirWave, Central, or Activate through the HTTP proxy server which requires a user name and password. The ideal way to provide seamless connectivity for these cloud platforms is to supply the proxy information to the Instant AP through a DHCP server.

Starting with Instant AOS-8.4.0.0, besides being able to authenticate to the HTTP proxy server, the factory default Instant APs can also communicate with the server through a HTTP proxy server DHCP which does not require authentication.

In order for the factory default Instant AP to automatically discover the proxy server, you need to configure the HTTP proxy information in the DHCP server option. The Instant AP will receive the proxy information and store it in a temporary file.

To retrieve the port and the proxy server information, you need to first configure the DHCP option 60 to ArubaInstantAP as shown below:

(Instant AP)(config)# ip dhcp <profile_name>

(Instant AP)("IP DHCP profile-name")# option 60 ArubaInstantAP

Secondly, use the following command to configure the proxy server:

(Instant AP)(config)# proxy server <host> <port> [<username> <password>]

Use the text string option 148 text server=host_ip,port=PORT,username=USERNAME,password=PASSWORD to retrieve the details of the proxy server.

Rolling Upgrade on Instant APs with AirWave

Starting from Instant AOS-8.4.0.0, Rolling Upgrade for Instant APs in standalone mode is supported with AirWave. The upgrade is orchestrated through NMS and allows the Instant APs deployed in standalone mode to be sequentially upgraded such that the APs upgrade and reboot one at a time. With Rolling Upgrade, the impact of upgrading a site is reduced to a single AP at any given point in time. This enhances the overall availability of the wireless network. For more information, see AirWave 8.2.8.2 Instant Deployment Guide and AirWave 8.2.8.2 Release Notes.

Upgrading an Instant AP Using the Automatic Image Check

You can upgrade an Instant AP by using the Automatic Image Check feature. The automatic image checks are performed once, as soon as the Instant AP boots up and every week thereafter.

If the image check locates a new version of the Instant software on the image server, the New version available link is displayed on the Instant main window.

If AirWave is configured, the automatic image check is disabled.

In the Old WebUI

To check for a new version on the image server in the cloud:

  1. Go to Maintenance > Firmware.
  2. In the Automatic section, click Check for New Version. After the image check is completed, one of the following messages is displayed:
    • No new version available—If there is no new version available.
    • Image server timed out—Connection or session between the image server and the Instant AP is timed out.
    • Image server failure—If the image server does not respond.
    • A new image version found—If a new image version is found.
  3. If a new version is found, the Upgrade Now button becomes available and the version number is displayed.
  4. Click Upgrade Now.

The Instant AP downloads the image from the server, saves it to flash, and reboots. Depending on the progress and success of the upgrade, one of the following messages is displayed:

  • Upgrading—While image upgrading is in progress.
  • Upgrade successful—When the upgrade is successful.
  • Upgrade failed—When the upgrade fails.

If the upgrade fails and an error message is displayed, retry upgrading the Instant AP.

In the New WebUI

To check for a new version on the image server in the cloud:

  1. Go to Maintenance > Firmware.
  2. In the Automatic section, click Check for New Version. After the image check is completed, one of the following messages is displayed:
    • No new version available—If there is no new version available.
    • Image server timed out—Connection or session between the image server and the Instant AP is timed out.
    • Image server failure—If the image server does not respond.
    • A new image version found—If a new image version is found.
  3. If a new version is found, the Upgrade Now button becomes available and the version number is displayed.
  4. Click Upgrade Now.

The Instant AP downloads the image from the server, saves it to flash, and reboots. Depending on the progress and success of the upgrade, one of the following messages is displayed:

  • Upgrading—While image upgrading is in progress.
  • Upgrade successful—When the upgrade is successful.
  • Upgrade failed—When the upgrade fails.

If the upgrade fails and an error message is displayed, retry upgrading the Instant AP.

Upgrading to a New Version Manually Using the WebUI

If the Automatic Image Check feature is disabled, you can manually obtain an image file from a local file system or from a remote server accessed using a TFTP, FTP or HTTP URL.

In the Old WebUI

To manually check for a new firmware image version and obtain an image file:

  1. Navigate to Maintenance > Firmware.
  2. Under Manual section, perform the following steps:
    1. To update firmware using a downloaded image file:
      1. Select the Image file option. This method is only available for single-class Instant APs.

      2. Click on Browse and select the image file from your local system. The following table describes the supported image file format for different Instant AP models:

        Access Points

        Image File Format

        AP-344, AP-345, AP-514, AP-515, AP-518, AP-574, AP-575, AP-575EX, AP-577, and AP-577EX

        ArubaDellInstant_Draco_8.6.0.x_xxxx

        AP-503H, AP-504, AP-505, AP-505H, AP-565, and AP-567.

        ArubaDellInstant_Gemini_8.6.0.x_xxxx

        IAP-314, IAP-315, IAP-324, IAP-325, AP-374, AP-375, AP-377, AP-318, and AP-387

        ArubaDellInstant_Hercules_8.6.0.x_xxxx

        IAP-334 and IAP-335

        ArubaDellInstant_Lupus_8.6.0.x_xxxx

        AP-534, AP-535, and AP-555

        ArubaDellInstant_Scorpio_8.6.0.x_xxxx

        AP-303, AP-303H, 303P Series, IAP-304, IAP-305, AP-365, and AP-367

        ArubaDellInstant_Ursa_8.6.0.x_xxxx

        AP-203H, AP-203R, AP-203RP, and IAP-207

        ArubaDellInstant_Vela_8.6.0.x_xxxx

    2. To upgrade firmware using the URL of an image file:
      1. Select the Image URL option to obtain an image file from a HTTP, TFTP, or FTP URL.

      2. Enter the image URL in the URL text field. The syntax to enter the URL is as follows:

        • HTTP - http://<IP-address>/<image-file>. For example, http://<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx
        • TFTP - tftp://<IP-address>/<image-file>. For example, tftp://<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx
        • FTP - ftp://<IP-address>/<image-file>. For example, ftp://<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx
        • FTP - ftp://<user name:password>@<IP-address>/<image-file>. For example, ftp://<arubadell:123456>@<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx

        The FTP server supports both anonymous and username:password login methods.

        Multiclass Instant APs can be upgraded only in the URL format, not in the local image file format.

  3. Clear the Reboot all APs after upgrade check box if required. This check box is selected by default to allow the Instant APs to reboot automatically after a successful upgrade. To reboot the Instant AP at a later time, clear the Reboot all APs after upgrade check box.
  4. Click Upgrade Now to upgrade the Instant AP to the newer version.

In the New WebUI (Instant 8.4.0.0 or later versions)

To manually check for a new firmware image version and obtain an image file:

  1. Navigate to Maintenance > Firmware.
  2. Expand Manual section.
  3. The firmware can be upgraded using a downloaded image file or a URL of an image file.
    1. To update firmware using a downloaded image file:
      1. Select the Image file option. This method is only available for single-class Instant APs.
      2. Click on Browse and select the image file from your local system. The following table describes the supported image file format for different Instant AP models:

        Access Points

        Image File Format

        AP-344, AP-345, AP-514, AP-515, AP-518, AP-574, AP-575, AP-575EX, AP-577, and AP-577EX

        ArubaDellInstant_Draco_8.6.0.x_xxxx

        AP-503H, AP-504, AP-505, AP-505H, AP-565, and AP-567.

        ArubaDellInstant_Gemini_8.6.0.x_xxxx

        IAP-314, IAP-315, IAP-324, IAP-325, AP-374, AP-375, AP-377, AP-318, and AP-387

        ArubaDellInstant_Hercules_8.6.0.x_xxxx

        IAP-334 and IAP-335

        ArubaDellInstant_Lupus_8.6.0.x_xxxx

        AP-534, AP-535, and AP-555

        ArubaDellInstant_Scorpio_8.6.0.x_xxxx

        AP-303, AP-303H, 303P Series, IAP-304, IAP-305, AP-365, and AP-367

        ArubaDellInstant_Ursa_8.6.0.x_xxxx

        AP-203H, AP-203R, AP-203RP, and IAP-207

        ArubaDellInstant_Vela_8.6.0.x_xxxx

    2. To upgrade firmware using the URL of an image file:
      1. Select the Image URL option to obtain an image file from a HTTP, TFTP, or FTP URL.

      2. Enter the image URL in the URL text field. The syntax to enter the URL is as follows:

        • HTTP - http://<IP-address>/<image-file>. For example, http://<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx
        • TFTP - tftp://<IP-address>/<image-file>. For example, tftp://<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx
        • FTP - ftp://<IP-address>/<image-file>. For example, ftp://<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx
        • FTP - ftp://<user name:password>@<IP-address>/<image-file>. For example, ftp://<arubadell:123456>@<IP-address>/ArubaDellInstant_Hercules_8.6.0.x_xxxx

        The FTP server supports both anonymous and username:password login methods.

        Multiclass Instant APs can be upgraded only in the URL format, not in the local image file format.

  4. Disable the Reboot all APs after upgrade toggle switch if required. This option is enabled by default to allow the Instant APs to reboot automatically after a successful upgrade. To reboot the Instant AP at a later time, clear the Reboot all APs after upgrade check box.
  5. Click Upgrade Now to upgrade the Instant AP to the newer version.
  6. Click Save.

Upgrading an Instant AP Image Using CLI

To upgrade an image using a HTTP, TFTP, or FTP URL:

(Instant AP)# upgrade-image <ftp/tftp/http-URL>

The following is an example to upgrade an image by using the FTP URL :

(Instant AP)# upgrade-image ftp://192.0.2.7/ArubaDellInstant_Hercules_8.6.0.x_xxxx

To upgrade an image without rebooting the Instant AP:

(Instant AP)# upgrade-image2-no-reboot <ftp/tftp/http-URL>

The following is an example to upgrade an image without rebooting the Instant AP:

(Instant AP)# upgrade-image2-no-reboot ftp://192.0.2.7/ArubaDellInstant_Hercules_8.6.0.x_xxxx

To view the upgrade information:

(Instant AP)# show upgrade info

Image Upgrade Progress

----------------------

Mac IP Address AP Class Status Image Info Error Detail

--- --------- -------- ------ ---------- ------------

d8:c7:c8:c4:42:98 10.17.101.1 Hercules image-ok image file none

Auto reboot :enable

Use external URL :disable

Upgrade from Instant 6.4.x.x-4.2.x.x to Instant 8.6.0.x

Before you upgrade an Instant AP running Instant 6.5.4.0 or earlier versions to Instant 8.6.0.x, follow the procedures mentioned below:

  1. Upgrade from Instant 6.4.x.x-4.2.x.x or any version prior to Instant 6.5.4.0 to Instant 6.5.4.0.
  2. Refer to the Field Bulletin AP1804-1 at asp.arubanetworks.com.
  3. Verify the affected serial numbers of the Instant AP units.