HalNiの雑記

備忘録を兼ねて。サーバマシンとかネットワークとか

Aruba AP は Instant OS に無理やり書き換えても動かないよ

タイトルの通り。超駄文。

Cisco Aironetシリーズの場合、集中管理型と自律型の変換がfirmwareを入れ替えると行えるのは既知の事実である
Aruba APにも集中管理型と自律型がラインナップされており、Aruba Instant AP は自律型で動作する

Aironet 1140で味をしめた自分は、懲りずにAruba AP-105 に IAP-105 のfirmwareを無理やり流し込んでみた

f:id:v_7zrgu0:20201125224742j:plain
はんぺんは3枚しかない、普通の学生なので…

まずはIAP用のファームを入手する

次にTFTPサーバを指定
指定に必要な serverip は setenv ? しても出てこないが、打つと認識はしてくれる

apboot> setenv
  bootdelay baudrate autoload boardname servername bootcmd autostart bootfile
  ethaddr
apboot>
apboot> setenv serverip 192.168.1.33
apboot> saveenv
Saving Environment to Flash...
Un-Protected 1 sectors
.done
Erased 1 sectors
Writing
apboot>
apboot> upgrade os ArubaInstant_Orion_6.4.4.4-4.2.3.2_54910
eth0 up: 1 Gb/s full duplex
DHCP broadcast 1
*** Unhandled DHCP Option in OFFER/ACK: 2
*** Unhandled DHCP Option in OFFER/ACK: 224
*** Unhandled DHCP Option in OFFER/ACK: 2
*** Unhandled DHCP Option in OFFER/ACK: 224
DHCP IP address: 192.168.1.56
DHCP subnet mask: 255.255.255.0
DHCP def gateway: 192.168.1.254
DHCP DNS server: 1.1.1.1
DHCP DNS domain:
Using eth0 device
TFTP from server 192.168.1.33; our IP address is 192.168.1.56
Filename 'ArubaInstant_Orion_6.4.4.4-4.2.3.2_54910'.
Load address: 0x2000000
Loading: #################################################################
         ###############################################
done
Bytes transferred = 7304620 (6f75ac hex)

Image is signed; verifying checksum... passed
Signer Cert OK
Policy Cert OK
RSA signature verified.
Erasing flash sector @ 0xbf100000...................................................................................................................done
Erased 112 sectors
Copying to flash...
Writing ...............................................................................................................done
Verifying flash... 7304620 bytes were the same
Upgrade successful.
apboot>

ちゃんと書き込めはする
再起動を行い、書き込んだファームから立ち上げる

apboot> reset

APBoot 1.2.4.4 (build 26618)
Built: 2011-01-07 at 13:42:04

Model: AP-10x
CPU:   AR7161 revision: A2
Clock: 680 MHz, DDR clock: 340 MHz, Bus clock: 170 MHz
DRAM:  128 MB
POST1: passed
Copy:  done
Flash: 16 MB
PCI:   scanning bus 0 ...
       dev fn venID devID class  rev    MBAR0    MBAR1    MBAR2    MBAR3
       00  00  168c  0029 00002   01 10000000 00000000 00000000 00000000
       01  00  168c  0029 00002   01 10010000 00000000 00000000 00000000
Net:   eth0
Radio: ar922x#0, ar922x#1

Hit <Enter> to stop autoboot:  0
Checking image @ 0xbf100000

Image is signed; verifying checksum... passed
Signer Cert OK
Policy Cert OK
RSA signature verified.
ELF file is 32 bit
Loading .text @ 0x80e00000 (7235720 bytes)
Loading .data @ 0x814e6890 (32 bytes)
Clearing .bss @ 0x814e68b0 (16 bytes)
## Starting application at 0x80e00000 ...
Uncompressing.....................................................................


Aruba Networks
ArubaOS Version 6.4.4.4-4.2.3.2 (build 54910 / label #54910)
Built by p4build@rhodes on 2016-05-05 at 19:05:20 PDT (gcc version 4.3.3)
CPU Rev: aa
71x CPU
Flash variant: default
Cache parity protection disabled
Using 340.000 MHz high precision timer. cycles_per_jiffy=680000
Memory: 119296k/131072k available (1719k kernel code, 11720k reserved, 732k data, 6376k init, 0k highmem)
 available.
detected lzma initramfs
initramfs: LZMA lc=3,lp=0,pb=2,dictSize=8388608,origSize=32013824
LZMA initramfs by Ming-Ching Tiew <mctiew@yahoo.com> .........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
AR7100 GPIOC major 0
wdt: registered with refresh
Enabling Watchdog
Talisker RSSI LED initialization
Creating 1 MTD partitions on "ar7100-nor0":
0x00000000-0x01000000 : "flash"
i2c /dev entries driver
i2c-talisker: using default base 0x18040000
AD7416 driver probing for devices on AR7100 I2C
.<6>lo: Disabled Privacy Extensions
IPv6 over IPv4 tunneling driver

Starting Kernel SHA1 KAT ...Completed Kernel SHA1 KAT
Starting Kernel HMAC-SHA1 KAT ...Completed Kernel HMAC-SHA1 KAT
Starting Kernel DES KAT ...Completed Kernel DES KAT
Starting Kernel AES KAT ...Completed Kernel AES KAT

Starting Kernel AESGCM KAT ...Completed Kernel AESGCM KAT

Thu Jan  1 00:00:00 PST 1970
AP-type has_ble_support: .
Domain Name: instant.arubanetworks.com
No panic info available
apfcutil: sector CACHE: Cache uninitialized
apfcutil: sector RAP: Cache uninitialized
apfcutil: sector FAT: Cache uninitialized
apfcutil: sector SCRATCH: Cache uninitialized
Backup ENV.
Testing TPM... Passed
apfcutil: sector MESH Prov: Cache uninitialized
ag7100_mod: module license 'unspecified' taints kernel.
AG7100: Length per segment 512
AG7100: Max segments per packet 4
AG7100: Max tx descriptor count    400
AG7100: Max rx descriptor count    252
AG7100: fifo cfg 3 018001ff
AG7100CHH: Mac address for unit 0
AG7100CHH: 6c:f3:7f:**:**:**
AG7100: cfg1 0xf cfg2 0x7014
ATHRF1: Port 0, Neg Success
ATHRF1: unit 0 phy addr 0 ATHRF1: reg0 3100
Cfg len is 0
Configuration file is empty, turning on default ag7100_ring_alloc Allocated 4800 at 0x8094a000
services...
extag7100_ring_alloc Allocated 3024 at 0x80963000
ended ssid activAG7100: cfg1 0xf cfg2 0x7014
ate due to no APATHRF1: Port 0, Neg Success
 config ...
ATHRF1: unit 0 phy addr 0 ATHRF1: reg0 3100
AG7100: unit 0 phy is up...RGMii 1000Mbps full duplex
AG7100: pll reg 0x18050010: 0x110000  AG7100: cfg_1: 0x1ff0000
AG7100: cfg_2: 0x3ff
AG7100: cfg_3: 0x18001ff
AG7100: cfg_4: 0xffff
AG7100: cfg_5: 0xfffef
AG7100: done cfg2 0x7215 ifctl 0x0 miictrl 0x22
Writing 4
Mesh is DISABLED on this device.
copying bootuplog ...
AP xml model 39, num_radios 2 (jiffies 18532)
init_asap_mod: installation:0
radio 0: band 1 ant 0 max_ssid 8
radio 1: band 0 ant 0 max_ssid 8
election init: rand=c HZ=500
IAP client match init
allow PAPI
notify asap_mod 3g no present...
Starting watchdog process...
apdot1x authentication is not enabled
Got all network params from APboot env. Skipping DHCP
192.168.1.56 255.255.255.0 192.168.1.254
Compressing all files in the /etc/httpd directory...
ip_time_handler: Got ip and packets on bond0 Started master election 7-0, rand 20
Done.
Starting Webserver
bind: Transport endpoint is not connected
bind: Transport endpoint is not connected
bind: Transport endpoint is not connected
Launching NTP Client on pool.ntp.org
ath_hal: 0.9.17.1 (AR5416, AR9380, REGOPS_FUNC, PRIVATE_DIAG, WRITE_EEPROM, 11D)
ath_rate_atheros: Copyright (c) 2001-2005 Atheros Communications, Inc, All Rights Reserved
ath_rate_atheros: Aruba Networks Rate Control Algorithm
ath_dfs: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_spectrum: Version 2.0.0
Copyright (c) 2005-2006 Atheros Communications, Inc. All Rights Reserved
ath_dev: Copyright (c) 2001-2007 Atheros Communications, Inc, All Rights Reserved
ath_pci: 0.9.4.5 (Atheros/multi-bss)
ath_attach: scn 855b0280 sc 85d60000 ah 85d00000
wifi0: Base BSSID 6c:f3:7f:40:50:58, 8 available BSSID(s)
bond0 address=6c:f3:7f:**:**:**
br0 address=6c:f3:7f:**:**:**
wifi0: AP type AP-105, radio 0, max_bssids 8
wifi0: Atheros 9280: mem=0x10010000, irq=49 hw_base=0xb0010000
ath_attach: scn 856b0280 sc 856c0000 ah 85700000
wifi1: Base BSSID 6c:f3:7f:40:50:50, 8 available BSSID(s)
bond0 address=6c:f3:7f:**:**:**
br0 address=6c:f3:7f:**:**:**
wifi1: AP type AP-105, radio 1, max_bssids 8
wifi1: Atheros 9280: mem=0x10000000, irq=48 hw_base=0xb0000000
ath_ahb: 0.9.4.5 (Atheros/multi-bss)

Starting FIPS KAT ... Completed FIPS KAT

cat: /proc/reboot_reason: No such file or directory

shutting down watchdog process (nanny will restart it)...

        <<<<<       Welcome to the Access Point     >>>>>

Completed SW FIPS KAT test
User: i am master now
(16:48:12) !!! Init ---> Master
asap_send_elected_master: sent successfully
User:

Aruba OS(?)が立ち上がってくる
GUIのログイン画面へアクセス可能になる

f:id:v_7zrgu0:20201118134739j:plain
ログイン画面が表示される
しかし悲しいことに、この画面からGUIにログインすることは出来ない
初期パスワードのはずなのに弾かれる

なぜか?コンソールポートからアクセスするとその謎は明かされる
実はこのAP、縮退モードで動作している

Warning: CLI module is running in a degraded state.  Configuration, write memory, and support command are disabled; please debug with caution.

configモードに入れない

そして無限に ”turn off mobility” のアラートがコンソールに上がってくる

        <<<<<       Welcome to the Access Point     >>>>>

Completed SW FIPS KAT test
User: admin

System uptime is 70 seconds and CLI is not ready yet, please try again later.
User: i am master now
(17:15:07) !!! Init ---> Master
asap_send_elected_master: sent successfully
turn off mobility
turn off mobility
turn off mobility
turn off mobility
turn off mobility
turn off mobility
・
・
・

単純にファームを入れ替えただけではダメらしい