If you have a small (less than 8 GB) USB drive available, upgrading AOS can be done via the USB port on a wireless controller. For the USB’s file system, FAT32 is an option for Windows users.
After booting into CPBoot (the second boot prompt)
#start the usb port
usb start 1
#check if usb port is reading
# to check if the file system is readable..
# ex. upgrade command
upgrade 0:0 1:1 Arubaimage/ArubaOS_72xx_184.108.40.206_53338
Reference: Airheads How To Upgrade a controller through the USB Port
It’s not completely obvious that upgrading the partition means upgrading the OS on the controller. Use this if the Web UI gives you an error about running out of space.
To upgrade partition 0 in enable mode:
copy tftp: <IP ADDRESSS> <FILENAME> system: partition 0
copy tftp: 220.127.116.11 A800_18.104.22.168_23915 system: partition 0
Other useful commands
Import Switch Configuration
copy sftp startup-config user <username> <IP Address> <Path to File>
copy sftp startup-config user alexkuo 22.214.171.124 /var/home/alexkuo/switch-import.cfg
Export Switch Configuration
copy running-config sftp user <username> <IP Address> <Path to File>
copy running-config sftp user alexkuo 126.96.36.199 /var/home/alexkuo/switch-exported.cfg
When setting up the guest network between an IAP with ClearPass, the older guides direct the user to setup a PreAuth role for guest and deny all traffic.
It’s assumed a firewall exception or something similar is automatically put into the IAP firewall rules to let the IAP, client, and the ClearPass server communicate, but this isn’t the case currently. In addition to denying traffic to all servers, you need to add additional rules to let the client communicate with ClearPass AND the IAP – or else radius requests will fail.
The PreAuth role looks similar to the following:
- 192.168.99.111 is the IAP’s Virtual Controller
- 192.168.99.103 is the ClearPass server