Software de controlador de LAN sen fíos
Información do produto
Efficient Image Upgrade
Especificacións
- Feature: Efficient Image Upgrade
- Compatibility: Not recommended for controllers running Cisco
IOS XE Amsterdam 17.3.x with Cisco Catalyst 9124AX and Cisco
Catalyst 9130AX APs in the same group.
Instrucións de uso do produto
Enable Pre-Download (GUI)
- Go to Configuration > Wireless > Access Points.
- In the Access Points page, expand the All Access Points section
and click the name of the AP to edit. - In the Edit AP page, click the Advanced tab.
- Under the AP Image Management section, click Predownload.
- Click Update & Apply to Device to enable Pre-Download.
Enable Pre-Download (CLI)
- Acceda ao modo de configuración global usando o comando:
configure terminal. - Create a wireless profile flex by entering:
wireless.
profile flex flex-profile - Enable predownload of the image by using:
predownload. - Exit configuration mode by entering:
end.
Configuring a Site Tag (CLI)
- Access global configuration mode with:
configure.
terminal - Crear un sitio tag by using:
wireless tag site.
site-name - Configure a flex profile by entering:
flex-profile.
flex-profile-name - Add a description for the site tag con:
description.
site-tag-name - Save and exit configuration mode by using:
end.
FAQ
Q: Can I use Efficient Image Upgrade feature on all controller
tipos?
A: No, it is not recommended to enable this feature on
controllers running Cisco IOS XE Amsterdam 17.3.x when there are
Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same
grupo.
Q: How can I attach a policy tag and a site tag to an AP?
A: Follow the procedure given in the user manual under
“Attaching Policy Tag e Sitio Tag to an AP (CLI)”.
Efficient Image Upgrade
· Efficient Image Upgrade, on page 1 · Enable Pre-Download (GUI), on page 2 · Enable Pre-Download (CLI), on page 2 · Configuring a Site Tag (CLI), on page 2 · Attaching Policy Tag e Sitio Tag to an AP (CLI), on page 4 · Trigger Predownload to a Site Tag, on page 5 · Feature History for Out-of-Band AP Image Download, on page 7 · Information About Out-of-Band AP Image Download, on page 7 · Restrictions for Out-of-Band AP Image Download, on page 8 · Download AP Image from Controller Using HTTPS (CLI), on page 8 · Download AP Image from Controller Using HTTPS (GUI), on page 9 · Verifying Image Upgrade, on page 10
Efficient Image Upgrade
Efficient Image upgrade is an efficient way of predownloading the image to the APs. It works similar to primary – subordinate model. An AP per model becomes the primary AP and downloads image from the controller through the WAN link. Once the primary AP has the downloaded image, the subordinate APs starts downloading the image from the primary AP. In this way, WAN latency is reduced. Primary AP selection is dynamic and random. A maximum of three subordinate APs per AP model can download the image from the primary AP.
Note Do not enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.
Efficient Image Upgrade 1
Enable Pre-Download (GUI)
Efficient Image Upgrade
Enable Pre-Download (GUI)
Procedemento
Paso 1 Paso 2 Paso 3
Paso 4
Choose Configuration > Wireless > Access Points. In the Access Points page, expand the All Access Points section and click the name of the AP to edit. In the Edit AP page, click the Advanced tab and from the AP Image Management section, click Predownload. Click Update & Apply to Device.
Enable Pre-Download (CLI)
Procedemento
Paso 1
Comando ou Acción configurar terminal ExampLe:
Dispositivo # configurar terminal
Finalidade Entra no modo de configuración global.
Paso 2
sen fíos profile flex flex-profile
ExampLe:
Dispositivo (configuración) # Wireless Profile flex rr-xyz-flex-profile
Configures a flex profile and enters the flex profile modo de configuración.
Paso 3
predownload
ExampLe:
Dispositivo (config-wireless-flex-profile)# predownload
Enables predownload of the image.
Paso 4
fin
ExampLe:
Dispositivo (config-wireless-flex-profile)# fin
Exits the configuration mode and returns to privileged EXEC mode.
Configuring a Site Tag (CLI)
Follow the procedure given below to configure a site tag:
Efficient Image Upgrade 2
Efficient Image Upgrade
Configuring a Site Tag (CLI)
Procedemento
Paso 1
Comando ou Acción configurar terminal ExampLe:
Dispositivo # configurar terminal
Finalidade Entra no modo de configuración global.
Paso 2
sen fíos tag site site-name
ExampLe:
Device(config)# wireless tag site rr-xyz-site
Configures a site tag and enters site tag modo de configuración.
Paso 3
flex-profile flex-profile-nome
ExampLe:
Device(config-site-tag)# flex-profile rr-xyz-flex-profile
Configures a flex profile.
Nota
You cannot remove the flex
profile configuration from a site
tag if local site is configured on
o sitio tag.
Nota
The no local-site command needs
to be used to configure the Site
Tag as Flexconnect, otherwise the
Flex profile config does not take
efecto.
Paso 4 Paso 5 Paso 6
description site-tag-nome
ExampLe:
Device(config-site-tag)# description “default site tag”
Adds a description for the site tag.
final ExampLe:
Device(config-site-tag)# fin
Saves the configuration and exits configuration mode and returns to privileged EXEC mode.
show wireless tag site summary
(Optional) Displays the number of site tags.
ExampLe:
Nota
Device# show wireless tag site summary
Para view detailed information about a site, use the show wireless tag site detailed site-tag-name command.
Nota
The output of the show wireless
loadbalance tag affinity wncd
wncd-instance-number command
displays default tag (site-tag) type,
if both site tag and policy tag son
non configurado.
Efficient Image Upgrade 3
Attaching Policy Tag e Sitio Tag to an AP (CLI)
Efficient Image Upgrade
Attaching Policy Tag e Sitio Tag to an AP (CLI)
Follow the procedure given below to attach a policy tag and a site tag to an AP:
Procedemento
Paso 1
Comando ou Acción configurar terminal ExampLe:
Dispositivo # configurar terminal
Paso 2
ap mac-address ExampLe:
Device(config)# ap F866.F267.7DFB
Finalidade Entra no modo de configuración global.
Configures a Cisco AP and enters AP profile modo de configuración.
Nota
The mac-address should be a
wired mac address.
Paso 3 Paso 4 Paso 5 Paso 6 Paso 7 Paso 8 Paso 9
policy-tag policy-tag-nome
ExampLe:
Device(config-ap-tag)# policy-tag rr-xyz-policy-tag
Maps a policy tag á AP.
sitio-tag sitio-tag-nome
ExampLe:
Device(config-ap-tag)# site-tag rr-xyz-site
Maps a site tag á AP.
rf-tag rf-tagnome ExampLe:
Device(config-ap-tag)# rf-tag rf-tag1
Associates the RF tag.
final ExampLe:
Device(config-ap-tag)# fin
Saves the configuration, exits configuration mode, and returns to privileged EXEC mode.
show ap tag summary ExampLe:
Device# show ap tag resumo
(Optional) Displays AP details and the tags associated to it.
show ap name <ap-name> tag información
ExampLe:
Device# show ap name ap-name tag información
(Optional) Displays the AP name with tag información.
show ap name <ap-name> tag detail ExampLe:
(Optional) Displays the AP name with tag detals.
Efficient Image Upgrade 4
Efficient Image Upgrade
Trigger Predownload to a Site Tag
Comando ou Acción
Finalidade
Device# show ap name ap-name tag detalle
Trigger Predownload to a Site Tag
Follow the procedure given below to trigger image download to the APs:
Procedemento
Paso 1
Activar comando ou acción ExampLe:
Device> configure terminal
Purpose Enters the privileged EXEC mode.
Paso 2
ap image predownload site-tag sitio-tag start Instructs the primary APs to start image
ExampLe:
predownload.
Device# ap image predownload site-tag rr-xyz-site start
Paso 3
show ap master list ExampLe:
Device# show ap master list
Displays the list of primary APs per AP model per site tag.
Paso 4
show ap image ExampLe:
Device# show ap image
Displays the predownloading state of primary and subordinate APs .
Nota
To check if Flexefficient image
upgrade is enabled in the AP, use
the show capwap client rcb
command on the AP console.
Os seguintes sample outputs display the functioning of the Efficient Image Upgrade feature:
The following output displays the primary AP.
Device# show ap master list
Nome AP
WTP Mac
Modelo AP
Sitio Tag
—————————————————————————————–
AP0896.AD9D.3124
f80b.cb20.2460 AIR-AP2802I-D-K9 ST1
The following output shows that the primary AP has started predownloading the image.
Device# show ap image Total number of APs: 6
Nome AP
Primary Image Backup Image Predownload Status Predownload Version
Next Retry Time Retry Count
——————————————————————————————————————————–
APE00E.DA99.687A 16.6.230.37
0.0.0.0
Ningún
0.0.0.0
Efficient Image Upgrade 5
Trigger Predownload to a Site Tag
Efficient Image Upgrade
N/A AP188B.4500.4208
N/A AP188B.4500.4480
N/A AP188B.4500.5E28
N/A AP0896.AD9D.3124
0 AP2C33.1185.C4D0
N/A
0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0
8.4.100.0
Ningún
0.0.0.0
Ningún
16.4.230.35 Ningún
8.4.100.0
Predownloading
8.4.100.0
Ningún
0.0.0.0 0.0.0.0 0.0.0.0 16.6.230.36 0.0.0.0
The following output shows that the primary AP has completed predownload and the predownload has been initiated in the subordinate AP.
Device# show ap image
Número total de AP: 6
Nome AP
Primary Image Backup Image Predownload Status Predownload Version
Next Retry Time Retry Count
——————————————————————————————————————————–
APE00E.DA99.687A 16.6.230.37
0.0.0.0
Iniciado
16.6.230.36
N/A
0
AP188B.4500.4208 16.6.230.37
8.4.100.0
Ningún
0.0.0.0
N/A
0
AP188B.4500.4480 16.6.230.37
0.0.0.0
Ningún
0.0.0.0
N/A
0
AP188B.4500.5E28 16.6.230.37
16.4.230.35 Ningún
0.0.0.0
N/A
0
AP0896.AD9D.3124 16.6.230.37
8.4.100.0
Completa
16.6.230.36
0
0
AP2C33.1185.C4D0 16.6.230.37
8.4.100.0
Iniciado
16.6.230.36
0
0
The following output shows image status of a particular AP.
Device# show ap name APe4aa.5dd1.99b0 image AP Name : APe4aa.5dd1.99b0 Primary Image : 16.6.230.46 Backup Image : 3.0.51.0 Predownload Status : None Predownload Version : 000.000.000.000 Next Retry Time : N/A Retry Count : 0
The following output shows predownload completion on all APs.
Device# show ap image Total number of APs: 6
Number of APs
Iniciado
:0
Predownloading
:0
Completed predownloading : 3
Non compatible
:0
Failed to Predownload
:0
Nome AP
Primary Image Backup Image Predownload Status Predownload Version
Next Retry Time Retry Count
——————————————————————————————————————————–
APE00E.DA99.687A 16.6.230.37
16.6.230.36 Completa
16.6.230.36
N/A
0
Efficient Image Upgrade 6
Efficient Image Upgrade
Feature History for Out-of-Band AP Image Download
AP188B.4500.4208 N/A
AP188B.4500.4480 N/A
AP188B.4500.5E28 N/A
AP0896.AD9D.3124 0
AP2C33.1185.C4D0 0
16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0 16.6.230.37 0
8.4.100.0
Ningún
0.0.0.0
Ningún
16.4.230.35 Ningún
16.6.230.36 Completa
16.6.230.36 Completa
0.0.0.0 0.0.0.0 0.0.0.0 16.6.230.36 16.6.230.36
Feature History for Out-of-Band AP Image Download
This table provides release and related information for the feature explained in this module. This feature is available in all the releases subsequent to the one in which it is introduced in, unless noted otherwise.
Table 1: Feature History for Out-of-Band AP Image Download
Lanzamento
Cisco IOS XE Dublin 17.11.1
Característica
Out-of-Band AP Image Download
Información da función
The AP image upgrade method is enhanced to make the upgrades faster and more flexible.
Information About Out-of-Band AP Image Download
In WLAN deployments, the APs gather their software image and configuration from the controller (in-band) during the join, predownload, and upgrade phases over the CAPWAP control path. This mechanism has limitations in the context of CAPWAP window size, processing of CAPWAP packets, and parallel image downloads. With image upgrade being a significant activity in the lifecycle of APs, upgrades become a time-consuming activity when the deployment size increases, especially for remote deployments, because the image always comes from the controller, irrespective of the deployment types.
To make upgrades faster and more flexible, the AP image upgrade method is enhanced in Cisco IOS XE Dublin 17.11.1 release. An enhanced webserver (nginx) running on the controller helps the AP image downloads to be available out of the CAPWAP path (out of band).
Nota
· HTTPS configuration done at the global level applies to all the APs joining the controller.
· When AP image download over an Out-of-Band method fails, the download falls back to the CAPWAP method, as a result of which the APs will not be stranded.
· AP image download over HTTPS may fail if the HTTPS server Trustpoint has a chain of CA certificates.
· Before you downgrade from Cisco IOS XE Dublin 17.11.1 to an earlier version, ensure that the Out-of-Band AP Image Download feature is disabled, as it is not supported in previous releases.
Efficient Image Upgrade 7
Restrictions for Out-of-Band AP Image Download
Efficient Image Upgrade
Restrictions for Out-of-Band AP Image Download
This feature is not supported on the following platforms: · Cisco Embedded Wireless Controller on Catalyst Access Points · Cisco Embedded Wireless Controller on Catalyst Switches · Cisco Wave 1 Access Points
Download AP Image from Controller Using HTTPS (CLI)
Before you begin · HTTPS configuration must be enabled.
· The ngnix server must be running on the controller. Use the show platform software yang-management process command to check whether the ngnix server is running.
· The custom-configured port must be reachable between the controller and the corresponding AP.
Procedemento
Paso 1
Comando ou Acción configurar terminal ExampLe:
Dispositivo # configurar terminal
Finalidade Entra no modo de configuración global.
Paso 2
ap upgrade method https
Configures the corresponding AP to download
ExampLe:
the image over HTTPS from the controller if the AP supports out-of-band AP image
Device(config)# ap upgrade method https download method.
You can check whether the AP supports efficient download method using the show ap config general command.
Use the no form of this command to disable out-of-band AP image download method.
Paso 3
ap file-transfer https port port_number
ExampLe:
Device(config)# ap file-transfer https port 8445
Configures a custom port for image download from the nginx server running on the controller.
For HTTPS port, the valid values range from 0 to 65535, with a default of 8443. You cannot use port 443 for AP file transfers because it is the default port used for other HTTPS requests. Also, avoid configuring standard and well-known ports because the configuration may fail.
Efficient Image Upgrade 8
Efficient Image Upgrade
Download AP Image from Controller Using HTTPS (GUI)
Comando ou Acción
Paso 4
final ExampLe:
Dispositivo (config) # fin
Finalidade
By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file transfer over HTTPS instead of 8443.
The port 8443 is customazible. A sample config is given below:
Source= wireless controller Destination= Access Point Protocol=HTTPS Destination Port=8443 Source Port=any Description= “Out of Band AP Image Download”
Volve ao modo EXEC privilexiado.
Download AP Image from Controller Using HTTPS (GUI)
Procedemento
Paso 1 Paso 2
Paso 3
Paso 4
Choose Configuration > Wireless > Wireless Global.
In the AP Image Upgrade section, enable the HTTPS Method to allow image download on APs from the controller, over HTTPS. This out-of-band file transfer is an efficient method for AP image upgrade.
Nota
The AP should support out-of-band image download. You can verify this in the Configuration
> Wireless > Access Points window. Select the AP, and in the Edit AP > Advanced tab, view
the details of the support in the AP Image Management section.
Enter the HTTPS Port to designate AP file transfers on that port. Valid values range from 0 to 65535, with the default being 8443. Note that you cannot use port 443 for AP file transfers because that is the default port for other HTTPS requests.
By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file transfer over HTTPS instead of 8443.
Click Apply to Device to save the configuration.
Efficient Image Upgrade 9
Verifying Image Upgrade
Efficient Image Upgrade
Verifying Image Upgrade
To check whether an AP supports efficient download method, use the following command:
Device# show ap config general
Cisco AP Name : AP002C.C862.E880 =================================================
Cisco AP Identifier : 002c.c88b.0300 Country Code : Multiple Countries : IN,US Regulatory Domain Allowed by Country : 802.11bg:-A 802.11a:-ABDN AP Country Code : US – United States AP Regulatory Domain 802.11bg : -A AP Upgrade Out-Of-Band Capability : Enabled AP statistics : Disabled
Para view the AP image download statistics, use the following command. Use the show ap image command to see the detailed output.
Device# show ap image summary
Total number of APs : 1 Number of APs
Initiated Downloading Predownloading Completed downloading Completed predownloading Not Supported Failed to Predownload Predownload in progress
:0 :0 :0 :0 :0 :0 :0 : No
Para view the method used to download the AP image, use the following command:
Device# show wireless stats ap image-download
AP image download info for last attempt
AP Name Count ImageSize StartTime
Hora de finalización
Diff(secs) Predownload Aborted
Método
----------------------------------
mysore1 1
40509440 08/23/21 22:17:59 08/23/21 22:19:06 67
Non
Non
CAPWAP
Para view the method used to download the AP image, use the following command:
Device# show ap upgrade method AP upgrade method HTTPS : Disabled
Para view the port used for the AP image transfer, use the following command:
Device# show ap file-transferencia https resumo
Configured port Operational port
: 8443 : 8443
Efficient Image Upgrade 10
Efficient Image Upgrade
Verifying Image Upgrade
!If different ports are shown under ‘Configured port’ and ‘Operations port’ !that means custom port configuration has failed and is continuing with the previous port.
!The failure reason could be the input port, which is a well-known port and already in use.
Para view the whether an AP supports image download over HTTPS, use the following command:
Device# show ap name AP2800 config general | sec Upgrade
AP Upgrade Out-Of-Band Capability
: Activado
Para view the detailed output an AP’s pre-image, use the following command:
Device# show ap image
Total number of APs : 2
Number of APs
Iniciado
:0
Descargando
:0
Predownloading
:0
Completed downloading
:2
Completed predownloading : 0
Non compatible
:0
Failed to Predownload
:0
Predownload in progress : No
AP Name Primary Image Backup Image Predownload Status Predownload Version Next Retry
Time Retry Count Method
——————————————————————————————————————–
AP_3800_1 17.11.0.69 17.11.0.71 None
0.0.0.0
N/A
0
HTTPS
AP2800
17.11.0.69 17.11.0.71 Ningún
0.0.0.0
N/A
0
HTTPS
!The ‘method’ column indicates the download method used by the AP.
Efficient Image Upgrade 11
Verifying Image Upgrade
Efficient Image Upgrade
Efficient Image Upgrade 12
Documentos/Recursos
 |
CISCO Wireless LAN Controller Software [pdfGuía do usuario Wireless LAN Controller Software, LAN Controller Software, Controller Software, Software |