If you have to change the controller hardware later on RMA , it is not possible to reinstall the same certificate; instead, you must generate the certificate newly on the new controller. Copy the device certificate final. In the Certificate Password text box, enter the password to protect the certificate. Click Apply. Click OK in order to confirm your decision to reboot the controller.
Move the final. Change the download settings by entering the following commands:. Enter the password for the. Start the certificate and key download by entering the this command:. Skip to content Skip to search Skip to footer. Book Contents Book Contents. Find Matches in This Book.
PDF - Complete Book Updated: November 18, Chapter: Managing Certificates. Follow these guidelines for using TFTP: If you load the certificate through the service port, the TFTP server must be on the same subnet as the controller because the service port is not routable, or you must create static routes on the controller.
Note Chained certificates are supported for web authentication and management certificate. Step 5 In the Timeout field, enter the amount of time in seconds that the TFTP server attempts to download the certificate. Step 6 In the Certificate File Path field, enter the directory path of the certificate.
Step 8 Optional In the Certificate Password field, enter a password to encrypt the certificate. Step 9 Save the configuration. Step 3 To view the current download settings, enter this command and answer n to the prompt: transfer download start Information similar to the following appears: Mode Are you sure you want to start? Certificate installed. Please restart the switch reset system to use the new certificate. Step 7 To save the SSL certificate, key, and secure web password to NVRAM so that your changes are retained across reboots, enter this command: save config Step 8 To reboot the controller, enter this command: reset system Downloading Device Certificates Each wireless device controller, access point, and client has its own device certificate.
Follow these guidelines when setting up a TFTP or FTP server: If you are downloading through the service port, the TFTP or FTP server must be on the same subnet as the service port because the service port is not routable, or you must create static routes on the controller.
Note All certificates downloaded to the controller must be in PEM format. Note Clients using Microsoft Windows 10 with default zero-touch config supplicant fail to connect to controller when there is no CA certificate to validate the server certificate. This is because the supplicant does not pop up a window to accept the server certificate and silently rejects the Therefore, we recommend that you do either of the following: Manually install a third-party CA certificate on the AAA server, which the clients using Microsoft Windows 10 can trust.
Step 4 In the Certificate Password text box, enter the password that was used to protect the certificate. Step 7 Enter the maximum number of times that the TFTP server attempts to download the certificate in the Maximum Retries text box and the amount of time in seconds that the TFTP server attempts to download the certificate in the Timeout text box.
Step 8 In the File Path text box, enter the directory path of the certificate. Step 9 In the File Name text box, enter the name of the certificate. Step 11 Click Download to download the device certificate to the controller. Step 13 If prompted to save your changes, click Save and Reboot. Step 14 Click OK to confirm your decision to reboot the controller. To do so, enter the maximum number of times that the TFTP server attempts to download the software for the retries parameter and the amount of time in seconds that the TFTP server attempts to download the software for the timeout parameter.
Step 9 If you are using an FTP server, enter these commands skip this step if you are not using FTP server : transfer download username username transfer download password password transfer download port port Note The default value for the port parameter is Step 10 View the updated settings by entering the transfer download start command.
Step 5 In the File Path text box, enter the directory path of the certificate. Step 6 In the File Name text box, enter the name of the certificate. Step 8 Click Upload to upload the CA certificate from the controller. Step 10 If prompted to save your changes, click Save and Reboot. Step 11 Click OK to confirm your decision to reboot the controller. Step 8 View the updated settings by entering the transfer upload start command. Step 9 Reboot the controller by entering the reset system command.
Downloading CA Certificates Controllers and access points have a Certificate Authority CA certificate that is used to sign and validate device certificates. Step 6 Enter the maximum number of times that the TFTP server attempts to download the certificate in the Maximum Retries text box and the amount of time in seconds that the TFTP server attempts to download the certificate in the Timeout text box.
Step 7 In the File Path text box, enter the directory path of the certificate. Step 8 In the File Name text box, enter the name of the certificate. Step 10 Click Download to download the CA certificate to the controller. Step 12 If prompted to save your changes, click Save and Reboot.
Step 13 Click OK to confirm your decision to reboot the controller. Step 8 If you are using an FTP server, enter these commands skip this step if you are not using FTP server : transfer download username username transfer download password password transfer download port port Note The default value for the port parameter is Step 9 View the updated settings by entering the transfer download start command.
Step 10 Reboot the controller by entering the reset system command. Step 5 In the File Path field, enter the directory path of the certificate. Step 6 In the File Name field, enter the name of the certificate. Step 9 If prompted to save your changes, click Save. Generating a Certificate Signing Request This section describes how to generate a Certificate Signing Request CSR to get a third-party certificate and how to download a chained certificate to the controller.
Go to Solution. You simply select how many APs you have and accept the agreement. No need to install any licenses. So this should not affect you. You can directly upgrade to 8. View solution in original post. So lets say , for a moment if i am not running WLAN Poller and i upgrade WLC and do a pre-download image on access points , if pre-download is successful in all access point then my wild guess is that i don't have to run WLAN Poller as its main idea is to see if ap has enough memory to write the new image?
In the Release Notes for the , it is stated that:. If you are using Release 8. Thanks Leo Laohoo , so in this case i will skip running wlan poller part prior to wlan upgrade activity. Thanks patoberli , currently 8. So we changed the plan ; rather than upgrading intermediate software , we upgraded the WLC directly to 8. They had some access points and we were able to be back-online in around 20 mins.
Thanks for everyone's suggestions as based on your suggestions , we were ready with our tools and plan but with a limited downtime , we had to move to plan B of direct upgrade. Buy or Renew.
Find A Community. Cisco Community. Join us in congratulating October's Spotlight Award Winners! Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Showing results for. Search instead for. Did you mean:. All Community This category This board. Cisco Software upgrade from 8. Contents Introduction. Prerequisites Requirements In addition to basic networking knowledge and familiarity with the basic configuration and installation of Cisco Wireless LAN Controllers, ensure that you read the Guidelines and Recomendations present in the release notes.
You can reduce the network downtime using the following options: You can predownload the AP image. Components Used The information in this document is based on these software and hardware versions: An FTP server with the upgrade files stored. A Cisco WLC that runs 8. Follow these steps: Upload your controller configuration files to a server to back up the configuration files.
The software releases are labeled as described here to help you determine which release to download. Click a controller software release number: Early Deployment ED —These software releases provide new features and new hardware platform support as well as bug fixes.
Maintenance Deployment MD —These software releases provide bug fixes and ongoing software maintenance. Deferred DF —These software releases have been deferred. We recommend that you migrate to an upgraded release. Click Download. Save the file to your hard drive. Optional Disable the controller Note: For busy networks, controllers on high utilization, and small controller platforms, we recommend that you disable the From the File Type drop-down list, choose Code. If you choose HTTP you will be prompted for the location of the file.
Proceed to step 13 if you choose HTTP. If you are using a TFTP server, the default value of 10 retries for the Maximum Retries field, and 6 seconds for the Timeout field should work correctly without any adjustment. However, you can change these values, if required. To do so, enter the maximum number of times the TFTP server attempts to download the software in the Maximum Retries field and the amount of time in seconds for which the TFTP server attempts to download the software, in the Timeout field.
In the File Path field, enter the directory path of the software. The default value is Click Download to download the software to the controller. A message indicating the status of the download is displayed. After the download is complete, click Reboot. If you are prompted to save your changes, click Save and Reboot. Click OK to confirm your decision to reboot the controller. If you have disabled the Optional To verify that the controller software is installed on your controller, on the controller GUI, click Monitor and view the Software Version field under Controller Summary.
Complete these steps: Make sure that the FTP server is reachable from the controller, and make sure the upgrade file resides in a directory of the FTP server. Cisco Systems Inc. Product Name Cisco Controller Product Version FTP Data Type Are you sure you want to start? FTP receive complete Checking Version Built. Image version check passed. Writing new RTOS to flash disk. Writing new AP Image Bundle to flash disk.
Writing AVC Files to flash disk. Executing fini script. Reboot the controller for update to complete. Optionally, pre-download the image to APs before rebooting to reduce network downtime.
0コメント