I want to install lightweight IOS into Aironet 1131AG by using Upgrade Tool.
However, some error messages appear saying
1. ACL / Firewall might be blocking the TFTP.
2. Disable the ACL/Firewall setting for TFTP.
I don't set up any ACL because I am trying to install to the Aironet which was just initialized by using mode button.
Configuration is just like followings
Is there any possiblity that the configuration block the TFTP communication ?
now, ping is reachable and directly, I am connecting AP and PC with upgrade tool .
and windows firewall is disable on the PC.
But the upgrade tool is error.
Please let me know the reason why the TFTP communication is failed.
Current configuration : 1361 bytes ! version 12.4 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname ap ! no aaa new-mode
! power inline negotiation prestandard source ! username Cisco password 7 XXXXXXXXX ! bridge irb ! interface Dot11Radio0 no ip address no ip route-cache shutdown station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface Dot11Radio1 no ip address no ip route-cache shutdown no dfs band block channel dfs station-role root bridge-group 1 bridge-group 1 subscriber-loop-control bridge-group 1 block-unknown-source no bridge-group 1 source-learning no bridge-group 1 unicast-flooding bridge-group 1 spanning-disabled ! interface FastEthernet0 no ip address no ip route-cache duplex auto speed auto bridge-group 1 no bridge-group 1 source-learning bridge-group 1 spanning-disabled ! interface BVI1 ip address 192.168.0.1 255.255.255.0 no ip route-cache ! ip http server no ip http secure-server ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag bridge 1 route ip
Adding to Scott--After the 1230 family, you don't really need the upgrade tool anymore because the newer APs all come with Manufacturer Installed Certificates (MICs), which is something a lot of the older 1230s didn't have (some did, some didn't).
One of the main functions of the Upgrade Tool is to generate an SSC on older APs without MICs and then store the key hash for installation into the controller so that the AP can join. (You can even do this without the tool, but it can get pretty labor intensive if you're doing it manually on the AP CLI.)
The other nice feature of the Upgrade Tool is its batching capability, but you can do this pretty simply with a Windows CLI, CatTools, or scripted within most of the popular terminal apps.
While it's a decent effort by Cisco to make converting APs a bit easier, unless I'm working on 1230s, I try to avoid the Upgrade Tool as I've found it likes to express its bugs at exactly the wrong moments.