Image recovery on the AP1520

The process for image recovery on an AP1520 should be generally similar to that done with any IOS AP with a console port.

  1. With the AP powered off, connect an RJ45 console cable to the console port.  The console port is the black plastic RJ45 jack inside the unit.

    Configure the terminal emulator for 8 databits, no parity, no flow control, 9600 bps.
  2. Apply power to the AP.
  3. When the bootloader displays "Base Ethernet MAC Address", hit the <esc> key to break to the ap: prompt:
    IOS Bootloader - Starting system.
    Xmodem file system is available.
    flashfs[0]: 13 files, 2 directories
    flashfs[0]: 0 orphaned files, 0 orphaned directories
    flashfs[0]: Total bytes: 31868928
    flashfs[0]: Bytes used: 9721344
    flashfs[0]: Bytes available: 22147584
    flashfs[0]: flashfs fsck took 20 seconds.
    Reading cookie from flash parameter block...done.
    Base Ethernet MAC address: 00:1f:27:75:db:00

    The system boot has been aborted.  The following
    commands will finish loading the operating system 
    software:

        ether_init
        tftp_init
        boot


    ap:
    Note: if the ENABLE_BREAK=no environmental variable is set, you will not be able to escape to the bootloader.
  4. Cable the 1520's LAN port ("PoE In") to a TFTP server.  In this case, I used a Windows PC with tftpd32 installed.
  5. Put a good copy of the c1520 k9w8 IOS image on the TFTP server.
  6. Configure the TFTP server's LAN interface with a static IP address.  In this case, I used 10.1.1.1.
  7. On the AP:
    ap: dir flash:
      - verify that there is enough free space on flash to hold the new code.
      If not, or if the flash filesystem is corrupt, then:
      ap: format flash:
  8. Copy the image using TFTP to the 1520's flash:
    ap: set IP_ADDR 10.1.1.2

    ap: set NETMASK 255.255.255.0

    ap: ether_init
    Initializing ethernet port 0...

    ap: tftp_init
    tftp_init success: You can now use tftp file system!

    ap: tar -xtract tftp://10.1.1.1/c1520-k9w8-tar.124-21a.JA2 flash:

    extracting info (293 bytes)
    c1520-k9w8-mx.124-21a.JA2/ (directory) 0 (bytes)
    extracting c1520-k9w8-mx.124-21a.JA2/c1520-k9w8-mx.124-21a.JA2 (5197365 bytes)..
    .............................................
    extracting c1520-k9w8-mx.124-21a.JA2/8001.img (97896 bytes).....................
    extracting c1520-k9w8-mx.124-21a.JA2/c1520_avr_1.img (10368 bytes)..
    extracting c1520-k9w8-mx.124-21a.JA2/c1520_avr_2.img (10624 bytes)..
    extracting c1520-k9w8-mx.124-21a.JA2/c1520_avr_3.img (14720 bytes)...
    extracting c1520-k9w8-mx.124-21a.JA2/info (293 bytes)
    extracting info.ver (293 bytes)
    ap: set
    49_RADIO_CARRIER_SET=0x0024
    49_RADIO_MAX_TX_POWER=400
    58_RADIO_CARRIER_SET=0x0027
    58_RADIO_MAX_TX_POWER=640
    5G_RADIO_ANTENNA_DIVERSITY=0x01
    5G_RADIO_CARRIER_SET=0x000B
    5G_RADIO_ENCRYPTION_CONFIG=0x0002
    5G_RADIO_MAX_TX_POWER=250
    BOOT=flash:/c1520-k9w8-mx.124-18a.JA1/c1520-k9w8-mx.124-18a.JA1
    CRASH_LOG=yes
    DEFAULT_ROUTER=10.0.0.1
    DOT11G_RADIO_MODE=0xFF
    DOT11_DEVICE_TYPE=4C
    DOT11_ENCRYPTION_CONFIG=0x0002
    DOT11_MAX_ASSOCIATION_NUM=2007
    ENABLE_BREAK=yes
    FAB_PART_NUM=1c 1f 44 03
    IP_ADDR=10.1.1.2
    MAC_ADDR=00:1F:27:75:DB:00
    MAC_ADDR_BLOCK_SIZE=01 00
    NETMASK=255.255.255.0
    NEW_IMAGE=yes
    PCA_ASSY_NUM_800=03 20 00 70 ed 03
    PCA_PART_NUM_73=49 2a a6 03
    PCA_REVISION_NUM=B0
    PCA_REVISION_NUM_800=B0
    PCB_SERIAL_NUM=FOC1213496Z
    PEP_PRODUCT_ID=AIR-LAP1524PS-A-K9
    PEP_VERSION_ID=V01
    PRODUCT_MODEL_NUM=AIR-LAP1524PS-A-K9
    RADIO_ANTENNA_DIVERSITY=0x01
    RADIO_CARRIER_SET=0x0000
    RADIO_MAX_TX_POWER=640
    RELOAD_REASON=23
    SYSTEM_REVISION_NUM_800=A0
    TERMLINES=0
    TOP_ASSY_NUM_800=03 20 00 77 2e 01
    TOP_ASSY_SERIAL_NUM=FTX1218P080

    ap: 

    ap: dir flash:
    Directory of flash:/

    2    -rwx  63        <date>               mesh_cfg.txt
    3    -rwx  4515840   <date>               c1520-img-tar
    4    -rwx  213       <date>               mesh_port_cfg.txt
    9    drwx  384       <date>               c1520-k9w8-mx.124-18a.JA1
    5    -rwx  1008      <date>               env_vars
    6    -rwx  293       <date>               info
    7    -rwx  9240      <date>               private-multiple-fs
    8    -rwx  90439     <date>               event.log
    15   drwx  384       <date>               c1520-k9w8-mx.124-21a.JA2
    10   -rwx  3564      <date>               private-config
    24   -rwx  293       <date>               info.ver

    16813056 bytes available (15055872 bytes used)

    ap: set BOOT flash:/c1520-k9w8-mx.124-21a.JA2/c1520-k9w8-mx.124-21a.JA2

    ap: boot
    Loading "flash:/c1520-k9w8-mx.124-21a.JA2/c1520-k9w8-mx.124-21a.JA2"...#########
    #####################################################################
    [ ... ]
    *Mar  1 00:00:14.047: %SYS-5-RESTART: System restarted --
    Cisco IOS Software, C1520 Software (C1520-K9W8-M), Version 12.4(21a)JA2, RELEASE SOFTWARE (fc1)