topic Re: R720 SCG firmware change in Access Points - Indoor and Outdoor

R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 15:05:32 GMT

I have bought an R720 from Ebay. I have tried many times to factory reset it using the button. Then the device successfully obtains IP address from DHCP, and I can log in using the default credentials (super/sp-admin) for one time (!), and all I see is a restricted UI showing me:

"Software Version: 5.1.1.0.3048" and also that "A Ruckus SCG is managing this device."

And I can't go anywhere from here to change the firmware to standalone or unleashed (which I wanted to do originally). Can anyone kindly suggest me where can I go from here?

Thanks in advance.

Re: R720 SCG firmware change

abilashpr — Mon, 08 Jun 2020 15:10:33 GMT

Hi B0mb,

Pls ssh into it and use command set-factory, then you will be able to change the firmware.

Regards,
Abilash PR

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 15:25:49 GMT

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 15:43:33 GMT

Abi,

I have tried that the ssh session looked like this:
login as: super

Please login: super

password :

Copyright(C) 2018 Ruckus Wireless, Inc. All Rights Reserved.

** Ruckus R720 Multimedia Hotzone Wireless AP: 3617xxxxxxx

rkscli: set factory
Factory defaults will take effect after reboot
OK
rkscli: reboot
Oops! "Reboot" is waiting for firmware update to finish....
OK

Then it rebooted and it's back to same version after factory and reboot:

rkscli: get version
Ruckus R720 Multimedia Hotzone Wireless AP
Version: 5.1.1.0.3048

EDIT:
This AP behaves really strange to me... after I manually reset it using the reset switch or the CLI as shown above, it "somehow" updates the firmware and reboots once again and then I cannot login with the default credentials anymore. If I scan the AP from the switch using LLDP it shows such information:

System Name: Reception AP-3617xxxxxxxxx
System Description: Ruckus R720 Multimedia Hotzone Wireless AP/SW Version: 5.1.1.0.3048

Weird, eh?

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 15:44:06 GMT

UPDATE:
This AP behaves really strange to me... after I manually reset it using the reset switch or the CLI as shown above, it "somehow" updates the firmware and reboots once again and then I cannot login with the default credentials anymore. If I scan the AP from the switch using LLDP it shows such information:

System Name: Reception AP-3617xxxxxxxxx
System Description: Ruckus R720 Multimedia Hotzone Wireless AP/SW Version: 5.1.1.0.3048

Weird, eh?

Re: R720 SCG firmware change

abilashpr — Mon, 08 Jun 2020 15:55:48 GMT

Hi B0mb,

Please run set https enable this should give you web interface, now you will get options to upgrade the firmware or you should perform the upgrade using cli.

Please check if you have compatable version for this AP, and try to perform the upgrade.

Hope it hepls!!!

Regards,
Abilash PR

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 16:13:13 GMT

Abi,

The GUI is restricted to see the basic infos and reboot/reset but I can't do anythings else. I think that's because it's managed by "SCG"....

Re: R720 SCG firmware change

syamantakomer — Mon, 08 Jun 2020 17:53:14 GMT

Hi B0mb,

I am suspecting if AP is registered on Ruckus cloud and may be trying to connect to Cloud. This is why it cannot stay accessible for long after factory reset.

Could you run below command and share the output.

get scg

You may need to contact the seller and ask if they registered it on Ruckus cloud and have to get APs serial removed from Ruckus Cloud account.

Regards,
Syamantak Omer

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 19:04:25 GMT

Hi Syamantak,

Thanks for your response. Here is the output of the given command:

rkscli: get scg

------ SCG Information ------
SCG Service is enabled.
AP is not managed by SCG.
State: CONN_GET_ADDR_STATE
Server List: Not found
No SSH tunnel exists
Failover List: Not found
Failover Max Retry: 2
DHCP Opt43 Code: 6
Server List from DHCP (Opt43/Opt52): Not found
SCG default URL:
SCG config|heartbeat intervals: 30|30
SCG gwloss|serverloss timeouts: 1800|7200
Controller Cert Validation : disable
-----------------------------
OK

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 19:09:53 GMT

Found out also that ssh tunnel is active on device which is listed as Ruckus Cloud IP: 35.225.236.82

rkscli: get sshtunnel
SSH tunnel service is enabled
SSH tunnel connected to 35.225.236.82
Cipher for SSH tunnel: 128
OK

IP is listed at https://support.ruckuswireless.com/articles/000007992

Re: R720 SCG firmware change

syamantakomer — Mon, 08 Jun 2020 20:11:18 GMT

Hi b0mb,

This is what I was suspecting.

This AP seems registered on Ruckus Cloud AP registrar and trying to connect to Cloud account of previous owner.

Since you bought this from ebay, I am not sure if support can help you to find the account and remove it, as device is not purchased from authorized Ruckus partner/reseller.

Please reachout to ebay reseller and ask them to get the AP deleted from original Cloud Account.
Regards,
Syamantak Omer

Re: R720 SCG firmware change

syamantakomer — Mon, 08 Jun 2020 20:18:26 GMT

You can also try following as it may fix the problem.

1- Factory reset the AP.
2- Make sure AP cannot reach internet after factory reset (use an isolated switch or POE injector to directly connect with AP).
3- Now flash the AP to stand alone version or Unleashed (depending upon your requirement).
4- Post upgrade, run below command.

set scg disable

5- Now connect the AP to network and try accessing it.

There is another way to block AP-Cloud controller communication, by blocking cloud server IPs on your local firewall/router/gateway.

Regards,
Syamantak Omer

Re: R720 SCG firmware change

b0mb — Mon, 08 Jun 2020 20:22:59 GMT

That's something I was thinking of, but how could I get to flash an unleashed firmware to it? Since I can't even execute enable command from CLI, the GUI currently only allows "read-only" things and nothing else after a hardware reset...

Re: R720 SCG firmware change

b0mb — Tue, 09 Jun 2020 06:42:15 GMT

Anyone with any ideas?

Re: R720 SCG firmware change

syamantakomer — Tue, 09 Jun 2020 12:17:39 GMT

Try upgrading AP firmware using FTP or TFTP.

AP firmware upgrade using TFTP via AP CLI:

Ensure that the board is able to ping the TFTP server
Place the image in TFTPROOT directory (typically /tftpboot) on the host TFTP server

Run the following commands on rkscli prompt to flash an image using TFTP:

fw set proto tftp
fw set host
fw set control (path/Name of the image file, eg. ap-arm-qca-wsg/rcks_fw.bl7)
fw update
reboot

AP firmware upgrade using FTP from CLI:

Download the R720 Unleashed image from https://support.ruckuswireless.com/software_downloads/2510-ruckus-unleashed-ap-200-8-10-3-278-ga-refresh-software-for-r720 and put it on FTP server's root folder

SSH to AP and type below commands (Make sure that you are able to ping the FTP server's IP from AP CLI):

fw set control firmware_filename.Bl7 (This is the file name of the firmware in FTP server)
fw set proto ftp
fw set host xxx.xxx.xxx.xxx (Where x.x.x.x is IP address of the FTP server)
fw set user xxxx (Where xxx is user name of the FTP server)
fw set password xxxx (Where xxx is password of the FTP server)
fw up
reboot

Re: R720 SCG firmware change

b0mb — Tue, 09 Jun 2020 14:11:55 GMT

Abi,

Thanks a lot for the solution, upgrading the AP via FTP worked well! It must be said that as you said, the original FW version had to be blocked on my Fortigate so it could not download firmware nor settings/configuration from Ruckus Cloud.

Checked the version via SSH, gives me:

Copyright(C) 2018 Ruckus Wireless, Inc. All Rights Reserved.

** Ruckus R720 Unleashed AP: 3617xxxxxx

Warning: AP is in Unleashed-Managed mode
          Current or latest Unleashed: 192.168.x.x / xx:xx:xx:xx:xx
          Any configuration changes made in CLI may conflict
          with the Unleashed's management and
          will cause undefined results.

rkscli: get version
Ruckus R720 Multimedia Hotzone Wireless AP
Version: 200.8.10.3.278

It even joined my existing R710 Unleashed master!

Thank you again for finding the resolution!

Re: R720 SCG firmware change

syamantakomer — Tue, 09 Jun 2020 14:24:59 GMT

I am glad that it fixed the issue!

Regards,
Syamantak Omer

Re: R720 SCG firmware change

michael_brado — Wed, 17 Jun 2020 20:05:57 GMT

Lesson is Don't Buy Used APs on Ebay!

This AP was obviously owned by a Ruckus Cloud customer... and it may not be legal if still registered to the Cloud.