topic Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER in ZoneDirector

2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVERLAP)

Piet — Tue, 30 Aug 2022 03:11:02 GMT

I'm getting this error message with Firfox (Using TLS 1...3) on a 2nd Zone Director 3000 that I just picked up:

======================================================================================

Secure Connection Failed

An error occurred during a connection to 192.168.1.20. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

=====================================================================================

I can get the the ssh shell. Would be nice to get my 1st ZD-3000 to download it's firmware to this

second ZD-3000 that I just picked up.

=======================================================================================

piet@piet-Precision-T3600:~$ ssh 192.168.1.20

Please login: admin
Password:

Welcome to the Ruckus Wireless ZoneDirector 3000 Command Line Interface
ruckus>

..........................................................................................................................................................................................

ruckus# show sysinfo
System Overview:
Name= ruckus
IP Address= 192.168.1.20
IPv6 Address= 2600:1702:4a0:2a30:225:c4ff:fe3d:61c0
IPv6 Address= fe80::225:c4ff:fe3d:61c0
IPv6 Address= 2600:1702:4a0:2a30::e
MAC Address= 00:25:C4:3D:61:C0
Uptime= 27m
Model= ZD3025
Licensed APs= 25
Serial Number= 360933001769
Version= 9.6.1.0 build 15

Devices Overview:
Number of APs= 0
Number of Client Devices= 0
Number of Rogue Devices= 0

Usage Summary:
Usage of 1 hr:
Max. Concurrent Users= 0
Bytes Transmitted= 0B
Number of Rogue Devices= 0
Usage of 24 hr:
Max. Concurrent Users= 0
Bytes Transmitted= 0B
Number of Rogue Devices= 0

Memory Utilization:
Used Bytes= 137089024
Used Percentage= 12%
Free Bytes= 919191552
Free Percentage= 88%

ruckus#

........................................................................................................................................................................................

ruckus# show license
License:
Model= ZD3025
Max. AP Number= 25
Max. Client Number= 5000
ruckus#

...........................................................................................................................................................................................

====================================================================================

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

sanjay_kumar — Tue, 30 Aug 2022 03:26:09 GMT

Hi @Piet

"Error code: SSL_ERROR_NO_CYPHER_OVERLAP" is a browser compatibility issue with ZD on 9.6.1.

Use the TLS 1.0 supported old browser version or upgrade the ZD to 9.7 or above using CLI, for permanent fix.

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

sanjay_kumar — Tue, 30 Aug 2022 03:29:32 GMT

Here is the article on how to upgrade the ZD from CLI

https://support.ruckuswireless.com/articles/000001449

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 03:59:36 GMT

I just tried:

fw_upgrade ftp -s 192.168.1.151 -n /home/piet/Downloads/10.1-ZD-2017-09-01-mibs.zip

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 04:07:46 GMT

This helps:

https://www.youtube.com/watch?v=Sg_fjpaiIbM

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

sanjay_kumar — Tue, 30 Aug 2022 05:13:47 GMT

Hi @Piet
This "10.1-ZD-2017-09-01-mibs.zip" in the command you are using is a MIB file. Please use the software file in .img format like below:
https://support.ruckuswireless.com/software/1542-zd3000-9-8-3-0-58-mr3-refresh2-software-release-wpa2-krack-patchhttps://support.ruckuswireless.com/software_terms_and_conditions/1567-zd3000-10-1-0-0-1515-ga-software-release

Since you are 9.6 version, upgrade to 9.8.3.0.58 and check.

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 05:19:56 GMT

I have a working Zone Director 3025 and was able to backup the firmware.

The new ZD also appears to be a 3025, so I thought it was likely a save image

to use and would be compatable to work best as a backup to my 1st ZD 3025.

No?

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

sanjay_kumar — Tue, 30 Aug 2022 05:22:03 GMT

The config backup has to imported on the ZD which has the same firmware.

It will not import the image on the new ZD.

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 07:10:57 GMT

I think I'm backing up the firmware and trying to install it on

my other ZD3025. I don't think I was backing up the config file.

Looks like the firmware isn't allowing me to upgrade from my other ZD-3025. Sigh!

------------------------------------------------------------------------
ruckus(debug)# fw_upgrade -p tftp -s 192.168.1.151 -n backup
------------------------------------------------------------------------
** Starting CLI Upgrade **
------------------------------------------------------------------------
Protocol : tftp
Server IP : 192.168.1.151
Image Name: backup
------------------------------------------------------------------------
** Checking if memory is sufficient **
------------------------------------------------------------------------
.
----->Sufficient memory to perform upgrade
------------------------------------------------------------------------
** Downloading ZD image **
------------------------------------------------------------------------

----->Downloading image succeed
------------------------------------------------------------------------
** Verifying the image **
------------------------------------------------------------------------
.
----->Verifying image failed
This does not seem to be a valid upgrade image.
Please try another file.
------------------------------------------------------------------------
** Upgrade failed, please try again **
------------------------------------------------------------------------
ruckus(debug)#

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 07:14:32 GMT

Ok, I'll give it another try. My backup of the firmware from 10.1.1.0 didn't work.

Maybe ya can't make that big of a jump. I'll try 9.8.3.0.58 if I can fetch it.

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 07:33:22 GMT

I downloaded 9.8.3.0.58 and it installed ok. I guess the web will work now.

My primary zd3000 is running 10.1.1.0 so I suspect I should upgrade it for

the new ZD to work as a secondary. No?

==============================================================

ruckus(debug)# fw_upgrade -p tftp -s 192.168.1.151 -n new.img
------------------------------------------------------------------------
** Starting CLI Upgrade **
------------------------------------------------------------------------
Protocol : tftp
Server IP : 192.168.1.151
Image Name: new.img
------------------------------------------------------------------------
** Checking if memory is sufficient **
------------------------------------------------------------------------
.
----->Sufficient memory to perform upgrade
------------------------------------------------------------------------
** Downloading ZD image **
------------------------------------------------------------------------
.................................................
----->Downloading image succeed
------------------------------------------------------------------------
** Verifying the image **
------------------------------------------------------------------------
........................9.6.1.0 lt 9.12.0.0

upgrade to 9.12.0.0, applicable 9.9.0.0, 9.9.1.0, 9.10.0.0

----->Verifying image done
This 9.12.0.0 upgrade package is applicable to
(9.9.0.0, 9.9.1.0, 9.10.0.0
)----->Are you sure you want to upgrade the entire wireless network?
[y|n] enter>------------------------------------------------------------------------
** Upgrading the system **
------------------------------------------------------------------------
ZoneDirector is being upgraded, DO NOT disconnect ZoneDirector
from the power source or the wired network. Wait a few minutes
after the automatic system restart.
....................................................................................Connection to 192.168.1.20 closed by remote host.
Connection to 192.168.1.20 closed.
piet@piet-Precision-T3600:/srv/tftp$

========================================================================

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Tue, 30 Aug 2022 07:55:25 GMT

The upgrade to 9.8.3.0.58 worked and the web interface is working.

Wondering how to proceed next and there is a 10.1.1.0 Zone Controller that

is controlling the 5 R700's in the zone. Shouldn't I upgrade the new ZD3000 to 10.1.1.0

before configuring it? I don't want my R700's to be downloaded with new firmware.

Would be nice to keep the other firmware on them the original standalone firmware if

possible

Re: 2nd Ruckus ZoneDirector ZD-3000 Version= 9.6.1.0 wont work with web browers SSL (NO_CYPHER_OVER

Piet — Sat, 03 Sep 2022 07:42:14 GMT

I thought I used a CLI command and dumped the firmware.