R720 SCG firmware change

  • 1
  • Question
  • Updated 2 months ago
  • Answered
I have bought an R720 from Ebay. I have tried many times to factory reset it using the button. Then the device successfully obtains IP address from DHCP, and I can log in using the default credentials (super/sp-admin) for one time (!), and all I see is a restricted UI showing me:

"Software Version: 5.1.1.0.3048" and also that "A Ruckus SCG is managing this device."

And I can't go anywhere from here to change the firmware to standalone or unleashed (which I wanted to do originally). Can anyone kindly suggest me where can I go from here?

Thanks in advance.
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like

Posted 2 months ago

  • 1
Photo of Abi

Abi

  • 126 Posts
  • 62 Reply Likes
Hi B0mb,

Pls ssh into it and use command set-factory, then you will be able to change the firmware.

Regards,
Abilash PR
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
Abi,

I have tried that the ssh session looked like this:
login as: super

Please login: super

password :

Copyright(C) 2018 Ruckus Wireless, Inc. All Rights Reserved.

** Ruckus R720 Multimedia Hotzone Wireless AP: 3617xxxxxxx

rkscli: set factory
Factory defaults will take effect after reboot
OK
rkscli: reboot
Oops! "Reboot" is waiting for firmware update to finish....
OK

Then it rebooted and it's back to same version after factory and reboot:

rkscli: get version
Ruckus R720 Multimedia Hotzone Wireless AP
Version: 5.1.1.0.3048


Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
UPDATE:
This AP behaves really strange to me... after I manually reset it using the reset switch or the CLI as shown above, it "somehow" updates the firmware and reboots once again and then I cannot login with the default credentials anymore. If I scan the AP from the switch using LLDP it shows such information:

System Name: Reception AP-3617xxxxxxxxx
System Description: Ruckus R720 Multimedia Hotzone Wireless AP/SW Version: 5.1.1.0.3048

Weird, eh?
Photo of Abi

Abi

  • 126 Posts
  • 62 Reply Likes
Hi B0mb,

Please run set https enable this should give you web interface, now you will get options to upgrade the firmware or you should perform the upgrade using cli.

Please check if you have compatable version for this AP, and try to perform the upgrade.

Hope it hepls!!!

Regards,
Abilash PR
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
Abi,

The GUI is restricted to see the basic infos and reboot/reset but I can't do anythings else. I think that's because it's managed by "SCG"....
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 354 Posts
  • 127 Reply Likes
Hi B0mb,

I am suspecting if AP is registered on Ruckus cloud and may be trying to connect to Cloud. This is why it cannot stay accessible for long after factory reset.

Could you run below command and share the output.

get scg

You may need to contact the seller and ask if they registered it on Ruckus cloud and have to get APs serial removed from Ruckus Cloud account.


Regards,
Syamantak Omer
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
Hi Syamantak,

Thanks for your response. Here is the output of the given command:

rkscli: get scg

------ SCG Information ------
SCG Service is enabled.
AP is not managed by SCG.
State: CONN_GET_ADDR_STATE
Server List: Not found
No SSH tunnel exists
Failover List: Not found
Failover Max Retry: 2
DHCP Opt43 Code: 6
Server List from DHCP (Opt43/Opt52): Not found
SCG default URL:
SCG config|heartbeat intervals: 30|30
SCG gwloss|serverloss timeouts: 1800|7200
Controller Cert Validation : disable
-----------------------------
OK


Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
Found out also that ssh tunnel is active on device which is listed as Ruckus Cloud IP: 35.225.236.82

rkscli: get sshtunnel
SSH tunnel service is enabled
SSH tunnel connected to 35.225.236.82
Cipher for SSH tunnel: 128
OK

IP is listed at https://support.ruckuswireless.com/articles/000007992



Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 354 Posts
  • 127 Reply Likes
Hi b0mb,

This is what I was suspecting.

This AP seems registered on Ruckus Cloud AP registrar and trying to connect to Cloud account of previous owner.

Since you bought this from ebay, I am not sure if support can help you to find the account and remove it, as device is not purchased from authorized Ruckus partner/reseller.

Please reachout to ebay reseller and ask them to get the AP deleted from original Cloud Account.
Regards,
Syamantak Omer
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 354 Posts
  • 127 Reply Likes
You can also try following as it may fix the problem.

1- Factory reset the AP.
2- Make sure AP cannot reach internet after factory reset (use an isolated switch or POE injector to directly connect with AP).
3- Now flash the AP to stand alone version or Unleashed (depending upon your requirement).
4- Post upgrade, run below command.

set scg disable

5- Now connect the AP to network and try accessing it.

There is another way to block AP-Cloud controller communication, by blocking cloud server IPs on your local firewall/router/gateway.

Regards,
Syamantak Omer
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
That's something I was thinking of, but how could I get to flash an unleashed  firmware to it? Since I can't even execute enable command from CLI, the GUI currently only allows "read-only" things and nothing else after a hardware reset...
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
Anyone with any ideas?
Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 354 Posts
  • 127 Reply Likes
Try upgrading AP firmware using FTP or TFTP.



AP firmware upgrade using TFTP via AP CLI:

Ensure that the board is able to ping the TFTP server
Place the image in TFTPROOT directory (typically /tftpboot) on the host TFTP server

Run the following commands on rkscli prompt to flash an image using TFTP:

fw set proto tftp
fw set host <server ip>
fw set control <filename> (path/Name of the image file, eg. ap-arm-qca-wsg/rcks_fw.bl7)
fw update
reboot

AP firmware upgrade using FTP from CLI:

Download the R720 Unleashed image from https://support.ruckuswireless.com/software_downloads/2510-ruckus-unleashed-ap-200-8-10-3-278-ga-refresh-software-for-r720 and put it on FTP server's root folder

SSH to AP and type below commands (Make sure that you are able to ping the FTP server's IP from AP CLI):

fw set control firmware_filename.Bl7 (This is the file name of the firmware in FTP server)
fw set proto ftp
fw set host  xxx.xxx.xxx.xxx (Where x.x.x.x is IP address of the FTP server)
fw set user xxxx (Where xxx is user name of the FTP server)
fw set password xxxx (Where xxx is password of the FTP server)
fw up
reboot
Photo of b0mb

b0mb

  • 11 Posts
  • 1 Reply Like
Abi,

Thanks a lot for the solution, upgrading the AP via FTP worked well! It must be said that as you said, the original FW version had to be blocked on my Fortigate so it could not download firmware nor settings/configuration from Ruckus Cloud.

Checked the version via SSH, gives me:

Copyright(C) 2018 Ruckus Wireless, Inc. All Rights Reserved.

** Ruckus R720 Unleashed AP: 3617xxxxxx


 Warning: AP is in Unleashed-Managed mode
          Current or latest Unleashed: 192.168.x.x / xx:xx:xx:xx:xx
          Any configuration changes made in CLI may conflict
          with the Unleashed's management and
          will cause undefined results.

rkscli: get version
Ruckus R720 Multimedia Hotzone Wireless AP
Version: 200.8.10.3.278

It even joined my existing R710 Unleashed master!

Thank you again for finding the resolution!


Photo of Syamantak Omer

Syamantak Omer, Official Rep

  • 354 Posts
  • 127 Reply Likes
I am glad that it fixed the issue!

Regards,
Syamantak Omer
Photo of Michael Brado

Michael Brado, Official Rep

  • 3298 Posts
  • 523 Reply Likes
Lesson is Don't Buy Used APs on Ebay!

This AP was obviously owned by a Ruckus Cloud customer... and it may not be legal if still registered to the Cloud.
(Edited)