Summary

Question

Customer Environment

Symptoms

wget: cannot connect to remote host (10.53.21.30): Connection refused
Firmware update error(252)
Control File Download Error

Root Cause

Troubleshooting Steps

• Confirm HTTPS end to end traffic is allowed between AP and Zone Director
• Using AP CLI confirm the following

AP is running official build
  # get version
AP firmware file transfer paramters looks correct and was not customized
  # fw show

• AP log reference

Dec 23 09:21:54 PartnerArea daemon.info Firmware Daemon[698]: rfw.c:507 do_fw() **(698) wget: cannot connect to remote host (10.53.21.30): Connection refused
Dec 23 09:21:54 PartnerArea local2.err syslog: Firmware update error(252)
Dec 23 09:21:57 PartnerArea daemon.info Firmware Daemon[701]: rfw.c:456 do_fw() fw: Updating rcks_wlan.bkup ...
Dec 23 09:21:57 PartnerArea daemon.info Firmware Daemon[701]: rks_fw_update.c:4531 v54_fw_update() v54_fw_update: download 10.53.21.30 section=rcks_fw.main image=Image2 ctl_file=r500/control (/writable/fw/main.cntl) local=0
Dec 23 09:21:57 PartnerArea daemon.notice Firmware Daemon[701]: working to update main|wget: cannot connect to remote host (10.53.21.30): Connection refused
Dec 23 09:21:57 PartnerArea daemon.notice Firmware Daemon[701]: working to update main|wget: cannot connect to remote host (10.53.21.30): Connection refused
Dec 23 09:21:57 PartnerArea daemon.info Firmware Daemon[701]: rks_fw_update.c:403 net_get_buf() NET_CLOSE() rc1=1
Dec 23 09:21:57 PartnerArea daemon.err Firmware Daemon[701]: rks_fw_update.c:4626 v54_fw_update() Error: could not get control file
Dec 23 09:21:57 PartnerArea daemon.notice Firmware Daemon[701]: failed|[Control File] wget: cannot connect to remote host (10.53.21.30): Connection refused
Dec 23 09:21:57 PartnerArea daemon.info Firmware Daemon[701]: rfw.c:497 do_fw() **fw(701) : Control File Download Error

• On the Zone Director, confirmed FTP is disabled with the following ZD CLI commands

#config 
#system 
#show FTP Server: 
Status= Disabled 
Anonynous Status= Disabled

Workaround

• If urgent and unable to determine HTTPS path or firewall issue, one may enable FTP on the Zone Director via CLI

#config
#system
#ftp
#exit

• Disable FTP after AP firmware update is complete

Resolution

• Beginning with Zone Director 10.5.1, the AP image upgrade uses HTTPS. If there is an upgrade failure using HTTPS, you can enable the legacy AP image upgrade option to FTP under Administrator > Upgrade tab. Zone Director supports either HTTPS or FTP as the AP image upgrade option
  
  
  
  Note: Ruckus always recommends its customers to Refer to the Release Notes and Upgrade Guides for the best practices and changed behavior before performing an upgrade.
• Allow HTTPS protocol in firewall between AP and Zone Director
• Please contact technical support if further assistance is needed

Related Articles