5 users online | 5 Guests and 0 Registered

How to recover an IOS WAP from ROMMON.


  • First, set the environment variables to describe the IP settings for the WAP. In this example I'm using 10.1.94.99/24 with a gateway of 10.1.94.1.

set IP_ADDR 10.1.94.99

set NETMASK 255.255.255.0

set DEFAULT_ROUTER 10.1.94.1

  • Then prepare the bootloader to use the TFTP and flash file systems as well as the ethernet interface:

tftp_init

ether_init

flash_init

  • Next, extract the image from the TFTP server to the flash file system. In this scenarioe, I'm using the tar file c1200-k9w7-tar.123-8.JEE.tar on the TFTP server at 10.1.94.17.

tar -xtract tftp://10.1.94.17/c1200-k9w7-tar.123-8.JEE.tar flash:

  • Use the "dir flash:" command to show the contents of the flash file system. You should see the image that was just downloaded from the TFTP server. In this case, the image name is c1200-k9w7-mx.123-8.JEE.

dir flash:

Directory of flash:/

2    -rwx  1812                     config.txt
3    -rwx  2072                     private-multiple-fs
4    -rwx  1938                     private-config
5    -rwx  249                      env_vars
6    -rwx  274                      info
7    drwx  512                      c1200-k9w7-mx.123-8.JEE
159  -rwx  274                      info.ver

2698752 bytes available (5042688 bytes used)
  • Note that the "c1200-k9w7-mx.123-8.JEE" in the root directory is a sub-directory. If you look inside that directory ("dir flash:c1200-k9w7-mx.123-8.JEE/&quot), you'll find the image file. Set the BOOT variable to point to this image.
ap: dir flash:c1200-k9w7-mx.123-8.JEE/
Directory of flash:c1200-k9w7-mx.123-8.JEE//       

8    drwx  64                       html
152  -rwx  3707172                  c1200-k9w7-mx.123-8.JEE
153  -rwx  131328                   5001.img            
154  -rwx  131328                   5101.img
155  -rwx  131328                   6301.img
156  -rwx  131328                   6701.img
157  -rwx  131328                   6701_cal.img
158  -rwx  274                      info

2698752 bytes available (5042688 bytes used)

set BOOT flash:c1200-k9w7-mx.123-8.JEE/c1200-k9w7-mx.123-8.JEE

  • Verify your work using the "set" command.
ap: set
BOOT=flash:c1200-k9w7-mx.123-8.JEE/c1200-k9w7-mx.123-8.JEE
DEFAULT_ROUTER=10.1.94.1
ENABLE_BREAK=no
IOS_NAME_SERVER_ADDR=192.168.1.25
IP_ADDR=10.1.94.99
MANUAL_BOOT=no
NETMASK=255.255.255.0
  • Finally, use the "boot" command to boot the AP. It should now work as expected, and if there was a previous config (the file "config.txt" in the directory listing above, it should load it and run like normal.
Tags: AP, Cisco, IOS, recovery, ROMMON, wireless
2014-12-04 17:08 Roy Kidder {writeRevision}
Average rating: 0 (0 Votes)

You cannot comment on this entry

Chuck Norris has counted to infinity. Twice.