09-19-2024 03:40 PM
Hello ExtremeWireless community,
We have a couple of AP-7532s that present an uncommon configuration in some scenarios, here is an excerpt:
!
! Configuration of AP7532 version 7.7.0.0-018R
!
!
version 2.7
!
!
firewall-policy default
no ip dos tcp-sequence-past-window
!
!
mint-policy global-default
!
radio-qos-policy default
!
!
management-policy default
telnet
no http server
https server
rest-server
ssh
!
profile ap7532 default-ap7532
use enterprise-ui
autoinstall configuration
no autoinstall firmware
crypto ikev1 policy ikev1-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ikev2 policy ikev2-default
isakmp-proposal default encryption aes-256 group 2 hash sha
crypto ipsec transform-set default esp-aes-256 esp-sha-hmac
crypto ikev1 remote-vpn
crypto ikev2 remote-vpn
crypto auto-ipsec-secure
crypto load-management
crypto remote-vpn-client
interface radio1
interface radio2
interface ge1
interface vlan1
ip address dhcp
ip dhcp client request options all
interface pppoe1
use firewall-policy default
service pm sys-restart
router ospf
adoption-mode controller
!
rf-domain default
no country-code
ad-wips-wireless-mitigation disable
ad-wips-wired-mitigation disable
!
self
! ap7532 74-67-F7-04-CA-80
radio-count 2
use profile default-ap7532
use rf-domain default
hostname ap7532-04CA80
license AP VIRTUAL_CONTROLLER_DEFAULT_AP_LICENSE
no adoption-site
!
!
end
We have a couple of alternates, but the sections above remain the same.
The relevant section "profile ap7532 default-ap7532" still allows us to assign an IP to the AP and access it remotely. However, since the "management-policy" section does not list any users we are unable to authenticate to the AP using SSH or SNMP.
Default SSH credentials from the manual did not work. Using SNMPv3 my requests time out when using default users (snmpmanager, snmptrap, snmpoperator), but I get "Unknown user" if I try any user outside those three.
My goal is to remotely restore these APs configuration upon detection. Is there an user that the hardware supports by default when no user is specified in the configuration?
Thank you for your insight!
JA
Solved! Go to Solution.
09-20-2024 07:42 AM
Hello @j_ag_p,
Console into the AP using baud rate 19200 or 115200 and when at the login prompt enter the following credentials:
Username: restore Password: restoreDefaultPassword
This will only work via console port.
Once the AP is back up, log in using the default password: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000089844
I hope this helps,
Chris
09-20-2024 07:42 AM
Hello @j_ag_p,
Console into the AP using baud rate 19200 or 115200 and when at the login prompt enter the following credentials:
Username: restore Password: restoreDefaultPassword
This will only work via console port.
Once the AP is back up, log in using the default password: https://extreme-networks.my.site.com/ExtrArticleDetail?an=000089844
I hope this helps,
Chris