wax510d firmware checksum error on USG40W running V4.62(AALB.0)

danyedinak

After upgrading the USG40W from V4.62(AALB.0) to V4.62(AALB.0) the option to check for new firmware via the web gui no longer works - the button is greyed out. To get around this, drop to a command line and run the following command : 
configure terminal
capwap firmware-update check
This definitely starts the firmware update process (doesn't solve the greyed out button) but the logs begin looping through the following error : 
show logging entries category ap-firmware begin 1 end 10

3    2021-02-02 09:00:40                                               

     alert               ap-firmware                                                            

     AP firmware download failed. Reason: wax510 Firmware checksum is error.

4    2021-02-02 09:00:11                                               

     alert               ap-firmware                                                            

     AP firmware download failed. Reason: wax510 Firmware checksum is error.

There appears to be no option to stop the firmware update check and so this just keeps looping indefinitely. 

router(config)# show capwap fw-updating info 

APs in fw updating : 0

concurrent fw updating method : capwap

FW updating mode : manual

Runtime firmware : V6.00(.6)

Available firmware : V6.10(.9)

ZAP version : ZAP9

Last Check : Success, 2021-02-01 15:55:11

According to the web (is there a way to find this in the cli?) the Runtime firmware for the WAX510D is Local / V6.00(ABTF.9)

That progress bar just loops through percentages and repeats. Been going on for 20 hours now.

PeterUK

I also had this problem on USG60W V4.62 and in the end I updated the AP firmware manually same model AP too forgot to report it but I have been troubleshooting a problem with WDS.

likely a corrupt file or checksum wrong

Zyxel_Bella

Hi @danyedinak

Thanks for the detail information and steps, we used the same fw and followed the steps but can’t reproduce. Could you provide diaginfo file of USG and AP for us to check? You can collect and download at: Maintenance > Diagnostics.

We’re sorry for causing your inconvenience of impacting service.

If you need the service back right away, the workaround can be reboot USG to resolve hangs on the progress.

Note that diaginfo should be collected before reboot.

Regards,
Bella

InterLAN

Same problem "AP firmware download failed. Reason: wax510 Firmware checksum is error." occur on our Zywall 110 fw V4.62(AAAA.0). The download loops infinitely.  
The WAX510 remains off-line, 
Tried moving the AP to the group Unclassified to no avail. - Even after rebooting the Zywall, the loop continues.  

PeterUK

open web console on the Zywalll with this:
debug system _disk-cleanup

Zyxel_Bella

Hi @InterLAN

 

Can you provide us the firmware version information of WAX510D?

We’ll test the steps as yours and figure out what's are going on with the problem then update you. 

Thanks

 

Regards,

Bella

 

Zyxel_Bella

Dear customer,

 

Thanks @danyedinak @PeterUK @InterLAN for your experience of the checksum error of WAX510D.

We’ve confirmed this symptom occasionally happens when downloading cloud firmware if select updating type as auto at AP Policy. The workaround is given as below:

Please change updating type to manually and upgrade to latest firmware by click Check and Apply.

Thank you.

 

Regards,

Bella

danyedinak

Zyxel_Bella said:

Dear customer,

 

Thanks @danyedinak @PeterUK @InterLAN for your experience of the checksum error of WAX510D.

We’ve confirmed this symptom occasionally happens when downloading cloud firmware if select updating type as auto at AP Policy. The workaround is given as below:

Please change updating type to manually and upgrade to latest firmware by click Check and Apply.

Thank you.

 

Regards,

Bella

@Zyxel_Bella
Unfortunately, as you can see from the image I posted in the original post, while the updating mode has been set to manual (and can be toggled back and forth) the option to actually check manually is greyed out in the GUI, and I don't see anything in the GUI to stop a check that has been initiated. From the command line, I can find no way to stop a check already in progress.
To initiate one, the command is : 
capwap firmware-update check
But once it starts, there's no way to stop it, including switching to auto and back to manual. It just continues trying in an endless loop.
Incidentally, I am now also experiencing this on a USG60W running V4.62(AAKZ.0). 

PeterUK

Have you done a reboot with it set to manual?

You may have to update each AP not from the controller.

Zyxel_Bella

Hi @danyedinak

 

Like @PeterUK said, reboot with set to manual is needed to jump off from the checksum error loop.

 

We have enhanced on mechanism to prevent this situation happens to shuffer the customers.

Thank you for sharing.

 

Regards,

Bella

danyedinak

PeterUK said:

Have you done a reboot with it set to manual?

You may have to update each AP not from the controller.

Thank you, @PeterUK
 
Like @InterLAN mentioned, rebooting doesn't always seem to work. However, this last time, I did perform a scheduled reboot after both running the debug system _disk-cleanup command you mentioned earlier and setting capwap fw-updating mode manual and it did stop the loop .

However, when I run : 
 capwap firmware-update check
The log shows : 

 info                ap-firmware

     AP firmware check successful. Available firmware: V6.20(.0).

but : 

Router# show capwap fw-updating info

APs in fw updating : 0

concurrent fw updating method : capwap

FW updating mode : manual

Runtime firmware : V6.00(.6)

Available firmware : V6.20(.0)

ZAP version : ZAP9

Last Check : Success, 2021-04-19 07:26:13

Note that the Runtime firmware isn't changing, even after :
 capwap firmware-update download
It doesn't seem to initiate the download until 
 capwap firmware-update apply
at which point the log shows 

 info                ap-firmware

     Start to download V6.20(.0) AP firmware from cloud.

 info                ap-firmware

     Complete V6.20(.0) AP firmware is downloaded.

 info                ap-firmware

     AP firmware applied. Firmware: V6.20(.0).

And finally the Runtime firmware does show V6.20.

capwap ap <mac address>
fw-updating
exit
exit
Show logging entries capwap shows : 

 info                capwap

     Start to transmit AP Firmware. MAC:xx:xx:xx:xx:xx:xx,Name:AP-xxxxxxxxxxxx,Model:WAX510D
And, after a bit

show capwap ap <mac address> 
Firmware Version: 6.00(ABTF.5) 
has become
Firmware Version: 6.20(ABTF.0)
So, it looks like we're finally in business.

Unfortunately, the most recent CLI reference guide for the USG/FLEX/VPN/ATP series doesn't document these capwap firmware-update commands.

There was one odd moment in the GUI, during which it showed

Device storage is not enough
for the WAX510D, but otherwise, I think this is finally working.

@Zyxel_Bella I do have a diagnostic file that I can provide you, if you still need that. Just let me know how as I would rather not throw it up on the forum, if at all possible. 
Also, you mentioned that there is an enhanced mechanism to fix this moving forward. Is that going to be in a future USG firmware update? Or is it part of the AP controller firmware?