Onboarding to ExtremeCloud IQ

If onboarded to ExtremeCloud IQ (and assigned a location and network policy), the AP begins a firmware upgrade and config push process.

Note

Outbound TCP 443 and either outbound UDP 12222 or TCP 80 are required, as defined in the Firewall Configuration Guide. To locate the firewall configuration guide specific to your installation, hover over Account

to open the ExtremeCloud IQ menu and select About ExtremeCloud IQ to find the link to your Firewall Configuration Guide.

If the AP is running .0 code (factory code), the AP automatically upgrades to the firmware revision defined in the model-specific device template. If no device template for the given model is configured, the AP automatically upgrades to the latest available version for that model.
If the AP is running non-.0 code, the AP automatically upgrades to the firmware revision defined in the model-specific device template. If no template is defined for that model, the AP will not upgrade.
After firmware upgrade, but prior to a device reboot, a complete configuration push writes the network policy settings to the AP in a startup configuration file.
Note
Outbound TCP 443 is required.
When the firmware upgrade and configuration push are complete, the AP reboots and uses the new startup configuration file.
The AP comes back online after the reboot and re-establishes a connection to its CAPWAP server on either outbound UDP 12222 or TCP 80.
Note
Outbound TCP 443 is required for ongoing statistics reporting and other file transfer activities (for example, firmware management).
If the AP cannot connect to its defined CAPWAP server after configuration and reboot within a 15-minute window, the AP rolls back to the previous configuration and reboots again. This resets the configuration to the previous state.

Tip

Troubleshooting:

If AP is unable to connect to your account:
- Ensure the correct device serial number is entered into ExtremeCloud IQ.
- Ensure UDP 12222 or TCP 80 firewall ports are open to all IP addresses defined in the Regional Data Center Services section of the firewall configuration guide.
- Ensure the AP completes Country and Region Fingerprinting steps defined in Universal/Worldwide SKU Region and Country Fingerprinting.
If the AP is unable to complete a firmware upgrade or complete configuration, ensure port TCP 443 in open outbound for all the IP ranges defined in the Regional Data Center Services section of the firewall configuration guide.
After the configuration push and reboot, if the AP stays unconnected for 15 minutes and rolls back to the default configuration, check to ensure the IP address, native VLAN, and management VLAN settings are correct for your network. Use VLAN probe to test whether native and management VLAN are available with DHCP services to your AP. For more information, see VLAN Probe Utility.