Section 07
MM Command Reference
Every Mobility Master CLI command the toolkit issues over SSH — first listed in order of execution to complete the upgrade, then grouped by category — with what each one does and the function that runs it.
Order of execution
The exact command order the engine issues to take a convert list from AOS-8 to AOS-10. Phases run top to bottom; numbered steps are sequential. Steps marked conditional only run when the target controller changes, and gate steps are internal waits/checks that issue no CLI command.
A · Connect & Inventory
Operator clicks 'Connect to MM and List APs' — run once before the migration.
show ap database longPull the full campus-AP inventory and parse it into AccessPoint rows, each enriched with family + target AOS-10 image.
show switchesList managed controllers so each AP is mapped to the controller it terminates to (drives navigation below).
B · Central Pre-Validation Sweep
loops per controllerCENTRAL_PULL method only, before any conversion. Grouped per controller across the whole convert list.
cd <controller>Navigate the MM config hierarchy to the controller these APs terminate to.
mdcEnter managed-device-context — 'ap convert' commands are only valid inside mdc.
ap convert add ap-name <name>Populate the convert list — issued once per AP on this controller.
ap convert pre-validate specific-apsValidate the list against Aruba Central (reachability + registration + subscription). Failing APs are written to a TXT remediation report and skipped.
C · Per-AP Conversion Loop
loops per APThe shared state machine, run for every in-scope AP (ordered by model in batch mode, or one-by-one in dynamic mode).
- no CLI command — internal gate / wait
PRECHECK — local pre-flight + Central REST idempotency check. APs already on AOS-10, or that failed pre-validation, are SKIPPED (no CLI command).
exitconditionalLeave the previous controller's mdc — only when the next AP is on a different controller.
cd <controller>conditionalNavigate to this AP's target controller — only when the controller changes from the current one.
mdcconditionalRe-enter managed-device-context on the new controller.
ap convert add ap-name <name>Add this AP to the controller's convert list.
ap convert pre-validate specific-apsRe-confirm Central reachability for this AP immediately before activating.
ap convert active specific-aps activate image-url <https-url>START conversion. Default CENTRAL_PULL with a local image server pulls the AOS-10 image over HTTPS; variants pull from the Central cloud or staged controller flash.
ap convert active specific-aps activate # Central cloud pullap convert active specific-aps local-flash # image staged on controller flash- no CLI command — internal gate / wait
UPGRADING — AP downloads/loads the AOS-10 image (interruptible wait, no CLI command).
- no CLI command — internal gate / wait
REBOOTING — AP reboots into AOS-10 (interruptible wait, no CLI command).
D · Verify
loops per APConfirm the AP actually came back on AOS-10 before marking it DONE.
show ap convert-status-listRead per-AP conversion result on the controller (used when Aruba Central REST verification is unavailable). A success marker → DONE; otherwise FAILED (safe to retry). With Central enabled, verification uses the REST API instead of a CLI command.
Commands by category
Session & Navigation
enable / config navPosition the SSH session on the correct managed device before any 'ap convert'.
| Command | Description | Issued by |
|---|---|---|
cd <controller> | Navigate the MM configuration hierarchy to the target managed controller node (by name, falling back to IP) so convert commands act on the right device. | controller_nav_commands() |
mdc | Enter managed-device-context on the selected controller. 'ap convert' commands are only valid inside mdc, not at the bare config node. | controller_nav_commands() |
exit | Leave the current controller's managed-device-context before moving to a different controller (mdc is per-controller). | controller_nav_commands() |
cd <controller>Navigate the MM configuration hierarchy to the target managed controller node (by name, falling back to IP) so convert commands act on the right device.
controller_nav_commands()
mdcEnter managed-device-context on the selected controller. 'ap convert' commands are only valid inside mdc, not at the bare config node.
controller_nav_commands()
exitLeave the current controller's managed-device-context before moving to a different controller (mdc is per-controller).
controller_nav_commands()
Inventory & Discovery
show (read-only)Read-only queries that build the AP inventory and verify conversion progress.
| Command | Description | Issued by |
|---|---|---|
show ap database long | Dump the full campus-AP inventory. Parsed into AccessPoint rows (name, model, MAC, serial, IP, status), then enriched with family + target AOS-10 image. | inventory_view.on_connect_load() · parse_ap_database() |
show switches | List the managed controllers / MDs known to the MM, used to map each AP to its primary controller so the engine navigates to the correct node. | parse_show_switches() · build_switch_map() |
show ap convert-image-list | List each in-scope AP, the AOS-10 image it will receive, and the HTTPS source URL it is pulled from (the 'AP images and source of file (url)' button). | inventory_view.on_show_image_list() |
show ap convert-status-list | Per-AP conversion status. The verification gate parses this to confirm an AP actually converted before marking it DONE. | UpgradeEngine._verify() |
show ap image-load-status | Image download / load progress for APs currently pulling their AOS-10 image. | ControllerConnection |
show version | Report the controller's running ArubaOS version — confirms an AOS-8 Mobility Master before migration begins. | ControllerConnection |
show ap database longDump the full campus-AP inventory. Parsed into AccessPoint rows (name, model, MAC, serial, IP, status), then enriched with family + target AOS-10 image.
inventory_view.on_connect_load() · parse_ap_database()
show switchesList the managed controllers / MDs known to the MM, used to map each AP to its primary controller so the engine navigates to the correct node.
parse_show_switches() · build_switch_map()
show ap convert-image-listList each in-scope AP, the AOS-10 image it will receive, and the HTTPS source URL it is pulled from (the 'AP images and source of file (url)' button).
inventory_view.on_show_image_list()
show ap convert-status-listPer-AP conversion status. The verification gate parses this to confirm an AP actually converted before marking it DONE.
UpgradeEngine._verify()
show ap image-load-statusImage download / load progress for APs currently pulling their AOS-10 image.
ControllerConnection
show versionReport the controller's running ArubaOS version — confirms an AOS-8 Mobility Master before migration begins.
ControllerConnection
Conversion — ap convert
config modeConfig-mode commands that add APs to the convert list, validate, and activate the AOS-10 conversion.
| Command | Description | Issued by |
|---|---|---|
ap convert add ap-name <ap-name> | Add a single AP (by name) to the controller's convert list. Issued once per AP in the curated convert list. | build_convert_commands() · build_pre_validate_commands() |
ap convert pre-validate specific-aps | Run Aruba Central pre-validation on the convert list: checks Central reachability and that each AP is registered with an active subscription. Failing APs are reported and NOT converted. | pre_validate_aps() |
ap convert active specific-aps activate image-url <https-url> | Start conversion and pull the AOS-10 image over HTTPS from the configured image server (CENTRAL_PULL with a local image server). | build_convert_commands() |
ap convert active specific-aps activate | Start conversion pulling the AOS-10 image from the Aruba Central cloud. Used when no image server URL is configured. | build_convert_commands() |
ap convert active specific-aps local-flash | Start conversion from an AOS-10 image already staged on the controller's local flash (CONTROLLER_IMAGE) — for APs that can't reach Central during cutover. | build_convert_commands() |
ap convert cancel | Cancel pending AP conversion(s) on the controller, clearing the convert list. | ControllerConnection |
ap convert add ap-name <ap-name>Add a single AP (by name) to the controller's convert list. Issued once per AP in the curated convert list.
build_convert_commands() · build_pre_validate_commands()
ap convert pre-validate specific-apsRun Aruba Central pre-validation on the convert list: checks Central reachability and that each AP is registered with an active subscription. Failing APs are reported and NOT converted.
pre_validate_aps()
ap convert active specific-aps activate image-url <https-url>Start conversion and pull the AOS-10 image over HTTPS from the configured image server (CENTRAL_PULL with a local image server).
build_convert_commands()
ap convert active specific-aps activateStart conversion pulling the AOS-10 image from the Aruba Central cloud. Used when no image server URL is configured.
build_convert_commands()
ap convert active specific-aps local-flashStart conversion from an AOS-10 image already staged on the controller's local flash (CONTROLLER_IMAGE) — for APs that can't reach Central during cutover.
build_convert_commands()
ap convert cancelCancel pending AP conversion(s) on the controller, clearing the convert list.
ControllerConnection