Cisco Wireless Controller and Cisco Lightweight Access Point Platforms
Supported Cisco Wireless Controller Platforms
Supported Access Point Platforms
What’s New in Release 8.2.166.0
What’s New in Release 8.2.164.0
What’s New in Release 8.2.161.0
What’s New in Release 8.2.160.0
Command to Configure Slub-debug
Software Release Types and Recommendations
Upgrading to Cisco WLC Software Release 8.2.x
Upgrading to Cisco WLC Software Release 8.2.x(GUI)
Special Notes for Licensed Data Payload Encryption on Cisco Wireless LAN Controllers
Downloading and Installing a DTLS License for an LDPE Cisco WLC
Upgrading from an LDPE to a Non-LDPE Cisco WLC
Interoperability with Other Clients
Features Not Supported on Cisco WLC Platforms
Features Not Supported on Cisco 2504 WLC
Features Not Supported on Cisco WiSM2 and Cisco 5508 WLC
Features Not Supported on Cisco Flex 7510 WLCs
Features Not Supported on Cisco 5520, 8510, and 8540 WLCs
Features Not Supported on Cisco Virtual WLCs
Features Not Supported on Cisco Access Point Platforms
Features Not Supported on Cisco Aironet 1550 APs (with 64-MB Memory)
Features Not Supported on Cisco Aironet 1810 OEAP, 1810W, 1830, 1850, 2800, and 3800 Series APs
Features Not Supported on Cisco Aironet 1810 OEAP and 1810W Series APs
Features Not Supported on Cisco Aironet 1830 and 1850 Series APs
Features Not Supported on Mesh Networks
Cisco Mobility Express Solution Release Notes
Supported Cisco Aironet Access Points
Compatibility with Other Cisco Wireless Solutions
Installing Mobility Express Software
Obtaining Documentation and Submitting a Service Request
First Published: July 27, 2017
This release notes document describes what is new in Cisco Wireless Release 8.2.x, instructions to upgrade to this release, and open and resolved caveats for this release. Unless otherwise noted, in this document, all Cisco Wireless Controllers are referred to as Cisco WLCs, and all Cisco lightweight access points are referred to as access points or Cisco APs.
Note For Cisco wireless solution software compatibility information, see the Cisco Wireless Solutions Software Compatibility Matrix at http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html.
Note For information specific to the Cisco Mobility Express solution, see “Cisco Mobility Express Solution Release Notes” section.
– Added: Resolved Caveat— CSCvf52723 |
|
– Added: Important Upgrade Information |
|
– Added: Resolved Caveats— CSCvf47808, CSCvg10793, CSCvg18366, CSCvg29019, and CSCvg42682 |
|
– Resolved bug: CSCvf52723 |
The following Cisco WLC platforms are supported in this release:
Note Kernel-based virtual machine (KVM) is supported in Cisco Wireless Release 8.1 and later releases.
After KVM is deployed, we recommend that you do not downgrade to a Cisco Wireless release that is earlier than Release 8.1.
Note AP Stateful switchover (SSO) is not supported on Cisco 2504 WLCs.
For information about features that are not supported on the Cisco WLC platforms, see “Features Not Supported on Cisco WLC Platforms” section.
The following access point platforms are supported in this release:
Note The Cisco 1040 Series, 1140 Series, and 1260 Series access points have feature parity with Cisco Wireless Release 8.0. Features introduced in Cisco Wireless Release 8.1 and later are not supported on these access points.
Note Cisco AP802 and AP803 are integrated access points on the Cisco 800 Series Integrated Services Routers (ISRs). For more information about the stock-keeping units (SKUs) for the AP802s and AP803s Cisco ISRs, see http://www.cisco.com/c/en/us/products/routers/800-series-routers/brochure-listing.html. Before you use a Cisco AP802 series lightweight access point with Cisco Wireless Release 8.2.166.0, you must upgrade the software in the Cisco 800 Series ISRs to Cisco IOS 15.1(4)M or later releases.
Note For information about features that are not supported on some access point platforms, see the “Features Not Supported on Cisco Access Point Platforms” section.
Note For information about Cisco Wireless software releases that support specific Cisco access point modules, see the Software Release Support for Specific Access Point Modules section in the Cisco Wireless Solutions Software Compatibility Matrix document.
Release 8.2.166.0 is a repost of the Release 8.2.164.0 to address the caveat listed below. There are no other updates in this release, all resolved and open caveats in addition to the one resolved bug applies to this release..
Release 8.2.164.0 is a repost of the Release 8.2.161.0 to address the caveats listed below. There are no other updates in this release, all resolved and open caveats in addition to the five resolved bugs apply to this release..
The release 8.2.164.0 is affected by the caveat: CSCvf52723. This is a bug that was previously fixed on 8.2.16.1.0 code, but was omitted in release 8.2.164.0 due to an error during the posting process.
Therefore, we recommend customers that have FlexConnect mode APs to not upgrade to Release 8.2.164.0, but instead upgrade to a newer release to be made available by October 30, 2017.
Customers that have only local mode APs can continue to use 8.2.164.0 without any impact.
Release 8.2.161.0 is a repost of the Release 8.2.160.0 to address the caveat listed below. There are no other updates in this release, all open and resolved caveats apply except for Resolved Caveats in Release 8.2.161.0 .
In Cisco Aironet 18xx, 2800, 3800 Series Wave 2 APs, a new command is introduced to configure slub-debugging feature:
config ap slub-debug {sanity | red-zoning | poisoning | user-tracking | disable} { cisco_ap | all}
For more information about this command, see Cisco Wireless Controller Command Reference Guide.
There are no new features in this release. For more information, see the Caveats section.
Software releases that provide bug-fix support and ongoing software maintenance. These releases are categorized as Maintenance Deployment (MD) and may be part of the AssureWave program.1 These are releases with long life and ongoing software maintenance. |
Provides you with a software release that offers stability and long support duration with periodic maintenance releases (MRs). |
|
Software releases that provide new features and new hardware platform support in addition to bug fixes. These releases are categorized as Early Deployment (ED). These are short-lived releases. |
Allows you to deploy the latest features and new hardware platforms or modules. |
For detailed release recommendations, see the software release bulletin:
http://www.cisco.com/c/en/us/products/collateral/wireless/8500-series-wireless-controllers/bulletin-c25-730741.html
For more information about the Cisco Wireless solution compatibility matrix, see http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html.
– Functionality prior to Release 7.4.130.0—If a WLAN was added to an AP group prior to Release 7.4.130.0, the RF radio policy is set to All after an XML upload/download. This is because the default value of RF policy was not added. This issue was addressed through CSCud37443. However, this corrects only the newly created WLAN-AP group associations and not the previous ones. Therefore, if you have configured a WLAN-AP group association prior to Release 7.4.130.0, you must remove the WLAN from the AP group and add it again in Release 7.4.130.0 or a later release.
Also, the XML configuration for radio policy was not present in releases prior to 8.0. This issue is addressed through CSCul59089.
– Change in functionality with Release 7.4.130.0—The RF radio policy is by default set to None for all WLAN-AP group associations created in Release 7.4.130.0. Any previous WLAN-AP group associations that are carried over will continue to be set to All unless a WLAN is removed from the AP group and added again.
The XML upload/download for AP group RF radio policy is available only from Release 8.0.
Every 10 seconds, a message similar to the following is sent to the msglog:
This occurs in the following conditions:
b. The management interface is untagged and is mapped to one physical port.
c. When an untagged dynamic interface is added and mapped to port 2, the default route for the management interface is lost.
The workaround is to configure all interfaces with VLANs.
Note In Release 8.2, it is not possible to have multiple untagged interfaces; however, this issue is resolved in Release 8.3. You can track this issue via CSCux75436.
a. Enter the following commands:
b. After the reboot, press Esc on the console, and use the boot menu to select Release 7.6.
c. After booting on Release 7.6, set back the primary boot, and save the configuration by entering the following command:
Note The epings are not available in the Cisco 5500 Series WLC when New Mobility is enabled.
Note If you downgrade from a Cisco WLC release that supports new mobility to a Cisco WLC release that does not support new mobility, for example, Cisco Wireless Release 7.6 to Release 7.3.x and you download the 7.6 configuration file with new mobility in enabled state, the release that does not support new mobility will have the new mobility feature in enabled state.
Note In case of FlexConnect VLAN mapping deployment, we recommend that the deployment be done using FlexConnect groups. This allows you to recover VLAN mapping after an AP rejoins the Cisco WLC without having to manually reassign the VLAN mappings.
2.0, see CSCuu46671 |
|
1.9, see CSCul68057 |
|
2.0, see CSCus97953 |
|
2.0, see CSCus97953 |
|
1.9, see CSCul68057 |
Note The FUS image installation process reboots the Cisco WLC several times and reboots the runtime image. The entire process takes approximately 30 minutes. We recommend that you install the FUS image in a planned outage window.
Note If you are using a Cisco 2500 Series controller and you intend to use the Application Visibility and Control (AVC) and NetFlow protocol features, you must install Release 1.9.0.0 of Cisco Wireless LAN Controller FUS. This is not required if you are using other controller hardware models.
Note Bootloader upgrade is not required if FIPS is disabled.
Note Microsoft Internet Explorer 8 might fail to connect over HTTPS because of compatibility issues. In such cases, you can explicitly enable SSLv3 by entering the config network secureweb sslv3 enable command.
– Ensure that your TFTP server supports files that are larger than the size of Cisco WLC software Release 8.2.166.0. Some TFTP servers that support files of this size are tftpd32 and the TFTP server within the Prime Infrastructure. If you attempt to download the 8.2.166.0 Cisco WLC software and your TFTP server does not support files of this size, the following error message appears:
Bootloader menu for Cisco 5500 Series WLC:
Bootloader menu for other Cisco WLC platforms:
Enter 1 to run the current software, enter 2 to run the previous software, enter 4 (on Cisco 5500 Series WLC), or enter 5 (on Cisco WLC platforms other than 5500 series) to run the current software and set the Cisco WLC configuration to factory defaults. Do not choose the other options unless directed to do so.
Note See the Installation Guide or the Quick Start Guide pertaining to your Cisco WLC platform for more details on running the bootup script and power-on self test.
With the backup image stored before rebooting, choose Option 2: Run Backup Image from the boot menu to boot from the backup image. Then, upgrade with a known working image and reboot the Cisco WLC.
config network ap-discovery nat-ip-only { enable | disable }
– enable —Enables use of NAT IP only in a discovery response. This is the default. Use this command if all the APs are outside the NAT gateway.
– disable —Enables use of both NAT IP and non-NAT IP in a discovery response. Use this command if APs are on the inside and outside the NAT gateway, for example, Local Mode and OfficeExtend APs are on the same Cisco WLC.
Note To avoid stranding of APs, you must disable AP link latency (if enabled) before you use the disable option for the config network ap-discovery nat-ip-only command. To disable AP link latency, use the config ap link-latency disable all command.
– You can predownload the AP image.
– For FlexConnect access points, use the FlexConnect AP upgrade feature to reduce traffic between the Cisco WLC and the AP (main site and the branch). For more information about the FlexConnect AP upgrade feature, see the Cisco Wireless Controller Configuration Guide.
Note Predownloading Release 8.2.166.0 on a Cisco Aironet 1240 access point is not supported when upgrading from a previous Cisco WLC release. If predownloading is attempted on a Cisco Aironet 1240 access point, an AP disconnect will occur momentarily.
– Delete all the WLANs that are mapped to interface groups, and create new ones.
– Ensure that all the WLANs are mapped to interfaces rather than interface groups.
– Enable or disable link aggregation (LAG)
– Enable a feature that is dependent on certificates (such as HTTPS and web authentication)
– Add a new license or modify an existing license
– Increase the priority of a license
– Install the vendor-device certificate
– Upload the configuration file
– Install the Web Authentication certificate
– Make changes to the management interface or the virtual interface
Step 1 Upload your Cisco WLC configuration files to a server to back up the configuration files.
Note We highly recommend that you back up your Cisco WLC configuration files prior to upgrading the Cisco WLC software.
Step 2 Follow these steps to obtain Cisco Wireless Release 8.2.166.0 software:
a. Click this URL to go to the Software Center:
http://www.cisco.com/cisco/software/navigator.html
b. Choose Wireless from the center selection window.
c. Click Wireless LAN Controllers.
The following options are displayed. Depending on your Cisco WLC platform, select either of these options:
– Integrated Controllers and Controller Modules
d. Select the Cisco WLC model number or name.
The Download Software page is displayed.
e. The software releases are labeled as follows to help you determine which release to download. Click a Cisco WLC software release number:
f. Click the filename ( filename.aes).
h. Read the Cisco End User Software License Agreement and click Agree.
i. Save the file to your hard drive.
j. Repeat steps a. through i. to download the remaining file.
Step 3 Copy the Cisco WLC software file ( filename.aes) to the default directory on your TFTP, FTP, or SFTP server.
Step 4 Choose Commands > Download File to open the Download File to Controller page.
Step 5 From the File Type drop-down list, choose Code.
Step 6 From the Transfer Mode drop-down list, choose TFTP, FTP, or SFTP.
Step 7 In the IP Address text box, enter the IP address of the TFTP, FTP, or SFTP server.
Step 8 If you are using a TFTP server, the default value of 10 retries for the Maximum Retries text field, and 6 seconds for the Timeout text field should work correctly without any adjustment. However, you can change these values, if desired. To do so, enter the maximum number of times that the TFTP server attempts to download the software in the Maximum Retries text box and the amount of time (in seconds) for which the TFTP server attempts to download the software, in the Timeout text box.
Step 9 In the File Path text box, enter the directory path of the software.
Step 10 In the File Name text box, enter the name of the software file ( filename.aes).
Step 11 If you are using an FTP server, perform these steps:
a. In the Server Login Username text box, enter the username with which to log on to the FTP server.
b. In the Server Login Password text box, enter the password with which to log on to the FTP server.
c. In the Server Port Number text box, enter the port number on the FTP server through which the download occurs. The default value is 21.
Step 12 Click Download to download the software to the Cisco WLC.
A message appears indicating the status of the download.
Step 13 After the download is complete, click Reboot.
Step 14 If you are prompted to save your changes, click Save and Reboot.
Step 15 Click OK to confirm your decision to reboot the Cisco WLC.
Step 16 For Cisco WiSM2 on the Catalyst switch, check the port channel and re-enable the port channel if necessary.
Step 17 If you have disabled the 802.11a/n and 802.11b/g/n networks in Choose Commands > Download File to open the Download File to Controller page., re-enable them.
Step 18 To verify that the 8.2.166.0 Cisco WLC software is installed on your Cisco WLC, click Monitor on the Cisco WLC GUI and view the Software Version field under Controller Summary.
Datagram Transport Layer Security (DTLS) is required for all Cisco 600 Series OfficeExtend Access Point deployments to encrypt data plane traffic between the APs and the Cisco WLC. You can purchase Cisco Wireless LAN Controllers with either DTLS that is enabled (non-LDPE) or disabled (LDPE). If DTLS is disabled, you must install a DTLS license to enable DTLS encryption. The DTLS license is available for download on Cisco.com.
Important Note for Customers in Russia
If you plan to install a Cisco Wireless LAN Controller in Russia, you must get a Paper PAK, and not download the license from Cisco.com. The DTLS Paper PAK license is for customers who purchase a Cisco WLC with DTLS that is disabled due to import restrictions, but have authorization from local regulators to add DTLS support after the initial purchase. Refer to your local government regulations to ensure that DTLS encryption is permitted.
Note Paper PAKs and electronic licenses that are available are outlined in the respective Cisco WLC platform data sheets.
Step 1 To download the Cisco DTLS license:
a. Go to the Cisco Software Center at this URL:
https://tools.cisco.com/SWIFT/LicensingUI/Home
b. From the Product License Registration page from the Get Other Licenses drop-down list, click IPS, Crypto, Other....
c. In the Wireless section, click Cisco Wireless Controllers (2500/5500/7500/WiSM2) DTLS License and click Next.
d. Follow the on-screen instructions to generate the license file. The license file information will be sent to you in an e-mail.
Step 2 Copy the license file to your TFTP server.
Step 3 Install the DTLS license either by using the Cisco WLC web GUI interface or the CLI:
Management > Software Activation > Commands > Action : Install License
license install tftp ://ipaddress /path /extracted-file
After the installation of the DTLS license, reboot the system. Ensure that the DTLS license that is installed is active.
Step 1 Download the non-LDPE software release:
a. Go to the Cisco Software Center at:
http://www.cisco.com/cisco/software/navigator.html?mdfid=282585015&i=rm
b. Choose the Cisco WLC model.
c. Click Wireless LAN Controller Software.
d. In the left navigation pane, click the software release number for which you want to install the non-LDPE software.
e. Choose the non-LDPE software release: AIR-X-K9-X-X.X.aes
g. Read the Cisco End User Software License Agreement and then click Agree.
h. Save the file to your hard drive.
Step 2 Copy the Cisco WLC software file ( filename.aes) to the default directory on your TFTP server or FTP server.
Step 3 Upgrade the Cisco WLC with this version by performing Step 3 through Step 18 detailed in the “Upgrading to Cisco WLC Software Release 8.2.x” section.
This section describes the interoperability of Cisco WLC Software, Release 8.2.166.0 with other client devices.
Open, PSK (WPA-TKIP), PSK (WPA-TKIP, WPA2-AES), 802.1X (WPA-TKIP and WPA2-AES) (LEAP, EAP-FAST) |
|
Connectivity, traffic, and roaming between two access points |
The following tables list the client types on which the tests were conducted. The clients included laptops, hand-held devices, phones, and printers.
This section lists the features that are not supported on the different Cisco WLC platforms:
Note In a converged access environment that has Cisco WLCs running AireOS code, High Availability Client SSO and native IPv6 are not supported.
Note However, AVC for local mode APs is supported.
Note The features that are not supported on Cisco WiSM2 and Cisco 5508 WLC are not supported on Cisco 2504 WLCs too.
Note Directly connected APs are supported only in the local mode.
Note You can replicate this functionality on a Cisco 5500 Series WLC by creating an open WLAN using an ACL.
Note For Cisco Flex 7500 Series WLCs, it is not necessary to configure an AP-manager interface. The management interface acts as an AP-manager interface by default, and the access points can join on this interface.
Note IPv6 client bridging and Router Advertisement Guard are supported.
Note An AP associated with the Cisco WLC in the local mode should be converted to the FlexConnect mode or monitor mode, either manually or by enabling the autoconvert feature. On the Cisco Flex 7500 WLC CLI, enable the autoconvert feature by entering the config ap autoconvert enable command.
Note FlexConnect local-switched multicast traffic is bridged transparently for both wired and wireless on the same VLAN. FlexConnect access points do not limit traffic based on Internet Group Management Protocol (IGMP) or MLD snooping.
Note Smart Licensing is not supported on Cisco 8510 WLC.
Note FlexConnect local-switched multicast traffic is bridged transparently for both wired and wireless on the same VLAN. FlexConnect access points do not limit traffic based on IGMP or MLD snooping.
Note FlexConnect central switching is supported in only small-scale deployments, wherein the total traffic on Cisco WLC ports is not more than 500 Mbps.
FlexConnect local switching is supported.
Note To see the amount of memory in a Cisco Aironet 1550 AP, enter the following command:(Cisco Controller) >show mesh ap summary
Note WPA +TKIP and TKIP + AES protocols are supported. |
|
|
Caveats describe unexpected behavior in a product. The Open Caveats section lists open caveats that apply to the current release and may apply to previous releases. A caveat that is open for a prior release and is still unresolved applies to all future releases until it is resolved.
To view the details of the software bugs pertaining to your product, perform the following task:
Click the Caveat ID/Bug ID number in the table.
The corresponding Bug Search Tool page is displayed with details of the Caveat ID/Bug ID.
The Bug Search Tool (BST), which is the online successor to the Bug Toolkit, is designed to improve the effectiveness in network risk management and device troubleshooting. The BST allows partners and customers to search for software bugs based on product, release, and keyword, and aggregates key data, such as bug details, product, and version. The tool has a provision to filter bugs based on credentials to provide external and internal bug views for the search input.
To view the details of a caveat whose ID you do not have, perform the following procedure:
1. Access the BST using your Cisco user ID and password:
https://tools.cisco.com/bugsearch/
2. In the Bug Search window that is displayed, enter the necessary information in the corresponding fields.
For more information about how to use the Cisco Bug Search Tool effectively, including how to set email alerts for bugs and to save bugs and searches, see the Bug Search Tool Help & FAQ page.
Note The Cisco Mobility Express wireless network solution is available starting from Cisco Wireless Release 8.1.122.0.
The Cisco Mobility Express wireless network solution comprises of at least one 802.11ac Wave 2 Cisco Aironet Series access point (AP) with an in-built software-based wireless controller (WLC) managing other APs in the network.
The AP acting as the WLC is referred to as the primary AP while the other APs in the Cisco Mobility Express network, which are managed by this primary AP, are referred to as subordinate APs.
In addition to acting as a WLC, the primary AP also operates as an AP to serve clients along with the subordinate APs.
For more information about the solution, including setup and configuration, see the Cisco Mobility Express User Guide for Release 8.2, at:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/82/user_guide/b_ME_User_Guide_82.html
The following features and functionalities are present in this release:
The following are existing features, with continued support in the current release:
Note Even if the Cisco AP is 802.3ad (LACP)-compliant, link aggregation groups (LAG) are not supported on the AP while it has a Cisco Mobility Express software image.
Note Cisco 2800 and 3800 APs may experience issues forming RF neighborhood when NDP encryption is turned on in a mix deployment environment.
– Supported—Over-the-Air Fast BSS transition method
– Not Supported—Over-the-DS Fast BSS transition and Fast Transition PSK authentication
See the Cisco Wireless Solutions Software Compatibility Matrix, at:
http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
Cisco Mobility Express software for Cisco Wireless Release 8.2.166.0, is as follows:
See the “Getting Started” section in the Mobility Express User Guide at the following URL:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/82/user_guide/b_ME_User_Guide_82.html
The open caveats applicable to the Cisco Mobility Express solution are listed under the “Caveats” section. All caveats associated with the Cisco Mobility Express solution have Cisco Mobility Express specified in the headline.
For all Support related information, see http://www.cisco.com/c/en/us/support/index.html.
For more information about the Cisco WLCs, lightweight access points, and mesh access points, see these documents:
For all Cisco WLC software related documentation, see http://www.cisco.com/c/en/us/support/wireless/wireless-lan-controller-software/tsd-products-support-series-home.html
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/82/user_guide/b_ME_User_Guide_82.html
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/ux-ap/guide/uxap-mobapp-g.html
http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1830-series-access-points/guide-c07-738528.html
Use this tool to compare the specifications of Cisco wireless access points and controllers:
http://www.cisco.com/c/dam/assets/prod/wireless/cisco-wireless-products-comparison-tool/index.html
For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.
Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.