Table Of Contents
Upgrading to this Software Release
Reverting from LWAPP Mode to Autonomous Mode
Using a Wireless LAN Controller to Return to a Previous Release
Using a TFTP Server to Return to a Previous Release
LWAPP Upgrade and Recovery Support
Installation in Environmental Air Space
Configuring Power for 1130AG Access Points
Operating 5-GHz Radio Requires Power Injector, Power Module, or Catalyst 3550-24 PWR Switch
Access Point Requires 1200 Series Universal Power Supply and Power Injector
Default Username and Password Are Cisco
Cisco IOS Release 12.3(7)JX Supports 2006 and 4400 Controllers Only
Access Points Converted to LWAPP do not Support WDS
Access Points Converted to LWAPP Support 8 BSSIDs per Radio
Access Points Converted to LWAPP do not Support Layer 2 LWAPP
Access Points Converted to LWAPP Provide Read-Only Console Port
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Obtaining Technical Assistance
Cisco Technical Support & Documentation Website
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Release Notes for Cisco Aironet 1130AG,
1200, 1230AG, and 1240AG Series Access
Points for Cisco IOS Release 12.3(7)JX
August 22, 2005
These release notes describe features, enhancements, and caveats for Cisco IOS Release 12.3(7)JX.
Note
This release must only be loaded onto access points at the factory or by using the Cisco IOS-TO-LWAPP upgrade tool. Your access point might become inoperable if you install this software without using the upgrade tool.
Contents
These release notes contain the following sections:
•
•
•
Introduction
Cisco IOS Release 12.3(7)JX provides support for the lightweight access point protocol (LWAPP) for 1130AG, 1200, 1230AG, and 1240AG series access points. When you use the Cisco IOS-TO-LWAPP upgrade tool to upgrade one of these access points to this release, the access point communicates with a Cisco 2006 series wireless LAN controller or a 4400 series controller and receives a full LWAPP configuration and software image from the controller. This release also functions as a recovery image if the access point fails to receive a full image from the controller.
Note
System Requirements
You can use the Cisco IOS-TO-LWAPP upgrade tool to install Cisco IOS Release 12.3(7)JX on these access points:
•
•
–
–
Note
Note
Upgrading to this Software Release
For instructions on using the Cisco IOS-TO-LWAPP upgrade tool to install this software, refer to the Application Note: Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode at this URL:
http://www.cisco.com/en/US/products/ps6108/prod_technical_reference_list.html
These are the main steps in the Cisco IOS-TO-LWAPP upgrade:
1.
2.
http://www.cisco.com/public/sw-center/sw-ios.shtml
In the menu on the left, click Wireless Software and log into Cisco.com to view the Cisco Wireless Software Display Tables.
3.
4.
5.
Refer to Upgrading Autonomous Cisco Aironet Access Points to Lightweight Mode for detailed instructions.
Reverting from LWAPP Mode to Autonomous Mode
After you use the Cisco IOS-TO-LWAPP upgrade tool to load Cisco IOS release 12.3(7)JX on an access point, you can convert the access point from an LWAPP unit back to an autonomous unit by loading a Cisco IOS release that supports autonomous mode (Cisco IOS release 12.3(7)JA or earlier). If the access point is associated to a controller, you can use the controller to load the Cisco IOS release. If the access point is not associated to a controller, you can load the Cisco IOS release using TFTP.
Using a Wireless LAN Controller to Return to a Previous Release
Follow these steps to revert from LWAPP mode to autonomous mode using a wireless LAN controller:
Step 1
Step 2
config ap tftp-downgrade tftp-server-ip-address filename access-point-name
Using a TFTP Server to Return to a Previous Release
Follow these steps to revert from LWAPP mode to autonomous mode by loading a Cisco IOS release using a TFTP server:
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
New Features
This section lists new features in Cisco IOS Release 12.3(7)JX. Table 1 lists the features that are supported on the devices that support this release.
Table 1 New Features Introduced for Access Points in Cisco IOS Release 12.3(7)JX
LWAPP Upgrade and Recovery Support
x
x
x
x
LWAPP Upgrade and Recovery Support
This feature allows an access point to communicate with a wireless LAN controller in order to receive the LWAPP image mandated by the controller. New LWAPP access points or access points being upgraded from autonomous to LWAPP mode use the LWAPP-recovery support feature to receive their LWAPP image from the controller. This release is also used as a recovery image in case the full LWAPP image becomes corrupted. The LWAPP-recovery support feature limits access point functionality to just that which is necessary to download a complete LWAPP image; for example, the radios are disabled on access points running the LWAPP-recovery support feature.
Installation Notes
This section contains information you should keep in mind when installing access points.
Installation in Environmental Air Space
This section provides information on installing 1200 series access points in environmental air space, such as above suspended ceilings.
Cisco Aironet 1130AG and 1200 Series Access Points provide adequate fire resistance and low smoke-producing characteristics suitable for operation in a building's environmental air space, such as above suspended ceilings, in accordance with Section 300-22(C) of the National Electrical Code (NEC) and Sections 2-128, 12-010(3) and 12-100 of the Canadian Electrical Code, Part 1, C22.1.
Caution
Note
Power Considerations
This section describes issues you should consider before applying power to an access point.
Caution
Caution
Use Only One Power Option
You cannot provide redundant power to 1130AG and 1200 series access points with both DC power to its power port and inline power from a patch panel or powered switch to the access point's Ethernet port. If you apply power to the access point from both sources, the switch or power patch panel might shut down the port to which the access point is connected. Figure 1 shows the power configuration that can shut down the port on the patch panel or powered switch.
Figure 1 Improper Power Configuration Using Two Power Sources
Configuring Power for 1130AG Access Points
The 1130AG access point disables the radio interfaces when the unit senses that the power source to which it is connected does not provide enough power. Depending on your power source, you might need to enter the power source type in the access point configuration. Use the System Software: System Configuration page on the web-browser interface to select a power option. Figure 2 shows the System Power Settings section of the System Configuration page.
Figure 2 Power Options on the System Software: System Configuration Page
Using the AC Power Adapter
If you use the AC power adapter to provide power to the 1130AG access point, you do not need to adjust the access point configuration.
Using a Switch Capable of IEEE 802.3af Power Negotiation
If you use a switch to provide Power over Ethernet (PoE) to the 1130AG access point and the switch supports the IEEE 802.3af power negotiation standard, select Power Negotiation on the System Software: System Configuration page.
Using a Switch That Does Not Support IEEE 802.3af Power Negotiation
If you use a switch to provide Power over Ethernet (PoE) to the 1130AG access point and the switch does not support the IEEE 802.3af power negotiation standard, select Pre-Standard Compatibility on the System Software: System Configuration page.
Using a Power Injector
If you use a power injector to provide power to the 1130AG access point, select Power Injector on the System Software: System Configuration page and enter the MAC address of the switch port to which the access point is connected.
Operating 5-GHz Radio Requires Power Injector, Power Module, or Catalyst 3550-24 PWR Switch
The 1200 series power injector and the 1200 series power module support operation of the 5-GHz radio in the access point. Currently, the Catalyst 3550-24 PWR switch supports power for both the 2.4-GHz radio and the 5-GHz radio. Other switches and power patch panels might not provide enough power for the 5-GHz radio.
Access Point Requires 1200 Series Universal Power Supply and Power Injector
The 350 series universal power supply and power injector are not compatible with the 1200 series access point. If you use a power injector or a power module to provide power to a 1200 series access point, you must use a 1200 series universal power supply. If you need to use a power injector to inject power into the access point's Ethernet port, you must use a 1200 series power injector.
Antenna Installation
For instructions on the proper installation and grounding of external antennas for 1200 series access points, refer to the National Fire Protection Association's NFPA 70, National Electrical Code, Article 810, and the Canadian Standards Association's Canadian Electrical Code, Section 54.
Warning
Important Notes
This section describes important information about the access point.
Default Username and Password Are Cisco
You must enter a username and password when you log into an access point interface. The default username for administrator login is Cisco, and the default password is Cisco. Both the username and password are case sensitive.
Cisco IOS Release 12.3(7)JX Supports 2006 and 4400 Controllers Only
When you load this release on an access point, the access point can communicate with Cisco 2006 series wireless LAN controllers or 4400 series controllers only. Cisco 4100 series, Airespace 4012 series, and Airespace 4024 series controllers are not supported because lack the memory required to support access points running Cisco IOS software.
Access Points Converted to LWAPP do not Support WDS
Access points converted to LWAPP mode communicate only with Cisco wireless LAN controllers and cannot communicate with WDS devices. However, the controller provides functionality equivalent to WDS when the access point associates to it.
Access Points Converted to LWAPP Support 8 BSSIDs per Radio
Access points converted to LWAPP mode support 8 BSSIDs per radio and a total of 8 wireless LANs per access point. (Cisco 1000 series access points support 16 BSSIDs per radio and 16 wireless LANs per access point.) When a converted access point associates to a controller, only wireless LANs with IDs 1 through 8 are pushed to the access point.
Access Points Converted to LWAPP do not Support Layer 2 LWAPP
Access Points converted to LWAPP must get an IP address and discover the controller using DHCP, DNS, or IP subnet broadcast.
Access Points Converted to LWAPP Provide Read-Only Console Port
After you convert an access point to LWAPP mode, the console port provides read-only access to the unit.
Caveats
This section lists open and resolved caveats in Cisco IOS Release 12.3(7)JX.
Open Caveats
These caveats are open in Cisco IOS Release 12.3(7)JX:
•
•
•
%DOT11-2-RADIO_FAILED: Interface Dot11Radio0, failed - Radio command failed, cmd 121 (FF80,0,0) status 7F21 (5,0,0)When the failure occurs, the radio restarts, all clients are disassociated, the failure is logged, and normal operation resumes.
Workaround: Reduce the number of wireless LANs in use.
Resolved Caveats
The following caveat is resolved in this release:
•
Multiple voice-related vulnerabilities are identified in Cisco IOS software, one of which is also shared with Cisco Unified Communications Manager. These vulnerabilities pertain to the following protocols or features:
–
–
–
–
–
Cisco has made free software available to address these vulnerabilities for affected customers. Fixed Cisco IOS software listed in the Software Versions and Fixes section contains fixes for all vulnerabilities mentioned in this advisory.
There are no workarounds available to mitigate the effects of any of the vulnerabilities apart from disabling the protocol or feature itself.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml
•
Cisco IOS may permit arbitrary code execution after exploitation of a heap-based buffer overflow vulnerability. Cisco has included additional integrity checks in its software, as further described below, that are intended to reduce the likelihood of arbitrary code execution.
Cisco has made free software available that includes the additional integrity checks for affected customers.
This advisory is posted at http://www.cisco.com/warp/public/707/cisco-sa-20051102-timers.shtml.
If You Need More Information
If you need information about a specific caveat that does not appear in these release notes, you can use the Cisco Bug Toolkit to find select caveats of any severity. Click this URL to browse to the Bug Toolkit:
http://www.cisco.com/pcgi-bin/Support/Bugtool/launch_bugtool.pl
(If you request a defect that cannot be displayed, the defect number might not exist, the defect might not yet have a customer-visible description, or the defect might be marked Cisco Confidential.)
Troubleshooting
For the most up-to-date, detailed troubleshooting information, refer to the Cisco TAC website at http://www.cisco.com/tac. Click Technology Support, choose Wireless from the menu on the left, and click Wireless LAN.
Related Documentation
This section lists documents related to 1130AG, 1200 series, and 1240AG access points.
•
•
•
•
•
•
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several ways to obtain technical assistance and other technical resources. These sections explain how to obtain technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
Cisco documentation and additional literature are available in the Product Documentation DVD package, which may have shipped with your product. The Product Documentation DVD is updated regularly and may be more current than printed documentation.
The Product Documentation DVD is a comprehensive library of technical product documentation on portable media. The DVD enables you to access multiple versions of hardware and software installation, configuration, and command guides for Cisco products and to view technical documentation in HTML. With the DVD, you have access to the same documentation that is found on the Cisco website without being connected to the Internet. Certain products also have .pdf versions of the documentation available.
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com users (Cisco direct customers) can order a Product Documentation DVD (product number DOC-DOCDVD=) from Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m. (0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere by calling 011 408 519-5055. You can also order documentation by e-mail at tech-doc-store-mkpl@external.cisco.com or by fax at 1 408 519-5001 in the United States and Canada, or elsewhere at 011 408 519-5001.
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback form that appears with the technical documents on Cisco.com.
You can send comments about Cisco documentation to bug-doc@cisco.com.
You can submit comments by using the response card (if present) behind the front cover of your document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you can perform these tasks:
•
•
•
A current list of security advisories and notices for Cisco products is available at this URL:
If you prefer to see advisories and notices as they are updated in real time, you can access a Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you might have identified a vulnerability in a Cisco product, contact PSIRT:
•
An emergency is either a condition in which a system is under active attack or a condition for which a severe and urgent security vulnerability should be reported. All other conditions are considered nonemergencies.
•
In an emergency, you can also reach PSIRT by telephone:
•
•
Tip
Never use a revoked or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
The link on this page has the current PGP key ID in use.
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Technical Support & Documentation website on Cisco.com features extensive online support resources. In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not have a valid Cisco service contract, contact your reseller.
Cisco Technical Support & Documentation Website
The Cisco Technical Support & Documentation website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day, at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411 (Australia: 1 800 805 227)
EMEA: +32 2 704 55 55
USA: 1 800 553-2447For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.
Severity 1 (S1)—Your network is "down," or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operation are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of your network is impaired, but most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
http://www.cisco.com/go/marketplace/
•
•
•
http://www.cisco.com/go/iqmagazine
or view the digital edition at this URL:
http://ciscoiq.texterity.com/ciscoiq/sample/
•
•
http://www.cisco.com/en/US/products/index.html
•
http://www.cisco.com/discuss/networking
•
http://www.cisco.com/en/US/learning/index.html
This document is to be used in conjunction with the documents listed in the Related Documentation section.
Copyright © 2005 Cisco Systems, Inc. All rights reserved.
Guest
