Release Notes for Cisco Embedded Wireless Controller on Catalyst Access Points, Cisco IOS XE Dublin 17.12.x
Introduction to Cisco Embedded Wireless Controller on Catalyst Access Points
Caution |
Problem Description: Authentication fails when attempting to upgrade software using the "CCO mode" in Cisco Embedded Wireless Controller (EWC) on a Cisco Catalyst Access Point (EWC-AP). This issue occurs when attempting to upgrade from a software release prior to one of the following releases: 17.3.x, 17.6.x, 17.9.5, 17.12.3, and 17.14.1. Background: From May 1, 2024, onwards, Cisco Connection Online (CCO, known as cisco.com) will use a new authentication system for EWC-AP. This system is not backward compatible with the earlier EWC-AP software releases. EWC-AP software developed after January 31, 2024, will be able to authenticate with Cisco.com, before and after May 1, 2024. The releases include: 17.9.5 and later, 17.12.3 and later, and 17.14.1 and later. Workaround: Download the desired EWC-AP image and load it into the EWC-AP over TFTP, SFTP, or (Desktop) HTTP. Upgrade to one of the following releases:
After the upgrade, the CCO method for upgrades will work. For more information, see Field Notice: FN74124. |
The Cisco Embedded Wireless Controller on Catalyst Access Points is a version of the Cisco IOS XE-based controller software on Catalyst access points (AP). In this solution, a Catalyst AP that is running the Cisco Embedded Wireless Controller on Catalyst Access Points software, is designated as the primary AP. Other APs, referred to as subordinate APs, associate to this primary AP.
The Cisco Embedded Wireless Controller on Catalyst Access Points provides enterprise-level WLAN features while maintaining operational simplicity and affordability. This solution is targeted at small and medium-sized business (SMB) customers or distributed enterprises, and can be run at single site deployments.
-
The controllers come with high availability (HA) and seamless software updates. This keeps your services on always, both during planned and unplanned events.
-
The deployment can be managed using a mobile application, Cisco Catalyst Center, Netconf/Restconf, web-based GUI, or CLI.
What's New in Cisco Embedded Wireless Controller on Catalyst Access Points, Cisco IOS XE Dublin 17.12.4
There are no new features in this release.
What's New in Cisco Embedded Wireless Controller on Catalyst Access Points, Cisco IOS XE Dublin 17.12.3
There are no new features in this release.
What's New in Cisco Embedded Wireless Controller on Catalyst Access Points, Cisco IOS XE Dublin 17.12.2
There are no new features in this release.
This release provides a fix for CSCwh87343: Cisco IOS XE Software Web UI Privilege Escalation Vulnerability. For more information, see Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z.
What's New in Cisco Embedded Wireless Controller on Catalyst Access Points, Cisco IOS XE Dublin 17.12.1
Feature Name |
Description and Documentation Link |
||||
---|---|---|---|---|---|
Archive less than 1 day |
The request platform software trace archive last command has been enhanced to archive all the trace logs relevant to all the processes running on a system. |
||||
FIPS 140-3 Compliance |
This release enables all COS APs to achieve FIPS 140-3 compliance, ensuring adherence to security standards. The Cisco Catalyst 9800 controllers, however, are FIPS 140-2 compliant.
For more information, see the chapter FIPS. |
||||
Improve Crash Data Collection, Kernel Panics, Out of Memory |
A new command is introduced to limit the number of kernel core dumps collected on the AP:
|
||||
Intelligent Capture (iCAP) Hardening |
This feature aims at making troubleshooting for wireless clients and APs easier. In this release, the following enhancements are made to the iCAP feature:
The following commands are introduced:
For more information, see the chapter Intelligent Capture Hardening. |
||||
MacBook Analytics |
This feature is supported on the controller when the MacBook device sends 11k action frames along with the model information. For more information, see the chapter Device Analytics. |
||||
Mesh Support in Cisco Catalyst 9130AX Series Access Points |
From this release, mesh support is included in the Cisco Catalyst 9130AX Series Access Points. All traditional capabilities of mesh are included in the Cisco Catalyst 9130AX Series APs operating in Cisco IOS XE Dublin 17.12.1. For more information, see the chapter Mesh Access Points. |
||||
Modified Trustpoints for Secure Unique Device Identity (SUDI) Certificates |
From Cisco IOS XE Dublin 17.12.1 onwards, the following changes have been introduced for trustpoints:
|
||||
Rogue Channel Width |
From this release, you can specify the channel width and the band for rogue detection. The following command is introduced:
For more information, see the chapter Radio Resource Management. |
||||
Rogue PMF |
From this release, the controller will contain rogue APs with 802.11w Protected Management Frame (PMF) on centrally switched WLANs. The following commands are introduced:
For more information, see the chapter Radio Resource Management. |
||||
Software Entropy Enhancement for FIPS 140-3 |
From Cisco IOS XE Dublin 17.12.1 onwards, Federal Information Processing Standard (FIPS) 140-3 is supported as a security standard to validate cryptographic modules. |
Feature Name |
GUI Path |
---|---|
Rogue Channel Width |
|
Behavior Change
From Cisco IOS XE Dublin 17.12.1 onwards, EWC supports a reduced scale of APs and clients for the following APs:
EWC AP |
Current Scale (Maximum APs Supported / Maximum Clients Supported) |
New Scale (Maximum APs Supported / Maximum Clients Supported) |
---|---|---|
Cisco Catalyst 9120AX Series Access Points |
100 APs/2000 clients |
50 APs/1000 clients |
Cisco Catalyst 9124AX Series Access Points |
100 APs/2000 clients |
50 APs/1000 clients |
Cisco Catalyst 9130AX Series Access Points |
100 APs/2000 clients |
50 APs/1000 clients |
Note |
Starting from Cisco IOS XE Dublin 17.12.1 onwards, the maximum supported scale in Cisco Catalyst 9120AX Series APs, Cisco Catalyst 9124AX Series APs, and Cisco Catalyst 9130AX Series APs, has been reduced to 50 APs from 100 APs and 1000 clients from 2000 clients. |
Interactive Help
The Cisco Catalyst 9800 Series Wireless Controller GUI features an interactive help that walks you through the GUI and guides you through complex configurations.
You can start the interactive help in the following ways:
-
By hovering your cursor over the blue flap at the right-hand corner of a window in the GUI and clicking Interactive Help.
-
By clicking Walk-me Thru in the left pane of a window in the GUI.
-
By clicking Show me How displayed in the GUI. Clicking Show me How triggers a specific interactive help that is relevant to the context you are in.
For instance, Show me How in Configure > AAA walks you through the various steps for configuring a RADIUS server. Choose Configuration> Wireless Setup > Advanced and click Show me How to trigger the interactive help that walks you through the steps relating to various kinds of authentication.
The following features have an associated interactive help:
-
Configuring AAA
-
Configuring FlexConnect Authentication
-
Configuring 802.1X Authentication
-
Configuring Local Web Authentication
-
Configuring OpenRoaming
-
Configuring Mesh APs
Note |
If the WalkMe launcher is unavailable on Safari, modify the settings as follows:
|
Supported Cisco Access Point Platforms
The following Cisco access points are supported in the Cisco Embedded Wireless Controller on Catalyst Access Points network. Note that the APs listed as primary APs can also function as subordinate APs.
Primary AP |
Subordinate AP |
---|---|
Cisco Catalyst 9115 Series Cisco Catalyst 9117 Series Cisco Catalyst 9120 Series Cisco Catalyst 9124AXE/I/D Cisco Catalyst 9130 Cisco Catalyst 9105AXI |
Cisco Aironet 1540 Series Cisco Aironet 1560 Series Cisco Aironet 1815i Cisco Aironet 1815w Cisco Aironet 1830 Series Cisco Aironet 1840 Series Cisco Aironet 1850 Series Cisco Aironet 2800 Series Cisco Aironet 3800 Series Cisco Aironet 4800 Series Cisco Catalyst 9115 Series Cisco Catalyst 9117 Series Cisco Catalyst 9120 Series Cisco Catalyst 9124AXE/I/D Cisco Catalyst 9130 Cisco Catalyst 9105AXW Cisco Catalyst 9105AXI Cisco Catalyst Industrial Wireless 6300 Heavy Duty Series Access Points Cisco 6300 Series Embedded Services Access Points |
Image Type |
Supported APs |
---|---|
ap1g4 |
Cisco Aironet 1810 Series Cisco Aironet 1830 Series Cisco Aironet 1850 Series |
ap1g5 |
Cisco Aironet 1815i Cisco Aironet 1815w Cisco Aironet 1540 Series Cisco Aironet 1850 Series |
ap1g6 |
Cisco Catalyst 9117 Series |
ap1g6a |
Cisco Catalyst 9130 Cisco Catalyst 9124AXE/I/D |
ap1g7 |
Cisco Catalyst 9115 Series Cisco Catalyst 9120 Series |
ap1g8 |
Cisco Catalyst 9105 Series |
ap3g3 |
Cisco Aironet 2800 Series Cisco Aironet 3800 Series Cisco Aironet 4800 Series Cisco Aironet 1560 Series Cisco Catalyst Industrial Wireless 6300 Heavy Duty Series Access Points Cisco 6300 Series Embedded Services Access Points |
Maximum APs and Clients Supported
Primary AP Model |
Maximum APs Supported |
Maximum Clients Supported |
---|---|---|
Cisco Catalyst 9105 AWI |
50 |
1000 |
Cisco Catalyst 9115 Series |
50 |
1000 |
Cisco Catalyst 9117 Series |
50 |
1000 |
Cisco Catalyst 9120 Series |
50 |
1000 |
Cisco Catalyst 9124AXE/I/D |
50 |
1000 |
Cisco Catalyst 9130 |
50 |
1000 |
Note |
|
Compatibility Matrix
The following table provides software compatibility information:
Cisco Embedded Wireless Controller on Catalyst Access Points |
Cisco ISE |
Cisco CMX |
Cisco Catalyst Center |
---|---|---|---|
Dublin 17.12.x |
3.2 3.1 3.0 2.7 |
10.6.3 10.6.2 10.6 10.5.1 |
Supported Browsers and Operating Systems for Web UI
Note |
The following list of Supported Browsers and Operating Systems is not comprehensive at the time of writing this document and the behavior of various browser for accessing the GUI of the EWC is as listed below. |
Browser |
Version |
Operating System |
Status |
Workaround |
---|---|---|---|---|
Google Chrome |
77.0.3865.120 |
macOS Mojave Version 10.14.6 |
Works |
Proceed through the browser warning. |
Safari |
13.0.2 (14608.2.40.1.3) |
macOS Mojave Version 10.14.6 |
Works |
Proceed through the browser warning. |
Mozilla Firefox |
69.0.1 |
macOS Mojave Version 10.14.6 |
Works only if exception is added. |
Set the exception. |
Mozilla Firefox |
69.0.3 |
macOS Mojave Version 10.14.6 |
Works only if exception is added. |
Set the exception. |
Google Chrome |
77.0.3865.90 |
Windows 10 Version 1903 (OS Build 18362.267) |
Works |
Proceed through the browser warning. |
Microsoft Edge |
44.18362.267.0 |
Windows 10 Version 1903 (OS Build 18362.267) |
Works |
Proceed through the browser warning. |
Mozilla Firefox |
68.0.2 |
Windows 10 Version 1903 (OS Build 18362.267) |
Works |
Proceed through the browser warning. |
Mozilla Firefox |
69.0.3 |
Windows 10 Version 1903 (OS Build 18362.267) |
Works only if exception is added. |
Set the exception. |
Google Chrome |
78.0.3904.108 |
macOS Catalina 10.15.1 |
Does not work |
NA |
Before You Upgrade
The following Remote Procedure Call (RPCs) should be used for Cisco Catalyst 9800 Series Wireless Controller and Cisco Embedded Wireless Controller:
-
Cisco Catalyst 9800 Series Wireless Controller: Use ewlc-wncd-stats within Cisco-IOS-XE-wireless-ap-global-oper.
-
Cisco Embedded Wireless Controller: Use ewlc-wncd-stats within Cisco-IOS-XE-wireless-access-point-oper.
Upgrade Path to Cisco IOS XE Dublin 17.12.x
Current Software |
Upgrade Path for Deployments with 9130 or 9124 |
Upgrade Path for Deployments Without 9130 or 9124 |
---|---|---|
16.10.x |
— |
Upgrade first to 16.12.5 or 17.3.x and then to 17.12.x. |
16.11.x |
— |
Upgrade first to 16.12.5 or 17.3.x and then to 17.12.x. |
16.12.x |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
17.1.x |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.2.x. |
17.2.x |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
17.3.1 to 17.3.4 |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
Upgrade first to 17.3.5 or 17.6.x or later and then to 17.12.x. |
17.3.4c or later |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
17.4.x |
Upgrade first to 17.6.x and then to 17.12.x. |
Upgrade first to 17.6.x and then to 17.12.x. |
17.5.x |
Upgrade first to 17.6.x and then to 17.12.x. |
Upgrade first to 17.6.x and then to 17.12.x. |
17.6.x |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
17.7.x |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
17.8.x |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
17.9.x |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
17.10.x |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
17.11.x |
Upgrade directly to 17.12.x. |
Upgrade directly to 17.12.x. |
Upgrading the Controller Software
This section covers the various aspects of upgrading the controller software.
Note |
Before converting from CAPWAP to embedded wireless controller (EWC), ensure that you upgrade the corresponding AP with the CAPWAP image in Cisco AireOS Release 8.10.105.0. If this upgrade is not performed, the conversion will fail. |
Finding the Software Version
The following table lists the Cisco IOS XE 17.12.x software for Cisco Embedded Wireless Controller on Catalyst Access Points.
Choose the appropriate AP software based on the following:
-
Cisco Embedded Wireless Controller on Catalyst Access Points software to be used for converting the AP from an unified wireless network CAPWAP lightweight AP to a Cisco Embedded Wireless Controller on Catalyst Access Points -capable AP (primary AP).
-
AP software image bundle to be used either for upgrading the Cisco Embedded Wireless Controller on Catalyst Access Points software on the primary AP or for updating the software on the subordinate APs or both.
Prior to ordering Cisco APs, see the corresponding ordering guide for your Catalyst or Aironet AP.
Primary AP |
AP Software for Conversion from CAPWAP to Cisco EWC |
AP Software Image Bundle for Upgrade |
AP Software in the Bundle |
---|---|---|---|
Cisco Catalyst 9115 Series |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
ap1g7 |
Cisco Catalyst 9117 Series |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
ap1g6 |
Cisco Catalyst 9120 Series |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
ap1g7 |
Cisco Catalyst 9124AXE/I/D |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
ap1g6a |
Cisco Catalyst 9130 |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
C9800-AP-universalk9.17.12.04.zip C9800-AP-universalk9.17.12.03.zip C9800-AP-universalk9.17.12.02.zip C9800-AP-universalk9.17.12.01.zip |
ap1g6a |
Supported Access Point Channels and Maximum Power Settings
Supported access point channels and maximum power settings on Cisco APs are compliant with the regulatory specifications of channels, maximum power levels, and antenna gains of every country in which the access points are sold. For more information about the supported access point transmission values in Cisco IOS XE software releases, see the Detailed Channels and Maximum Power Settings document at https://www.cisco.com/c/en/us/support/ios-nx-os-software/ios-xe-17/products-technical-reference-list.html.
For information about Cisco Wireless software releases that support specific Cisco AP modules, see the "Software Release Support for Specific Access Point Modules" section in the Cisco Wireless Solutions Software Compatibility Matrix document.
Guidelines and Restrictions
Internet Group Management Protocol (IGMP)v3 is not supported on Cisco Aironet Wave 2 APs.
Embedded Wireless Controller SNMP configuration is supported in Cisco Catalyst Center.
High memory usage on AP running Embedded Wireless Controller. Enabling crash kernel on the AP consumes additional memory on the AP. Hence, if crash kernel is enabled, the overall memory usage of the device will increase and will impact the scale numbers. On Cisco Catalyst 9130 Access Points, the memory consumption is a high of 128 MB.
During the EWC HA pair selection, after a power outage, the standby AP fails to come up in the new EWC HA pair. Another EWC capable AP becomes the standby AP and fails to come up as well. To avoid this situation, ensure that the same IP address is enforced on the active or standby APs during HA pair selection.
Interoperability with Clients
This section describes the interoperability of the controller software with client devices.
The following table describes the configurations used for testing client devices.
Hardware or Software Parameter |
Hardware or Software Type |
---|---|
Release |
Cisco IOS XE Dublin 17.12.x |
Access Points |
|
Radio |
|
Security |
Open, PSK (WPA2-AES), 802.1X (WPA2-AES) (EAP-FAST, EAP-TLS), WPA3. |
Cisco ISE |
See Compatibility Matrix. |
Types of tests |
Connectivity, traffic (ICMP), and roaming between two APs |
The following table lists the client types on which the tests were conducted. Client types included laptops, hand-held devices, phones, and printers.
Client Type and Name |
Driver / Software Version |
||
---|---|---|---|
Wi-Fi 6 Devices (Mobile Phone and Laptop) |
|||
Apple iPhone 11 | iOS 14.1 | ||
Apple iPhone SE 2020 |
iOS 14.1 | ||
Dell Intel AX1650w | Windows 10 ( 21.90.2.1) | ||
DELL LATITUDE 5491 (Intel AX200) | Windows 10 Pro (21.40.2) | ||
Samsung S20 | Android 10 | ||
Samsung S10 (SM-G973U1) | Android 9.0 (One UI 1.1) | ||
Samsung S10e (SM-G970U1) | Android 9.0 (One UI 1.1) | ||
Samsung Galaxy S10+ | Android 9.0 | ||
Samsung Galaxy Fold 2 |
Android 10 | ||
Samsung Galaxy Flip Z |
Android 10 | ||
Samsung Note 20 |
Android 10 | ||
Laptops |
|||
Acer Aspire E 15 E5-573-3870 (Qualcomm Atheros QCA9377) | Windows 10 Pro (12.0.0.832) | ||
Apple Macbook Air 11 inch | OS Sierra 10.12.6 | ||
Apple Macbook Air 13 inch | OS Catalina 10.15.4 | ||
Apple Macbook Air 13 inch | OS High Sierra 10.13.4 | ||
Macbook Pro Retina | OS Mojave 10.14.3 | ||
Macbook Pro Retina 13 inch early 2015 | OS Mojave 10.14.3 | ||
Dell Inspiron 2020 Chromebook |
Chrome OS 75.0.3770.129 |
||
Google Pixelbook Go |
Chrome OS 84.0.4147.136 |
||
HP chromebook 11a |
Chrome OS 76.0.3809.136 |
||
Samsung Chromebook 4+ |
Chrome OS 77.0.3865.105 |
||
DELL Latitude 3480 (Qualcomm DELL wireless 1820) | Win 10 Pro (12.0.0.242) | ||
DELL Inspiron 15-7569 (Intel Dual Band Wireless-AC 3165) | Windows 10 Home (18.32.0.5) | ||
DELL Latitude E5540 (Intel Dual Band Wireless AC7260) | Windows 7 Professional (21.10.1) | ||
DELL XPS 12 v9250 (Intel Dual Band Wireless AC 8260 ) | Windows 10 (19.50.1.6) | ||
DELL Latitude 5491 (Intel AX200) | Windows 10 Pro (21.40.2) | ||
DELL XPS Latitude12 9250 (Intel Dual Band Wireless AC 8260) | Windows 10 Home (21.40.0) | ||
Lenovo Yoga C630 Snapdragon 850 (Qualcomm AC 2x2 Svc) |
Windows 10(1.0.10440.0) |
||
Lenovo Thinkpad Yoga 460 (Intel Dual Band Wireless-AC 9260) | Windows 10 Pro ( 21.40.0) | ||
|
|||
Tablets |
|||
Apple iPad Pro | iOS 13.5 | ||
Apple iPad Air2 MGLW2LL/A | iOS 12.4.1 | ||
Apple iPad Mini 4 9.0.1 MK872LL/A | iOS 11.4.1 | ||
Apple iPad Mini 2 ME279LL/A | iOS 12.0 | ||
Microsoft Surface Pro 3 – 11ac | Qualcomm Atheros QCA61x4A | ||
Microsoft Surface Pro 3 – 11ax | Intel AX201 chipset. Driver v21.40.1.3 | ||
Microsoft Surface Pro 7 – 11ax | Intel Wi-Fi chip (HarrisonPeak AX201) (11ax, WPA3) | ||
Microsoft Surface Pro X – 11ac & WPA3 | WCN3998 Wi-Fi Chip (11ac, WPA3) | ||
Mobile Phones |
|||
Apple iPhone 5 | iOS 12.4.1 | ||
Apple iPhone 6s | iOS 13.5 | ||
Apple iPhone 8 | iOS 13.5 | ||
Apple iPhone X MQA52LL/A | iOS 13.5 | ||
Apple iPhone 11 | iOS 14.1 | ||
Apple iPhone SE MLY12LL/A | iOS 11.3 | ||
ASCOM SH1 Myco2 | Build 2.1 | ||
ASCOM SH1 Myco2 | Build 4.5 | ||
ASCOM Myco 3 v1.2.3 | Android 8.1 | ||
Drager Delta | VG9.0.2 | ||
Drager M300.3 | VG2.4 | ||
Drager M300.4 | VG2.4 | ||
Drager M540 | DG6.0.2 (1.2.6) | ||
Google Pixel 2 | Android 10 | ||
Google Pixel 3 | Android 11 | ||
Google Pixel 3a |
Android 11 |
||
Google Pixel 4 | Android 11 | ||
Huawei Mate 20 pro | Android 9.0 | ||
Huawei P20 Pro | Android 9.0 | ||
Huawei P40 |
Android 10 |
||
LG v40 ThinQ | Android 9.0 | ||
One Plus 8 |
Android 10 |
||
Oppo Find X2 |
Android 10 |
||
Redmi K20 Pro |
Android 10 |
||
Samsung Galaxy S7 | Andriod 6.0.1 | ||
Samsung Galaxy S7 SM - G930F | Android 8.0 | ||
Samsung Galaxy S8 | Android 8.0 | ||
Samsung Galaxy S9+ - G965U1 | Android 9.0 | ||
Samsung Galaxy SM - G950U | Android 7.0 | ||
Sony Experia 1 ii |
Android 10 |
||
Sony Experia xz3 | Android 9.0 | ||
Xiaomi Mi10 |
Android 10 |
||
Spectralink 8744 | Android 5.1.1 | ||
Spectralink Versity Phones 9540 | Android 8.1 | ||
Vocera Badges B3000n | 4.3.2.5 | ||
Vocera Smart Badges V5000 | 5.0.4.30 | ||
Zebra MC40 | Android 5.0 | ||
Zebra MC40N0 | Android Ver: 4.1.1 | ||
Zebra MC92N0 | Android Ver: 4.4.4 | ||
Zebra TC51 | Android 7.1.2 | ||
Zebra TC52 | Android 8.1.0 | ||
Zebra TC55 | Android 8.1.0 | ||
Zebra TC57 | Android 8.1.0 | ||
Zebra TC70 | Android 6.1 | ||
Zebra TC75 | Android 6.1.1 | ||
Printers | |||
Zebra QLn320 Printer | LINK OS 6.3 | ||
Zebra ZT230 Printer | LINK OS 6.3 | ||
Zebra ZQ310 Printer | LINK OS 6.3 | ||
Zebra ZD410 Printer | LINK OS 6.3 | ||
Zebra ZT410 Printer | LINK OS 6.3 | ||
Zebra ZQ610 Printer | LINK OS 6.3 | ||
Zebra ZQ620 Printer | LINK OS 6.3 | ||
Wireless Module |
|||
Intel 11ax 200 |
Driver v22.20.0 | ||
Intel AC 9260 |
Driver v21.40.0 | ||
Intel Dual Band Wireless AC 8260 |
Driver v19.50.1.6 |
Issues
Issues describe unexpected behavior in Cisco IOS releases. Issues that are listed as Open in a prior release are carried forward to the next release as either Open or Resolved.
Note |
All incremental releases will cover fixes from the current release. |
Cisco Bug Search Tool
The Cisco Bug Search Tool (BST) allows partners and customers to search for software bugs based on product, release, and keyword, and aggregates key data such as bug details, product, and version. The BST is designed to improve the effectiveness in network risk management and device troubleshooting. The tool has a provision to filter bugs based on credentials to provide external and internal bug views for the search input.
To view the details of a caveat, click the corresponding identifier.
Open Issues for Cisco IOS XE 17.12.4
Identifier |
Headline |
---|---|
Controller sends IGMP queries without IP address and MAC address on Cisco IOS XE Cupertino 17.9.3 |
|
AP unable to join controller due to stale entries in Cisco IOS XE Cupertino 17.9.4 |
|
CAPWAP messaging causes memory leak in WNCd |
|
Cisco Catalyst 9130 AP observes traffic loss and delay due to channel utilization and interference |
|
Client is unable to connect due to delete reason NACK_IFID_EXISTS |
|
Clients are unable to connect due to assignment of IP address that is in use by stale client entry in device-tracking database in FlexConnect local switching |
|
Cisco Aironet 2802 Series AP unable to send reassociation and association requests |
|
Controller reloads with reason "Critical process wncmgrd fault on rp_0_0 (rc=134)\" |
|
CPUHOG traceback messages observed in Cisco IOS XE Dublin 17.12.2 |
|
FlexConnect local switching client rate-limit pushed by AAA is applied per stream and not per client in Cisco IOS XE Dublin 17.12.3 |
|
Controller does not send EXR_OP_UPDATE event, which causes false alarms on Cisco Prime Infrastructure |
|
Missing M1 packet causes unexpected client disconnect and inability to reconnect with the controller |
|
Controller unexpectedly reboots due to high ODM memory consumption |
|
Clients on FlexConnect are unable to pass traffic if rate-limiting AVP is missing |
|
Controller generates -1 days messages even when registered using Air Gapped licensing |
Open Issues for Cisco IOS XE 17.12.3
Identifier |
Headline |
---|---|
CSCwj03495 |
Cisco Aironet 1562 mesh AP cannot join Cisco Catalyst 9124 root AP due to a missing mesh adjacency message. |
CSCwj05365 |
Cisco Catalyst 9115 AP experiences kernel panic crash. |
CSCwi99437 |
Clients are unable to connect to Cisco Aironet 1850 AP FlexConnect Simultaneous Authentication of Equals (SAE) SSID. |
CSCwi99296 |
Cisco Catalyst 9120 AP experiences kernel panic crash. |
CSCwi96508 |
Cisco Wave 2 APs allow Sticky Key Caching (SKC) roam causing client deletion with INVALID_PMKID as the reason. |
CSCwi96176 |
Cisco Catalyst 9130 APs and Cisco Catalyst 9166 APs show High Channel Utilization with one single client connected. |
CSCwi95945 |
No plumbing takes place from Group Temporal Key (GTK) to the driver when GTK rekeys. |
CSCwi69696 |
Cisco Aironet 1815 Series APs experiences random drops in traffic going towards wireless clients. |
Cisco Catalyst 1815 APs are reporting high channel utilization in the 5-GHz band. |
|
CSCwi40659 |
Clients in the same remote LAN (RLAN) with different OfficeExtend Access Point (OEAP) cannot communicate between each other. |
CSCwi16509 |
APs disjoin with the "Invalid radio slot id" error and do not rejoin the controller. |
CSCwh52553 |
High mDNS traffic causes Cisco Catalyst 9105 AP to have high utilization and performance issues. |
Open Issues for Cisco IOS XE 17.12.2
Identifier |
Headline |
---|---|
The controller running the mDNS feature crashes due to a NULL check missing in the code. |
|
Intel AX210 client connection fails after a few minutes of traffic with Cisco Aironet 1815 Series APs. |
|
The encrypted mesh pre-shared key changes each time password encryption aes command is run. |
|
The wcpd process restarts on the Cisco Catalyst 9105 AP generating core but with no AP reload. |
|
The Cisco Embedded Wireless Controller (EWC) AP crashes and causes constant active failover. |
|
After client deletion and COA termination, the controller allows the deleted client to reconnect. |
|
Radio FW 1 and CAPWAP crashed during scale longevity test. |
|
Controller sends Internet Group Management Protocol (IGMP) queries with non-controller IP address and controller MAC address. |
|
Cisco Aironet 3802 Series AP crashes continuously during the capwapd and cleanaird processes. |
|
Cisco Catalyst 9100 Series APs are not processing the EAP-TLS server. |
|
Cisco Wave 2 APs connected to the controller lose Flex WLAN - VLAN mapping intermittently. |
|
CSCwh92459 |
Controller crashes due to wncd process fault. |
CSCwh88100 |
Cisco Aironet 3800 Series APs experience kernel panic crash. |
CSCwe93421 |
Cisco Catalyst 9115 APs intermittently stop transmitting multicast traffic downstream. |
CSCwh29442 |
Cisco Catalyst 9800-40 Wireless Controller crashes after ISSU upgrade. |
CSCwh46368 |
Cisco Catalyst 9800-40 Wireless Controller device tracking binds BSSID MAC to wired IP address causing reachability issues. |
CSCwh49467 |
Cisco Catalyst 9130AXI AP leaks multicast traffic to the wrong BSSID. |
CSCwh49810 |
Audit session ID changes after inter-WNCD roaming. |
CSCwh62342 |
AP FlexConnect as an mDNS gateway does not respond correctly when Location Specific Services (LSS) filter is enabled in the 5-GHz band. |
CSCwh67342 |
Cisco Catalyst 9130 APs are not able to join when Controller Based Application Recognition (CBAR) is enabled on the controller. |
CSCwh74415 |
Per client rate limit with FlexConnect local switching APs do not work. |
CSCwh75431 |
Cisco Aironet 1800 Series APs report false channel utilization affecting performance across the 5-GHz band. |
CSCwh82580 |
Cisco Catalyst 9120 Series APs crash when Prime Infrastructure shuts down one of the SSIDs through the Schedule SSID Availability feature. |
CSCwh89539 |
CAPWAP messages are queued for longer than 'x' seconds with client throttling being switched on. |
CSCwh49406 |
Excessive CleanAir syslogs are generated from Cisco Catalyst 9130 Series APs. |
CSCwh67285 |
The controller is unable to get telemetry data due to the unexpected reload and failure of the pubd process. |
CSCwh68360 |
Cisco Catalyst 9120 AP crashes due to kernel panic. |
CSCwh63270 |
Cisco Catalyst 9130AXI APs crash due to radio failure. |
CSCwh87903 |
Cisco Catalyst 9120 APs sending auth_resp failures for specific client MAC addresses. |
CSCwh81332 |
Cisco Catalyst 9130 Series APs experience kernel panic crash. |
Open Issues for Cisco IOS XE 17.12.1
For the list of open issues, click here.
Resolved Issues for Cisco IOS XE 17.12.4
Identifier |
Headline |
---|---|
Controller observes unresponsiveness due to critical software exception |
|
CSCwj93153 |
Controller becomes unresponsive during WNCd process |
Cisco Catalyst 9120 AP encounters kernel unresponsiveness with the PC due to wlc_bmac_suspend_mac_and_wait |
|
Cisco Catalyst 9124AX AP experiences image upgrade failure |
|
Cisco Catalyst 9130AX APs in FlexConnect mode encounter kernel unresponsiveness |
|
Cisco Catalyst 9120 AP encounters kernel unresponsiveness on Power Supply Module (PSM) watchdog CS00012342194 |
|
Cisco Catalyst 9115 AP becomes unresponsive due to Capwapd process crash |
|
Multiple Cisco Catalyst 9130 APs encounter kernel unresponsiveness |
|
Cisco Catalyst 9115 AP encounters kernel unresponsiveness |
|
Cisco Catalyst 9130 AP encounters kernel unresponsiveness with PC at _raw_spin_locK/LR wlan_objmgr_peer_try_get_ref |
|
Cisco Catalyst 9124AXI-E AP becomes unresponsive due to channel 36 not being supported in the Jordan regulatory domain |
|
Cisco Catalyst 9120 AP encounters kernel unresponsiveness when PC is at wlc_txhinfo2bandunit |
|
Cisco Catalyst 9105 AP encounters kernel unresponsiveness when PC is at wlc_ampdu_dotxstatus+0x5c/0x5cc |
|
Cisco Catalyst 9115AXI-S AP association request dropped on the Cisco Catalyst 9800-80 Wireless Controller |
|
Media stream feature does not work |
|
Mac Authentication Bypass (MAB) is not initiated unless the client device is deauthenticated |
|
Cisco Catalyst 9800 Wireless Controller generates system report with crash information, segmentation fault - Process = IGMPSN |
|
Cisco Catalyst 9800 Wireless Controller encounters an unexpected reset in wncmgrd with a scaled setup while being managed by the Meraki Dashboard |
|
Controller running the IOS XE software encounters an unexpected reset while trying to validate the MAC address with the EWLC_APP_INFRA_ID_MAGIC |
|
Cisco Catalyst 9800 Wireless Controller reboots due to Radio Resource Management (RRM) process fault on rp_0_0 (rc=139) |
|
Controller posture flow does not work when PMF is optional |
|
Controller unexpectedly reboots during WNCd process due to assertation failure with invalid BSSID |
|
Memory leak in scale network with telemetry shared user events with Cisco Catalyst Center |
|
5-GHz and 2.4-GHz radios remain non-operational down in an AP |
|
Controller accepts configuration of a reserved IPv6 multicast address as a mobility IPv6 address |
|
Cisco NMSP runs into security protocol issues |
|
Controller reports incorrect values during SNMP polling |
|
Incorrect selection of APs in load balancing |
|
Controller encounters unresponsiveness when accessing crimson database |
|
Controller does not send RADIUS accounting messages WLAN with PSK/MAB authentication |
|
Controller and PI report observe RRM message mismatch |
|
Controller does not send mobile address to AP if the CoA is received when the user is in the ip_learn state |
|
Controller WebUI is not updating configuration port parameters |
|
Controller uses incorrect username for "show platform" command when logging in GUI |
|
Controller configures aggregation scheduler parameter incorrectly, causing low downlink speed |
|
URL filter allows only letters as the first character |
|
Controller is unable to onboard on Cisco Spaces |
|
Syntax errors observed in LWAPP |
|
Syntax errors observed in LWAPP client |
|
RSA key pair is configured in the TrustPoint configuration when EC keypair is selected while creating a trustpoint on the controller |
|
802.1X timeout value is set to 0 by default when configuring RLAN through GUI |
Resolved Issues for Cisco IOS XE 17.12.3
Identifier |
Headline |
---|---|
CSCvy50798 |
Cisco Catalyst 9124 Series APs are not displayed in the controller GUI after it is registered. |
Cisco Embedded Wireless Controller-AP: Users will experience authentication failures when using CCO mode for software upgrades, after April 30, 2024. |
|
EWC on Cisco Catalyst 9124 AP image upgrade fails. |
Resolved Issues for Cisco IOS XE 17.12.2
Identifier |
Headline |
---|---|
Cisco IOS XE Software Web UI Privilege Escalation Vulnerability. For more information, see Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z. |
|
CSCwf60151 |
The controller experiences a memory leak at the kernel level with the pubd process. |
CSCwe11213 |
Cisco Catalyst 9130 AP crashes due to radio recovery failure. |
CSCwf79458 |
11AX WGB 2.4-GHz radio does not roam when 11r is enabled. |
CSCwh20306 |
Cisco Wave 2 APs: Hyperlocation is broken if aWIPS is enabled. |
CSCwf83278 |
Client traffic fails with N+1 when AP sends CLIENT_DEL_STOP_REASSOC. |
CSCwh08532 |
The DSCP marking on Cisco Wave 2 APs for QoS metal policies is not happening in the slow and fast path. |
CSCwh20301 |
There is no telemetry data sent from the controller to Cisco DNA Center. |
CSCwf53520 |
Kernel panic crash observed on Cisco Aironet 1815 Series AP. |
CSCwh42002 |
Controller crashes with wncd core while processing CAPWAP data. |
CSCwh61011 |
Cisco Catalyst 9120 APs and Cisco Catalyst 9115 APs unexpectedly disjoin from the controller and are not able to establish DTLS connection again. |
CSCwf59348 |
Cisco Catalyst 9105 AP, Cisco Catalyst 9115 AP, and Cisco Catalyst 9120 AP beacons set the maximum transmit power level to 128 dBm in Ireland (Country IE). |
CSCwf63818 |
Kernal panic crash observed on Cisco Aironet 1832 AP. |
CSCwf93992 |
Cisco Aironet 2800 Flex APs do not process EAP-TLS fragmented packets if the delay is more than 50ms. |
CSCwf99932 |
Cisco Catalyst 9120 AP experiences a radio crash. |
CSCwh09879 |
Clients are unable to connect to the Cisco Wave 2 AP FlexConnect after a country code change. |
CSCwh20934 |
Cisco Wave 2 APs reload due to systemd critical process crash. |
CSCwh54279 |
Kernel panic crash observed in Cisco Aironet 1815 OEAP. |
CSCwh74663 |
Cisco Aironet 3800 AP does not send QoS data frames downstream as the RadarDetected flag is set to TRUE. |
CSCwh81040 |
Cisco Catalyst 9120 AP with local mode crashes when Workgroup Bridge (WGB) associates with the SSID profile. |
CSCwh54762 |
Cisco Catalyst 9120 AP crashes due to kernel panic. |
CSCwf53331 |
Kernel panic crash observed in Cisco Catalyst 9124 AP in Bridge mode, after changing channels on the 5-GHz radio. |
CSCwh06834 |
Using special characters in the password while generating trustpoint generates an invalid trustpoint. |
CSCwh08625 |
Kernel panic crash observed in Cisco Catalyst 9120 AP. |
CSCwh18759 |
Cisco Aironet 1815 AP crashed due to low system memory and kernel panic. |
CSCwf13804 |
APs are randomly failing for new client associations. 'No buffer space available' error is reported. |
CSCwf52815 |
Cisco Wave 2 APs to improve PMTU Discovery mechanism to honor the ICMP unreachable MTU value. |
CSCwf62051 |
Cisco Aironet 1815W APs crash due to kernel panic. |
CSCwf90014 |
Issues observed with Cisco Intelligent Capture on IPv6 cluster. |
CSCwf44321 |
Controller does not report Interferers over the NMSP channel to the Cisco Spaces connector. |
CSCwf86242 |
The controller unexpectedly reloads when the CAPWAP window size is set to 0. |
CSCwh61007 |
Controller crashes whenever it provisions multiple APs. |
CSCwf29742 |
Cisco Catalyst 9120 AP: Firmware crashed while running multicast and longevity test. |
CSCwh33190 |
Cisco Catalyst 9115 AP (Local Mode) crashed due to kernel panic. |
CSCwf07384 |
The wired client behind Cisco Catalyst 9105 AP RLAN is not able to pass traffic. |
CSCwf68131 |
Bad blocks monitoring and repair in Cisco Catalyst 9105AXW Series APs. |
CSCwf95868 |
WGB radio 0 TX power decreases by 20dBm while configuring the antenna number in a single band mode. |
CSCwf83292 |
Cisco Catalyst 9130 APs do not send DHCP Offer and ACK OTA to the client. |
CSCwf90114 |
Stale AP entries remain after AP flap during SSO with scale SVI/VRF configuration. |
CSCwh76420 |
Controller crashes while performing ISSU upgrade. |
CSCwf81866 |
Radio 0 WGB configuration is not backed up correctly when doing a TFTP backup of the configuration. |
CSCwf65794 |
Cisco Aironet 1852 AP reloads unexpectedly due to radio failure. |
CSCwf78066 | Cisco DNA Center displays the "No radios in the selected band" message on the floor maps. |
CSCwh29924 |
Cisco Catalyst 9105/9115/9120 AP WGB: Antenna-A does not function properly if the configuration is an AB-antenna. |
CSCwf12301 |
The wcpd TX retries count is not MSDU based. |
CSCwf10839 |
A large volume of VRRP traffic sent from EWC and the switch port go down due to the storm-control action that is configured. |
CSCwe24263 |
Inconsistent TX power levels advertised in beacons in Cisco Catalyst 9130 APs. |
CSCwh30996 | The Bluetooth Low Energy (BLE) PDU type in the TX packet for iBeacon in dual mode needs to be changed. |
CSCwf91445 |
Controller pushes the accounting information for PSK Local Auth WLANs. |
CSCwf94863 |
Cisco Catalyst 9115 AP unexpectedly reboots due to kernel panic. |
CSCwf64009 |
Cisco Aironet 1815 AP experiences frequent drops in RLAN-VLAN traffic with looped ports. |
CSCwf98534 |
Global Navigation Satellite System (GNSS) antenna cable length is not taken into account in uncertainty computation. |
CSCwh09676 |
The Wireless Control Protocol (WCP) dmalloc unfree logs are missing and dmalloc files not updated periodically. |
CSCwh27366 |
Cisco Aironet 3800 AP experiences radio firmware crash. |
CSCwh27425 |
Cisco Catalyst 9115AX AP does not forward a part of the CAPWAP data packets to the uplink direction. |
CSCwf13107 |
Radio crash is observed during longevity test in Cisco Catalyst 9105 AP. |
CSCwh35072 |
Cisco Aironet 3800 AP reloads unexpectedly due to FIQ/NMI reset. |
CSCwh45418 | Cisco Catalyst 9124 AP sends incorrect duplex information through Cisco Discovery Protocol (CDP). |
CSCwh50681 | New SSID is being broadcasted after the 17.9.3 wireless upgrade. |
CSCwf68612 |
Controller reloads unexpectedly due to segmentation fault in the wncd process. |
CSCwf99906 |
Network Time Protocol (NTP) authentication is removed after reloading. |
CSCwh11858 |
The device unexpectedly reloads when removing an FQDN ACL from the switch. |
CSCwf21390 |
Duplicate Access-Request messages with the CTS client username occurs when more than one RADIUS server is configured. |
CSCwf36752 |
TACACS encryption fails if FQDN is used as the T+ address when it is configured for first time. |
CSCwf66661 |
The controller GUI renders the page slowly while accessing the device type content, leading to WebSocket termination. |
Resolved Issues for Cisco IOS XE 17.12.1
For the list of resolved caveats, click here.
Troubleshooting
For the most up-to-date, detailed troubleshooting information, visit the Cisco TAC website at:
https://www.cisco.com/en/US/support/index.html
Go to Product Support and select your product from the list, or enter the name of your product. Look under Troubleshoot and Alerts to find information about the problem that you are experiencing.
Related Documentation
Information about Cisco IOS XE is available at:
https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-xe/index.html
All the support documentation for Cisco Catalyst 9100 Access Points are available at: https://www.cisco.com/c/en/us/support/wireless/catalyst-9100ax-access-points/tsd-products-support-series-home.html
Cisco Validated Designs documents are available at:
https://www.cisco.com/go/designzone
Cisco Embedded Wireless Controller on Catalyst Access Points
For support information, see the following documents:
-
Cisco Embedded Wireless Controller on Catalyst Access Points Software Configuration Guide
-
Cisco Embedded Wireless Controller on Catalyst Access Points Command Reference Guide
Installation guides for Catalyst Access Points are available at:
For all Cisco Wireless Controller software-related documentation, see:
Wireless Products Comparison
-
Use this tool to compare the specifications of Cisco wireless APs and controllers:
https://www.cisco.com/c/en/us/products/wireless/wireless-lan-controller/product-comparison.html
-
Product Approval Status:
-
Wireless LAN Compliance Lookup:
https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html
Cisco Access Points–Statement of Volatility
The STATEMENT OF VOLATILITY is an engineering document that provides information about the device, the location of its memory components, and the methods for clearing device memory. Refer to the data security policies and practices of your organization and take the necessary steps required to protect your devices or network environment.
The Cisco Aironet and Catalyst AP Statement of Volatility (SoV) documents are available on Cisco Trust Portal at https://trustportal.cisco.com/c/r/ctp/trust-portal.html#/.
You can search by the AP model to view the SoV document.
Cisco Connected Mobile Experiences
Cisco Catalyst Center
Communications, Services, and Additional Information
-
To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.
-
To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.
-
To submit a service request, visit Cisco Support.
-
To discover and browse secure, validated enterprise-class apps, products, solutions and services, visit Cisco Marketplace.
-
To obtain general networking, training, and certification titles, visit Cisco Press.
-
To find warranty information for a specific product or product family, access Cisco Warranty Finder.
Cisco Bug Search Tool
Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software.