Cisco Wireless Controller and Cisco Lightweight Access Point Platforms
Supported Cisco Wireless Controller Platforms
Supported Access Point Platforms
Unsupported Cisco Wireless Controller Platforms
Cisco Smart Software Licensing
Increased AP and Client Scale for Cisco Virtual Wireless Controller
Access Point Provisioning using Plug-n-Play (PnP)
Bonjour Gateway with Googlecast Support
Enhanced wIPS Support for Hyperlocation Module with Advanced Security
Cisco Air Time Fairness: Client Fair Sharing
Cisco WLAN Express Enhancements
Removal of Support for Rx SOP from Mesh Backhaul
Pre-Shared Key Provisioning Support for Mesh Networks
Dynamic Management User Login via AAA Server
Custom HTTP Port for Profiling
L3 Interfaces for Tunneling Protocols
Cisco 5520, 8510, and 8540 WLC Updates
Support for Wi-Fi Certified Passpoint Release 2.0
Bonjour Gateway on Cisco 2504 WLC
Increased Channel and Tx Power Support for Various Countries
Increased Country Code Support
Cisco Industrial Wireless 3702 Access Point Updates
Software Release Support for Access Points
Software Release Types and Recommendations
Software Release Recommendations
Upgrading to Cisco WLC Software Release 8.2.100.0
Upgrading to Cisco WLC Software Release 8.2.100.0 (GUI)
Special Notes for Licensed Data Payload Encryption on Cisco Wireless LAN Controllers
Downloading and Installing a DTLS License for an LDPE Cisco WLC
Upgrading from an LDPE to a Non-LDPE Cisco WLC
Interoperability with Other Clients
Features Not Supported on Cisco WLC Platforms
Features Not Supported on Cisco 2504 WLC
Features Not Supported on Cisco WiSM2 and Cisco 5508 WLC
Features Not Supported on Cisco Flex 7510 WLCs
Features Not Supported on Cisco 5520, 8510, and 8540 WLCs
Features Not Supported on Cisco Virtual WLCs
Features Not Supported on Mesh Networks
Features Not Supported on Access Point Platforms
Features Not Supported on Cisco Aironet 1830 and 1850 APs
Features Not Supported on Cisco Aironet 1550 APs (with 64-MB Memory)
Cisco Mobility Express Solution Release Notes
Supported Cisco Aironet Access Points
New Features and Functionalities
Compatibility with Other Cisco Wireless Solutions
Installing Mobility Express Software
FCC Safety Compliance Statement
Obtaining Documentation and Submitting a Service Request
First Published: December 15, 2015
This release notes document describes what is new in Cisco Wireless Release 8.2.100.0, instructions to upgrade to this release, and open and resolved caveats for this release. Unless otherwise noted, in this document, all Cisco Wireless Controllers are referred to as Cisco WLCs, and all Cisco lightweight access points are referred to as access points or Cisco APs.
Note For information specific to the Cisco Mobility Express solution, see “Cisco Mobility Express Solution Release Notes” section.
– |
|
– – |
|
– |
|
– |
|
– |
|
– |
|
The section contains the following subsections:
The following Cisco WLC platforms are supported in this release:
Note Kernel-based virtual machine (KVM) is supported in Cisco Wireless Release 8.1 and later releases.
After KVM is deployed, we recommend that you do not downgrade to a Cisco Wireless release that is earlier than Release 8.1.
Note AP Stateful switchover (SSO) is not supported on Cisco 2504 WLCs.
For information about features that are not supported on the Cisco WLC platforms, see “Features Not Supported on Cisco WLC Platforms” section.
The following access point platforms are supported in this release:
Note The Cisco 1040 Series, 1140 Series, and 1260 Series access points have feature parity with Cisco Wireless Release 8.0. Features introduced in Cisco Wireless Release 8.1 and later are not supported on these access points.
For information about features that are not supported on some access point platforms, see Features Not Supported on Access Point Platforms.
Note Cisco AP802 is an integrated access point on the Cisco 800 Series Integrated Services Routers (ISRs). For more information about the stock-keeping units (SKUs) for the AP802s and the Cisco ISRs, see the following data sheets:
http://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/data_sheet_c78_461543.html
http://www.cisco.com/c/en/us/products/collateral/routers/887-integrated-services-router-isr/data_sheet_c78_459542.html
http://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/data_sheet_c78-613481.html
http://www.cisco.com/c/en/us/products/collateral/routers/880-3g-integrated-services-router-isr/data_sheet_c78_498096.html
http://www.cisco.com/c/en/us/products/collateral/routers/880g-integrated-services-router-isr/data_sheet_c78-682548.html
http://www.cisco.com/c/en/us/products/collateral/routers/800-series-routers/data_sheet_c78-519930.html
Before you use a Cisco AP802 series lightweight access point with Cisco Wireless Release 8.2.100.0, you must upgrade the software in the Cisco 880 Series ISRs to Cisco IOS 15.1(4)M or later releases.
The following Cisco Wireless Controller platforms are not supported:
Note For information specific to the Cisco Mobility Express solution, see “Cisco Mobility Express Solution Release Notes” section.
Note Release 8.2 does not support multiple non-AP Manager dynamic interfaces, untagged management interfaces, management interfaces mapped to physical ports, and non-LAG scenarios.
Cisco started the initiative of simplifying customer license management by building a Cisco Smart Software Manager portal. It helps the customers understand what licenses they have purchased and what licenses they are using. Various other Cisco products are already Smart Enabled and with the introduction of this release Cisco Smart Software Licensing will now be available on the following platforms:
For more information, see the following:
The capacity of Cisco Virtual Wireless Controllers (vWLCs) is increased with the introduction of a Large Scale vWLC.
Two new SKUs with two types of scaling configurations are available. During installation or upgrade, you can choose between Small Scale vWLC and Large Scale vWLC.
This table lists the two types of Cisco vWLCs, their requirements and capacity:
The Access Point Provisioning using Plug-n-Play (AP PnP) solution provides staging parameters to an AP before it is associated with a Cisco WLC. Using this staging configuration, the AP gets the run-time configuration when it associates with a Cisco WLC. PnP is supported only on AP recovery images and is activated only for the zero-day deployment. PnP can no longer be initiated after the AP associates with a Cisco WLC for the first time.
The following are the template enhancements in NetFlow Version 9:
For more information, see the Configuring NetFlow section in the Cisco Wireless Controller Configuration Guide.
In Release 8.2, the following features are available on Cisco WLCs:
Note Newer protocol packs are tied with Network-Based Application Recognition (NBAR) Engine Version 14 and later. Protocol packs that are earlier than Version 14 do not work with the new engine.
For more information, see the Release Notes for NBAR2 Protocol Pack 14.0.0 for Cisco Wireless Controllers.
Googlecast Service that uses the service key, _googlecast._tcp.local, is supported on the existing implementation of Bonjour gateway on Cisco WLC.
wIPS support for the 40 MHz to 80 MHz range using Hyperlocation module is introduced. This feature detects alarms in the 40 MHz to 80 MHz range (if RRM channel scanning is selected) and provides information to Cisco Prime Infrastructure (PI). Channel width information is derived from the packet data rate and sent to the wIPS module, which stores channel width per alarm. Using the show capwap am alarm alarm-id command, you can view the channel width in which the attack has occurred.
The wIPS alarm report contains the channel width of the attack and device capability (802.11a/b/g/n/ac). No wIPS-specific configuration is required to enable this feature. The only prerequisite is that RRM scanning must be enabled for this feature to work as expected.
In Release 8.2, Cisco Air Time Fairness can be enforced on clients that are associated with an SSID/WLAN. This ensures that all clients within an SSID/WLAN are treated equally based on their utilization of the radio air time. This feature is useful in scenarios where one or a few clients could use the total air time available for an SSID/WLAN, thereby depriving Wi-Fi experience for other clients associated with the same SSID/WLAN.
For more information, see the Cisco Air Time Fairness section in the Cisco Wireless Controller Configuration Guide.
Complete List of Best Practices in Release 8.2
Note The best practices introduced in Release 8.2 are listed below in bold.
– Controller High Availability
– Disable Management over Wireless
– Local Management Password Policies
– WLAN with WPA2 and AES Policy
– Auto Coverage Hole Detection
– Auto Dynamic Channel Assignment
Note The 40-MHz Channel Width best practice is not available in Release 8.2.
Mesh functionality in 2.4 GHz is supported on all APs that support Mesh.
In addition, while both 2.4 GHz and 5 GHz can be used outdoor across the globe, in Israel, only 2.4 GHz can be used outdoor. Therefore, a new regulatory domain, –I, and country code, IO, is introduced to support the use of 2.4 GHz as outdoor mesh backhaul on Cisco Aironet 1530 and 1570 APs.
From Cisco Wireless Release 8.2, the Rx SOP feature in bridge mode is not supported in the mesh backhaul 5-GHz interface to improve backhaul stability.
Support is added for the pre-shared key (PSK) functionality that can be provisioned from Cisco WLC and can help make a controlled mesh deployment and enhance mesh access point (MAP) security beyond the currently used default cisco PSK.
With this new feature, MAPs, which are not preset yet with a valid PSK can connect to Cisco WLC using the default cisco PSK, during the provisioning window controlled by the Administrator. However, it will then receive a new PSK from the Cisco WLC, and from that point on, will only be able to connect with that PSK, and no longer with the default passphrase cisco.
Management users who are logged in when external servers are not available must reauthenticate when the external RADIUS servers are available. Failing to do so will lead to termination of the user session to prevent potential operational and security risks. When RADIUS servers are not available, management users are authenticated locally. After the RADIUS servers are back online, management users are prompted to log in again within a specific timeframe.
For more information, see the Setting up TACACS+ section in the Cisco Wireless Controller Configuration Guide.
To troubleshoot AAA RADIUS interactions for WLAN authentication, test aaa commands are introduced:
test aaa radius username username password password wlan-id wlan-id [ apgroup apgroupname server-index server-index ]
The test command sends an access request the RADIUS server for client authentication. Access request exchange takes place between Cisco WLC and the AAA server, and the registered RADIUS callback handles the response.
The response includes authentication status, number of retries, and RADIUS attributes.
For more information, see the Troubleshooting AAA RADIUS Interactions for WLAN Authentication section in the Cisco Wireless Controller Configuration Guide.
WLC can now send HTTP user agent information to ISE for devices that use custom port (not only port 80).
Prior to Release 8.2, the management IP address was used as the tunnel endpoint. Release 8.2 has allowed the specification of any L3 dynamic interface as a tunnel endpoint, other than the management interface, if need be.
Note This feature currently supports EoGRE and PMIPv6 types of tunnels for mobility tunnel termination.
In Release 8.2, the following are supported on the Cisco 5520, 8510, and 8540 WLCs:
– Syslog messaging towards external server
– Any form of file transfer, including FTP, TFTP, and SFTP, to/from external server
In order to support Passpoint Release 2.0 certification, the technical specification of HotSpot 2.0 Release 2 has been implemented, which allows an end user, upon reaching a Passpoint 2.0 WLAN, to sign up online, on the fly, to that WLAN, in the case where no previously known or preferred WLANs were available to allow secure connection.
This is made possible by adding configuration capability to a Cisco WLC to allow clients to connect to an Online Sign-Up (OSU) server and obtain WPA2-Enterprise credentials to perform their subsequent authentication with the secure Passpoint 2.0 WLAN.
For more information, see the Configuring Mobile Concierge chapter in the Cisco Wireless Controller Configuration Guide.
Limited Bonjour gateway is supported on Cisco 2504 WLC with support for up to 200 instance services.
To maximize the amount of channels supported and transmit power that is specified in the wireless regulations, the following changes are made in the regulatory domains:
–N to –S1 |
– Cisco Aironet 3700 Series Access Points
– Cisco Aironet 2700 Series Access Points
– Cisco Aironet 1830 and 1850 Access Points
Note The 1830 and 1850 APs already support the domain change for Thailand and Vietnam. In Release 8.2, the APs support the domain change for Macau.
– Cisco Aironet 1700 Series Access Points
– Cisco Aironet 700i and 700w Access Points
– Cisco Aironet 1570 Series Access Points
– Cisco Aironet 1530 Series Access Points
– Cisco Aironet 3700 Series Access Points
– Cisco Aironet 2700 Series Access Points
– Cisco Aironet 1830 and 1850 Access Points
Note Supports Macau changes from –C to –S domain.
– Cisco Aironet 700i and 700w Access Points
– Cisco Aironet 1530 Series Access Points
Upgrade and Downgrade Scenarios
In Release 8.2, you can configure up to 110 country codes per Cisco WLC. Prior to Release 8.2, you could configure up to 20 country codes per Cisco WLC.
Support for Transport Layer Security (TLS) v1.2 is added in Release 8.2.
The following are supported for web authentication and WebAdmin based on the configuration:
Note DTLSv1.2 for CAPWAP is not supported.
The QoS Mapping feature maintains the QoS policies in situations where appropriate QoS markings that match the application type are not marked by clients or applications. The administrator maps the differentiated services code point (DSCP) to user-priority values in a Cisco WLC, which in turn provides better experience to users while using certain applications, such as voice or video applications.
For more information, see the Configuring QoS Mapping section in the Cisco Wireless Controller Configuration Guide.
– the 5-GHz radio uses antenna ports C and D, each with a single band antenna
– the 2.4-GHz radio uses antenna ports A and B, each with a single band antenna
In the dual-band mode, four dual-band antennas are used and both the radios share these antennas.
Table 4 lists the Cisco WLC software releases that support specific Cisco access points. The First Support column lists the earliest Cisco WLC software release that supports the corresponding access point. For APs that are not supported in ongoing releases, the Last Support column lists the last release that supports the corresponding APs.
Note Third-party antennas are not supported with Cisco indoor APs.
This section contains the following topics:
Software releases that provide bug-fix support and ongoing software maintenance. These releases are categorized as Maintenance Deployment (MD) and may be part of the AssureWave program.5 These are releases with long life and ongoing software maintenance. |
Provides you with a software release that offers stability and long support duration with periodic maintenance releases (MRs). |
|
Software releases that provide new features and new hardware platform support in addition to bug fixes. These releases are categorized as Early Deployment (ED). These are short-lived releases. |
Allows you to deploy the latest features and new hardware platforms or modules. |
For detailed release recommendations, see the software release bulletin:
http://www.cisco.com/c/en/us/products/collateral/wireless/8500-series-wireless-controllers/bulletin-c25-730741.html
For more information about the Cisco Wireless solution compatibility matrix, see http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html.
Every 10 seconds, a message similar to the following is sent to the msglog:
This occurs in the following conditions:
b. The management interface is untagged and is mapped to one physical port.
c. When an untagged dynamic interface is added and mapped to port 2, the default route for the management interface is lost.
The workaround is to configure all interfaces with VLANs.
You can track this issue via CSCux75436.
a. Enter the following commands:
b. After the reboot, press Esc on the console, and use the boot menu to select Release 7.6.
c. After booting on Release 7.6, set back the primary boot, and save the configuration by entering the following command:
Note The epings are not available in the Cisco 5500 Series WLC when New Mobility is enabled.
Note If you downgrade from a Cisco WLC release that supports new mobility to a Cisco WLC release that does not support new mobility, for example, Cisco Wireless Release 7.6 to Release 7.3.x and you download the 7.6 configuration file with new mobility in enabled state, the release that does not support new mobility will have the new mobility feature in enabled state.
Note In case of FlexConnect VLAN mapping deployment, we recommend that the deployment be done using FlexConnect groups. This allows you to recover VLAN mapping after an AP rejoins the Cisco WLC without having to manually reassign the VLAN mappings.
Note The FUS image installation process reboots the Cisco WLC several times and reboots the runtime image. The entire process takes approximately 30 minutes. We recommend that you install the FUS image in a planned outage window.
Note If you are using a Cisco 2500 Series controller and you intend to use the Application Visibility and Control (AVC) and NetFlow protocol features, you must install Release 1.9.0.0 of Cisco Wireless LAN Controller FUS. This is not required if you are using other controller hardware models.
Note Bootloader upgrade is not required if FIPS is disabled.
Note Microsoft Internet Explorer 8 might fail to connect over HTTPS because of compatibility issues. In such cases, you can explicitly enable SSLv3 by entering the config network secureweb sslv3 enable command.
– Ensure that your TFTP server supports files that are larger than the size of Cisco WLC software Release 8.2.100.0. Some TFTP servers that support files of this size are tftpd32 and the TFTP server within the Prime Infrastructure. If you attempt to download the 8.2.100.0 Cisco WLC software and your TFTP server does not support files of this size, the following error message appears:
– If you are upgrading through the distribution system network port, the TFTP or FTP server can be on the same subnet or a different subnet because the distribution system port is routable.
Bootloader menu for Cisco 5500 Series WLC:
Bootloader menu for other Cisco WLC platforms:
Enter 1 to run the current software, enter 2 to run the previous software, enter 4 (on Cisco 5500 Series WLC), or enter 5 (on Cisco WLC platforms other than 5500 series) to run the current software and set the Cisco WLC configuration to factory defaults. Do not choose the other options unless directed to do so.
Note See the Installation Guide or the Quick Start Guide pertaining to your Cisco WLC platform for more details on running the bootup script and power-on self test.
With the backup image stored before rebooting, choose Option 2: Run Backup Image from the boot menu to boot from the backup image. Then, upgrade with a known working image and reboot the Cisco WLC.
config network ap-discovery nat-ip-only { enable | disable }
– enable —Enables use of NAT IP only in a discovery response. This is the default. Use this command if all the APs are outside the NAT gateway.
– disable —Enables use of both NAT IP and non-NAT IP in a discovery response. Use this command if APs are on the inside and outside the NAT gateway, for example, Local Mode and OfficeExtend APs are on the same Cisco WLC.
Note To avoid stranding of APs, you must disable AP link latency (if enabled) before you use the disable option for the config network ap-discovery nat-ip-only command. To disable AP link latency, use the config ap link-latency disable all command.
– You can predownload the AP image.
– For FlexConnect access points, use the FlexConnect AP upgrade feature to reduce traffic between the Cisco WLC and the AP (main site and the branch). For more information about the FlexConnect AP upgrade feature, see the Cisco Wireless Controller Configuration Guide.
Note Predownloading Release 8.2.100.0 on a Cisco Aironet 1240 access point is not supported when upgrading from a previous Cisco WLC release. If predownloading is attempted on a Cisco Aironet 1240 access point, an AP disconnect will occur momentarily.
– Delete all the WLANs that are mapped to interface groups, and create new ones.
– Ensure that all the WLANs are mapped to interfaces rather than interface groups.
– Enable or disable link aggregation (LAG)
– Enable a feature that is dependent on certificates (such as HTTPS and web authentication)
– Add a new license or modify an existing license
– Increase the priority of a license
– Install the vendor-device certificate
– Upload the configuration file
– Install the Web Authentication certificate
– Make changes to the management interface or the virtual interface
Step 1 Upload your Cisco WLC configuration files to a server to back up the configuration files.
Note We highly recommend that you back up your Cisco WLC configuration files prior to upgrading the Cisco WLC software.
Step 2 Follow these steps to obtain Cisco Wireless Release 8.2.100.0 software:
a. Click this URL to go to the Software Center:
http://www.cisco.com/cisco/software/navigator.html
b. Choose Wireless from the center selection window.
c. Click Wireless LAN Controllers.
The following options are displayed. Depending on your Cisco WLC platform, select either of these options:
– Integrated Controllers and Controller Modules
d. Select the Cisco WLC model number or name.
The Download Software page is displayed.
e. The software releases are labeled as follows to help you determine which release to download. Click a Cisco WLC software release number:
f. Click the filename ( filename.aes).
h. Read the Cisco End User Software License Agreement and click Agree.
i. Save the file to your hard drive.
j. Repeat steps a. through i. to download the remaining file.
Step 3 Copy the Cisco WLC software file ( filename.aes) to the default directory on your TFTP, FTP, or SFTP server.
Step 4 (Optional) Disable the Cisco WLC 802.11a/n and 802.11b/g/n networks.
Note For busy networks, Cisco WLCs on high utilization, and small Cisco WLC platforms, we recommend that you disable the 802.11a/n and 802.11b/g/n networks as a precautionary measure.
Step 5 Choose Commands > Download File to open the Download File to Controller page.
Step 6 From the File Type drop-down list, choose Code.
Step 7 From the Transfer Mode drop-down list, choose TFTP, FTP, or SFTP.
Step 8 In the IP Address text box, enter the IP address of the TFTP, FTP, or SFTP server.
Step 9 If you are using a TFTP server, the default value of 10 retries for the Maximum Retries text field, and 6 seconds for the Timeout text field should work correctly without any adjustment. However, you can change these values, if desired. To do so, enter the maximum number of times that the TFTP server attempts to download the software in the Maximum Retries text box and the amount of time (in seconds) for which the TFTP server attempts to download the software, in the Timeout text box.
Step 10 In the File Path text box, enter the directory path of the software.
Step 11 In the File Name text box, enter the name of the software file ( filename.aes).
Step 12 If you are using an FTP server, perform these steps:
a. In the Server Login Username text box, enter the username with which to log on to the FTP server.
b. In the Server Login Password text box, enter the password with which to log on to the FTP server.
c. In the Server Port Number text box, enter the port number on the FTP server through which the download occurs. The default value is 21.
Step 13 Click Download to download the software to the Cisco WLC.
A message appears indicating the status of the download.
Step 14 After the download is complete, click Reboot.
Step 15 If you are prompted to save your changes, click Save and Reboot.
Step 16 Click OK to confirm your decision to reboot the Cisco WLC.
Step 17 For Cisco WiSM2 on the Catalyst switch, check the port channel and re-enable the port channel if necessary.
Step 18 If you have disabled the 802.11a/n and 802.11b/g/n networks in (Optional) Disable the Cisco WLC 802.11a/n and 802.11b/g/n networks., re-enable them.
Step 19 To verify that the 8.2.100.0 Cisco WLC software is installed on your Cisco WLC, click Monitor on the Cisco WLC GUI and view the Software Version field under Controller Summary.
Datagram Transport Layer Security (DTLS) is required for all Cisco 600 Series OfficeExtend Access Point deployments to encrypt data plane traffic between the APs and the Cisco WLC. You can purchase Cisco Wireless LAN Controllers with either DTLS that is enabled (non-LDPE) or disabled (LDPE). If DTLS is disabled, you must install a DTLS license to enable DTLS encryption. The DTLS license is available for download on Cisco.com.
Important Note for Customers in Russia
If you plan to install a Cisco Wireless LAN Controller in Russia, you must get a Paper PAK, and not download the license from Cisco.com. The DTLS Paper PAK license is for customers who purchase a Cisco WLC with DTLS that is disabled due to import restrictions, but have authorization from local regulators to add DTLS support after the initial purchase. Refer to your local government regulations to ensure that DTLS encryption is permitted.
Note Paper PAKs and electronic licenses that are available are outlined in the respective Cisco WLC platform data sheets.
Step 1 To download the Cisco DTLS license:
a. Go to the Cisco Software Center at this URL:
https://tools.cisco.com/SWIFT/LicensingUI/Home
b. From the Product License Registration page from the Get Other Licenses drop-down list, click IPS, Crypto, Other....
c. In the Wireless section, click Cisco Wireless Controllers (2500/5500/7500/WiSM2) DTLS License and click Next.
d. Follow the on-screen instructions to generate the license file. The license file information will be sent to you in an e-mail.
Step 2 Copy the license file to your TFTP server.
Step 3 Install the DTLS license either by using the Cisco WLC web GUI interface or the CLI:
Management > Software Activation > Commands > Action : Install License
license install tftp ://ipaddress /path /extracted-file
After the installation of the DTLS license, reboot the system. Ensure that the DTLS license that is installed is active.
Step 1 Download the non-LDPE software release:
a. Go to the Cisco Software Center at:
http://www.cisco.com/cisco/software/navigator.html?mdfid=282585015&i=rm
b. Choose the Cisco WLC model.
c. Click Wireless LAN Controller Software.
d. In the left navigation pane, click the software release number for which you want to install the non-LDPE software.
e. Choose the non-LDPE software release: AIR-X-K9-X-X.X.aes
g. Read the Cisco End User Software License Agreement and then click Agree.
h. Save the file to your hard drive.
Step 2 Copy the Cisco WLC software file ( filename.aes) to the default directory on your TFTP server or FTP server.
Step 3 Upgrade the Cisco WLC with this version by performing Step 3 through Step 19 detailed in the “Upgrading to Cisco WLC Software Release 8.2.100.0” section.
This section describes the interoperability of Cisco WLC Software, Release 8.2.100.0 with other client devices.
Table 9 describes the configuration used for testing the client devices.
Open, WEP, PSK (WPA and WPA2), 802.1X (WPA-TKIP and WPA2-AES) (LEAP, PEAP, EAP-FAST, EAP-TLS) |
|
Connectivity, traffic, and roaming between two access points |
Table 10 lists the client types on which the tests were conducted, including laptops, handheld devices, phones, and printers.
This section lists the features that are not supported on the different Cisco WLC platforms:
Note In a converged access environment that has Cisco WLCs running AireOS code, High Availability Client SSO and native IPv6 are not supported.
Note However, AVC for local mode APs is supported.
Note The features that are not supported on Cisco WiSM2 and Cisco 5508 WLC are not supported on Cisco 2504 WLCs too.
Note Directly connected APs are supported only in the local mode.
Note You can replicate this functionality on a Cisco 5500 Series WLC by creating an open WLAN using an ACL.
Note For Cisco Flex 7500 Series WLCs, it is not necessary to configure an AP-manager interface. The management interface acts as an AP-manager interface by default, and the access points can join on this interface.
Note IPv6 client bridging and Router Advertisement Guard are supported.
Note An AP associated with the Cisco WLC in the local mode should be converted to the FlexConnect mode or monitor mode, either manually or by enabling the autoconvert feature. On the Cisco Flex 7500 WLC CLI, enable the autoconvert feature by entering the config ap autoconvert enable command.
Note FlexConnect local-switched multicast traffic is bridged transparently for both wired and wireless on the same VLAN. FlexConnect access points do not limit traffic based on Internet Group Management Protocol (IGMP) or MLD snooping.
Note Cisco Smart Software Licensing is not supported on Cisco 8510 WLC.
Note FlexConnect local-switched multicast traffic is bridged transparently for both wired and wireless on the same VLAN. FlexConnect access points do not limit traffic based on IGMP or MLD snooping.
Note FlexConnect central switching is supported in only small-scale deployments, wherein the total traffic on Cisco WLC ports is not more than 500 Mbps.
FlexConnect local switching is supported.
Note For Cisco Aironet1850 Series AP technical specifications with details on currently supported features, see the Cisco Aironet 1850 Series Access Points Data Sheet.
Caveats describe unexpected behavior in a product. The Open Caveats section lists open caveats that apply to the current release and may apply to previous releases. A caveat that is open for a prior release and is still unresolved applies to all future releases until it is resolved.
To view the details of the software bugs pertaining to your product, perform the following task:
Click the Caveat ID/Bug ID number in the table.
The corresponding Bug Search Tool page is displayed with details of the Caveat ID/Bug ID.
The Bug Search Tool (BST), which is the online successor to the Bug Toolkit, is designed to improve the effectiveness in network risk management and device troubleshooting. The BST allows partners and customers to search for software bugs based on product, release, and keyword, and aggregates key data, such as bug details, product, and version. The tool has a provision to filter bugs based on credentials to provide external and internal bug views for the search input.
To view the details of a caveat whose ID you do not have, perform the following procedure:
1. Access the BST using your Cisco user ID and password:
https://tools.cisco.com/bugsearch/
2. In the Bug Search window that is displayed, enter the necessary information in the corresponding fields.
For more information about how to use the Cisco Bug Search Tool effectively, including how to set email alerts for bugs and to save bugs and searches, see the Bug Search Tool Help & FAQ page.
Note The Cisco Mobility Express wireless network solution is available starting from Cisco Wireless Release 8.1.122.0.
The Cisco Mobility Express wireless network solution provides a wireless LAN controller functionality bundled into, the Cisco Aironet 1850 and 1830 Series APs currently. This functionality provides a simplified Wi-Fi architecture with limited enterprise-level WLAN capability to small and medium deployments.
In the Cisco Mobility Express wireless network solution, one AP, which runs the Cisco Mobility Express wireless LAN controller, is designated as the primary AP. Other access points, referred to as Subordinate APs, associate to this primary AP.
The primary AP operates as a wireless LAN controller, to manage and control the subordinate APs. It also operates as an AP to serve clients. The subordinate APs behave as normal lightweight APs to serve clients.
For more information about the solution, including setup and configuration, see the Cisco Mobility Express User Guide for Release 8.2, at:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/82/user_guide/b_ME_User_Guide_82.html
The following features and functionalities are present in this release:
The following are existing features, with continued support in the current release:
Note Even if the Cisco AP is 802.3ad (LACP)-compliant, link aggregation groups (LAG) are not supported on the AP while it has a Cisco Mobility Express software image.
– Supported—Over-the-Air Fast BSS transition method
– Not Supported—Over-the-DS Fast BSS transition and Fast Transition PSK authentication
The following new features and functionalities have been introduced in this release.
See the Cisco Wireless Solutions Software Compatibility Matrix, at:
http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
Cisco Mobility Express software for Cisco Wireless Release 8.2.100.0, is as follows:
See the “Getting Started” section in the Mobility Express User Guide at the following URL:
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mob_exp/82/user_guide/b_ME_User_Guide_82.html
The open caveats applicable to the Cisco Mobility Express solution are listed under the “Caveats” section. All caveats associated with the Cisco Mobility Express solution have Cisco Mobility Express specified in the headline.
This section contains important information to keep in mind when installing Cisco WLCs and access points.
Warning This warning means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071
Warning Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030
Warning Do not locate the antenna near overhead power lines or other electric light or power circuits, or where it can come into contact with such circuits. When installing the antenna, take extreme care not to come into contact with such circuits, as they may cause serious injury or death. For proper installation and grounding of the antenna, please refer to national and local codes (e.g. U.S.: NFPA 70, National Electrical Code, Article 810, Canada: Canadian Electrical Code, Section 54). Statement 280
Warning This product relies on the building’s installation for short-circuit (overcurrent) protection. Ensure that a fuse or circuit breaker no larger than 120 VAC, 15A U.S. (240 VAC, 10A international) is used on the phase conductors (all current-carrying conductors). Statement 13
Warning This equipment must be grounded. Never defeat the ground conductor or operate the equipment in the absence of a suitably installed ground connector. Contact the appropriate electrical inspection authority or an electrician if you are uncertain that suitable grounding is available. Statement 1024
Warning Read the installation instructions before you connect the system to its power source. Statement 10
Warning Do not work on the system or connect or disconnect any cables (Ethernet, cable, or power) during periods of lightning activity. The possibility of serious physical injury exists if lightning should strike and travel through those cables. In addition, the equipment could be damaged by the higher levels of static electricity present in the atmosphere. Statement 276
Warning Do not operate the unit near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use. Statement 364
Warning In order to comply with radio frequency (RF) exposure limits, the antennas for this product should be positioned no less than 6.56 ft. (2 m) from your body or nearby persons. Statement 339
Warning This unit is intended for installation in restricted access areas. A restricted access area can be accessed only through the use of a special tool, lock and key, or other means of security. Statement 1017
Follow the guidelines in this section to ensure proper operation and safe use of the Cisco WLCs and access points.
FCC Compliance with its action in ET Docket 96-8, has adopted a safety standard for human exposure to RF electromagnetic energy emitted by FCC-certified equipment. When used with approved Cisco Aironet antennas, Cisco Aironet products meet the uncontrolled environmental limits found in OET-65 and ANSI C95.1, 1991. Proper operation of this radio device according to the instructions in this publication results in user exposure substantially below the FCC recommended limits.
For your safety, and to help you achieve a good installation, read and follow these safety precautions. They might save your life.
– Do not work on a wet or windy day.
– Do dress properly—shoes with rubber soles and heels, rubber gloves, long-sleeved shirt or jacket.
See the appropriate quick start guide or hardware installation guide for instructions on installing Cisco Wireless Controllers and APs.
Note To meet regulatory restrictions, all external antenna configurations must be installed by experts.
Personnel installing the Cisco WLCs and APs must understand wireless techniques and grounding methods. APs with internal antennas can be installed by an experienced IT professional.
The Cisco WLC must be installed by a network administrator or qualified IT professional, and the proper country code must be selected. After the installation, access to the Cisco WLC should be password protected by the installer to maintain compliance with regulatory requirements and ensure proper unit functionality.
Step 1 For the most up-to-date, detailed troubleshooting information, see the Cisco TAC website at:
http://www.cisco.com/c/en/us/support/index.html
Step 2 Choose Product Support > Wireless.
Step 3 Choose your product and click Troubleshooting to find information about the problem you are experiencing.
For more information about the Cisco WLCs, lightweight access points, and mesh access points, see these documents:
You can access these documents at http://www.cisco.com/c/en/us/support/wireless/wireless-lan-controller-software/tsd-products-support-series-home.html
For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html.
Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.