New and improved features and fixed issues

Improvements

Cisco DNA Center Client Event and SSID Telemetry Filter

• This feature filters out telemetry data for a configured SSID on the controller and the corresponding AP.
  The following command is introduced:
  icap subscription client exclude telemetry-data wlan

Device Classifier Dynamic XML Support

• This feature enables better device classification without upgrading the device to a new release.
  For more information, see the Chapter Device Classifier Dynamic XML Support.

Device Telemetry

• This functionality enables collection of anonymous usage telemetry data for Cisco products, which helps in continuous product improvements. This functionality is enabled by default and can be disabled using the no form of the pae command.
  The following command is introduced:
  pae

DNS or DHCP or AAA Server Reachability Through IPSLA and Failure Reasons for DHCP

• This feature introduces additional parameters to capture the DHCP server failures in client events and send them to Cisco DNA Center for meaningful insights into the network and to take proactive actions on network issues to improve reliability, high availability, and performance.

Downloadable ACL (Central Switching Only)

• The Downloadable ACL (dACL) feature defines and updates ACLs in one place (Cisco ISE) and allows ACL download to all the applicable controllers.
  For more information, see the Chapter Downloadable ACL (dACL).

Site Load Balancing

• The Load Balancing feature is enhanced to specify a site load for better load balancing.
  The following command is introduced:
  load

Support for 4 FNF Monitors

• From Cisco IOS XE Dublin 17.10.1, you can configure up to four flow monitors (from the earlier limit of two flow monitors) in a policy profile per direction (input and output) in local mode. The additional flow monitors help to collect DNS traffic statistics and send them to Cisco DNA Center to analyse and take corrective actions.

Upgrade YANG Models to YANG 1.1

• Cisco-defined YANG models are in YANG Version 1.1 in Cisco IOS XE Dublin 17.10.1 and later releases.

Device Ecosystem Data

• This feature sends the device analytics data that is present in the RADIUS accounting request to Cisco ISE in order to profile endpoints.
  The following command is introduced:
  dot11-tlv-accounting
  For more information, see the Chapter RADIUS Accounting.

Workgroup Bridge Mode on Cisco Catalyst 9124 and 9130 Series Access Points

• Workgroup Bridge Mode mode is supported on the following APs:
  Cisco Catalyst 9124 Series Access Points
  Cisco Catalyst 9130 Series Access Points

Bug fixes

CSCwb52755 - Apple and Android fast transition capable client is unable to authenticate with Identity Preshared Key (iPSK) profile.
CSCwb69531 - Controller initiates Extensible Authentication Protocol over LAN (EAPOL) retries for the client in RUN state.
CSCwb73461 - Radio Resource Management (RRM) core generated @ group_dpc_compute_6GHz.
CSCwc01644 - CoS AP is using native VLAN instead of VLAN used in the policy profile.
CSCwc05366 - Wireless AAA dynamic VLAN assignment: Wireless clients cannot reach each other.
CSCwc14629 - Web UI is taking long time to show initial page.
CSCwc15533 - Continuous wncmgrd CPU HOG traceback is observed with scale Flexible NetFlow (FNF) mapping to policy profile.
CSCwc15944 - Multicast data is not sent to clients; some APs are unable to join.
CSCwc22468 - Client traffic fails when client roams between APs with dot11r to dot11i transition.
CSCwc32226 - Zebra RF guns gets deleted from controller randomly due to reason: CO_CLIENT_DELETE_REASON_ZONE_CHANGE.
CSCwc42784 - Client fails to connect when protocol based QoS is configured.
CSCwc55982 - Stale entry is observed in the show wireless device tracking database ip command output after client deletion.
CSCwc57227 - Wireless Network Control Daemon (WNCd) crash is observed.
CSCwc59518 - Cisco Catalyst 9800-80 controller crashes with the reason: Critical process wncd fault on rp_0_3 (rc=134).
CSCwc79394 - WNCd is going high upto 99% on tbl(WNCD_DB/tbl_client_wsa_info).
CSCwd08678 - Clients are not deleted from the controller. They remain in the RUN state even after session-timeout.
CSCwb47040 - Controller is not updating RFID location properly.
CSCwb58100 - Unable to map SSID with spaces in it on an attribute list.
CSCwb64761 - Controller is discarding location updates from RFID tags.
CSCwb67450 - Add show process cpu platform sorted command is needed in show tech wireless command group.
CSCwb78191 - AAA VLAN override is not working in iPSK authentication + anchor WLAN configuration.
CSCwb93067 - Cisco Catalyst 9800-CL Controller: WNCd crash is observed during switch integrated security features (SISF) routines.
CSCwb93513 - Stale client entries are not deleted and is stuck on device-tracking database.
CSCwc38828 - Invalid TDL pointers caused WNCd crash.
CSCwc41358 - MAC filtering: WLAN profile column displays the WLAN name + description.
CSCwc57836 - Restore configuration by HTTP mode does not work on Cisco Embedded Wireless Controller.
CSCwc72047 - APs are operating on disabled RF profile channels.
CSCwc76905 - SISF crash is observed when handling DHCP messages.
CSCwd00711 - When Wi-Fi Protected Access (WPA) 3 and Opportunistic Wireless Encryption (OWE) transition are enabled, non-WPA3 clients are getting network access in webauth-pending state.

Know issues

CSCwc99359 - Rogue rule delete classification configuration is not working.
CSCwd02898 - Cisco Catalyst 9300 Series Switch is not flushing remote MAC address after roaming to a local AP.
CSCwd04571 - Memory leak is observed (in wncd process) when under load.
CSCwd05689 - Cisco Catalyst 9124AXI AP: RSSI is 7-8dbm weaker at a distance compared to other AP models.
CSCwd10570 - Cisco Catalyst 9130 AP: Beacon is showing incorrect datarates - different rates for same slot on different BSSIDs.
CSCwd30828 - Cisco Catalyst 9120 AP: Kernel panic crash is observed.
CSCwd33981 - Kernel panic crash with PC (at cpuidle_not_available).
CSCwd39599 - Cisco Catalyst 9117 AP reloads unexpectedly with PC (at dst_release+0x18/0x90).
CSCwd39606 - Cisco Catalyst 9117 AP reloads unexpectedly due to kernel panic (at dp_rx_wbm_err_process).
CSCwd41108 - Cisco Catalyst 9130AXE AP: Dart connectors are stuck at channel 36.
CSCwd45079 - FlexConnect AP performs Extensible Authentication Protocol (EAP) identity request after completing 4-way handshake.
CSCwd47741 - Controller is failing to update Dynamic Channel Assignment (DCA) channels.
CSCwd51523 - Cisco Catalyst 9120 AP: Numerous power supply module (PSM) watchdog crashes are observed.
CSCwb51757 - High channel utilization is observed on 5GHz radio with 40MHz.
CSCwd04025 - APs associated with the controller are showing interface "Half duplex".
CSCwd06018 - 802.11r reauthentication failed due to 'Invalid PMKID' while doing inter-WNCD roaming.
CSCwd06122 - AP join issues are observed due to stale client entries.
CSCwd12754 - CAPWAP wireless traffic is getting the same Security Group Tag (SGT) tag as the corresponding incoming wired traffic.
CSCwd21996 - Cisco Catalyst 9120 AP: CleanAir sensor is crashing.
CSCwd23681 - Controller fails to update AP config with error "% Error: no ap_name exists".
CSCwd25931 - Wireless client is not receiving IPv6 RA from wired - FlexConnect Local DHCP.
CSCwd32900 - AP is dropping Extensible Authentication Protocol over LAN (EAPOL) message 4 during 4-way handshake.
CSCwd34890 - Clients are getting deauthenticated imediately after getting IP address in LWA + Local Switching + Central Authentication scenario.
CSCwd36552 - Cisco Catalyst 9120 AP: Kernel panic crash is observed.
CSCwd37706 - Cisco Catalyst 9130 AP doesn't respond to reassociation request during client roaming.
CSCwd40731 - AP reloads due to kernel panic.
CSCwd46091 - Cisco Catalyst 9105AXI AP is requesting 30 watts of power, instead of 15.4 watts.
CSCwd46252 - Controller shows AP as having no neighbors. This issue is caused when power level is set to maximum.
CSCwd47286 - Capability annotation is missing for some xpaths in yaml files.
CSCwd49686 - AP doesnt not save syslog message before crash.
CSCwd52938 - Wired clients behind a workgroup bridge (WGB) are not getting IP address in anchor WLAN.
CSCwd40914 - Cisco Catalyst 9120 AP is not forwarding EAP packet downstream to client.