Update04/14/2025

Support for Cisco Wireless 9172H Series Wi-Fi 7 Access Points

Catalyst 9800 Series
Cisco

Update from:
patrick-devicebase (expert)

Release Notes for Cisco Catalyst 9800 Series Wireless Controller, Cisco IOS XE 17.17.1

What's New in Cisco IOS XE 17.17.1

Support for Cisco Wireless 9172H Series Wi-Fi 7 Access Points (CW9172H):
The 9172H AP is an enterprise-class tri-band (2.4 GHz, 5 GHz, 6 GHz) access point, supporting full interoperability with 802.11ax and 802.11ac clients.
For country support details, see: https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html.
Cisco Advanced Wireless Intrusion Prevention System (aWIPS) Enhancements for Common Criteria:
Includes SSID Monitoring, Connection Monitoring, and Policy Violation Monitoring for enhanced wireless network security.
Off-Channel PMF Rogue Containment:
Enables off-channel PMF rogue containment detection on off-channel or non-serving radios.
Introduces commands: pmf-offchannel, show wireless wps rogue stats, show wireless wps rogue containment summary.
See "Managing Rogue Devices" for more details.
AnyLocate Enhancements - Ultra-Wideband (UWB) Downlink Time Difference of Arrival (DL-TDoA):
Introduces beta support for UWB DL-TDoA, enabling high-accuracy mobile device wayfinding.
Benefits include improved indoor navigation in healthcare, retail, manufacturing, and transportation.
AP Certificate Auto-Renewal (LSC):
Allows automatic renewal of Locally Significant Certificates (LSCs) for APs.
Introduces commands: ap lsc-provision, ap lsc-provision renew due-time, ap lsc-provision renew one-shot, ap lsc-provision renew staggered timeout, ap lsc-provision renew schedular, ap lsc renew due-time, show ap lsc-provision info.
See "AP Certificate Renewal (LSC)" for more details.
Automated Frequency Coordination (AFC) Support for Canada and US:
AFC Standard Power Mode is enabled for Canada and the U.S.
UNII-3 Support (low power) for –E Regulatory Domain:
Provides options to enable or disable UNII-3 channels (149-173) to address potential coverage gaps.
Introduces commands: show ap rf-profile name test5 detail, show ap dot11 5ghz channel, channel unii3-low-power-channels, ap dot11 5ghz rrm channel unii3-low-power-channels.
See "AP Configuration" for more details.
Automated Frequency Coordination (AFC) Support on Cisco Wireless 9172H Series Wi-Fi 7 Access Points (CW9172H) and Cisco Wireless 9172I Series Wi-Fi 7 Access Points (CW9172I):
AFC is now supported on CW9172H and CW9172I Access Points.
Tier B/C/D Country Support for Cisco Wireless 9178I Series Wi-Fi 7 Access Points (CW9178I):
CW9178I Series APs are supported in 96 more countries.
See "Countries and Regulations" for more details.
Tier B/C/D Country Support for Cisco Wireless 9176I/D Series Wi-Fi 7 Access Points (CW9176I/D):
CW9176I and 9176D Series APs are supported in 96 more countries.
See "Countries and Regulations" for more details.
Tier B/C/D Country Support for:
Cisco Wireless 9163E Series Wi-Fi 6E Access Points (CW9163E)
Cisco Catalyst 9124AX Series Wi-Fi 6 Access Points (C9124AXI/AXD/AXE)

From this release,
Cisco Wireless 9163E Series Wi-Fi 6E Access Points are supported in 81 more countries
Cisco Catalyst 9124AX Series Wi-Fi 6 Access Points are supported in 20 more countries
Note
For more information about all the supported countries for the AP, see Countries and Regulations.

Support for Dual-Band (XOR) Radio in Cisco Wireless 9176 Series Wi-Fi 7 Access Points (CW9176I/D)

From this release, dual-band (XOR) radio is supported when operating in 2.4-GHz or 5-GHz low band mode (UNII 1-2A), on Cisco Wireless 9176 Series Wi-Fi 7 APs.

Support for Access Ports with Dual Port Authentication in Cisco Catalyst 9136 Series Access Points and Cisco Wireless 9178 Series Access Points (CW9178I)
From this release, access ports with dual port authentication is supported in Cisco Catalyst 9136 and CW9178I Series APs.
Support for Terminal Doppler Weather Radar (TDWR) for All Regulatory Domains in Wi-Fi 6E and Wi-Fi 7 Access Points

From this release, TDWR is supported for all regulatory domains in the Wi-Fi 6E and Wi-Fi 7 APs.

Open Issues for Cisco IOS XE 17.17.1:

CSCwn18885: Cisco Catalyst 9136 series APs encounter kernel unresponsiveness with last reload reason 'unknown'.
CSCwn36778: Cisco Catalyst 9800-80 controller displays low memory leak potentially in the 'ipv4_addr' field.
CSCwn83970: Cisco Catalyst 9162 AP does not respond to open authorization request on 5-GHz band.
CSCwn92827: Secondary controller fails with rsync error.
CSCwo04380: Cisco Catalyst 9162 AP's beacons get stuck on Radio 1 after upgrading to 17.12.4.158.
CSCwo35645: NETCONF over SSH fails to return all the records for wireless-client-oper and shows 'invalid XML' before everything is returned.
CSCwo38789: Cisco Catalyst 9176 AP encounters watchdog reset (WCPD) kernel unresponsiveness due to memory leak in RRM module.
CSCwo44274: Cisco Catalyst 9115 AP does not answer association requests in 17.12.4 + APSP4.
CSCwo48783: SSIDs stop broadcasting and drop clients from network after pushing telemetry updates from Catalyst Center to controller.
CSCwk53741: Anchor controller drops mobility tunnel even when keepalive timers aren't hit.
CSCwn33501: Controller connected to the AP does not give any output while executing the #show ap summary sort name command.
CSCwn42563: Controller experiences kernel unresponsiveness on WNCD process on 17.9.4.
CSCwn76129: Controller fails to handle loadbalance discovery message and stale AP entries are seen.
CSCwn79857: Cisco Catalyst 9130 AP URL with multiple IPs does not work in FlexConnect local switching.
CSCwn83397: Wired Mesh AP (MAP) client flaps between VLAN 0 and numbered native VLAN on Root AP (RAP).
CSCwn94159: Controller with 6 GHz support AP's radio channel bandwidth changes due to DCA happening frequently.
CSCwo04476: Cisco Catalyst 9130AX AP experiences kernel unresponsiveness.
CSCwo05017: Cisco Catalyst 9162 AP undergoes unbounded/tmp causing OOM reset.
CSCwo07767: Controller's active chassis get stuck in active recovery state on 17.12.4.
CSCwo13339: Cisco Catalyst 9130 AP experiences kernel unresponsiveness due to OOM.
CSCwo16038: Cisco Catalyst 9124 WGB becomes unreachable after connecting to Cisco Aironet 2800 Root AP (RAP) when WMM is disabled.
CSCwo19011: Controller SISF undergoes kernel unresponsiveness with WNCD core.
CSCwo19025: Cisco Catalyst 9166D AP reports high channel utilization.
CSCwo20395: Controller's rogue classification rules do not apply configured classifications.
CSCwo30925: Cisco Wi-Fi 6 and above APs do not support disabling WMM on radios that support 802.11n/11ac/11ax operation.
CSCwo32255: Anchor controller's AVC statistics show in the controller's CLI but not in the Web UI.
CSCwo37156: Cisco Catalyst IW9167I AP does not derive geolocation data from neighbor AP.
CSCwo37680: Controller initiates client deletion with code: CO_CLIENT_DELETE_REASON_DOT11_MAX_STA.
CSCwo37756: Cisco Aironet 1815t AP does not receive an internal DHCP IP address when connected to LAN3.
CSCwo38070: Controller display mismatch in Guest OS on ESXi.
CSCwo38719: APs in controller running 17.12.4 drop post a switchover and during HA sync.
CSCwo41248: Controller display wrong message when configuring 2 radios on the same UNII band (100 - 144).
CSCwo41946: Cisco Catalyst 9130 APs experiences kernel unresponsiveness with SLUB enabled.
CSCwo43599: Cisco Catalyst CW9162I-E AP's beacon intermittently misses all WLANs, resulting in no client join.
CSCwo43801: AP duplicates DHCP request packets when using FlexConnect mode with Central Switching WLAN.
CSCwo45788: Controller running 17.9.5 version generates system report and CCP core file.
CSCwo46493: Cisco Catalyst 9136 AP encounters dual ethernet failover reboots.
CSCwo50044: HA does not form after reload triggered by SMU installs.

Resolved Issues for Cisco IOS XE 17.17.1:

CSCwn06222: Cisco Catalyst IW9167 wired 1 interface is not functioning with non 1-Gbps clients via GLC-T-RGD SFP Module.
CSCwo36407: WGB mode sets incorrect transmit power values after receiving a beacon with CSA IE from a non-associated AP.
CSCwm53286: Controller unable to reach terminal redundancy state while performing ISSU.
CSCwj84377: Client detail for 'Associated' Client does not display some info element when using Cisco Spaces with Connector.
CSCwk24352: Wireless clients are unable to receive the splash page and gets stuck due to webauth requirement.
CSCwk39866: Client page is stuck in loading state.
CSCwk58326: Controller sends multicast packets with previous WMI.
CSCwk64840: Controller unexpectedly reboots due to memory depletion due to mobility process.
CSCwk71592: Intermittent multicast and unicast traffic encounter failure post roaming on an IRCM testbed with mobility enabled.
CSCwk81946: Controller experiences kernel unresponsiveness due to tdl memory corruption.
CSCwk84121: Local switching clients are assigned to Zone ID 0 when IP overlap is configured and FlexConnect VLAN central switching.
CSCwm03016: Controller experiences kernel unresponsiveness abnormally pointing to client_orch.
CSCwm28021: Configurations are removed from APs after ISSU upgrade from Cisco IOS XE Dublin 17.12.4 to Cisco IOS XE Amsterdam 17.1.5.1.
CSCwm29051: Controller experiences kernel unresponsiveness two times due to Critical process WNCd fault on rp_0_0 (rc=139).
CSCwm29437: Controller reboots handling AP radio payloads due to Critical process wncd fault on rp_0_0 (rc=139).
CSCwm36607: Controller displays fman_rp memory leak in FMAN_RP_DB at /tmp/rp/tdldb.
CSCwm40646: Clients stuck in IP learning state as DHCP option 82 field is left empty with EoGRE tunnel enabled.
CSCwm48283: Controller is stuck in internal-error state after upgrade to HP5.
CSCwm67254: Accounting start and stop messages are missing CUI attributes.
CSCwm67710: Cisco Catalyst 9800-80 controller encounters critical process WNCd failure (rc 0).
CSCwm73020: Controller relays unicast DHCP requests.
CSCwm74071: Controller encounters kernel unresponsiveness due to client being stuck in 802.11r preauth and BSSID/AP going down at the same time.
CSCwm86679: Cisco Catalyst 9800-40 controllers encounter kernel unresponsiveness and reboot unexpectedly at rogue_start_containers.
CSCwm89346: Controller encounters kernel unresponsiveness post telemetry update from Cisco Catalyst Center.
CSCwn06627: Controller encounters kernel unresponsiveness with geolocation config pointing towards geo_cloudm_graph_shortest_path.
CSCwn10992: DTLS timeout because of improper client load balancing.
CSCwn13406: Controller RA trace fails to stop, displaying can't read "strr": no such variable.
CSCwn15048: Replace Expansion Module's SN field with empty value before sending invalid characters to Cisco Catalyst Center.
CSCwn26561: Sequence number missed on NMSPD for RFID measurement during RFID stats collection window.
CSCwn35094: Cisco Catalyst 9500 Switch encounters kernel unresponsiveness while profile download.
CSCwn36115: iPhone 16 device listed as unclassified in the iOS 18.0.1.
CSCwn46684: Controller unexpectedly reloads and becomes unresponsive during the upgrade process.
CSCwn51207: Cisco Catalyst 9800-40 controller encounters kernel unresponsiveness after upgrade from 17.3.6 to 17.12.3ESW05.
CSCwn61980: Rogue AP fails to connect with UI/Rest AP when detected by a dual band radio AP.
CSCwn77030: Controller is not processing analytics action frames received from MLD for MLO clients.
CSCwn83626: Client is stuck in association while changing WLAN from central switching profile to local profile.
CSCwn90360: Controller is unable to start EAP process due to the delay of packet transmission from AP.
CSCwn90874: Guest anchor controller shows error message when creating anchor-export-ACK.
CSCwn92477: Controller unexpectedly reboots during WNCd process due to assertion failed with invalid BSSID.
CSCwn98574: Corrupt vrf name causes client to frequent disconnects and get stuck at mobility while roamining.
CSCwn99763: Noise floor value is always displayed as 0 for a few x-paths.
CSCwo02178: FT-SAE clients fails to roam between controller in same mobility group due to PMKID mismatch.
CSCwo39523: Cisco Wireless 9176I AP receives GPS/GNSS data but it is not provisioning country code.
CSCwi48178: Cisco Catalyst 9800-40 controller displays WNCd error in SafeC Validation for memcmp_s: dmax.
CSCwj96788: Controller accepts only multicast IPv6 address which starts on ff00.
CSCwk52366: Controller encounters fix flow control display issue.
CSCwk70598: Event-Driven RRM is unresponsive on 6-GHz band.
CSCwk77862: AP does not disjoin automatically when the AP-name is changed in the Regex filter.
CSCwk94110: NMSP config related timers are not initialised post process restart.
CSCwm00075: DCA cycle runs for 900 seconds in 5 GHz band even though the algorithm interval is set to 600 seconds.
CSCwm08261: Controller RADSEC fix using a Samsung device displays wrong Acct-Terminate-Code when manually disabling Wi-Fi.
CSCwm14401: Controller experiences an unexpected reset of WNCd.
CSCwm28542: OKC roam fails after a brief WAN drop.
CSCwm31586: AP in FlexConnect mode reports an erroneous client count.
CSCwm35342: Controllers logs daily errors for WNCd with no operational impact.
CSCwm36501: Controller encounters kernel unresponsiveness due to TLB miss.
CSCwm40875: Controller is unable to fetch DNS entries for DNS with VRF.
CSCwm48458: Detecting radar on 5 GHz CH100 causes controller to mismatch to CM66 and switch dual mode from 6 GHz to 5 GHz.
CSCwm57534: Controller experiences kernel unresponsiveness due to Critical process WNCd fault.
CSCwm76794: Creating a VRF with double quotes causes pages associated with VRF to not list any VRF.
CSCwm80472: Controller's UI and CLI fail to delete a mobility peer due to 'invalid transversal ctx for walker next rec'.
CSCwm88527: New username consisting of string "ipassword" or "isecret" throw multiple issues.
CSCwm92779: Cisco Catalyst Center client assurance dashboard shows no data for average latency.
CSCwm93080: IP address of the TACACS server disappears when the GUI timeout is changed.
CSCwm96234: WebUI fails when special character combinations are used in the login banner on the device's general page.
CSCwm98000: Cisco Catalyst 9105 AP displays Short Preamble "Allowed" but then rejects association with SP "Not Allowed".
CSCwn00375: Controller does not generate AP disjoin event message syslog after the AP is disconnected.
CSCwn05795: Cisco Catalyst 9120AXI-I AP's 2.4-GHz band does not activate due to a 'Regulatory domain check failed' error.
CSCwn10016: Default DHCP lease time option is not visible in the controller's GUI.
CSCwn14199: Controller reloads unexpectedly while deleting an object from client database.
CSCwn16547: CSR pop does not appear on the controller's GUI while trying to generate it.
CSCwn20875: Re-authentication is required of guest users prior to sleeping client timeout.
CSCwn34998: 6 GHz radios move from LP to SP mode after ranging due to neighbor loss.
CSCwn39428: Error message "Flow Monitor is Required" is shown even flow monitor name is available.
CSCwn45000: There is no output for "show ap name wlan dot11 5ghz" command.
CSCwn45670: Controller GUI FlexConnect configuration page fails after upgrade to Cisco IOS XE 17.15.1.
CSCwn85374: Memory usage is increasing in the CloudM process.
CSCwn93586: 9176 AP is operating in XOR mode, Channel and CW changes are not pushed post the DCA cycle.
CSCwn94511: The factory-reset all command is unsecure but functions as if it has a secure option.
CSCwo00821: IoT Orchestrator is unable to start after an upgrade or a reload.
CSCwo09824: Cisco Wireless 9176 AP unable to join controller after GUAP.
CSCwo21938: AFC is using manual geolocation co-ordinates.
CSCwo29017: wncmgrd kernel unresponsiveness after issue command ‘show ap config slots’.
CSCwo35816: After IoT Orchestrator Day 0 onboarding, the gRPC channels are not coming up.
CSCwn17412: The FlexConnect local switching traffic is centralized randomly during a web-auth SSID.
CSCwj84554: IOx app installation fails due to incorrect mounting.
CSCwj91255: Cisco Catalyst 9120AXI-E AP does not acknowledge frames sent from iOS devices.
CSCwk12169: Cisco Catalyst 9105/9115/9120 AP fails for clients connected in 5G slot.
CSCwk26966: Cisco Aironet 3802 AP displays false radar detection only on UNI-II after upgrading the software.
CSCwk79057: AP does not failover to the RADIUS server in FlexConnect Local Switching Local Authentication.
CSCwk82371: Cisco Catalyst 9120AXI-S AP does not detect the RFIDs in Monitor mode.
CSCwk98117: Cisco Catalyst 9166D APs are unable to transmit NDP packets over the air.
CSCwm07499: Cisco Catalyst 91xx AP does not rotate awipsd.log causing an upgrade issue "tar: write error: No space left on device".
CSCwm08044: APs do not upgrade without a power cycle displaying error: unlzma: write: No space left on device.
CSCwm31864: Cisco Wave APs experience kernel unresponsiveness due to memory leak reason OOM.
CSCwm38838: Cisco Catalyst 9136 AP's awipsd.log grows in /tmp/var/log causing "tar: write error: No space left on device".
CSCwm49467: FlexConnect APs disable u-APSD in the assoc request if clients don't have it enabled.
CSCwm52551: Cisco Catalyst 9124 AP in FlexConnect mode with the FlexConnect EoGRE tunnel enabled leaves the Option 82 field unfilled.
CSCwm58430: Cisco Catalyst 9115 AP experiences kernel unresposiveness due to: Beacon Stuck Reset Radio.
CSCwm66129: Cisco Wave 2 APs 2800, 3800, and 4800 display duplicate entries for stale clients in the Wi-Fi driver.
CSCwm79348: IOX-APP fails to detect USB and is stuck in the activate state.
CSCwn03468: Clients encounter slow speeds while connecting to slot 2 operating in the 5-GHz band on CM66.
CSCwn09549: Cisco Catalyst 9124 MAP fails to join and intermittently disconnects with Cisco Catalyst 9124 RAP.
CSCwn10606: Cisco Catalyst 9120 AP fails to report RFID packets to the controller intermittently.
CSCwn44287: Multiple Cisco Wave 2 and Cisco Catalyst APs detect CAPWAPd cores.
CSCwn48861: Cisco Catalyst IW9167E AP unexpectedly displays reduced Transmit power on 2.4GHz in -Z Regulatory Domain.
CSCwn52205: AP remains stuck in the activate state without progressing to RUN when IOX-APP starts before USB detection.
CSCwn66225: Invalid Tx power on beacon frame causes disconnect for iPhone and Mac laptop users.
CSCwn81268: IOX-APP using USB in RUN state ends up in activated state after switch reload.
CSCwn82037: Cisco Catalyst 9120 AP fails to report RFID packets to the controller intermittently.
CSCwn87525: Cisco Catalyst 917X APs Wi-Fi 7 MLO clients drop DS traffic due to 5ghz channel change during CAC.
CSCwo04318: Cisco Catalyst IW9167EH-F Mesh AP (MAP) watchdog reset (WCPD) experiences kernel unresponsiveness while using wireless backhaul.
CSCwo13129: Cisco Catalyst 9176D AP's UART msm experiences kernel unresponsiveness during DMA activity.
CSCwj03060: Cisco Aironet 1815w AP encounters kernel unresponsiveness on image version 17.9.4.205.
CSCwj66264: Cisco Catalyst 9300 and 9400 switches' mGig port displays half-duplex mismatch messages.
CSCwj69642: Cisco Catalyst 9166 APs stop forwarding traffic for some seconds.
CSCwj72174: Cisco Aironet 2800 AP connected to the same controller detects other connected 2800 APs as rogue.
CSCwk77222: Cisco Aironet 2802 AP encounters kernel unresponsiveness after upgrading to 17.9.5.47.
CSCwk80486: APs mark own BSSID as rogue in 2.4 GHz and in 5 GHz.
CSCwk93880: Cisco IW-6300H-AC-E-K9 APs encounter kernel unresponsiveness due to FIQ/NMI reset.
CSCwm00078: Cisco Catalyst 9136 AP sends M5 with incorrect index 0, resulting in Apple Macbooks not responding.
CSCwm04379: Cisco Catalyst 9115AX displays BcmRadioStats error : Failed to add multicast MAC address for RRM as dot11_client entry.
CSCwm34600: AAA override VLAN does not apply upon roaming in FlexConnect local authentication.
CSCwm37410: Cisco Catalyst 9120 AP does not forward large packets when MTU=1500.
CSCwm49168: Cisco Catalyst 9164I-ROW AP VAP driver drops EAP identity requests packet intermittently.
CSCwm50811: AP displays BSSID as rogue intermittently, causing the control packet to be considered for impersonation detection.
CSCwm61128: AAA override VLAN is not used for FT 11R roam-in local authentication.
CSCwm65107: Cisco Catalyst 9130 AP encounters kernel unresponsiveness due to OOM.
CSCwm73271: Cisco Wave 2 AP does not send syslog messages if the receiver is using an IPv6 address.
CSCwn08479: Cisco Catalyst 9120 Wi_Fi 6 AP experiences kernel unresponsiveness due to wlc_bsscfg_find_by_target_bssid+0xb8/0xe0.
CSCwn14495: Cisco Catalyst 91XX AP detects its own BSSID as rogue.
CSCwn15002: Cisco Catalyst 9120 AP encounters kernel unresponsiveness at wlc_low_txq_enq.
CSCwn43094: Locally switched RLAN clients info is unavailable in controller client table.
CSCwn48978: AP incorrectly send ARP requests for the DHCP IP address even after a DHCP release packet.
CSCwn55534: IP theft is observed on the controller when the client receives a second DHCP offer following DORA.
CSCwn96529: Cisco Catalyst 9136I-ROW AP in Site-Survey mode cannot add country code "IN".
CSCwn99070: Cisco Catalyst 9105 AP does not generate radio core properly.