Updates for Cisco Catalyst 9800 Series Wireless Controller

Improvements

• 802.11h support on IW9167E
• Access Point Auto Location Support
• Access Point Client ACL Counter Support
• Amazon S3 Support
• Amazon Web Services CloudWatch
• AP Deployment Mode
• AP DHCP Option82 Support on FlexConnect Local Switching Mode
• AP Power Distribution Support in Cisco Catalyst 9124 Series Access Points.
• Cisco Aironet Wave 2 and Catalyst Access Point Image Management
• Cisco Catalyst 9163E Access Point
• Cisco Work Group Bridge (WGB) Concurrent Radio Support on Cisco Catalyst 9130 Series Access Points and Cisco Catalyst 9124 Series Access Points.
• DHCP Option 82 for Guest Foreign and Anchor Scenario
• ED-RRM Support for 6-GHz Band Radio
• Increase Rogue AP Scale Limitation from 625
• Layer 3 Access
• Low Latency Profile
• Quad Radio Support in Cisco Catalyst 9136 Series Access Points.
• Roaming Enhancement with 802.11v Support
• Roaming Enhancement with Aux Scan-handoff Mode Support
• SD-Access Wireless Mesh Inter Fabric Edge Switch Roaming Protection
• Support to Configure 802.11n Speed Rates
• WGB 1:1 NAT Functionality in Client Mode
• WGB mode and uWGB mode support on IW9165E
• WGB Serviceability Enhancement

Modified GUI Features

• Access Point Auto Location Support
  Configuration > Tags & Profiles > WLANs
• AP Power Distribution Support in Cisco Catalyst 9124 Series Access Points.
  Configuration > Tags & Profiles > Power Profile

Open Bugs

CSCwd71613 - AP detects its own Basic Service Set Identifier (BSSID) as malicious after a channel reset.

CSCwe81775 - Apple devices are not deleted after sending Extensible Authentication Protocol (EAP) logoff messages.

CSCwf90946 - Cisco Catalyst 9130 AP doesn't forward 802.1x "Identity Request" with wireless phones.

CSCwh57076 - The controller is not forwarding broadcast address resolution protocol (ARP) request to the wireless client.

CSCwh63050 - The controller is sending Internet Group Management Protocol (IGMP) queries using the client VLAN gateway ip address that is not present in the controller and with the controller mac-address.

CSCwh66453 - Run state client (after successful webauth) is not able to pass traffic.

CSCwh68219 - Cisco Catalyst 9100 Series AP is not processing the Extensible Authentication Protocol (EAP)-Transport Layer Security (TLS) server Hello.

CSCwh74415 - Per client rate limit with FlexConnect local switching APs is not working.

CSCwh88246 - A URL filter is not applied after an invalid configuration.

CSCwh92425 - Cisco Catalyst 9130 and 9136 APs are not considering power save mode.

CSCwi06785 - The controller is not sending IPv4 Gratuitous ARP (GARP) or IPv6 NA for wireless clients in RUN state after switchover.

CSCwi07094 - Apple client is not able to connect to flex Wi-Fi Protected Access (WPA) 2 + WPA3 SSID with Simultaneous Authentication of Equals (SAE) enabled and Opportunistic Key Caching (OKC) disabled.

CSCwi16104 - A dbm crash is observed at VLAN list retrieval.

CSCwi18057 - 4-way handshake failure, missing M3 packet.

CSCwi22847 - Cisco Catalyst 9800-80 Controller crashes after receiving analytics from AP.

CSCwi38210 - After a factory reset, Cisco Catalyst IW9167 WGB reboots automatically during uplink.

CSCwh92173 - Cisco Catalyst IW916x WGB: Per chain RSSI reading is always 0.

CSCwi46923 - Incorrect Fine Timing Measurement (FTM) responder capable beacon misleads clients.

Resolved Bugs

CSCwe11213 - Cisco Catalyst 9130 AP crashes due to radio recovery failure.

CSCwe24263 - Cisco Catalyst 9130 AP: Inconsistent TX power levels are advertised in beacons.

CSCwf07384 - The wired client behind Cisco Catalyst 9105 RLAN is not able to pass traffic.

CSCwf10839 - Bursts of Virtual Router Redundancy Protocol (VRRP) traffic sent from the Cisco Embedded Wireless Controller on Cisco Catalyst Access Points and Switch port get down due to storm-control action.

CSCwf12301 - WCPD tx retry count is always 0.

CSCwf13107 - Cisco Catalyst 9105 AP: Radio crash is observed.

CSCwf13804 - Cisco Catalyst 9120 APs are randomly failing to onboard new client associations.

CSCwf21390 - Duplicate Access-Request messages with CTS client username are seen when multiple RADIUS servers are configured.

CSCwf29742 - Cisco Catalyst 9120 AP: Firmware crash is observed while running multicast and longevity with more than 80 clients.

CSCwf36752 - Terminal Access Controller Access-Control System (TACACS) failed to encrypt the secret key if we used a fully qualified domain name (FQDN) as a TACACS+ address when configured for the first time.

CSCwf52815 - Cisco Wave 2 AP: Improve Path Maximum Transmission Unit (PMTU) discovery mechanism to be able to honor the Internet Control Message Protocol (ICMP) unreachable maximum transmission unit (MTU) value.

CSCwf53520 - Cisco Aironet 1815 AP: Kernel panic crash is observed.

CSCwf59348 - Cisco Catalyst 9105/9115/9120 AP: The beacon is set to a maximum transmit power level of 128 dBm for Ireland.

CSCwf60151 - Memory leak with pubd on controller due to telemetry connection flap.

CSCwf61881 - Cisco Catalyst 9166D1 AP changes the country code to the UX domain and prevents setting it to standard power.

CSCwf62051 - Cisco Aironet 1815W AP crashes due to kernel panic.

CSCwf63818 - Cisco Aironet 1832 AP: Kernal panic crash is observed.

CSCwf64009 - Cisco Aironet 1815 AP is leaking Remote LAN (RLAN)-VLAN traffic with a looped port.

CSCwf65794 - Cisco Aironet 1852 AP reloads unexpectedly due to radio failure (radio recovery failed).

CSCwf66661 - The sm_device_count_list takes too long to populate leading to websocket termination.

CSCwf68131 - Cisco Catalyst 9105AXW AP: A large number of bad blocks are detected.

CSCwf68612 - The controller reloads unexpectedly due to a segmentation fault in the WNCD process.

CSCwf78066 - Cisco DNA Center 2.3.3.7: "No radios in the selected band" message on the floor map.

CSCwf81866 - Radio 0 WGB configuration is not backed up correctly when doing a TFTP backup of the configuration.

CSCwf83278 - Client traffic fails with N+1 when AP sends CLIENT_DEL_STOP_REASSOC.

CSCwf83292 - Cisco Catalyst 9130 AP is not sending DHCP offers and ACK over the air to clients.

CSCwf86242 - The controller reloads unexpectedly with CAPWAP window size set to 0.

CSCwf91445 - Controller pushes accounting information for preshared key (PSK) local authentication WLANs.

CSCwf93992 - Cisco Aironet 2800 APs in FlexConnect mode are not processing Extensible Authentication Protocol (EAP)-Transport Layer Security (TLS) fragmented packets if the delay is more than 50 ms.

CSCwf94863 - Cisco Catalyst 9115 AP: Kernel panic crash is observed (at drop_pagecache_sb+0x78/0x110).

CSCwf95868 - The Tx power of single-band BCM workgroup bridge (WGB) radio 0 is decreased by nearly 20 dBm after configuring antenna number.

CSCwf99906 - Network time protocol (NTP) authentication that is removed after a reload is using more than 16 bytes.

CSCwf99932 - Cisco Catalyst 9120 AP: Radio1 is crashing.

CSCwh06834 - Using special characters in the password while generating trust point generates an invalid trust point.

CSCwh08625 - AP kernel panic crash is observed (at _raw_spin_unlock).

CSCwh09879 - Cisco Wave 2 APs in FlexConnect mode are sending assoc-resp failure with status code 12 and AID 0 after changing country code.

CSCwh11858 - Cisco Switch running IOS-XE software crashes when removing the Fully Qualified Domain Name (FQDN) Access Control List (ACL).

CSCwh18613 - Encrypted mesh pre-shared key changes each time "password encryption aes" is applied.

CSCwh20306 - Cisco Wave 2 AP: The Cisco Hyperlocation feature is broken when the Advanced Wireless Intrusion Prevention System (aWIPS) is enabled.

CSCwh20934 - CiscoWave 2 APs are reloading due to a Systemd critical process crash.

CSCwh27366 - AP radio firmware crashes with reset code 2.

CSCwh27425 - Cisco Catalyst 9115AX AP is not forwarding a part of CAPWAP data packets to the uplink direction.

CSCwh29924 - Cisco Catalyst 9105/9115/9120 AP WGB: Antenna-a couldn't function properly if configuration is ab-antenna.

CSCwh33190 - Cisco Catalyst 9115 AP (Local Mode) crashes due to kernel panic.

CSCwh35072 - Cisco Aironet 3800 AP reloads unexpectedly due to Fast Interrupt Request (FIQ)/Non-Maskable Interrupt (NMI) reset.

CSCwh42002 - Controller crashes with wireless network control deamons (WNCD) core while processing CAPWAP data.

CSCwh49810 - Audit session ID changes after inter-WNCD roam.

CSCwh50681 - New SSID arp0v0 is being broadcasted after an upgrade.

CSCwh54762 - A kernel panic occurs as a result of failure to synchronize (assert:"0" failed: file "wlc_fifo.c:960").

CSCwh56147 - SNMP OID for AP location tag is missing on the controller.

CSCwh58099 - After client deletion and Change of Authorization (CoA) terminate, the controller allows the client to reconnect.

CSCwh59420 - Cisco Catalyst 9136 AP is crashing.

CSCwh61007 - The controller is crashing constantly whenever it provisions multiple APs.

CSCwh61011 - Cisco Catalyst 9120 and 9115 APs unexpectedly disjoin from the controller and are not able to establish Datagram Transport Layer Security (DTLS) again.

CSCwh74663 - Cisco Aironet 3800 AP is not sending Quality of Service (QoS) data frames downstream due to the RadarDetected flag as TRUE.

CSCwh76420 - Controller crashes while performing In-Service Software Upgrade (ISSU) upgrade.

CSCwh87343 - Cisco IOS XE Software Web UI privilege escalation vulnerability.

CSCwh89539 - CAPWAP messages are queued for longer than x seconds when client throttling is turned on.

CSCwh92459 - The controller reloads unexpectedly with a WNCD fault on rp_0_0.

CSCwf95676 - WIFI module went out of service upon reloading the device.

CSCwh95315 - Cisco Catalyst IW9167E AP is changing its backhaul upon reload.

CSCwh58663 - WGB: Incorrect RSSI value is shown when there is a broken antenna or physically not present.

CSCwi06055 - Cisco Industrial Wireless 3702 AP radios are reset and stays down when the board temperature is less than -20 C.

CSCwf26991 - The show controller dot11Radio 1 command output always shows 20 MHz wide regardless of the channel width being used.

CSCwh94965 - Cisco Catalyst IW916x WGB: The wired infra client fails to ping the WGB wired client.