Release Notes for Cisco Embedded Wireless Controller on Catalyst Access Points, Cisco IOS XE Amsterdam 17.3.x

Introduction to Cisco Embedded Wireless Controller on Catalyst Access Points

The Cisco Embedded Wireless Controller on Catalyst Access Points is a version of the Cisco IOS XE-based controller software on Catalyst access points. In this solution, a Catalyst access point (AP) that is running the Cisco Embedded Wireless Controller on Catalyst Access Points software, is designated as the primary AP. Other APs, referred to as subordinate APs, associate to this primary AP.

The Cisco Embedded Wireless Controller on Catalyst Access Points provides enterprise-level WLAN features while maintaining operational simplicity and affordability. This solution is targeted at small and medium-sized business (SMB) customers or distributed enterprises, and can be run at single site deployments.

  • The controllers come with high availability (HA) and seamless software updates. This keeps your services on always, both during planned and unplanned events.

  • The deployment can be managed using a mobile application, Cisco Digital Network Architecture (DNA) Center, Netconf/Restconf, web-based GUI, or CLI.

What's New in Cisco IOS XE Amsterdam 17.3.8a

There are no new features in this release. This release provides a fix for CSCwh87343: Cisco IOS XE Software Web UI Privilege Escalation Vulnerability. For more information, see Security Advisory: cisco-sa-iosxe-webui-privesc-j22SaA4z.

What's New in Cisco IOS XE Amsterdam 17.3.8

This release comprises only PSIRT fixes. There are no new features or enhancements in this release.

What's New in Cisco IOS XE Amsterdam 17.3.7

There are no new features or enhancements in this release.

What's New in Cisco IOS XE Amsterdam 17.3.6

There are no new features or enhancements in this release.

What's New in Cisco IOS XE Amsterdam 17.3.5b

There are no new features or enhancements in this release.

What's New in Cisco IOS XE Amsterdam 17.3.5a

Table 1. Software Features Introduced on Cisco Embedded Wireless Controller on Catalyst Access Points

Feature Name

Description and Documentation Link

Automated Software Download Version 4 (ASDv4) Migration

Cisco Embedded Wireless Controller on Catalyst Access Points requires Automated Software Download Version 3 (ASDv3) to download software from Cisco.com.

However, ASDv3 is being replaced by ASDv4 from July 2022. Consequently, the software download feature will not work on older Cisco IOS XE releases.

We recommend that you upgrade your device software image to Cisco IOS XE Amsterdam 17.3.5a, Cisco IOS XE Bengaluru 17.6.3 (when available), Cisco IOS XE Cupertino 17.8.1 (when available), or a later release to enable the software download feature with ASDv4.

This release also includes critical bug fixes relating to scale and stability improvements.

What's New in Cisco IOS XE Amsterdam 17.3.4c

There are no new features or enhancements in this release.

What's New in Cisco IOS XE Amsterdam 17.3.4

There are no new features or enhancements in this release.

What's New in Cisco IOS XE Amsterdam 17.3.3

Table 2. Software Features Introduced on Cisco Embedded Wireless Controller on Catalyst Access Points

Feature Name

Description and Documentation Link

Smart Software Manager On-Prem (SSM On-Prem) Support for Smart Licensing Using Policy

SSM On-Prem is an asset manager, which works in conjunction with CSSM. It enables you to administer products and licenses on your premises instead of having to directly connect to CSSM.

Here, a product instance is connected to SSM On-Prem, and SSM On-Prem becomes the single point of interface with CSSM. The product instance can be configured to push the required information to SSM On-Prem. Alternatively, SSM On-Prem can be set-up to pull the required information from a product instance at a configurable frequency. After usage information is available in SSM On-Prem, you must synchronize the same with CSSM, to ensure that the product instance count, license count and license usage information is the same on both, CSSM and SSM On‐Prem. Offline and online options are available for synchronization between CSSM and SSM On‐Prem.

Minimum Required SSM On-Prem Version: Version 8, Release 202102

Minimum Required Cisco IOS XE Version: Cisco IOS XE Amsterdam 17.3.3

For more information, see the Smart Licensing Using Policy chapter and the Command Reference guide.

What's New in Cisco IOS XE Amsterdam 17.3.2a

Table 3. Software Features Introduced on Cisco Embedded Wireless Controller on Catalyst Access Points

Feature Name

Description and Documentation Link

Smart Licensing Using Policy

An enhanced version of Smart Licensing, with the overarching objective of providing a licensing solution that does not interrupt the operations of your network, rather, one that enables a compliance relationship to account for the hardware and software licenses you purchase and use.

With this licensing model, you do not have to complete any licensing-specific operations, such as registering or generating keys before you start using the software and the licenses that are tied to it. Only export-controlled and enforced licenses require Cisco authorization before use. License usage is recorded on your device with timestamps and the required workflows can be completed at a later date.

Multiple options are available for license usage reporting – this depends on the topology you implement. You can use the Cisco Smart Licensing Utility (CSLU) Windows application, or report usage information directly to CSSM. A provision for offline reporting for air-gapped networks, where you download usage information and upload to CSSM, is also available.

Starting with this release, Smart Licensing Using Policy is automatically enabled on the device. This is also the case when you upgrade to this release. By default, your Smart Account and Virtual Account in CSSM is enabled for Smart Licensing Using Policy.

For more information, see the Smart Licensing Using Policy chapter.

For a more detailed overview on Cisco Licensing, go to cisco.com/go/licensingguide.

Cisco DNA Center Support for Smart Licensing Using Policy

Cisco DNA Center supports Smart Licensing Using Policy functionality starting with Cisco DNA Center Release 2.2.2. The corresponding minimum required Cisco IOS XE Release for this platform is Cisco IOS XE Amsterdam 17.3.2a.

Implement the “Connected to CSSM Through a Controller” topology to have Cisco DNA Center manage a product instance. When you do, the product instance records license usage, but it is the Cisco DNA Center that initiates communication with the product instance to retrieve and report usage to Cisco Smart Software Manager (CSSM), and returns the acknowledgement (RUM ACK).

In order to meet reporting requirements, Cisco DNA Center provides ad hoc or on-demand reporting, as well as scheduled reporting options.

For more information, see the Smart Licensing Using Policy chapter.

What's New in Cisco IOS XE Amsterdam 17.3.1

Table 4. Software Features Introduced on Cisco Embedded Wireless Controller on Catalyst Access Points

Feature Name

Description and Documentation Link

Enhanced Certificate Management Through GUI

The Public Key Infrastructure (PKI) Management page now displays the following tabs:

Trustpoints tab: Used to add, create or enroll a new trustpoint. This also displays the current Trustpoints configured on the controller and other details of the trustpoint. You can also see if the trustpoint is in use for any of the features.

CA Server tab: Used to enable or disable the Certificate Authority (CA) server functionality on the controller. The CA server functionality should be enabled for the controller to generate a Self-Signed Certificate (SSC).

Key Pair Generation tab: Used to generate key pairs.

Certificate Management tab: Used to generate and manage certificates, and perform all certificate related operations, on the controller.

AP Image Predownload Status Enhancement

During AP image download, the Embedded Wireless Controller calculates the current percentage of the download and the estimated time of the completion of the download.

The Software Update Status section in the GUI displays the update status bar that shows the progress of the software update, such as, Initiate, Controller Image Download, AP Image Download, Network Upgrade, Activate, and Reload.

The following commands were introduced:

  • show wireless ewc-ap ap image predownload status

Multicast Domain Name System Gateway Support

Bonjour protocol is an Apple service discovery protocol which locates devices and services on a local network with the use of multicast Domain Name System (mDNS) service records.

By default, the mDNS gateway is disabled on the controller. To enable mDNS gateway functionality, you must explicitly configure mDNS gateway using CLI or Web UI.

The following commands were introduced:

  • mdns-sd

  • active-query timer

  • mdns-sd-interface

  • mdns-sd flex-profile

  • wired-vlan-range

  • mdns-sd profile

  • update-timer

  • show mdns-sd summary

  • show mdns-sd cache

  • show mdns-sd statistics

  • show mdns-sd flexconnect summary

  • clear mdns-sd cache

  • clear mdns-sd statistics

Support for Cisco Catalyst 9105 Series APs

Support is added for Cisco Catalyst 9105I and 9105W APs in this release.


Note


Hot Software Maintenance Upgrade is not supported for Cisco Embedded Wireless Controller on Catalyst Access Points, in the Cisco IOS XE Amsterdam 17.3.1 Release.


Table 5. Web UI Features Introduced or Modified on Cisco Embedded Wireless Controller on Catalyst Access Points

Feature Name

Web UI Path

Dark Mode option

You can enable Dark Mode in the GUI. Dark Mode (screen with light text in a dark background) is best suited for reducing eye strain, especially in low-light conditions. Screen glare and flickering is also reduced.

Click the Preferences icon (the gear icon) > Dark Mode option

Enhanced Certificate Management Through the GUI

Configuration > Security > PKI Management

AP Image Predownload Status Enhancement

Administration > Software Management > Software Upgrade

Behavior Changes

  • From Cisco IOS XE Amsterdam 17.3.1 onwards, the AP name can only be up to 32 characters.

  • When EoGRE AAA-proxy is used, AAA ports are set to 1645 and 1646 by default. To change this port configuration, use the following command: tunnel eogre interface tunnel-intf aaa proxy key key key-name auth-port auth_port acct-port acct_port

  • Adding support for the LED blink in Cisco Catalyst 9800 Wireless Controllers.

  • Log viewer window added to the GUI, to view radioactive trace logs.

  • New field added to display AP configuration state in the GUI.

  • Column header in rogue detection changed from MFP Required to PMF Required.

  • The Central Forwarding field that was present in the EoGRE > Tunnel Profiles > Edit Tunnel Profile > General tab, has been removed.

Important Notes

Licensing Information Missing In Case of Simultaneous Dual Failure of the Active and Standby Embedded Wireless Controller - AP Controller

In a network of Cisco Embedded Wireless Controller on Catalyst Access Points (EWC) - AP, one of the APs will be elected as the controller (you can configure the same by giving priority to one of the APs). If the active and standby EWCs fail simultaneously, a couple of other APs become the new active and standby EWCs. In such a case, the licensing information stored in the original active and standby EWCs will not be available in the new active-standby pair controllers.

To resolve this issue manually, do the following:

  1. Recover the previously active or standby controller.

  2. Wait for it to become the standby controller, and perform a failover to make it an active controller.

  3. If this method fails, or if it is not possible due to the original failure, then install the trust code on the newly active controller.

Supported Cisco Access Point Platforms

The following Cisco access points are supported in the Cisco Embedded Wireless Controller on Catalyst Access Points network. Note that the APs listed as primary APs can also function as subordinate APs.

Table 6. Cisco APs Supported in Cisco Embedded Wireless Controller on Catalyst Access Points

Primary AP

Subordinate AP

Cisco Catalyst 9115 Series

Cisco Catalyst 9117 Series

Cisco Catalyst 9120 Series

Cisco Catalyst 9130

Cisco Aironet 1540 Series

Cisco Aironet 1560 Series

Cisco Aironet 1815i

Cisco Aironet 1815w

Cisco Aironet 1830 Series

Cisco Aironet 1840 Series

Cisco Aironet 1850 Series

Cisco Aironet 2800 Series

Cisco Aironet 3800 Series

Cisco Aironet 4800 Series

Cisco Catalyst 9115 Series

Cisco Catalyst 9117 Series

Cisco Catalyst 9120 Series

Cisco Catalyst 9130

Cisco Catalyst 9105AXW

Cisco Catalyst Industrial Wireless 6300 Heavy Duty Series Access Points

Cisco 6300 Series Embedded Services Access Points

Table 7. Image Types and Supported APs in Cisco Embedded Wireless Controller on Catalyst Access Points

Image Type

Supported APs

ap1g4

Cisco Aironet 1810 Series

Cisco Aironet 1830 Series

Cisco Aironet 1850 Series

ap1g5

Cisco Aironet 1815i

Cisco Aironet 1815w

Cisco Aironet 1540 Series

Cisco Aironet 1850 Series

ap1g6

Cisco Catalyst 9117 Series

ap1g6a

Cisco Catalyst 9130

ap1g7

Cisco Catalyst 9115 Series

Cisco Catalyst 9120 Series

ap1g8

Cisco Catalyst 9105 Series

ap3g3

Cisco Aironet 2800 Series

Cisco Aironet 3800 Series

Cisco Aironet 4800 Series

Cisco Aironet 1560 Series

Cisco Catalyst Industrial Wireless 6300 Heavy Duty Series Access Points

Cisco 6300 Series Embedded Services Access Points

Maximum APs and Clients Supported

Table 8. Scale Supported in Cisco EWC Network

Primary AP Model

Maximum APs Supported

Maximum Clients Supported

Cisco Catalyst 9105 AWI

50

1000

Cisco Catalyst 9115 Series

50

1000

Cisco Catalyst 9117 Series

50

1000

Cisco Catalyst 9120 Series

100

2000

Cisco Catalyst 9130

100

2000


Note


If 25 to 100 APs have joined the EWC network, the maximum clients on the EWC internal AP is limited to 20.


Compatibility Matrix

The following table provides software compatibility information:

Table 9. Compatibility Information

Cisco Embedded Wireless Controller on Catalyst Access Points

Cisco ISE

Cisco CMX

Cisco DNA Center

Amsterdam 17.3.x

2.6

2.4

2.3

10.6.2

10.6

10.5.1

2.1.260

Supported Browsers and Operating Systems for Web UI


Note


The following list of Supported Browsers and Operating Systems is not comprehensive at the time of writing this document and the behavior of various browser for accessing the GUI of the EWC is as listed below.


Table 10. Supported Browsers and Operating Systems

Browser

Version

Operating System

Status

Workaround

Google Chrome

77.0.3865.120

macOS Mojave Version 10.14.6

Works

Proceed through the browser warning.

Safari

13.0.2 (14608.2.40.1.3)

macOS Mojave Version 10.14.6

Works

Proceed through the browser warning.

Mozilla Firefox

69.0.1

macOS Mojave Version 10.14.6

Works only if exception is added.

Set the exception.

Mozilla Firefox

69.0.3

macOS Mojave Version 10.14.6

Works only if exception is added.

Set the exception.

Google Chrome

77.0.3865.90

Windows 10 Version 1903 (OS Build 18362.267)

Works

Proceed through the browser warning.

Microsoft Edge

44.18362.267.0

Windows 10 Version 1903 (OS Build 18362.267)

Works

Proceed through the browser warning.

Mozilla Firefox

68.0.2

Windows 10 Version 1903 (OS Build 18362.267)

Works

Proceed through the browser warning.

Mozilla Firefox

69.0.3

Windows 10 Version 1903 (OS Build 18362.267)

Works only if exception is added.

Set the exception.

Google Chrome

78.0.3904.108

macOS Catalina 10.15.1

Does not work

NA

Upgrading the Controller Software

This section covers the various aspects of upgrading the controller software.

For information on ASDv4 migration, see the What's New in Cisco IOS XE Amsterdam 17.3.5a section.

For information on upgrading the controller software, see the "Software Management" section in the Cisco Embedded Wireless Controller on Catalyst Access Points Online Help.


Note


Before converting from CAPWAP to embedded wireless controller (EWC), ensure that you upgrade the corresponding AP with the CAPWAP image in Cisco AireOS Release 8.10.105.0. If this upgrade is not performed, the conversion will fail.


Finding the Software Version

The following table lists the Cisco IOS XE 17.3.x software for Cisco Embedded Wireless Controller on Catalyst Access Points.

Choose the appropriate AP software based on the following:

  • Cisco Embedded Wireless Controller on Catalyst Access Points software to be used for converting the AP from an unified wireless network CAPWAP lightweight AP to a Cisco Embedded Wireless Controller on Catalyst Access Points-capable AP (primary AP)

  • AP software image bundle to be used either for upgrading the Cisco Embedded Wireless Controller on Catalyst Access Points software on the primary AP or for updating the software on the subordinate APs or both

Prior to ordering Cisco APs, see the corresponding ordering guide for your Catalyst or Aironet access point.

Table 11. Cisco Embedded Wireless Controller on Catalyst Access Points Software

Primary AP

AP Software for Conversion from CAPWAP to Cisco EWC

AP Software Image Bundle for Upgrade

AP Software in the Bundle

Cisco Catalyst 9115 Series

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

ap1g7

Cisco Catalyst 9117 Series

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

ap1g6

Cisco Catalyst 9120 Series

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

ap1g7

Cisco Catalyst 9130 Series

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

C9800-AP-universalk9.17.03.8a.zip

C9800-AP-universalk9.17.03.08.zip

C9800-AP-universalk9.17.03.07.zip

C9800-AP-universalk9.17.03.06.zip

C9800-AP-universalk9.17.03.5b.zip

C9800-AP-universalk9.17.03.5a.zip

C9800-AP-universalk9.17.03.4c.zip

C9800-AP-universalk9.17.03.04.zip

C9800-AP-universalk9.17.03.03.zip

C9800-AP-universalk9.17.03.2a.zip

C9800-AP-universalk9.17.03.01.zip

ap1g6a

Guidelines and Restrictions

Internet Group Management Protocol (IGMP)v3 is not supported on Cisco Aironet Wave 2 APs.

Embedded Wireless Controller SNMP configuration is supported in DNAC.

High memory usage on AP running Embedded Wireless Controller. Enabling crash kernel on the AP consumes additional memory on the AP. Hence, if crash kernel is enabled, the overall memory usage of the device will increase and will impact the scale numbers. On Cisco Catalyst 9130 Access Points, the memory consumption is a high of 128 MB.


Note


While upgrading EWC, if you have enabled crash kernel on the AP, disable the feature and then enable it again post upgrade. Ensure that you reboot the AP post enable or disable.

During the EWC HA pair selection, after a power outage, the standby AP fails to come up in the new EWC HA pair. Another EWC capable AP becomes the standby AP and fails to come up as well. To avoid this situation, ensure that the same IP address is enforced on the active or standby APs during HA pair selection.

Interoperability with Clients

This section describes the interoperability of the controller software with client devices.

The following table describes the configurations used for testing client devices.

Table 12. Test Configuration for Interoperability

Hardware or Software Parameter

Hardware or Software Type

Release

Cisco IOS XE Amserdam 17.3.1

Access Points

  • Cisco Aironet Series Access Points

    • 1540

    • 1560

    • 1815i

    • 1815w

    • 1830

    • 1840

    • 1850

    • 2800

    • 3800

    • 4800

  • Cisco Catalyst 9105AX Access Points

  • Cisco Catalyst 9115AX Access Points

  • Cisco Catalyst 9117AX Access Points

  • Cisco Catalyst 9120AX Access Points

  • Cisco Catalyst 9130AX Access Points

Radio

  • 802.11ax

  • 802.11ac

  • 802.11a

  • 802.11g

  • 802.11n (2.4 GHz or 5 GHz)

Security

Open, PSK (WPA2-AES), 802.1X (WPA2-AES) (EAP-FAST, EAP-TLS), WPA3.

Cisco ISE

See Compatibility Matrix.

Types of tests

Connectivity, traffic (ICMP), and roaming between two APs

The following table lists the client types on which the tests were conducted. Client types included laptops, hand-held devices, phones, and printers.

Table 13. Client Types

Client Type and Name

Driver / Software Version

Wi-Fi 6 Devices (Mobile Phone and Laptop)

Apple iPhone 11 iOS 14.1

Apple iPhone SE 2020

iOS 14.1
Dell Intel AX1650w Windows 10 ( 21.90.2.1)
DELL LATITUDE 5491 (Intel AX200) Windows 10 Pro (21.40.2)
Samsung S20 Android 10
Samsung S10 (SM-G973U1) Android 9.0 (One UI 1.1)
Samsung S10e (SM-G970U1) Android 9.0 (One UI 1.1)
Samsung Galaxy S10+ Android 9.0

Samsung Galaxy Fold 2

Android 10

Samsung Galaxy Flip Z

Android 10

Samsung Note 20

Android 10

Laptops

Acer Aspire E 15 E5-573-3870 (Qualcomm Atheros QCA9377) Windows 10 Pro (12.0.0.832)
Apple Macbook Air 11 inch OS Sierra 10.12.6
Apple Macbook Air 13 inch OS Catalina 10.15.4
Apple Macbook Air 13 inch OS High Sierra 10.13.4
Macbook Pro Retina OS Mojave 10.14.3
Macbook Pro Retina 13 inch early 2015 OS Mojave 10.14.3

Dell Inspiron 2020 Chromebook

Chrome OS 75.0.3770.129

Google Pixelbook Go

Chrome OS 84.0.4147.136

HP chromebook 11a

Chrome OS 76.0.3809.136

Samsung Chromebook 4+

Chrome OS 77.0.3865.105

DELL Latitude 3480  (Qualcomm DELL wireless 1820) Win 10 Pro (12.0.0.242)
DELL Inspiron 15-7569 (Intel Dual Band Wireless-AC 3165) Windows 10 Home (18.32.0.5)
DELL Latitude E5540 (Intel Dual Band Wireless AC7260) Windows 7 Professional (21.10.1)
DELL XPS 12 v9250 (Intel Dual Band Wireless AC 8260 ) Windows 10 (19.50.1.6)
DELL Latitude 5491 (Intel AX200) Windows 10 Pro (21.40.2)
DELL XPS Latitude12 9250 (Intel Dual Band Wireless AC 8260) Windows 10 Home (21.40.0)

Lenovo Yoga C630 Snapdragon 850 (Qualcomm AC 2x2 Svc)

Windows 10(1.0.10440.0)

Lenovo Thinkpad Yoga 460 (Intel Dual Band Wireless-AC 9260) Windows 10 Pro ( 21.40.0)

Note

 
For clients using Intel wireless cards, we recommend you to update to the latest Intel wireless drivers if advertised SSIDs are not visible.

Tablets

Apple iPad Pro iOS 13.5
Apple iPad Air2 MGLW2LL/A iOS 12.4.1
Apple iPad Mini 4 9.0.1 MK872LL/A iOS 11.4.1
Apple iPad Mini 2 ME279LL/A iOS 12.0
Microsoft Surface Pro 3 – 11ac Qualcomm Atheros QCA61x4A
Microsoft Surface Pro 3 – 11ax Intel AX201 chipset. Driver v21.40.1.3
Microsoft Surface Pro 7 – 11ax Intel Wi-Fi chip (HarrisonPeak AX201) (11ax, WPA3)
Microsoft Surface Pro X – 11ac & WPA3 WCN3998 Wi-Fi Chip (11ac, WPA3)

Mobile Phones

Apple iPhone 5 iOS 12.4.1
Apple iPhone 6s iOS 13.5
Apple iPhone 8 iOS 13.5
Apple iPhone X MQA52LL/A iOS 13.5
Apple iPhone 11 iOS 14.1
Apple iPhone SE MLY12LL/A iOS 11.3
ASCOM SH1 Myco2 Build 2.1
ASCOM SH1 Myco2 Build 4.5
ASCOM Myco 3 v1.2.3 Android 8.1
Drager Delta VG9.0.2
Drager M300.3 VG2.4
Drager M300.4 VG2.4
Drager M540 DG6.0.2 (1.2.6)
Google Pixel 2 Android 10
Google Pixel 3 Android 11

Google Pixel 3a

Android 11

Google Pixel 4 Android 11
Huawei Mate 20 pro Android 9.0
Huawei P20 Pro Android 9.0

Huawei P40

Android 10

LG v40 ThinQ Android 9.0

One Plus 8

Android 10

Oppo Find X2

Android 10

Redmi K20 Pro

Android 10

Samsung Galaxy S7 Andriod 6.0.1
Samsung Galaxy S7 SM - G930F Android 8.0
Samsung Galaxy S8 Android 8.0
Samsung Galaxy S9+ - G965U1 Android 9.0
Samsung Galaxy SM - G950U Android 7.0

Sony Experia 1 ii

Android 10

Sony Experia xz3 Android 9.0

Xiaomi Mi10

Android 10

Spectralink 8744 Android 5.1.1
Spectralink Versity Phones 9540 Android 8.1
Vocera Badges B3000n 4.3.2.5
Vocera Smart Badges V5000 5.0.4.30
Zebra MC40 Android 5.0
Zebra MC40N0 Android Ver: 4.1.1
Zebra MC92N0 Android Ver:  4.4.4
Zebra TC51 Android 7.1.2
Zebra TC52 Android 8.1.0
Zebra TC55 Android 8.1.0
Zebra TC57 Android 8.1.0
Zebra TC70 Android 6.1
Zebra TC75 Android 6.1.1
Printers
Zebra QLn320 Printer LINK OS 6.3
Zebra ZT230 Printer LINK OS 6.3
Zebra ZQ310 Printer LINK OS 6.3
Zebra ZD410 Printer LINK OS 6.3
Zebra ZT410 Printer LINK OS 6.3
Zebra ZQ610 Printer LINK OS 6.3
Zebra ZQ620 Printer LINK OS 6.3

Wireless Module

Intel 11ax 200

Driver v22.20.0

Intel AC 9260

Driver v21.40.0

Intel Dual Band Wireless AC 8260

Driver v19.50.1.6

Caveats

Caveats describe unexpected behavior in Cisco IOS releases. Caveats that are listed as Open in a prior release are carried forward to the next release as either Open or Resolved.


Note


All incremental releases will cover fixes from the current release.


Cisco Bug Search Tool

The Cisco Bug Search Tool (BST) allows partners and customers to search for software bugs based on product, release, and keyword, and aggregates key data such as bug details, product, and version. The BST is designed to improve the effectiveness in network risk management and device troubleshooting. The tool has a provision to filter bugs based on credentials to provide external and internal bug views for the search input.

To view the details of a caveat, click the corresponding identifier.

Open Caveats for Cisco IOS XE Amsterdam 17.3.8a

Identifier

Headline

CSCvg70549

Error propagation from wncd back to manageability agent through wncmgrd.

CSCvy89508

The primary member displays "standby hot" even though the standby is in recovery mode.

CSCwd96484

Controller is reloading unexpectedly generating "wncd" core files.

CSCwe38431

Controller is remarking SIP packets from CS3 to CS0 in upstream/downstream when voice cac is configured.

CSCvu29470

Cisco Catalyst 9130 Series APs are not updated as monitor in Current-Band in the show ap fra command.

CSCvu49203

The show ap fra command output on the controller is not aligned properly.

CSCvu49930

Channel change to 165 and channel width change to 20 fails via OC when the AP is configured with channel width 40.

CSCvu75020

The FRA timer does not work on the show ap fra command.

CSCvv38005

Logging message not seen when the noise threshold is moved to passed or failed for XOR radio (5-Ghz).

CSCvz82490

WPA3-Suite B: Incorrect APUT response to STA incorrect TLS authentication parameters.

CSCwc51857

Controller GUI displays 802.1x with a lowercase 'x' instead of 802.1X with a capital 'X'.

CSCwc62824

Controller does not send LLC or XID spoofed frames after a mobility event.

CSCwc86955

Dual DFS stats on AP do not match controller information.

CSCwd73783

Cisco Catalyst 9800-L Series Controller: Observed qfp-ucode-wlc crash.

CSCwe22625

Controller GUI goes blank after logging in if username has '&'.

CSCwe25610

Client delete initiated. Reason: CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE - Mobility Local.

CSCwe31270

Clients stop passing traffic when there is a missing bandwidth limit AAA attribute on the controller.

CSCvw51315

Cisco Catalyst 9120 AP: Kernel panic is seen on AP when client is disconnected and connected back with Target Wake Time (TWT) session.

CSCvw59760

ECDHE ciphers are not listed when WLAN Common Criteria (WLAN CC) is enabled.

CSCvw64170

After changing channel and bandwidth of AP (with SIA), antenna shows incorrect legal/configured gain.

CSCvx03815

Cisco Catalyst 9120AX AP+SIA-DART: Initial configuration for slot 0 show configured gain value as 0.

CSCvy16422

Cisco Catalyst 9115 and 9120 APs are crashing: WL_REINIT_RC_MQ_ERROR.

CSCvy92773

Cisco Catalyst 9117 AP: Crash is observed on Slot 1.

CSCvz16102

Cisco Catalyst 9105i OEAP is crashing due to kernel panic.

CSCvz16109

Cisco Catalyst 9105w Office Extend Access Points (OEAP) is crashing due to kernel panic.

CSCvz18045

Cisco Catalyst 9130 AP: Probe suppression for Macro-Micro cell client steering is not supported.

CSCvz59428

Unclear reason for radio reset due to role change sent from controller to Cisco DNA Center.

CSCvz78407

Tx power mismatch on RAP & MAP even though same power is set on RAP & MAP.

CSCvz99564

Cisco APs are not assigned up with IPv6 addresses after upgrade from 17.6.1 to 17.6.2 or 17.7.1.

CSCwa11312

Cisco Catalyst 9124E AP: Max transmit power is being capped for some domains resulting in 3 to 4dB less power.

CSCwa38528

Cisco Catalyst 9105w OEAP: CAPWAP DTLS session is closed for AP due to DTLS server session shutdown.

CSCwa90838

Firmware crash is observed on Radio 1 on the Cisco Catalyst 9130 AP in FlexConnect mode.

CSCwa96037

Cisco Catalyst 9120 AP: Radio crash is observed on Slot 0.

CSCwb38948

Cisco Catalyst 9124 AP: MAPs are no longer able to join RAP due to security failures.

CSCwb84844

Cisco Catalyst OEAP 9105w CAPWAP DTLS session closed for AP, due to DTLS shutdown.

CSCwc10696

Regular ASR support field is disabled for supporting clients.

CSCwc95496

Cisco Catalyst 9130 AP: Radio crash is observed.

CSCwd06001

Linux iosd crash on standby controller during reload of the Cisco Catalyst 9800-L Wireless Controller.

CSCwd78616

Cisco Catalyst AP9115 Tx power high and abnormal Dynamic Channel Assignment (DCA) channel assignment due to no neighbors.

CSCwd79502

Controller is tracking stale entry due to anchored client getting IPv4 and IPv6 in different VLANs.

CSCwd90742

Cisco Catalyst 9120AX AP kernel crash - PC is at rhb_del_interface+0xc.

CSCwd93773

Controller should not enable second 5-Ghz radio for 9124E with PoE+ (30W).

CSCwd96333

Cisco Wave 1 AP is crashing on CAPWAP restart from the controller.

CSCwe11747

Cisco Catalyst 9130AX APs are decoding Extensible Authentication Protocol (EAP) request ID incorrectly.

CSCwe17593

Cisco Catalyst 9115 AP in workgroup bridge (WGB) stops sending traffic to the root AP after about 60 seconds from its initial connection.

CSCwe18846

6-Ghz RRM channel change is observed due to sudden spike in noise.

CSCwe30473

Radio firmware reloads unexpectedly due to a frozen RC queue.

CSCwe31030

Cisco Catalyst 9105AXW APs are crashing.

CSCwe32005

Cisco Catalyst 9130 AP: Packet loss is observed on Digital Signage device.

CSCwe38243

Cisco DNA Centre: Tx power change is not getting applied on controller and AP.

CSCwe43294

Cisco Catalyst 9105AXW AP and Cisco Aironet 1815W Flex RLAN AP does not apply VLAN in the ethernet port after AAA vlan override.

CSCwe44991

Cisco Catalyst 9105AX AP: Kernel panic crash is observed.

CSCwe45300

Cisco Catalyst 9120 AP: Sending Msg:2 in mode:2 to hostapd failed.

CSCwe45894

Cisco AP is not forwarding IGMPv3 query to wireless clients.

CSCwe45970

Cisco Catalyst 9105 AP is stuck in U-BOOT.

CSCwe50033

Cisco Catalyst 9120AX AP: Clients are continuously disconnecting if more than 10 clients are using MS TEAMS.

CSCwe53573

Cisco Aironet 1815W AP: Kernel panic with radio stats crash.

CSCwe55494

Cisco Aironet 1832 AP is not sending packets to radio.

Open Caveats for Cisco IOS XE Amsterdam 17.3.8

Identifier

Headline

CSCvg70549

Error propagation from wncd back to manageability agent through wncmgrd.

CSCvy89508

The primary member displays "standby hot" even though the standby is in recovery mode.

CSCwd96484

Controller is reloading unexpectedly generating "wncd" core files.

CSCwe38431

Controller is remarking SIP packets from CS3 to CS0 in upstream/downstream when voice cac is configured.

CSCvu29470

Cisco Catalyst 9130 Series APs are not updated as monitor in Current-Band in the show ap fra command.

CSCvu49203

The show ap fra command output on the controller is not aligned properly.

CSCvu49930

Channel change to 165 and channel width change to 20 fails via OC when the AP is configured with channel width 40.

CSCvu75020

The FRA timer does not work on the show ap fra command.

CSCvv38005

Logging message not seen when the noise threshold is moved to passed or failed for XOR radio (5-Ghz).

CSCvz82490

WPA3-Suite B: Incorrect APUT response to STA incorrect TLS authentication parameters.

CSCwc51857

Controller GUI displays 802.1x with a lowercase 'x' instead of 802.1X with a capital 'X'.

CSCwc62824

Controller does not send LLC or XID spoofed frames after a mobility event.

CSCwc86955

Dual DFS stats on AP do not match controller information.

CSCwd73783

Cisco Catalyst 9800-L Series Controller: Observed qfp-ucode-wlc crash.

CSCwe22625

Controller GUI goes blank after logging in if username has '&'.

CSCwe25610

Client delete initiated. Reason: CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE - Mobility Local.

CSCwe31270

Clients stop passing traffic when there is a missing bandwidth limit AAA attribute on the controller.

CSCvw51315

Cisco Catalyst 9120 AP: Kernel panic is seen on AP when client is disconnected and connected back with Target Wake Time (TWT) session.

CSCvw59760

ECDHE ciphers are not listed when WLAN Common Criteria (WLAN CC) is enabled.

CSCvw64170

After changing channel and bandwidth of AP (with SIA), antenna shows incorrect legal/configured gain.

CSCvx03815

Cisco Catalyst 9120AX AP+SIA-DART: Initial configuration for slot 0 show configured gain value as 0.

CSCvy16422

Cisco Catalyst 9115 and 9120 APs are crashing: WL_REINIT_RC_MQ_ERROR.

CSCvy92773

Cisco Catalyst 9117 AP: Crash is observed on Slot 1.

CSCvz16102

Cisco Catalyst 9105i OEAP is crashing due to kernel panic.

CSCvz16109

Cisco Catalyst 9105w Office Extend Access Points (OEAP) is crashing due to kernel panic.

CSCvz18045

Cisco Catalyst 9130 AP: Probe suppression for Macro-Micro cell client steering is not supported.

CSCvz59428

Unclear reason for radio reset due to role change sent from controller to Cisco DNA Center.

CSCvz78407

Tx power mismatch on RAP & MAP even though same power is set on RAP & MAP.

CSCvz99564

Cisco APs are not assigned up with IPv6 addresses after upgrade from 17.6.1 to 17.6.2 or 17.7.1.

CSCwa11312

Cisco Catalyst 9124E AP: Max transmit power is being capped for some domains resulting in 3 to 4dB less power.

CSCwa38528

Cisco Catalyst 9105w OEAP: CAPWAP DTLS session is closed for AP due to DTLS server session shutdown.

CSCwa90838

Firmware crash is observed on Radio 1 on the Cisco Catalyst 9130 AP in FlexConnect mode.

CSCwa96037

Cisco Catalyst 9120 AP: Radio crash is observed on Slot 0.

CSCwb38948

Cisco Catalyst 9124 AP: MAPs are no longer able to join RAP due to security failures.

CSCwb84844

Cisco Catalyst OEAP 9105w CAPWAP DTLS session closed for AP, due to DTLS shutdown.

CSCwc10696

Regular ASR support field is disabled for supporting clients.

CSCwc95496

Cisco Catalyst 9130 AP: Radio crash is observed.

CSCwd06001

Linux iosd crash on standby controller during reload of the Cisco Catalyst 9800-L Wireless Controller.

CSCwd78616

Cisco Catalyst AP9115 Tx power high and abnormal Dynamic Channel Assignment (DCA) channel assignment due to no neighbors.

CSCwd79502

Controller is tracking stale entry due to anchored client getting IPv4 and IPv6 in different VLANs.

CSCwd90742

Cisco Catalyst 9120AX AP kernel crash - PC is at rhb_del_interface+0xc.

CSCwd93773

Controller should not enable second 5-Ghz radio for 9124E with PoE+ (30W).

CSCwd96333

Cisco Wave 1 AP is crashing on CAPWAP restart from the controller.

CSCwe11747

Cisco Catalyst 9130AX APs are decoding Extensible Authentication Protocol (EAP) request ID incorrectly.

CSCwe17593

Cisco Catalyst 9115 AP in workgroup bridge (WGB) stops sending traffic to the root AP after about 60 seconds from its initial connection.

CSCwe18846

6-Ghz RRM channel change is observed due to sudden spike in noise.

CSCwe30473

Radio firmware reloads unexpectedly due to a frozen RC queue.

CSCwe31030

Cisco Catalyst 9105AXW APs are crashing.

CSCwe32005

Cisco Catalyst 9130 AP: Packet loss is observed on Digital Signage device.

CSCwe38243

Cisco DNA Centre: Tx power change is not getting applied on controller and AP.

CSCwe43294

Cisco Catalyst 9105AXW AP and Cisco Aironet 1815W Flex RLAN AP does not apply VLAN in the ethernet port after AAA vlan override.

CSCwe44991

Cisco Catalyst 9105AX AP: Kernel panic crash is observed.

CSCwe45300

Cisco Catalyst 9120 AP: Sending Msg:2 in mode:2 to hostapd failed.

CSCwe45894

Cisco AP is not forwarding IGMPv3 query to wireless clients.

CSCwe45970

Cisco Catalyst 9105 AP is stuck in U-BOOT.

CSCwe50033

Cisco Catalyst 9120AX AP: Clients are continuously disconnecting if more than 10 clients are using MS TEAMS.

CSCwe53573

Cisco Aironet 1815W AP: Kernel panic with radio stats crash.

CSCwe55494

Cisco Aironet 1832 AP is not sending packets to radio.

Open Caveats for Cisco IOS XE Amsterdam 17.3.7

Identifier

Headline

CSCvg70549

Error propagation from wncd back to manageability agent through wncmgrd.

CSCvy89508

The primary member displays "standby hot" even though the standby is in recovery mode.

CSCwd96484

Controller is reloading unexpectedly generating "wncd" core files.

CSCwe38431

Controller is remarking SIP packets from CS3 to CS0 in upstream/downstream when voice cac is configured.

CSCvu29470

Cisco Catalyst 9130 Series APs are not updated as monitor in Current-Band in the show ap fra command.

CSCvu49203

The show ap fra command output on the controller is not aligned properly.

CSCvu49930

Channel change to 165 and channel width change to 20 fails via OC when the AP is configured with channel width 40.

CSCvu75020

The FRA timer does not work on the show ap fra command.

CSCvv38005

Logging message not seen when the noise threshold is moved to passed or failed for XOR radio (5-Ghz).

CSCvz82490

WPA3-Suite B: Incorrect APUT response to STA incorrect TLS authentication parameters.

CSCwc51857

Controller GUI displays 802.1x with a lowercase 'x' instead of 802.1X with a capital 'X'.

CSCwc62824

Controller does not send LLC or XID spoofed frames after a mobility event.

CSCwc86955

Dual DFS stats on AP do not match controller information.

CSCwd22364

Unexpected error messages flooding in RA logs for successful client joins.

CSCwd73783

Cisco Catalyst 9800-L Series Controller: Observed qfp-ucode-wlc crash.

CSCwe22625

Controller GUI goes blank after logging in if username has '&'.

CSCwe25610

Client delete initiated. Reason: CO_CLIENT_DELETE_REASON_REMOTE_MOBILITY_DELETE - Mobility Local.

CSCwe31270

Clients stop passing traffic when there is a missing bandwidth limit AAA attribute on the controller.

CSCwe39039

Traceback is seen after provisioning controller from Cisco DNA Centre.

CSCvw51315

Cisco Catalyst 9120 AP: Kernel panic is seen on AP when client is disconnected and connected back with Target Wake Time (TWT) session.

CSCvw59760

ECDHE ciphers are not listed when WLAN Common Criteria (WLAN CC) is enabled.

CSCvw64170

After changing channel and bandwidth of AP (with SIA), antenna shows incorrect legal/configured gain.

CSCvx03815

Cisco Catalyst 9120AX AP+SIA-DART: Initial configuration for slot 0 show configured gain value as 0.

CSCvy16422

Cisco Catalyst 9115 and 9120 APs are crashing: WL_REINIT_RC_MQ_ERROR.

CSCvy92773

Cisco Catalyst 9117 AP: Crash is observed on Slot 1.

CSCvz16102

Cisco Catalyst 9105i OEAP is crashing due to kernel panic.

CSCvz16109

Cisco Catalyst 9105w Office Extend Access Points (OEAP) is crashing due to kernel panic.

CSCvz18045

Cisco Catalyst 9130 AP: Probe suppression for Macro-Micro cell client steering is not supported.

CSCvz59428

Unclear reason for radio reset due to role change sent from controller to Cisco DNA Center.

CSCvz78407

Tx power mismatch on RAP & MAP even though same power is set on RAP & MAP.

CSCvz99564

Cisco APs are not assigned up with IPv6 addresses after upgrade from 17.6.1 to 17.6.2 or 17.7.1.

CSCwa11312

Cisco Catalyst 9124E AP: Max transmit power is being capped for some domains resulting in 3 to 4dB less power.

CSCwa13091

Tx power changes are not getting applied to the AP.

CSCwa38528

Cisco Catalyst 9105w OEAP: CAPWAP DTLS session is closed for AP due to DTLS server session shutdown.

CSCwa90838

Firmware crash is observed on Radio 1 on the Cisco Catalyst 9130 AP in FlexConnect mode.

CSCwa96037

Cisco Catalyst 9120 AP: Radio crash is observed on Slot 0.

CSCwb38948

Cisco Catalyst 9124 AP: MAPs are no longer able to join RAP due to security failures.

CSCwb84844

Cisco Catalyst OEAP 9105w CAPWAP DTLS session closed for AP, due to DTLS shutdown.

CSCwc10696

Regular ASR support field is disabled for supporting clients.

CSCwc95496

Cisco Catalyst 9130 AP: Radio crash is observed.

CSCwd06001

Linux iosd crash on standby controller during reload of the Cisco Catalyst 9800-L Wireless Controller.

CSCwd78616

Cisco Catalyst AP9115 Tx power high and abnormal Dynamic Channel Assignment (DCA) channel assignment due to no neighbors.

CSCwd79502

Controller is tracking stale entry due to anchored client getting IPv4 and IPv6 in different VLANs.

CSCwd90742

Cisco Catalyst 9120AX AP kernel crash - PC is at rhb_del_interface+0xc.

CSCwd93773

Controller should not enable second 5-Ghz radio for 9124E with PoE+ (30W).

CSCwd96333

Cisco Wave 1 AP is crashing on CAPWAP restart from the controller.

CSCwe11747

Cisco Catalyst 9130AX APs are decoding Extensible Authentication Protocol (EAP) request ID incorrectly.

CSCwe17593

Cisco Catalyst 9115 AP in workgroup bridge (WGB) stops sending traffic to the root AP after about 60 seconds from its initial connection.

CSCwe18846

6-Ghz RRM channel change is observed due to sudden spike in noise.

CSCwe22861

Observing AID leak in Cisco Wave 2 APs in FlexConnect mode.

CSCwe30473

Radio firmware reloads unexpectedly due to a frozen RC queue.

CSCwe31030

Cisco Catalyst 9105AXW APs are crashing.

CSCwe32005

Cisco Catalyst 9130 AP: Packet loss is observed on Digital Signage device.

CSCwe38243

Cisco DNA Centre: Tx power change is not getting applied on controller and AP.

CSCwe43294

Cisco Catalyst 9105AXW AP and Cisco Aironet 1815W Flex RLAN AP does not apply VLAN in the ethernet port after AAA vlan override.

CSCwe44216

Cisco AP reloads unexpectedly due to kernel panic.

CSCwe44991

Cisco Catalyst 9105AX AP: Kernel panic crash is observed.

CSCwe45300

Cisco Catalyst 9120 AP: Sending Msg:2 in mode:2 to hostapd failed.

CSCwe45894

Cisco AP is not forwarding IGMPv3 query to wireless clients.

CSCwe45970

Cisco Catalyst 9105 AP is stuck in U-BOOT.

CSCwe50033

Cisco Catalyst 9120AX AP: Clients are continuously disconnecting if more than 10 clients are using MS TEAMS.

CSCwe53573

Cisco Aironet 1815W AP: Kernel panic with radio stats crash.

CSCwe54482

Cisco Catalyst 9120 AP is dropping DHCP offer in click. Not forwarding to wireless interface.

CSCwe55494

Cisco Aironet 1832 AP is not sending packets to radio.

Open Caveats for Cisco IOS XE Amsterdam 17.3.6

Caveat ID

Description

CSCvv25522

Cisco Catalyst 9120 AP + SIA Antenna: The power table changes need to be modified for 4 dBi preconfigured gain value.

CSCvz59428

The reason for radio reset is unclear due to the role change sent from the controller to Cisco DNAC.

CSCwa68709

Cisco Catalyst 9115 AP reports Dynamic Frequency Selection (DFS) in channels incorrectly: "blocked list due to be cleared".

CSCwa75050

Factory reset using a physical button does not work always.

CSCwa88940

Unexpected reload occurs in Cisco Catalyst 9105, 9115, or 9120 APs when Target Wake Time (TWT) is enabled.

CSCwc02477

Cisco Catalyst 9130 AP does not transmit EAP identity request.

CSCwc62749

Cisco Catalyst 9100 AP does not try to resolve the PnP network time protocol (NTP) public servers.

CSCvv83264

Cisco Catalyst 9120AX AP detects correctable ECC error while booting up.

CSCvw28085

Access Point show logging is flooded with "syslog: parse_tx_bcn: Bcn payload is NULL" syslog messages.

CSCvz90902

Cisco Catalyst 9130 AP: Probe suppression for Macro-Micro cell client steering does not work.

CSCwb08291

Cisco Catalyst 9105AXW AP introduces latency when clients use RLAN ports.

CSCwb41815

AP does not copy the DHCP ACK packets to the controller after cts manual is enabled in the switch, in 8.10.

CSCwc15898

CleanAir data is missing for 2.4-GHz in some of the Cisco Catalyst 9120 or 9130 APs.

CSCwc30521

Workgroup bridge (WGB) breaks in Pre-Shared Key (PSK) with key length of 63.

CSCwc38912

LWA client is deleted immediately when joining Flex WLAN after a Site or Policy Tag change.

CSCwc64201

Cisco Catalyst 9105 AP as WGB fails to forward packets OTA, producing gaps in the communication.

CSCwc67150

Dynamic Channel Assignment (DCA) triggering multiple channel changes in 2.4-GHz in clean environment.

CSCwc72194

Client connectivity suffers in Cisco Catalyst 9120 AP due to radio core dump.

CSCwc73462

Backslash "\" at the end of the RADIUS servers' shared secret is not allowed for FlexConnect groups configuration.

CSCwc81467

RHL reset is observed in Cisco Catalyst 9120 AP.

CSCvg70549

Error propogates from WNCD back to manageability agent through WNCMGRD.

CSCwa44734

WNCD crash is observed at wsa_clt_evt_cache_update during the client join process with Cisco DNAC auth rate testing.

CSCwc68682

Cisco Catalyst 9800 Wireless Controller - Link down due to local fault.

CSCvu49930

Channel change to 165 width 20 fails with the OC model, when an AP is configured with channel width 40.

CSCvy85037

Cisco Catalyst 9800-CL controller logs spectrum process tracebacks.

CSCwa93208

FlexConnect WLAN VLAN mapping disappears when VLAN name is defined in the FlexProfile.

CSCwc26819

Controller does not send LLC or XID spoofed frames after a mobility event.

CSCwc36125

RRM startup mode gets triggered in every reboot as the controller does not keep track of the last state.

CSCwc51857

The controller GUI displays 802.1x with a lowercase 'x' instead of 802.1X, with a capital 'X'.

CSCwc62824

Controller does not send LLC or XID spoofed frames after a mobility event.

CSCwc72047

APs operate in disabled RF profile channels in Cisco IOS XE 17.6.2.

CSCwc76905

SISF crash is observed when handling DHCP messages.

CSCwc77604

AP does not join the controller due to CAPWAP data tunnel plumb failure.

Open Caveats for Cisco IOS XE Amsterdam 17.3.5a

Caveat ID

Description

CSCvt99760

Crash occurs when Btrace modules exceed the initial maximjm number of registrations.

CSCwa37701

The controller standby chassis shows Cisco Unknown Power Supply and the same serial number in the show inventory command output.

CSCwa25291

Configures the APs workflow to Resume or Cancel errors.

CSCvz96924

Cisco Catalyst 9130 series AP does not send M1 over the air.

CSCwa14744

Cisco Catalyst 9130 Series AP crash - PC is at __qdf_bug+0x0/0x8 osif_delete_vap_wait_and_free.

CSCwa31596

Cisco Catalyst 9130 Series high channel utilization and client lags with 9 or more clients using MS Teams.

CSCwa33917

Cisco Catalyst 9130AXI AP changes the Domain Name System (DNS) information from the Dynamic Host Configuration Protocol (DHCP) offer packet.

CSCwa52440

Cisco Catalyst 9117 Series APs crashes due radio failure (radio recovery failed) Beacons stuck on Radio 1.

CSCwa54223

Incorrect campus maps information on CMX 10.6.2-89.

CSCwa64749

Cisco Catalyst 9130 Series AP driver declines authorization request causing 11w client join issues.

CSCwa65318

Tx power for Microcell created by AP for slot 2 of Cisco Catalyst 9130 Series AP.

CSCwa71189

Cisco Catalyst 9130 Series AP crashes on CAPWAP after joining with the controller.

CSCwa75901

Cisco Catalyst 9117 Series AP Beacon Struck - crash due to radio failure (radio recovery failed).

Open Caveats for Cisco IOS XE Amsterdam 17.3.4c

Caveat ID

Description

CSCvy37945

Cisco Catalyst 9130AX Series Access Point reboots continuously.

CSCvv74550

Memory leak in Session Manager Daemon (sessmgrd) during WebAuth configuration.

CSCvy03953

Cisco Catalyst 9130AX Series Access Points experiences crash kernel panic error.

CSCvy28620

Cisco Catalyst 9120AX Series Access Points in FlexConnect local-switching central auth, sends unencrypted WPA1 TKIP M5 packets.

CSCvy37953

Cisco Wave 2 APs unable to establish DTLS connection with the controller until it is rebooted.

CSCvy51818

Cisco Catalyst 9115 Series Access Point randomly crashes due to kernel panic error.

CSCvy52874

Cisco Catalyst 9115 Series Access Point crashed after loading the 17.3.3 ES6 image.

CSCvy66944

Cisco Catalyst 9120AX Series Access Point does not forward downstream packets to the device.

CSCvy67650

Cisco Catalyst 9800 Series Wireless Controllers does not reply to TCP packets punted to CPU for redirect when banner size >200 in global param-map .

Open Caveats for Cisco IOS XE Amsterdam 17.3.4

Caveat ID

Description

CSCvy37945

Cisco Catalyst 9130AX Series Access Point reboots continuously.

CSCvv74550

Memory leak in Session Manager Daemon (sessmgrd) during WebAuth configuration.

CSCvy03953

Cisco Catalyst 9130AX Series Access Points experiences crash kernel panic error.

CSCvy28620

Cisco Catalyst 9120AX Series Access Points in FlexConnect local-switching central auth, sends unencrypted WPA1 TKIP M5 packets.

CSCvy37953

Cisco Wave 2 APs unable to establish DTLS connection with the controller until it is rebooted.

CSCvy51818

Cisco Catalyst 9115 Series Access Point randomly crashes due to kernel panic error.

CSCvy52874

Cisco Catalyst 9115 Series Access Point crashed after loading the 17.3.3 ES6 image.

CSCvy66944

Cisco Catalyst 9120AX Series Access Point does not forward downstream packets to the device.

CSCvy67650

Cisco Catalyst 9800 Series Wireless Controllers does not reply to TCP packets punted to CPU for redirect when banner size >200 in global param-map .

Open Caveats for Cisco IOS XE Amsterdam 17.3.3

Caveat ID

Description

CSCvx17425

DFS detection optimization to avoid false DFS detection in Cisco Catalyst 9115 Series APs.

CSCvx19602

Cisco Catalyst 9120 Series AP beacon stuck after moving from channel UNII 1 to UNII 2.

Open Caveats for Cisco IOS XE Amsterdam 17.3.2a

Caveat ID

Description

CSCvu66043

Cisco Aironet 9130 APs are not sending DHCP messages over the air.

CSCvv93995

Cisco Catalyst 9115 Series Wi-Fi 6 Access Point: Clients are unable to connect due to persistent Tx error on radio.

CSCvv99213

Cisco Catalyst 9130AXE Series Access Points are not taking RF tag power settings on slot 2.

CSCvw01612

Cisco Catalyst 9130AX Series Access Points are not sending M1 over the air.

CSCvw10308

Cisco Catalyst 9130AX Series Access Point is dropping packets and the AP is not able to push packet to click module.

CSCvv97156

Cisco Catalyst 9130AX Series Access Points are dropping some uplink packets from macbooks.

CSCvw13174

AP location string is truncated during join.

CSCvw15298

Cisco Embedded Wireless Controller for an AP is not forwarding downstream traffic after active AP failover.

CSCvu82365

The licensing data of Cisco Embedded Wireless Controller is not replicated to all the AP members.

Open Caveats for Cisco IOS XE Amsterdam 17.3.1

Caveat ID

Description

CSCvr96755

Support for three-step install upgrade with ap image predownload is required.

CSCvs62309

Device is crashing while executing the copy flash:< >.cfg running-config command.

CSCvt35141

Disallow Webauth WLANs from being tagged to authentication servers with load-balancing enabled.

CSCvu17521

Interface speed for the AP is showing as None in Cisco Prime Infrastructure.

CSCvu22410

The dot11n and dot11ac are disabled and configuration is saved. When the controller reloads, they are enabled again.

CSCvu40188

Configuration slot 0 output is updating wrong values for XOR radio when mapped to the custom rf-profile.

CSCvu40529

Radio objects are missing from the RRMradSlot table if AP tag is in mis-configured state.

CSCvu41319

Cisco Aironet 1570 APs are not allowing clients to connect in 5 GHz.

CSCvu53070

AP kernel panic crash (PC is at vfp_reload_hw).

CSCvu58082

Cisco Aironet 3800 AP with data DTLS encryption disconnects from the controller due to CAPWAP keepalive after rx PMTU discovery.

CSCvu65440

CAPWAP multi-window support: AP disconnects post switchover when AP image predownload is in progress.

CSCvu69426

Auto-contain doesn't resume after rogue-client is removed.

CSCvu70630

Rogue rule created is overridden with latest priority.

CSCvu73873

Cisco Catalyst 9800-80 Controller is sending client traffic out of the AP manager interface.

CSCvu76954

Client is connected through dot11n or dot11n even when dot11 options are disabled.

CSCvu89996

AP disjoins after client connects to SSID using LDAP with secure mode.

CSCvu91948

The show command for AP tri-radio Feature is not available in Cisco Embedded Wireless Controller on Catalyst Access Points.

CSCvu92134

Cisco Aironet 2800 AP: Wpa2-psk-aes WLAN client is getting disturbed when AP moves from flex.

CSCvu95179

Spectrum intelligence interference detected by AP is not seen on the controller.

CSCvv01407

Small VM install of controller loses its management trustpoint after every reboot.

CSCvv02099

AP is not rejecting incorrect Fast Transition Auth request.

CSCvv02121

AP is not sending reassociation response.

CSCvv02670

Controller is showing incorrect AP cisco discovery protocol (CDP) information.

CSCvv03370

Cisco Embedded Wireless Controller on Catalyst Access Points: AP image predownload status is empty for most of the APs.

CSCvv03668

Cisco Aironet 3800h AP: Jitter issue with MS-Teams application.

CSCvv04072

Cisco Catalyst 9105 AP: LED is turned off by default.

CSCvv04911

Last switchover reason is shown as active unit removed during ISSU upgrade.

CSCvv09143

Private Pre-Shared-Key (PSK) Pairwise Master Key (PMK) is retained resulting in client delete. Controller is crashing with scaled PPSK join.

CSCvv14121

Cisco DNA-Centre: When AP fails to pre-download image; further attempts to pre-download are getting stuck.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.8

This release comprises only PSIRT fixes. There are no resolved caveats.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.7

Identifier

Headline

CSCvx72883

Controller does not remove 802.1X clients after session-timeout.

CSCvy69496

Remote address attribute missing when accessing controller through GUI using TACACS+ credentials.

CSCwa21431

Controller unexpectedly reloads on DMI authentication task with guestshell enabled.

CSCwc05366

Wireless AAA dynamic VLAN assignment: The wireless clients cannot reach each other.

CSCwc15944

Multicast data not sent to clients; some APs may be unable to join the controller.

CSCwc54410

Controller HA dual active scenario is observed when standby controller is reconnecting to HA pair.

CSCwc57227

Controller experiences an unexpected reset resulting in a system report containing a wncd core file.

CSCwc68682

Link connecting the controllers goes down due to local fault.

CSCwc89183

Controller crash is observed on libewlc_client_dpath_svc.so.

CSCwc93198

Cisco Catalyst 9800-L Wireless Controller does not receive HWDIB down message when RP port goes down in HA, preventing WMI from sending GARP.

CSCwd04571

Memory leak is observed in wncd process when under load.

CSCwd06122

AP Join issues due to stale client entries.

CSCwd08165

Controller is accounting wrong class attribute in accounting packets.

CSCwd08678

Clients not deleted by the controller after session-timeout ("Timer not running" state).

CSCwd12120

Inject path crash is observed on controller switch on IPv6_qos.

CSCwd16409

User-agent details needs to be truncated to string length 234 in WSA to prevent vstring corruption.

CSCwd30578

Wired guest client are stuck at IP_LEARN with DHCP packets not forwarded out of the foreign to anchor.

CSCwd35577

Double bit ECC error causes the standby controller to reload.

CSCwd41108

Multiple Cisco Catalyst 9130AXE APs with DART connectors stuck at channel 36.

CSCwd46721

Controller stays in the IP_THEFT state indefinitely due to stale client entries in the ODM database.

CSCwd47741

Controller fails to update DCA channels as RRM is stuck.

CSCwd56621

Controller GUI logging buffer size display is incorrect.

CSCwd59423

Unexpected reload on the controller caused by WNCd process after removing a VLAN from a VLAN-GROUP.

CSCwd63861

SIGSEGV crash is observed when incrementing roaming statistics.

CSCwd69780

Controller crashes due to NetFlow watchdog. Observed CPU hog in the wncmgrd process due to NetFlow scale.

CSCwd90472

Adding static IP MAC binding to device tracking fails.

CSCwe14729

Controller reloads due tomemory corruption when processing DHCP Reply Option82.

CSCwe18012

Standby controller crashes while saving tbl QoS table.

CSCvz94649

Controller sends new Access-Requests using previous packet id.

CSCwc76905

Switch Integrated Security Features (SISF) crash is observed when handling the DHCP messages.

CSCwd00711

WPA3 and OWE transition enabled: Non-WPA3 clients get network access in "webauth-pending" state.

CSCwd04025

PI 3.10.1: Associated APs with controller displays interface mode type as "Half duplex".

CSCwd06018

802.11r re-auth failed due to invalid Pairwise Master Key ID (PMKID) while doing inter-WNCD roaming.

CSCwd12754

CAPWAP wireless traffic is getting the same Security Group Tag (SGT) as the corresponding incoming wired traffic.

CSCwd23681

Controller fails to update AP configuration with error
% Error: no ap_name exists
.

CSCwd32107

Cisco Aironet 2700 AP: Ignore CAPWAP_PAYLOAD: AP_LAN_CONFIG payload having invalid RLAN port enable value.

CSCwd34890

Clients are getting deauth immediately after getting IP address in LWA+LocalSW+CentralAuth.

CSCwd34908

Controller does not follow the DCA sensitivity threshold.

CSCwd46770

License: Remove reporting interval (fixed 8 hours) and change Sync report to a user action.

CSCwd52938

Wired clients behind WGB do not get IP addresses for anchor WLAN.

CSCwd56391

Controller does not provide RSSI location data for some of the RFID tags in the database.

CSCwd90380

Access point page shows Power Mode as unknown power.

CSCwd95618

The device-tracking binding reachable-lifetime command does not work.

CSCwd98332

Controller crashes after failing to match the interface ID in the anchor message.

CSCwe11547

Crash is seen on "Critical process rrm fault on rp_0_0 (rc=139)".

CSCwe12057

Controller QoS page does not load when ACL has double quotes as special character in the name.

CSCwd37092

Cisco Aironet 2800, 3800, 4800, 1562, and 6300 series APs: Slow TCP downloads, failing EAP-TLS.

CSCwd40731

AP reloads due to kernel panic.

CSCvx32806

Cisco Wave 2 APs stuck in bootloop due to image checksum verification failure.

CSCwa68709

Cisco Catalyst 9115 AP reports DFS on channels incorrectly: "Blocked list due to be cleared".

CSCwb34231

Cisco Catalyst 9115 AP: Power saving client state on radio.

CSCwb59227

Cisco Catalyst 9105w AP is crashing due to kernel panic.

CSCwb82694

Cisco Catalyst 9105/9115/9120 series APs are unable to handle out of order packets.

CSCwc02477

Cisco Catalyst 9130 AP does not transmit EAP identity request.

CSCwc32182

Radio firmware crashes in Cisco Aironet 1850 Series Access Points.

CSCwc55632

Cisco Catalyst 9124 MAP fails to connect to Cisco Aironet 1562 RAP after first reload of MAP.

CSCwc67729

Cisco Aironet 1840 OEAP crashed due to radio failure.

CSCwc72194

Cisco Catalyst 9120 AP: Radio core dump.

CSCwc75732

Cisco Aironet 4800 AP: Firmware radio crash is observed.

CSCwc78435

Cisco Catalyst 9130 AP sends incorrect channel list on the "out of band" DFS event, causing client connectivity issues.

CSCwc94898

AP WGB stuck in EAPOL state.

CSCwd00751

Cisco Aironet 2802 AP reloads unexpectedly.

CSCwd03803

Cisco Aironet 1815 APs reboot - PC is at edma_poll or LR is at dma_cache_maint_page.

CSCwd08259

Cisco Catalyst 9120, 9115, and 9105 Access Points experience radio firmware crash with Cisco IOS-XE 17.3 or later releases.

CSCwd10570

Cisco Catalyst 9130 Access Point displays different beacon data-rates for different Basic Service Set Identifiers (BSSIDs).

CSCwd39605

Cisco Catalyst 9117 AP reloads unexpectedly due to kernel panic at console_unlock+0x320/0x3ac.

CSCwd46815

EAP-TLS is failing for the wired clients behind MAP for Cisco 2800, 3800, 4800, 1562, 6300 series APs.

CSCwd47384

Cisco Catalyst 9130 AP: Radio 1 is crashing.

CSCwd52745

Cisco Aironet 3802 AP: Kernel crash is observed.

CSCwd55757

Wave 2 APs reloads unexpectedly due to "Systemd critical process crash - dnsmasq-host.service failed" error.

CSCwd58182

Cisco Aironet 3800 series AP reloads unexpectedly due to kernel panic.

CSCwd60034

Cisco Aironet 3800 AP: Radio reloads unexpectedly due to a stuck beacon.

CSCwd77823

Cisco Catalyst 9130 AP radio firmware reloads unexpectedly.

CSCwd79178

Cisco Aironet 1840 OEAP crashes due to radio failure.

CSCwd81523

Cisco Catalyst 9130 AP is not sending EAP_ID_RESP next assoc-req after PMF client tx deauth in middle of EAP handshake.

CSCwd90909

Cisco Catalyst 9115 AP radio 1 crashes.

CSCwd91054

Cisco Wave 2 APs do not encrypt EAP_ID_REQ after M1-M4, and does not update PMKID for dot1x OKC.

CSCwe04602

Cisco Wave 2 APs fail to forward traffic to wireless client for about 60 seconds in SDA Fabric WLANs.

CSCwe07802

Cisco APs such as 2800, 3800, 4800, and 1562 are dropping upstream EAP packets.

CSCwe35906

Cisco Catalyst 9117 AP: Radio firmware crash is observed.

CSCvv96364

Cisco Aironet 3800 Access Points experienceWCPd crash when running 17.3.1 image.

CSCvw20363

Cisco Aironet 2800 and 3800 APs: WGB fails to connect via PEAP if client certificate is not installed.

CSCvx80422

AP drops packets addressed to 10.128.128.127 or 10.128.128.128.

CSCwa48702

Kernel panic crash in Cisco Catalyst 9130AX Series APs.

CSCwa93884

Cisco iOX app installation fails during app activation phase with the following error: "Error while creating app start up script".

CSCwb08291

Cisco Catalyst 9105AXW AP is introducing latency when clients are using RLAN ports.

CSCwb23886

Cisco Aironet 1810W AP: RLAN DHCP issues with certain client models.

CSCwb34465

Log enhancements for off-channel timeout issues.

CSCwb41815

AP is not copying DHCP ACK packets to the controller after enable "cts manual" on the switch.

CSCwb51757

High channel utilization on 5-GHz radio with 40Mhz.

CSCwb73345

Error flooding on Cisco Catalyst 9120 AP console: RHL: Off-channel done received but there are no pending requests.

CSCwb96560

AppHost: App install fails when USB state is disabled in the AP Join profile.

CSCwc15898

Cisco Catalyst 9120 and 9130 APs: Missing CleanAir data for 2.4GHz.

CSCwc31331

Cisco Catalyst 9130 AP unexpectedly reload in run_timer_softirq.

CSCwc38912

Changing an Access Point site or policy tag to a Flex local switching set intermittently causes client connectivity failure to local web auth WLANs.

CSCwc73462

For FlexConnect group configuration, do not use backslash (\) at the end of the radius servers shared secret.

CSCwc87688

Cisco Catalyst 9120 AP shows very high noise level on 5-GHz radio.

CSCwc88148

Enhancements for MAC suspend issue on driver side.

CSCwc89719

Cisco Aironet 1832 AP reloads unexpectedly due to radio recovery failure.

CSCwd05593

Cisco Catalyst 9120 AP: TX is stuck due to data block PS and AP radio crash.

CSCwd19631

Cisco Catalyst 9120 AP cannot operate in Multigigabit Ethernet (mGig) when Energy Efficient Ethernet (EEE) is enabled on switchport.

CSCwd21996

Cisco Catalyst 9120 AP: CleanAir sensor reloads unexpectedly.

CSCwd36552

Cisco Catalyst 9120 AP reloads unexpectedly due to kernel panic.

CSCwd38925

Cisco Catalyst 9105 AP reloads unexpectedly multiple times.

CSCwd49166

Cisco Aironet 3800 AP consistently reports high QBSS load.

CSCwd59921

Cisco Catalyst 9130 AP is dropping EAP-TLS frames.

CSCwd60376

Cisco Catalyst 9120 AP: Kernel panic is observed.

CSCwd72847

Cisco Catalyst 9115 APs intermittently stop transmitting multicast traffic downstream.

CSCwd74571

Wcpd crashes after reusing freed packets.

CSCwd83840

Cisco Aironet 1830 AP: Wireless clients are unable to connect - "writing to fd 27 failed!".

CSCwe07297

Cisco Catalyst 9120 AP reloads unexpectedly due to radio firmware crash.

CSCwe11476

Cisco Catalyst 9130 AP: Kernel panic with filp_close and do_close values.

CSCwe18185

Day 0 factory image for a new out-of-the-box Cisco Catalyst 9130 AP (VID 03) does not contain iox.tar.gz.

CSCwe19017

Remove unnecessary sercomm root certificates from Cisco Wave 2 APs.

CSCwe19858

Cisco Catalyst 9130 APs advertise incorrect Local Power Constraint value in management frames.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.6

Caveat ID

Description

CSCwa38847

Upgrade from the CCO profile fails when a guest account is used.

CSCwa31596

Cisco Catalyst 9130AX AP experiences high channel utilization and client lags with 9 or more clients using MS Teams.

CSCwa42620

Cisco Catalyst 9130 AP drops packets On-Air for Phoenix WinNonlin application.

CSCwa54943

Cisco Wave 2 APs with RLAN port connected to device running LLDP reboots due to Out-of-Memory.

CSCwa75901

Cisco Catalyst 9117 beacon stuck reloads unexpectedly due to radio failure (radio recovery failed).

CSCwa81190

Cisco Catalyst 9120 AP crashes with null pointer dereference in wlc_wnm_is_wnmsleeping .

CSCwa86015

Cisco Catalyst 9120 AP experiences kernel panic crash.

CSCwa88621

Cisco Catalyst 9120AXI AP: CAPWAPD service failed.

CSCwa90871

Cisco Catalyst 9120 AP running Cisco IOS-XE 17.7.1.11 experiences software crash during the WCPD process.

CSCwa96198

Central Web Authentication (CWA) clients with RUN state cannot go online even though it is in RUN state.

CSCwa96429

Cisco Wave 2 AP disconnects from the controller after a CTS switchport configuration.

CSCwa97033

Cisco Catalyst 9120 AP experiences Kernel crash while bringing up the slot1 radio.

CSCwb05556

Cisco Catalyst 9120 AP does not send multicast data till it snoops IGMPv2.

CSCwb07125

APs detect its own MAC addresses as rogue in slot1 or slot3 intermittently with an empty SSID.

CSCwb08755

Cisco Catalyst 9130 and 9120 APs in FlexConnect mode does not send an SA query.

CSCwb09248

High latency and drops are observed when clients are associated to Cisco Catalyst 9130 AP.

CSCwb09642

Cisco Catalyst 9130 AP reloads unexpectedly with "PC is at run_timer_softirq".

CSCwb11711

Cisco Catalyst 9120 and 9130 APs in FlexConnect mode sends an association request reject message after a first successful connection.

CSCwb19448

Cisco Catalyst 9117 AP reloads unexpectedly due to kernel panic.

CSCwb23976

Cisco Catalyst 9117 AP reloads unexpectedly due to kernel panic.

CSCwb30993

Cisco Catalyst 9117AXI-E AP reports kernel panic crash.

CSCwb34215

Cisco Catalyst 9115AXI-E AP crashes after upgrading to Cisco IOS-XE 17.3.5a.

CSCwb34231

Cisco Catalyst 9115 AP experiences power saving client state in radio.

CSCwb36531

Cisco Catalyst 9130 AP does not process fragmented Extensible Authentication Protocol (EAP) frames from clients, when doing EAP-TLS.

CSCwb53348

Cisco Catalyst 9130 APs generate radio coredumps.

CSCwb62329

Cisco Catalyst 9120 AP does not send A-MPDUs for WPA1 AES clients in WPA1 and WPA2 mixed modes.

CSCwb70757

Cisco Catalyst 9130 AP reloads unexpectedly due to kernel panic.

CSCwb94209

Cisco Catalyst 9115 AP: The Mode reset button does not clear the CC mode and console blocking configuration.

CSCwb95980

Cisco Catalyst 9130 AP experiences kernal crash.

CSCwc06293

Cisco Catalyst 9120 AP stops beaconing.

CSCwc09461

Cisco Catalyst 9120 APs send authentication response frames to clients after long delays.

CSCwc20929

APP hosting segmentation does not work in Cisco Catalyst 9100 AP and Cisco Catalyst 9800 controller running Cisco IOS-XE 17.6.3.

CSCvv20610

Workgroup bridge (WGB) does not support pre-shared key (PSK) with 63 characters.

CSCvz66623

Clients with EAP-TLS behind the Mesh Access Point (MAP) fails.

CSCwa05828

Cisco Catalyst 9105 AP does not respond to the controller's Discovery Response. Error connecting Transport Layer Security (TLS) context is displayed.

CSCwa33537

Cisco Catalyst 9117AX AP radio reloads unexpectedly due to partial command issues.

CSCwa36216

Cisco Catalyst 9120AXI AP sends weaker beacons than Cisco Aironet 2802I AP.

CSCwa53727

Cisco Catalyst 9117AX AP reloads unexpectedly.

CSCwb02488

Cisco Catalyst 9120 AP experiences Kernel crash when PC is at number.isra and LR is at vsnprintf.

CSCwb05569

Cisco Catalyst 9130 AP does not transmit beacons randomly.

CSCwb19680

Incorrect kernel assertion is observed while checking invalid timer objects.

CSCwb19993

Cisco Wave 2 AP looses configuration after an upgrade.

CSCwb45599

Cisco AP reloads unexpectedly with ppr_create_prealloc+0xbc.

CSCwb73294

Cisco Catalyst 9105 AP experiences low throughput with AX clients with adjacent channel interference in 2.4-GHz radio.

CSCwb76882

Cisco Catalyst 9130 AP detects its own BSSID as rogue in a 5-GHz channel.

CSCwb98247

Cisco AP reloads unexpectedly in "wlan_objmgr_peer_release_ref" running Cisco IOS-XE 17.3.5.

CSCwc05350

Cisco Wave 2 APs: CAPWAP MTU flapping occurs due to asymmetric MTU between AP to controller and vice-versa.

CSCwc07002

AP crash is observed due to kernel panic.

CSCwc35321

Cisco Wave 2 APs in local mode sends address resolution protocol (ARP) requests to wireless clients from 10.128.128.128 IP address.

CSCwc51428

Cisco Catalyst 9130 AP experiences kernel panic.

CSCwc51894

Cisco Catalyst 9117 AP reloads unexpectedly due to kernel panic.

CSCwc54470

The config boot crashkernel enable Cisco Wave 2 AP command does not generate kernel core to USB.

CSCwc60528

Assert crash is observed in Cisco Catalyst 9120 AP with MR8.

CSCwc71198

CAPWAP flapping is observed when VRRPv3 is present in the network.

CSCwb13784

APs are unable to join the controller due to invalid path MTU in the AP Join request.

CSCvu37120

Dataplane classification error is observed in WLCLIENT-IF interface.

CSCvx17641

Cisco Catalyst 9105 AP experiences WNCD traceback followed by WNCD crash.

CSCvx28901

The "% TDL error" is displayed while configuring clients under manual exclusion list in Cisco IOS-XE 17.6.1.

CSCvy30606

Cisco Catalyst 9800 Wireless Controller fails to update sdn-network-infra-iwan key after a year.

CSCvy53756

Pubd crash is observed with tdl_get_manifested_type_info_ptr_mem in 200 APs mesh configuration with telemetry subscriptions.

CSCvy63924

Telemetry: Cisco IOS-XE controller crashes after using show telemetry ietf subscription all command.

CSCvz82509

GUI does not load the AVC page from Configuration > Services > AVC.

CSCwa50929

Controller crashes within 10 minutes after starting the pure intra wnc roam at 600 clients per second.

CSCwa67566

Controller rejects clients with wrong PMKID when changing AKM from FT to dot1x and FT again.

CSCwa69631

Controller crashes during webauth AAA routines generating WNCD core.

CSCwa70649

Improve serviceability to figure out the reason for blacklisting 802.11w client.

CSCwa73294

The show commands, HTTPS, and SNMP stops working in Cisco Catalyst 9800-80 Wireless Controller 17.3.5, when DBM process CPU stays high at 100%.

CSCwa76898

WLAN stopped broadcasting after a configuration change in the WLAN profile.

CSCwa77214

Controller crashes at ewlc_wlanmgr_wlan_ref_count_cleanup_timer_cb.

CSCwa78384

Segfault is seen when updating the 802.11 client parameters.

CSCwa82644

Controller displays incorrect available bandwidth calculations for QBSS_AAC with voice CAC and FlexConnect AP.

CSCwa88790

Controller crashes during mobility routines generating WNCD core.

CSCwa99904

Controller deletes the client when DHCP RELEASE is sent by the client during Posture.

CSCwb05014

Controller crashes in WNCD when changing the "mac ip binding" configuration.

CSCwb09214

Controller sends QBSS_AAC with zero available bandwidth after DEL TS.

CSCwb21141

Cisco Catalyst 9800 Wireless Controller related WLAN configuration is not pushed to APs during a specific WNCD.

CSCwb24037

Client gets stuck in Authenticating state after failing the Broadcast key rotation process.

CSCwb35196

High CPU utilization is observed in WNCD due to continuous logs in ra_trace.

CSCwb37940

Clients randomly gets excluded in the Controller with the "CO_CLIENT_DELETE_REASON_EXCLUDE_VLAN_FAIL" reason.

CSCwb39307

AAA server does not mark as UP, even unreachable, and client does not authenticate through the server.

CSCwb42717

Cisco Catalyst 9800-80 Wireless Controller resets unexpectedly while freeing CAPWAP messages.

CSCwb45089

The controller HTTPS access is broken after an upgrade to Cisco IOS-XE 17.3.5a.

CSCwb47046

WNCMGRD process memory leak is observed in Cisco IOS-XE 17.8.

CSCwb57391

Controller deletes clients after roaming with "CO_CLIENT_DELETE_REASON_IP_DOWN_NO_IP" reason.

CSCwb65356

Controller reloads due to critical WNCD fault.

CSCwb69531

Controller initiates EAPOL retries for the client in the RUN state.

CSCwb73136

Clients in the RUN state are unable to pass traffic after Change of Authorization (CoA) is completed.

CSCwb80500

Memory leak is observed in the WNCD process due to unknown responses from the RADIUS server.

CSCwc01644

Cisco Wave 2 APs use native VLAN instead of VLAN used in the Policy Profile.

CSCwc14629

GUI takes a long time to display the initial page due to http request wirelessDeviceSummary.

CSCwc22468

Client traffic fails when client roams between APs with a transition between dot11r and dot11i.

CSCwc32226

Zebra RF Gun clients are unable to get the IP address and gets stuck in IPLEARN STATE.

CSCwc34322

Controller deletes client due to DELETE_REASON_MOBILITY_FAILURE triggered by WEBAUTH_ON_MAB_FAILURE_ROAM.

CSCwc42784

Client fails to connect when protocol based Quality of Service (QoS) is configured.

CSCwc59518

Cisco Catalyst 9800-80 Wireless Controller crashes with a critical process WNCD fault.

CSCvy69694

AP network icon is missing in the 17.5.1 GUI for Privilege Level 1 users instead you get to view the config icon.

CSCwa52721

AP does not assign native VLAN when there is no vlan-id configured in the Policy Profile.

CSCwa56574

"Band Selection" does not change from 2.4-GHz to 5-GHz when performing the operation using 2.4-GHz radios.

CSCwa74884

Controller sends wrong payload information to AP when mesh RRM is enabled or disabled.

CSCwa77027

RADSEC counter always remain zero.

CSCwa82133

Controller crashes with "Critical process nmspd fault on rp_0_0 (rc=1)".

CSCwa94092

ARP Broadcast in GUI is shown as DISABLED for some VLANs even though it is enabled in VLAN configuration.

CSCwa95336

Static workgroup bridge (WGB) client does not move to RUN state in the controller.

CSCwa99102

The controller GUI does not display trustpoints in the PKI Management Trustpoints tab.

CSCwb05825

MAC authentication bypass (MAB) client does not move to exclude state during a MAB failure.

CSCwb15031

Client is unable to pass traffic after roaming using WPA2 Opportunistic Key Caching (OKC).

CSCwb15884

Memory depletion and high WAN latency is observed in FlexConnect deployment.

CSCwb17280

Japanese GUI displays wrong Mesh information.

CSCwb22347

EWC - Image download profile special character support.

CSCwb22867

WNCD process crash is observed when applying Cisco ATF profiles.

CSCwb26543

Ethernet over GRE (EoGRE) client traffic stops working after an SSO.

CSCwb28057

Cisco Catalyst 9800-CL Cloud Wireless Controller crashes after updating the WLAN configuration.

CSCwb35761

Incorrect VLAN is assigned to initiate SIP when SIP and AAA override combination is used.

CSCwb37457

Standby controller crashes when the controller is configured in RMI+RP High Availability mode and wired guest feature.

CSCwb39675

AP XOR radio role mismatch between GUI and CLI.

CSCwb43261

Dropping the packets in Cisco Catalyst 9800-CL Cloud or Cisco Catalyst 9800-L Wireless Controller when the call snooping is enabled and call cannot be established.

CSCwb45549

Controller Web UI does not allow WPA-TKIP only configuration.

CSCwb47040

Controller does not update radio frequency identification (RFID) location properly.

CSCwb58100

Unable to map SSID with spaces in it on an attribute list.

CSCwb63861

WLAN clear refcount command does not accept WLAN names with special characters.

CSCwb64761

Controller discards the location updates from radio frequency identification (RFID) tags.

CSCwb67450

The show process cpu platform sorted command is required in show tech wireless .

CSCwb93513

Stale client entries are not deleted and stuck in device-tracking database.

CSCwb99793

CRL verification failure results in 400 Bad Request with DigiCert.

CSCwc41358

Controller MAC filtering: WLAN profile column displays the WLAN name and description.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.5a

Caveat ID

Description

CSCwa12204

Controller does not send the correct association ID (AID), causing APs to reject new client associations.

CSCvz89976

The controller crashes due to 17.3.4 version to Work Group Bridge (WGB).

CSCwa23632

Cisco Catalyst 9800-80 Wireless Controller crashes on 17.3.4ES9 version.

CSCvx43471

OEAP authentication failure is observed on the controller running 17.3.3EFT4.

CSCvx64169

The request platform software trace archive command throws an error.

CSCvx71141

Cisco Catalyst 9800-80 Wireless Controller crashes due to a CPU hog in the Radio Resource Management (RRM) process.

CSCvx81815

Controller does not send server hello packets to AP when enabling the Data Datagram Transport Layer Security (DTLS) encryption.

CSCvy67650

Controller does not send TCP SYN or ACK for web redirect when banner size is greater than 200 characters.

CSCvy73244

Cisco Catalyst 9800-80 Wireless Controller: Application visibility configuration page does not load when 99 or more policy profiles have the Cisco Application Visibility and Control (AVC) enable.

CSCvy75868

Cisco Wave 2 APs crash due to kernel panic.

CSCvy84153

Crash is observed in the controller when the AP location name is greater than 32 characters.

CSCvy89423

'WNCMGRD' process crashes due to segmentation fault in the controller.

CSCvy90646

Controller drops the incoming CAPWAP keepalive for random APs.

CSCvy99116

A crash is observed when a wireless client attempts to connect and the connection times out.

CSCvz08303

Controller reloads unexpectedly in the dBm process when DBAL batch stops executing.

CSCvz15015

Cisco Catalyst 9130AX AP loses its WLAN configuration after moving between controllers.

CSCvz28378

Memory leak observed in WNCD process running 17.3.3 of around 200MB per day.

CSCvz45305

Controller is missing fields in the access-request when sending it for a sleeping client.

CSCvz45488

Memory leak is observed in EWLC_OPERATIONAL_DB causing dbm crash.

CSCvz45576

Rogue telemetry updates need to be throttled as the controller sends lot of Rogue reports to Cisco DNA Center (DNAC).

CSCvz52986

Crash observed in C9800-80-K9 while the running 17.3.4 version.

CSCvz54928

Client gets stuck in IP learn due to stale entry.

CSCvz56650

Configuration changes in WLAN or policy profile causes Service Set Identifier (SSID) to stop the broadcast.

CSCvz59495

Accounting requests messages sent in a stream causes issues in the RADIUS server.

CSCvz60614

WNCD core seen on 17.3.3 CCO image with assert failures observed.

CSCvz64802

Controller reloaded due to a memory corruption in WNCD.

CSCvz67166

Controller drops CAPWAP connections due to high WNCD CPU.

CSCvz67806

Central DHCP configuration is not propagated on AP correctly.

CSCvz80697

Controller does not remove old NMSP entries when new probes are received in a different slot.

CSCvz81043

Controller crash after AP session closes.

CSCvz84691

Controller crashes due to WNCD process when learning an IP address for a client.

CSCvz89741

Cisco DNA Center experiences performance issue. Controller sends a large number of events for new clients associating with the AP having maximum number of clients.

CSCvz95745

The CleanAir interference devices are not merged in clusters.

CSCwa07257

Cisco Wave 2 APs stop authenticating clients using Flex Local Authentication.

CSCwa20681

FRA change is needed from from the controller.

CSCwa23659

Controller stops accepting APs to join - No response after DTLS Client Hello received from AP.

CSCwa26602

Controller adds universal._sub._ipp and universal._sub._ipps to the default-mdns-service list.

CSCwa27041

Controller performs an unexpected reboot with Network Mobility Services Protocol (NMSP).

CSCwa30458

High CPU provked by "rif_mgr"process.

CSCwa33929

Contoller drops DHCP after reboot.

CSCvr58932

ZTP overwrites http authentication aaa/not applying VTY authorization and accounting settings.

CSCvv94885

The show ap cdp neighbors command displays the name of the switch instead of the domain name.

CSCvx94276

%CRIMSON-3-DATABASE_MEMLEAK: Database memory leak detected in /tmp/rp/tdldb/0/IOS_PRIV_OPER_DB.

CSCvy15384

Datapath state mismatch strands are observed in wireless clients after roaming.

CSCvy53122

AP Tag summary page shows incorrect status in the RF section.

CSCvy72750

Wireless controller is unable to use the wireless broadcast vlan command.

CSCvy74904

AP authorization related RADIUS request does not include the calling station ID and NAS port type.

CSCvy76922

Switch stack with Cisco IOS XE 17.3.2a displays high memory alerts.

CSCvy94284

Controller crashes when running the clear wlan id command.

CSCvz05555

DCA channel Dwell Times gets updated even when there is no channel change seen on the AP.

CSCvz17623

Memory leak is observed in emulated database and AP join.

CSCvz39749

Client location probe displays error when probe request parsing fails.

CSCvz53408

FT IE is sent as 0 in M3 after session timeout.

CSCvz60451

Memory leak is observed in C9800-CL due to native telemetry.

CSCvz67033

Controller sends an extra accounting interim update to AAA when client re-associates to same BSSID.

CSCvz97359

FlexConnect roaming issue occurs due to PMKID mismatch at controller.

CSCwa05238

Controller GUI does not delete the hotspot configuration correctly.

CSCwa10594

MAC Address entry not saved on the GUI when mapped to WLAN profile with spaces.

CSCwa16467

Controller needs cleanup of client entry authentication when client is in RUN state on any controller in the network.

CSCwa23606

Controller does not present full certificate in web admin.

CSCwa23949

Need to increase the install CLI timeout of the controller from 60 minutes to 120 minutes.

CSCwa32317

The Timezone configuration in the GUI does not work. The 'show clock' displays incorrect timezone.

CSCwa39002

AP channel width configuration from GUI is not taking effect but displays successful message.

CSCwa52109

Vendor OUI mismatch prints wrong message for disassociation request and denying client association.

CSCvz30883

Cisco Catalyst 9120 APs running 17.3.4ES2 gets stuck and does not acknowledge any of the received frames.

CSCvw70285

Cisco Catalyst 9120 APs cannot send acknowledgement over the air during EAP negotiation.

CSCvy59897

Cisco Wave 2 APs detect its own BSSID as rogue.

CSCvy79320

Increased ping loss after two days of reboot.

CSCvz09846

Cisco Catalyst 9130 AP stale clients in the radio driver table causes associations to fail.

CSCvz09942

Cisco Catalyst 9120AXI AP displays kernel panic in Cisco IOS XE 17.3.4.30.

CSCvz24841

802.11r retried auth packet forwarded to the controller causes duplicate auth responses sent to client.

CSCvz25183

Cisco Wave 2 AP's fragmenting CAPWAP discovery packets are unable to join the controller.

CSCvz49187

Cisco Catalyst 9120 Series AP sends packets with QoS TID when WMM is disabled on WLAN.

CSCvz46237

Cisco Catalyst 9130 Series AP crashes on Cisco IOS XE 17.3.4 CCO version.

CSCvz55681

Cisco Catalyst 9120AXI-B APs crash when joining Cisco Catalyst 9800-CL wireless controllers running Cisco IOS XE 17.6.1.

CSCvz66798

Cisco Catalyst 9120 Series AP in FlexConnect mode drops ARP request from the client to the gateway after a WLAN change (Local to Central).

CSCvz69441

Cisco Catalyst 9115 Series AP experiences crash due to kernel panic PC.

CSCvz89108

Cisco Catalyst 9120 Series AP - NDP received frames from neighbour AP with RSSI that is lower than the configured RxSOP.

CSCvz94267

Cisco Catalyst 9130Series APs crash after upgrading to 17.3.4 and applying the ESW7 image.

CSCvz95929

PSM microcode watchdog fired (in seconds) with Cisco Catalyst 9120 Series APs.

CSCwa01142

Cisco Catalyst 9120 Series APs not responding to client association requests.

CSCwa06321

Cisco Catalyst 9120 Series APs - Change parameter under WLAN resets Cisco Catalyst 9120 Series AP radio.

CSCwa18545

Cisco Catalyst 9120 Series AP - PS PRETEND changes the client to Power Save mode even when the client is replying to QoS Null sent by the AP.

CSCwa20219

Cisco Catalyst 9120 Series AP radio 1 gets stuck in TX.

CSCwa26257

Cisco Catalyst 9120 Series AP kernel crash.

CSCwa50159

Cisco Catalyst 9120 Series APs show high client count while the neighboring APs have very few clients associated.

CSCwa53266

Cisco Catalyst 9120 Series AP randomly retains 11w client though it is deleted from the controller.

CSCvu75017

Cisco Wave 2 APs and 11AX APs syslog only seen when using the "Kern" facility value in AP join profile.

CSCvw93936

Cisco DNA Center Assurance's Client 360 window shows the wireless client SNR value as 0 for Cisco Catalyst 9115 Series APs and Cisco Catalyst 9120 Series APs.

CSCvy13594

Cisco Catalyst 9130 Series AP experiences radio firmware crash on Radio 1, multiple times in a day.

CSCvy30091

Cisco Catalyst 9120 Series AP stops transmitting to MacBook after a session re-authentication.

CSCvy48763

Cisco Catalyst 9130 Series AP crashes due to kernel panic after N+1 failover or fallback.

CSCvy95264

Workgroup bridge (WGB) cannot associate when PSK password contains special characters.

CSCvy95842

Connected AP with non-EWC image undergoes factory reset after reload when DHCP option 43 is set.

CSCvz02579

Cisco Catalyst 9130AXI AP cannot connect to the controller after shut or no shut on a Cisco Catalyst 9300 Series (C9300-48H) switch interface.

CSCvz06937

Cisco Catalyst 9120 Series AP FW crash is observed in Radio 1.

CSCvz18980

Opportunistic Key Caching (OKC) is not pushed from the controller to the AP when applied in the CLI.

CSCvz40749

Cisco Wave 2 AP probe filter to limit unwanted probes from the AP to the controller does not work.

CSCvz44787

Cisco Catalyst 9120AXE AP displays incorrect PID and description for Self Identifying Antenna.

CSCvz57427

When the AP is disassociated due to link failure, AP reports the reason as 'AP crash'.

CSCvz58365

Cisco Catalyst 9130 Series APs unexpectedly reboot due to kernel panic.

CSCvz58499

Cisco Catalyst 9120 Series APs reload unexpectedly due to kernel panic on 2.4-GHz band.

CSCvz59574

Cisco Catalyst 9130 Series APs: Radio operates on channel 128 and publishes in channel 56.

CSCvz87088

Cisco Catalyst 9120 Series APs in monitor mode cannot update the neighbor list causing false honeypot alarms.

CSCvz94692

Cisco Catalyst 9130 Series AP crashes due to radio failure (too many radio failures).

CSCvz99449

APs make too many connections to Identitymgmt causing Cisco DNA Center Identitymgmt to crash.

CSCvz99492

Cisco Catalyst 9130 Series AP unexpectedly reloads with a kernel panic.

CSCwa12278

Cisco Catalyst 9115 Series AP crashes due to kernel panic - not syncing: Fatal exception.

CSCwa35428

Cisco Catalyst 9120 Series AP drops CAPWAP connection when running a debug client.

CSCwa45075

AP crashes at FW assert at ar_wal_peer.c:1553.

CSCwa45081

Cisco Catalyst 9130 Series AP crashes: KP at dp_rx_frag_handle+0x8c/0x8e0 [wifi_3_0].

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.4c

Caveat ID

Description

CSCvw70285

Cisco Catalyst 9120 APs unable to send acknowledgement over the air during EAP negotiation.

CSCvx71141

Cisco Catalyst 9800-80 Wireless Controller crashes due to a CPU hog in the RRM process.

CSCvy90646

Controller drops the incoming CAPWAP keepalive for random APs.

CSCvz08303

Controller reloads unexpectedly in the dbm process when DBAL batch stops executing.

CSCvz45488

Memory leak is observed in EWLC_OPERATIONAL_DB causing dbm crash.

CSCvz45576

Rogue telemetry updates need to be throttled as the controller sends lot of rogue reports to Cisco DNAC.

CSCvz46237

Cisco Catalyst 9130 AP crashes on 17.3.4 CCO version.

CSCvz56650

Configuration changes in WLAN or policy profile causes SSID to stop broadcasting.

CSCvz59495

Accounting Requests messages sent in a stream causes issues in the RADIUS server.

CSCvz94267

Cisco Catalyst 9130 APs crashes after upgrading to 17.3.4 and applying the ESW7 image.

CSCvy15384

Datapath state mismatch strands are observed in wireless clients, after roaming.

CSCvz58365

Cisco Catalyst 9130 APs unexpectedly reboot due to kernel panic.

CSCvz58499

Cisco Catalyst 9120 AP reloads unexpectedly due to kernel panic on 2.4-GHz band.

CSCvz59574

Cisco Catalyst 9130 AP: Radio operates in channel 128 and publishes in channel 56.

CSCvz67033

Controller sends an extra accounting interim update to AAA when client re-associates to same the BSSID.

CSCvz99492

Cisco Catalyst 9130 AP unexpectedly reloads with a kernel panic.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.4

Caveat ID

Description

CSCvx35154

Transmission problems in 2.4GHz for Cisco Catalyst 9105AX Series Access Points, 9115 Series APs, and 9120AX Series APs.

CSCvx39497

WNCd process reloads unexpectedly due to Traffic Distribution Statistics.

CSCvx73037

Cisco Catalyst 9105AX Series Access Points image is not available on Cisco Catalyst 9500 switch running EWC 17.3.2a.

CSCvv66853

Transmission power levels do not change in Cisco Catalyst 9105AX Series Access Points, when the power levels are changed on the 2.4 GHz channel.

CSCvv80531

In the FlexConnect mode, during central auth + local switching, 802.11w clients disjoin during the transition from Standalone to Connected.

CSCvv93995

Clients cannot connect to Cisco Catalyst 9115 Access Points due to transmission error on the radio.

CSCvv97944

Microcode crash is observed on Cisco Catalyst 9115 Access Points, when Spectrum Intelligence is enabled.

CSCvw93611

When non-Fast Transition clients roam around APs, incorrect accounting stop class attribute is observed.

CSCvx17425

Multiple Dynamic Frequency Selection (DFS) events are observed in Cisco Catalyst 9115 Series APs.

CSCvx18273

Cisco Catalyst 9120AX Series APs send reassembled fragmented packets in the uplink direction.

CSCvx19602

Cisco Catalyst 9120 Series AP beacon gets stuck after moving from channel UNII 1 to UNII 2.

CSCvx27345

Cisco Catalyst 9800-CL Wireless Controller displays Neighbor APs as Rogue APs on the 2.4 Ghz band.

CSCvx35811

Central Web Authentication clients are not moved back to Web Authentication after CoA re-authentication is sent, when the client is in the RUN state.

CSCvx36012

Cisco Catalyst APs disconnect after SSO, when CAPWAP multi-window feature is enabled.

CSCvx37499

Controller reloads with the message "Critical process wncd fault on rp_0_0 (rc=139)".

CSCvx44338

802.11r retried authentication packet forwarded to controller, causes duplicate authentication responses sent to the client.

CSCvx47191

Cisco Catalyst 9130 Series APs - Clients get stuck in the Authenticating state after multiple roams post upgrade from 17.2.1 to 17.3.2a.

CSCvx56223

Cisco Catalyst 9120AX AP stops allowing new associations on any of the configured SSIDs.

CSCvx56259

FlexConnect central authentication 11r client roaming fails after controllers were upgraded.

CSCvx92866

Cisco Catalyst 9115AX Series APs crash frequently on 17.3.3.

CSCvy00017

Cisco Catalyst 9120 APs drop downstream packets of workgroup bridge (WGB) clients.

CSCvy06837

Static IP address does not change when IP failover is toggled.

CSCvy11981

Cisco Catalyst 9800 Series Wireless Controller ends abnormally due to WNCd (AP name length greater than and equal to 32 characters).

CSCvy14143

Cisco Catalyst 9115AX APs running on 17.3.3.26 esc image, crashes.

CSCvy21906

Roaming clients fail in the Extensible Authentication Protocol (EAP) process due to incorrect destination MAC address on EAP Response.

CSCvy35021

Cisco Catalyst 9120 APs and 9105 APs unexpectedly reload during regular operation, due to kernel panic error.

CSCvy36594

Cisco Catalyst 9800-40 Wireless Controller running 17.3.2 EWA configuration - ACLs are lost after changing from HTTP or HTTPS server configuration from the GUI.

CSCvy46043

Cisco Catalyst 9800 Series Wireless Controller ends abnormally for Switch Integrated Security Features (SISF) heap pointer to l2_socket_counter record.

CSCvu80883

Cisco Wave 2 APs sends duplicate association response in FlexConnect central authentication.

CSCvv56712

AAA or RADIUS must fragment packets to the required size based on the Maximum Transmission Unit (MTU) settings.

CSCvw24934

Cisco Catalyst 9130 AP - Facing latency issues during high QoS Basic Service Set (QBSS).

CSCvw72516

Cisco Digital Network Architecture (DNA) Center Assurance Client 360 page displays the wireless client's Signal-to-Noise Ratio (SNR) value as 0.

CSCvw81531

Cisco Catalyst 9120 AP detects its own BSSID as Rogue in 2.4Ghz channel.

CSCvw94907

The client data rate is displayed incorrectly on the GUI and CLI.

CSCvx16484

Cisco Catalyst 9800 Series Wireless Controller GUI does not display all locations configured in the Wireless setup.

CSCvx29110

Cisco Catalyst 9800 Wireless Controller with PMF Optional, protects management frames for NON-PMF clients.

CSCvx31952

The following error message was displayed in the Cisco Catalyst 9115 AP and 9120 AP logs:

/sys/class/thermal/thermal_zone0/temp failed [2]: No such file or directory.

CSCvx34926

Unable to enable AP admin on Cisco Catalyst 9800 Series Wireless Controller GUI. Admin rights can be enabled only through CLI commands.

CSCvx37875

Transmission power discrepancies observed in Cisco Catalyst 9130AX Series APs and 9117AX Series APs.

CSCvx51232

Cisco Catalyst 9130 AP Trace prints junk characters.

CSCvx53493

Cisco Catalyst 9130AX AP not forwarding M1 responses over the air.

CSCvx58704

In FlexConnect, when VLAN tagging and ARP-caching are enabled, the host does not receive the ARP response.

CSCvx73528

AP joins the secondary controller instead of the primary-base controller.

CSCvx80829

Ignore false positive reports managed by local or other controllers in the mobility group.

CSCvx87706

NSS deadlock issue causes Cisco Catalyst 9130 AP to crash.

CSCvx89490

Cisco Catalyst 9130 APs are crashing on 17.3.2a build.

CSCvy00817

Cisco Catalyst 9130 AP - Clients with only 2.4GHz, cannot connect to WLAN with band select enabled and broadcast SSID disabled.

CSCvy02120

Cisco Catalyst 9130 AP fails to send reassociation response to roaming clients randomly, and deletes the client.

CSCvy16204

The allowed VLANs in an interface cannot be modified or viewed in the controller GUI.

CSCvy31207

Cisco Catalyst 9130 AP radio crashes when running wifistats on the devshell command.

CSCvy31684

WNCD table records that are in "Pending Destroy" state are not being cleared up.

CSCvy44800

The tags on the AP are lost after the second reboot or CAPWAP restart.

CSCvy58934

Cisco Catalyst 9800 Series Wireless Controller does not send the CAPWAP restart payload when filter is applied and the AP name is changed.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.3

Caveat ID

Description

CSCvv00630

Unexpected AP reload: AP crashes with Kernel Panic.

CSCvv92772

OBSS-PD configuration from WebUI does not get pushed to APs mapped to the RF profile.

CSCvv93995

Clients unable to connect to C9115 due to persistent Tx Error on Radio (CS00011211267).

CSCvv99213

RF tag power settings in Cisco Catalyst 9130AXE AP does not work on Slot 2.

CSCvw10308

Cisco Catalyst 9130AX AP drops packets: AP unable to push packets to the Click module.

CSCvw52979

Cisco Catalyst 9120 Series AP crashes after upgrade from Cisco IOS XE 17.3.1 to Cisco IOS XE 17.3.2a.

CSCvw91795

Cisco Catalyst 9115 Series and 9120 Series APs use the wrong TID when responding to Block Acknowledgement Requests.

CSCvx10905

Cisco Catalyst 9130AX AP tri-radio enabled by manual dual-radio assignment mode disables High Efficiency on Slot1.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.2a

Caveat ID

Description

CSCvt06712

Max Transmit Power Level is set to 128 dBm in Country IE.

CSCvu43631

AP PnP does not try to sync time with public NTP server.

CSCvu75470

IP address of configured nameserver seen flipped on controller after AP tears-down the connection.

CSCvu78608

Webauth redirect URL is getting looped for the client.

CSCvu81034

AP marks the Wi-Fi Multimedia (WMM) UP value as 0 despite receiving DSCP value as 46 (EF).

CSCvv02099

AP should reject incorrect fast transition authentication requests.

CSCvv02121

AP is not sending re-association response.

CSCvv18778

Client association fails when changing the connected WLAN from 802.1X WLAN to PSK+MAC filtering WLAN.

CSCvv22110

Cisco Catalyst 9130AX Series Access Point: Multicast traffic failures are observed after Group Transient Key (GTK) key index rotation for Vocera clients.

CSCvv22536

Client moves to RUN state without Extensible Authentication Protocol (EAP).

CSCvv35000

Cisco Embedded Wireless Controller: WPA3 SAE does not work.

CSCvv37072

Flex Opportunistic Key Caching (OKC) roam M1 is not sent out.

CSCvv39762

Cisco Catalyst 9105, 9115, and 9120 Access Points starts beaconing during the Call Admission Control (CAC) time on Dynamic Frequency Selection (DFS) channel if 802.11h is disabled on the controller

CSCvv51321

Cisco Catalyst 9105, 9115, and 9120 Access Points: APs unexpectedly experience "assert" kernel panics, when Target Wait Time is enabled.

CSCvv54538

Cisco Catalyst 9120 Access Point is crashing with the following message: + assert:\"dma_txactive(di) == 0\" failed: file \"wlc_tx.c:13678\".

CSCvv55733

Pixel client de-authenticates as NO ARP responses are received during NUD checks to Virtual Router Redundancy Protocol (VRRP) gateway.

CSCvv58057

Cisco Catalyst 9130 Access Point: Scale performance is worse than Cisco Catalyst 9120 APs with less than sixty active clients.

CSCvv62762

Cisco Catalyst 9120 Access Point crashes due to station data base entry becoming NULL.

CSCvv73396

Cisco Catalyst 9115AX Access Point unexpectedly reloads.

CSCvv82544

Cisco Catalyst 9120 Access Point is crashing unexpectedly: assert:\"0\" failed: file \"wlc_amsdu.c:4709\".

CSCvw23306

AP performs DHCP reset after 5 failed attempts of CAPWAP Discovery, but still responds to subsequent pings.

Resolved Caveats for Cisco IOS XE Amsterdam 17.3.1

Caveat ID

Description

CSCvq99108

Cisco Aironet 3700 AP series reloads unexpectedly.

CSCvr68729

High Availability fails to initialize NVRAM after multiple power cycles.

CSCvs63467

IPv6 dual stack is not working.

CSCvs31212

Cisco Aironet 3800 AP: Manufacturing Installed Certificate (MIC) errors observed for Cisco Centralized Key Management (CCKM) roams in FlexConnect local switch mode.

CSCvs52625

btman process at 100% while running show tech command.

CSCvs55102

WNCd unexpectedly reboots after association failure.

CSCvs55109

AP Ethernet link flaps at 5G speed due to Fast Retrain failure.

CSCvs56849

Cisco Catalyst 9120AXI AP unexpectedly reloads with watchdog or grpc_server tainted.

CSCvs62464

Controller with more than 4000 APs in one site-tag (not default-site) is not allowing to do AP configuration changes.

CSCvs66107

Cisco Catalyst 9115AX AP: Rogue containment is not working when AP is in monitor mode.

CSCvs70091

-Q domain APs in Japan are advertising J4 as the country in beacon, instead of JP.

CSCvs71784

Controller crashes on receiving username with 246 characters on the third attempt.

CSCvs83955

Control packets are not honoring mobility Path MTU Discovery.

CSCvs93903

WNCd process goes down due to assert for basic SSID (BSSID) magic check.

CSCvs98528

WNCd crash is observed with roaming of long duration fabric clients.

CSCvt05007

Controller crashes when a 11r client tries to perform over-the-air or over-the-ds roam.

CSCvt08645

Multicast replicates over CAPWAP when global multicast is disabled.

CSCvt17820

Client gets excluded after VLAN changes following the machine and user authentication.

CSCvt29348

The show tech wireless command output is showing incomplete information for the sub-commands: show ap auto-rf dot11 5ghz and show ap auto-rf dot11 2.

CSCvt31484

Controller unexpectedly reloads when an AP joins and does not report the correct radios.

CSCvt34987

The Cisco Catalyst 9800-80 HA cluster crashes frequently.

CSCvt35766

Controller is not allowing Wi-Fi Protected Access (WPA)/Temporal Key Integrity Protocol (TKIP) only configuration.

CSCvt35811

Cisco Catalyst 9130 AP: Channel/Mode mismatch between WCP and WLAN driver.

CSCvt37835

Client is unable to associate due to DOT11_STATUS_DENIED_RATES when extended rates are used.

CSCvt38486

Cisco Wave 2 APs: EAP-PEAP (Protected Extensible Authentication Protocol) flex-auth fails occasionally because of low EAP timeout.

CSCvt41053

Clients are assigned to native VLAN instead of client VLAN.

CSCvt41519

Controller crashes due to AP with the same name and different existing radio mac.

CSCvt46733

Address Resolution Protocol (ARP) handling allows for the ARP entry to be removed for a wireless DHCP client.

CSCvt68112

Cisco Catalyst 9130 AP: Cisco OfficeExtend access point (OEAP) GUI is not accessible.

CSCvt75205

Controller crashes on Wi-Fi Multimedia (WMM) action, while roaming.

CSCvu19000

Cisco Catalyst 9800-L Controller goes administratively down after a reload following factory reset using CLI.

CSCvu44330

Memory leak is observed under process SACRcvWQWrk2 when Smart Licensing is enabled.

CSCvu57730

Controller crash is observed in CPP (data path).

CSCvu71871

Cisco Catalyst 9800-80 Controller crashes with SIGSEGV while removing timer RB tree color.

CSCvu78070

Controller crash is observed during WNCd process.

CSCvp76426

Controller is not honoring timezone when configuring dynamic channel allocation (DCA) anchortime.

CSCvs29013

Controller is not sending SNMP trap when AP is reset using GUI or CLI.

CSCvs40004

Cisco Catalyst 9800-L-C fails to install authorization code due to NO_AUTH_CODE_FOUND.

CSCvs50689

Improve the show wireless stats loadbalance summary command.

CSCvs52655

The show wlan client stats command output shows wrong WLAN with similar WLAN name on special conditions.

CSCvs73952

Client count shows zero for the show ap dot11 5ghz/2.4ghz load-info command output when Coverage Hole Detection (CHD) is disabled.

CSCvs75087

Global AP pre-image download is not working.

CSCvs77734

Frequent channel changes observed on the Cisco Aironet 4800 AP slot 0 radio while using 5 GHz.

CSCvs81826

Upgrading to Cisco IOS XE 16.12.2s deletes WLAN to policy profile mapping under default-policy-tag.

CSCvs93963

Support tspec processing when voice acm is disabled or with no tgr tspec.

CSCvt01659

Cisco Wave 1 APs: Client traffic is stuck after client is in RUN state for Central Web Authentication (CWA) or Local Web Authentication (LWA).

CSCvt13127

Cisco Catalyst 9800-CL Controller is unable to display medium power when AP sends a 25W message.

CSCvt19605

Guest anchor fails to load balance clients across anchors.

CSCvt23051

Cisco Catalyst 9120AX AP is not use the correct datarates.

CSCvt27421

Cannot remove AdvIPServices license.

CSCvt29373

UDP Port 5246 based Access Control List (ACL) filter fails to select Datagram Transport Layer Security (DTLS) encrypted CAPWAP control packets.

CSCvt29596

Current Tx rate for 802.11AX clients is displayed incorrectly.

CSCvt30657

Controller crashes with the following reason: \Critical process cpp_cp_svr fault on fp_0_0 (rc=134)\.

CSCvt37462

The factory-reset all command deletes the actual image when controller is in install mode.

CSCvt47787

Roaming is not successful when NAC is enabled in the policy profile.

CSCvt56911

Ethernet over GRE (EoGRE) tunnel is not copying Differentiated Services Code Point (DSCP) from inner payload IP header on injected packet.

CSCvt61509

Cisco Aironet 3700 AP is unable to join controller as the VLAN interface name exceeds character limit in flex profile.

CSCvt63940

Authentication fails for some clients, when local authentication is configured in the policy profile.

CSCvu18085

Cisco Catalyst 9117AX AP: 802.1x authentication is not working for clients.

CSCvu24770

Various models of Android 10 devices fail to associate.

CSCvu58564

AP uses non-allowed channel on dual radio when change setting to 5 GHz.

Troubleshooting

For the most up-to-date, detailed troubleshooting information, visit the Cisco TAC website at:

https://www.cisco.com/en/US/support/index.html

Go to Product Support and select your product from the list, or enter the name of your product. Look under Troubleshoot and Alerts to find information about the problem that you are experiencing.

Related Documentation

Information about Cisco IOS XE 16 is available at:

https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-xe/index.html

All the support documentation for Cisco Catalyst 9100 Access Points are available at: https://www.cisco.com/c/en/us/support/wireless/catalyst-9100ax-access-points/tsd-products-support-series-home.html

Cisco Validated Designs documents are available at:

https://www.cisco.com/go/designzone

Cisco Embedded Wireless Controller on Catalyst Access Points

For support information, see the following documents:

Installation guides for Catalyst Access Points are available at:

https://www.cisco.com/c/en/us/support/wireless/catalyst-9100ax-access-points/products-installation-guides-list.html

For all Cisco Wireless Controller software-related documentation, see:

https://www.cisco.com/c/en/us/support/wireless/catalyst-9800-series-wireless-controllers/tsd-products-support-series-home.html

Wireless Products Comparison

Cisco Connected Mobile Experiences

Cisco Connected Mobile Experiences Documentation

Cisco DNA Center

Cisco DNA Center Documentation

Communications, Services, and Additional Information

  • To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.

  • To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.

  • To submit a service request, visit Cisco Support.

  • To discover and browse secure, validated enterprise-class apps, products, solutions and services, visit Cisco Marketplace.

  • To obtain general networking, training, and certification titles, visit Cisco Press.

  • To find warranty information for a specific product or product family, access Cisco Warranty Finder.

Cisco Bug Search Tool

Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software.