topic Re: upgrading a WLC 2500 which has no support contract in Wireless

upgrading a WLC 2500 which has no support contract

mauricio2099 — Tue, 12 Dec 2023 19:00:07 GMT

Hi, I was requested to upgrade a 2504 wireless controller due to security vulnerabilities. Current version is 7.6.130.0

Is an active support-contract required to perform an upgrade in this controllers? We just want to do the upgrade to mitigate the vulnerabilities.

Thanks!

Re: upgrading a WLC 2500 which has no support contract

Leo Laohoo — Tue, 12 Dec 2023 22:12:54 GMT

1. Go to the Cisco Software Download portal and find the version you want to upgrade to.
2. Note down the exact filename and the HTTP address.
3. Carefully read this: Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability
4. Scroll down to the "Customers Without Service Contracts" section. Read it. Understand it.
5. Send an email to TAC with the following information:

Serial Number of the WLC
Filename (See step 2)
Web address where the file is location (See step 2)
Security Bulletin (Step 3)

Re: upgrading a WLC 2500 which has no support contract

Rich R — Tue, 12 Dec 2023 22:34:09 GMT

Yes you would normally need a service contract for most software downloads.

The version you should ideally be asking for (as per Leo's instructions) is 8.5.182.11 (link below) which is the latest available with all security fixes and the 2504 filename is AIR-CT2500-K9-8-5-182-11.aes but note "Cisco 2500 Series Wireless Controllers Release 8.5 Software.In order to use 8.4 or higher code, you must upgrade the 2504 Wireless Lan Controllers to FUS version 1.9 or higher, this must be done before installing the new AireOS version"

You should also check the compatibility matrix (link below) to make sure all your APs are supported on 8.5 code. If not, then you may need to consider an older version of code but because those all went end of support years ago they will all still have security vulnerabilities.

If you're upgrading to 8.5 then you should ideally upgrade to 8.0.152.0 first so you might need to request that too:
https://software.cisco.com/download/home/283848165/type/280926587/release/8.0.152.0

And read the release notes to make sure you know about any changes you need to be aware of.

Re: upgrading a WLC 2500 which has no support contract

Scott Fella — Wed, 13 Dec 2023 03:59:20 GMT

That is a big jump, even if you were able to download the software. I can tell you that your ap's probably do not support the latest version. Here is my take. You are being requested to upgrade due to vulnerabilities, knowing that the controller and the ap's are end of support and security patching, doesn't make sense. You need to look at replacing what you have so that you are covered from these new security vulnerabilities. Also think, what happens when the controller dies or access points start to die, what will you do?

Re: upgrading a WLC 2500 which has no support contract

Denniz — Wed, 13 Dec 2023 09:43:01 GMT

Take a look at this!

https://www.cisco.com/c/en/us/support/docs/field-notices/740/fn74035.html

Re: upgrading a WLC 2500 which has no support contract

Rich R — Thu, 14 Dec 2023 06:44:33 GMT

@Denniz how does that help?
In any case the link to that field notice and the 8.5.182.11 software, which I suggested, is already provided in my reply.

Re: upgrading a WLC 2500 which has no support contract

maksim.churyukin@yandex.ua — Thu, 31 Oct 2024 10:49:02 GMT

Maybe it quite late to make this comment, but with my Cisco account I was able to download 8.5.182.11 from the Cisco software download portal at the link https://software.cisco.com/download/specialrelease/2702eede2b47a5c3bb40795bbe836af6.
As far as I found it's the only version for 2504 that is available for download.
Maybe it will help someone.

Re: upgrading a WLC 2500 which has no support contract

Rich R — Thu, 31 Oct 2024 12:42:51 GMT

Are you able to download the latest version 8.5.182.12 maksim.churyukin@yandex.ua ? (download link in my signature below)

Re: upgrading a WLC 2500 which has no support contract

maksim.churyukin@yandex.ua — Thu, 31 Oct 2024 13:03:19 GMT

No. It displays the message "Your service contract information indicates that you are not authorized to download software for this product".

Re: upgrading a WLC 2500 which has no support contract

Rich R — Thu, 31 Oct 2024 13:18:08 GMT

Ok - then Leo's advice above applies