Out of curiosity, what - Page 3

m.zafrany · ‎02-09-2014

Hi,

I tested the last firmware 2.0.7.4 on 10 AP. It was catastrophic because all access points stopped working (no SSID WIFI visible but Ethernet Interface OK) . I downgraded all AP to 2.0.6.1 to solve this problem.

Finally, i can't use the last firmware so i can't secure the system....

What about a new "GOOD" firmware ?

Thanks.

Norrie603 · ‎02-24-2014

Michael, you are indeed an unhappy Cisco customer! I have to say that I have read many threads on this Support Community recently, this activity trap being triggered by the security vulnerability affecting certain Cisco products. I have to say that I am somewhat amazed at the volume of issues that customers seem to experience with Small Business devices, that personally I would expect to perform rather better than their consumer grade counterparts. That's why we pay more!

After an overnight pause, I re-checked my 3xWAPs again...

Results for my three WAP4410Ns are:-

WAP-1 (V01) up for 1 day 15 hours, 45 Drop Receive Packets

WAP-2 (my new V02) up for 1 day 0 hours, 0 errors

WAP-3 (my first V02) up for 1 day 13 hours, 0 errors

These results seem unequivocal. The V02 version clearly fixes the Drop Receive Packet errors inherent in the original V01 version.

Your experience, Michael, has made me wary of change for change's sake. Assuming my RVS4000 Router gets its security patch, promised soon, there really is no good reason for me to rush to migrate to an RV320 as mooted earlier in this discussion.

I have had to disable the IPS Function on my router. With it ON, my data rate is around 21Mbps, but OFF it rises to 60Mbps, the speed I pay my ISP for. Its processor is obviously not powerful enough to examine and process each and every packet fast enough. I can live with this! So rather than take a chance with a router that I am not familiar with, instead I will stick for now with my trusty RVS4000. I plan to alter shelving and radically re-wire my Computer Room soon, so will allow for a possible swap to be painless at some future time, should it prove necessary for whatever reason.

Cheers

Norrie

mpyhala · ‎02-28-2014

Norrie,

Looks like the RVS4000 v1 firmware update is out:

https://supportforums.cisco.com/docs/DOC-39830

- Marty

Norrie603 · ‎02-28-2014

Hey Marty, thanks for the heads-up! Given that today is month-end, I have been checking from time to time to see if the Cisco promise has been met. However I had not spotted that v1.3.3.6 had actually landed.

Obviously if I brick my RVS4000 during this update, then I disconnect myself and others from the world. Please confirm the precise sequence I should follow, including any reboots or reset to factory defaults that may be necessary, to minimise risk and maximise my chances of a successful outcome?

I will, of course, save out a Configuration File before the FW update, but perhaps it is better to manually reset everything from the top?

BTW, results for my three WAP4410Ns are...

WAP-1 after 5 days 22 hours, 77 Dropped Receive Packets

WAP-2 after 5 days 7 hours, 0 errors. But there is 1 Error Packet Received on the wireless side

WAP-3 after 5 days 19 hours, 0 errors.

Seems like a result to me!

Hope to be able to get back to you to confirm my router is on v1.3.3.6 as soon as you answer the above.

Cheers

Norrie

mpyhala · ‎02-28-2014

Hi Norrie,

Make sure your PC is directly connected to the router before you upgrade. Upgrading over a wireless network or the internet is always a bad idea. Other than that it should be pretty straightforward. You should not need to reset to defaults, although if you have any issues after the upgrade that would be my first recommendation.

I'm happy to see you're still getting good results from the new WAP4410N. There must be something to that extra crystal they added in the v2.

- Marty

Norrie603 · ‎02-28-2014

Upgrade to v1.3.3.6 was successfully completed in a few minutes. No need to change any settings which are all exactly as before the RAM was flashed. So some three weeks on, I can now consider this security bug fixed on my Router and all three Wireless Access Points. This activity has also triggered a major re-think of my entire network, which will result in my existing Netgear GS116 switch being replaced by at least one Cisco SB model. I won't bore you with the details, Marty! But it entails ripping up floors, running in new cables, and will result in my entire Sonos distributed audio system becoming less dependent on SonosNet.

A job well done, methinks!

Appreciate all your help along the way with this.

Norrie

mpyhala · ‎02-24-2014

Michael,

What is your case number?

- Marty

m.zafrany · ‎02-26-2014

Hi Marty,

My case number is 629192705.

Cheers.

Michael

mpyhala · ‎02-26-2014

Michael,

I was dissapointed to see the level of service that you received. I was able to look up your serial number without issue by dropping the first "S". This should be common knowledge among support engineers and you should not have been asked for proof of purchase.

I recommend that you call and either re-open the case or open a new case. Advise the engineer of the following:

1) Your warranty expires 30-Nov-2020 (Drop the leading S to look up the SN)

2) You are trying to upgrade the firmware to close the security breach on the device

3) The issues that you are experiencing after the firmware upgrade

You should receive troubleshooting assistance to help get the devices working properly on the latest firmware. You can locate a number for your country at the following link:

www.cisco.com/go/sbsc

- Marty

m.zafrany · ‎03-20-2014

Marty,

Thanks a lot for your support. When i will have time, i will call Cisco Support.

Best Regards.

Michaël

amigor_ok · ‎06-26-2014

I've got the same issues with 2 of 2 updated Cisco WAP4410N devices!

PID VID: WAP4410N-E V02
Software Version: 2.0.7.4

Any news to fix it? When should we get some fix?

btw, I'm really disappointed with Cisco - the second troulbe with their WAP4410N device since 2013.

mpyhala · ‎06-26-2014

amigor_ok,

Reset to factory defaults and reconfigure one device. If it still has issues you should contact support for assistance: http://cisco.com/go/sbsc

- Marty

Kurt Schumacher · ‎09-24-2014

Sorry for joining late again with a me too...

Had some more time these days, the first update attempt from 2.0.6.1 to the .7.4 ended in a disaster - so re-deployed 2.0.7.4 to three WAP4410N-E (one V1, two V2), all connected including PoE to a tiny SG 200-08P on 1.0.7.4 (and other Cisco Small Business disappointment as this model variant are left behind all other SG 200).

Problems? These AP are heavily used, after not much more than one minute, clients fail to see Bonjour announcements (so no Time Machine, no NAS access, ...), clients fail to get IPv6 addresses assigned, ...

Obviously, much more than the silly OEM open port has changed - an issue known with this OEM for years.

We expect a _workable_ firmware update - including the mandatory security fix. In the meantime, we're back on 2.0.6.1...

Not impressed,

-Kurt.
PS. Not keen to waste time with Cisco SBS support.

Eric Moyers · ‎09-24-2014

My name Eric Moyers. I am an Engineer in the Small Business Support Center.

I am sorry to hear that you are experiencing this issue.

Customers have reported issues off and on with this product off and on for a while. One reason this product gets so much exposure is that it is truly our best selling Access Point in Many years and the more that are sold the more potential there is to have issues reported. Not an excuse, just a statement

Now to your issue specifically, are there any logs errors? Would you mind getting a copy of them and your config file and either upload them here, or if you prefer you send directly to me. If you mouse over my picture you should be able to see my email.

We do have a beta firmware currently that fixes some specific issues and I want to see if I can determine if that would work in your instance. By looking at the logs and config I should be able to determine that.

Please rate helpful Posts and Let others know when your Question has been answered.

Kurt Schumacher · ‎09-24-2014

Hello Eric,

Thank you very much for chiming in here. Have re-applied 2.0.7.4 to all WAP4410N and we're still online (and counting).

While reviewing the configuration, we found in Administration -> Logs the E-Mail and Syslog server enabled, but nothing configured. Switch the toggle on both to disabled on both, used [Apply] .. and the view of the attached screenshot comes back.

Sep 24 18:36:55 Syslogd start up

So the syslogd is started regardless, probably feeding to the default 0.0.0.0 address?

We try to avoid any suspect cross-effects, so the majority of services should be disabled.

Regards,

-Kurt.

Eric Moyers · ‎09-24-2014

Out of curiosity, what browser are you using when viewing the WAP4410N GUI?

WAP4410N and firmware 2.0.7.4