WLC2504 Access Point not joining

[Niels van Strien]

Hello,

I have a WLC2504 with 10 licenses running 8.5.151.0.

I have several 3602 AP's with AC radio module that previously could join the controller, but now don't join the controller anymore. 

As reason for the failed join attempt I read: Missing AP Manager IPV6 interface. However, the configuration has not changed.

Also. I have 3700 series and 3800 series AP's that can join.

I have been reading news about a security certificate that has expired. Could this have something to do with the AP's not joining? Is there an updated software version that addresses this software issue?

Kind regards,

Niels van Strien

[Niels van Strien]

Thank you for the link. Unfortunately I cannot download the software (I am logged in, but have no active subscription). I wonder if this could qualify as a free update because of a security vulnerability?

[Mark Elsen]

                 >...I wonder if this could qualify as a free update because of a security vulnerability?
  You need to contact TAC , they are usually rather 'forgiving' if  you make the security argument(s) , 

 M.

[Rich R]

Yes find a recent security advisory that affects 8.5 code and find the section which says "Customers without Contracts" then email TAC (don't phone) quoting the URL of the advisory, the paragraph just mentioned and the version and URL for the software you want to download.  You'll have to mention which platform you need it for (2504) because they have all of them there at that URL.  Then TAC should publish it to you directly.  They might also ask you for WLC serial number.

This one should be suitable: Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability because CSCwa40778 : Bug Search Tool (cisco.com) lists 8.5.182.7 as a fixed release so spot on. (even though the advisory itself says upgrade to 8.10)

"Customers Without Service Contracts

Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html

Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade."