Cisco Wireless LAN Controllers and Lightweight Access Points Code Release 7.0.240.0

Cisco releases code 7.0.240.0

Resolved Caveats

Table 1-7 lists caveats resolved in controller software release 7.0.240.0.

Table 1-7 Resolved Caveats 

ID Number	Description
CSCtk13612	Unable to get the order of WLANs in an AP group configuration. When AP Group templates are discovered in WCS, the WLAN order does not match the configuration on the controller.
CSCuc78713	Wireless client do not receive broadcast packets after broadcast key rotation.
CSCty75270	Controller does not keep max RSSI used when classifying rogue AP.
CSCtn78269	Brand new LAPs come up on unexpected channels.
CSCtq97915	1120 and 1130 Lightweight Access Points associated to a controller log memory allocation errors, and can crash or loose configuration.
CSCtr21759	Incorrect transmission of AMSDU within the active block ACK agreement.
CSCts05391	H-REAP client IP address does not appear in the client details on the controller.
CSCts13482	Controller does not update the shared secret.
CSCtt20493	Guest clients stay in Web-Auth Required state without getting redirected.
CSCtt96265	Controller fails to transfer or save configuration and eventually crashes. No crash log available.
CSCtu19860	Controller does not set 802.1p marking for downstream CAPWAP packets.
CSCtw69785	DCA list corrupt with 16 or more configured country codes.
CSCtw94633	Intermittent DHCP packet drop per VLAN for anchor scenario.
CSCtx00942	Webauth stops redirecting after some time.
CSCtx03556	TACACS user login failure on Cisco 5508 Controller running 7.0.116.0.
CSCtx08257	DHCP required configuration enabled on a WLAN is not retained after the controller reboots.
CSCtx17062	Controller client statistics appear blank.
CSCtx42747	AP 3500 radio core dump.
CSCtx17650	Controller may experience a partial denial of service condition when receiving certain malformed HTTP/HTTPS packets.
CSCtx43418	AP manager interface replies to ping using the wrong port.
CSCtx43436	1522CM RAP blacklists the Ethernet/Cable interface.
CSCtx49189	Preauthentication ACL gets removed from Web Auth WLAN.
CSCtx56334	HREAP client does not successfully roam between two controllers.
CSCtx61016	Incorrect BSSID client count on the AP.
CSCtx92465	Monitor mode AP interference measurements not accurate.
CSCty05792	Wireless clients receive GARP from different VLAN.
CSCty07036	CCKM EAPOL broadcast key rotation breaks during M5 exchange.
CSCty15308	CAP3502P-Q reboots every 15 minutes with 7.0.230.0 controller image.
CSCty38823	Memory leak may occur for EAP Framework task.
CSCty45960	TFTP backup config does not show correct setting for exclusion list timer.
CSCty47582	Controller crashes while running show ap eventlog <AP Name> command.
CSCty68030	For AP 3500/1260, upgrade bootloader automatically from IOS.
CSCty82919	AP 1130 in HREAP mode does not send deauthenticate non-associated client.
CSCty96959	Spaces are not allowed in SSID after migration from autonomous, or upgrade from 6.0/7.x releases.
CSCtz05201	5508 controller crashes on LDAP DP Task 1 and 2.
CSCtz20766	Controller crash: software failed on instruction ewaFormSubmit_blacklistclient.
CSCtz23878	802.1x authentications stop happening on specific WLANs.
CSCtz24594	Controller deauthenticates EAP client when credentials change.
CSCtz31572	Wireless clients associated to a Flexconnect locally switched WLAN may not be able to receive broadcast traffic like ARP.
CSCtz43631	Controller keeps ghost client entry if the network between controller and HREAP is unstable.
CSCtz50719	WISM out of memory crash on 7.0.220.0 controller image.
CSCtz55502	Multicast packets may stop or be sent out of order for power-save clients.
CSCtz89535	Motorola MC75 gives inconsistent linktest results.
CSCua29504	802.11w-capable client fails pairwise key handshake with AES.
CSCua39538	Controller with media snooping crashes due to memory corruption.
CSCua59722	Controller crashes with sig11, null pointer exception. Crash file shows sshpmDeleteLeakedWebauthRule.
CSCua60653	Following multiple vulnerabilities in controllers: •Wireless Intrusion Prevention System (wIPS) Denial of Service Vulnerability •Session Initiation Protocol Denial of Service Vulnerability •HTTP Profiling Remote Code Execution Vulnerability •SNMP Unauthorized Access Vulnerability
CSCua74143	WISM with 7.0.230.0 has low buffer length for the packet sent by Catalyst 6K.
CSCua93936	Broadcast Key rotation does not use rotated index 1 and 2.
CSCub07426	SP800-90A DRBG, entropy source updation.
CSCub46092	HREAP-AP is central switch when the WLAN is set for local switch.
CSCub49367	When client roams in a quarantine VLAN, with Authentication enabled, controller cannot change VLAN successfully.
CSCub57982	CT5508 crashes at capwapSocketTask due to malloc corruption.
CSCub65575	WiSM forwards broadcast ARP requests to APs in local mode or H-REAP advertises centrally switched WLANs.
CSCub82353	Controllers configured as mobility anchors may not properly block injected traffic from the network.
CSCub97882	For H-REAP local switching, the WLAN-VLAN mapping changes.
CSCuc06422	World Mode is enabled automatically for the controller.
CSCuc33930	Controller crash in ewaFormSubmit_guestuser_list.
CSCuc68648	5508 controller with 7.0.230.0 image crashes every week due to a memory leak in SNMP.
CSCuc74769	At random intervals, a controller crashes on a WISM1 blade running 7.0.235.0 image.
CSCud05299	WGB client entry leak at radio driver level.
CSCud47994	Continuous RNG test for SP800-90 DRBG seed.
CSCud90781	Controller crashes after loading test image.
CSCue13451	A new 7500 series controller fails to boot a 7.0 image.
CSCud65237	Voice disruption after roaming when a wrong TID is sent on the block ACK sent by the client.
CSCto02968	Memory leak issue.

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7_0_240_0.html

Comments

[Ric Beeching]

CSCtt20493
Guest clients stay in Web-Auth Required state without getting redirected.

CSCtx00942
Webauth stops redirecting after some time.

Awesome those issues were really bugging me (hohoho)

-Ric