The following Cisco Aironet Series APs are supported in the Cisco Mobility Express network:

Note	APs listed under primary APs can also function as subordinate APs. The software on the APs listed under primary APs can be converted from Cisco Mobility Express to CAPWAP Lightweight AP software and vice versa.

Depending on the primary AP in the Cisco Mobility Express network, the maximum number of APs and clients supported varies.

Note	If there are more than 25 Access Points in a Mobility Express network, the primary AP (running the Wireless LAN controller function) can service a maximum of 20 clients. This limit only applies to primary AP and not any other Access Point in the Mobility Express network.

Release 8.10.190.0

There are no new features that are introduced in this release. There are no new unfixed or fixed issues in this release.

Release 8.10.185.0

• Secure Data Wipe for Cisco Access Points

  The data wipe function has been enhanced to meet the NIST 800-88 data wipe standards. You may sanitize data from the AP using the following methods:

  • Controller

    • GUI (factory reset): Wireless > Access Points > All APs. Click the AP name and click Reset AP Now.

    • CLI (factory reset): clear ap config ap-name

    For more information, see the AireOS Configuration Guide.

  • Using the AP Mode button

    For more information, see the respective Cisco Access Point Hardware Installation Guide or Deployment Guide.

  • AP Console Clear Command

    • Cisco Wave 1 (IOS) APs: clear capwap ap all-config

    • Cisco Wave 2 APs: clear capwap ap all-config

Release 8.10.183.0

There are no new features that are introduced in this release. For more information about updates in this release, see the Caveats section in this document.

Release 8.10.182.0

There are no new features that are introduced in this release. For more information about updates in this release, see the Caveats section in this document.

Release 8.10.181.0

There are no new features that are introduced in this release. For more information about updates in this release, see the Caveats section in this document.

Release 8.10.171.0

• HTTP Strict-Transport-Security Policy

  From this release onwards, by enabling the HTTP Strict Transport Security (HSTS) policy on Cisco Mobility Express controller, you may access the controller GUI only with a client browser that uses HTTPS protocol.

Release 8.10.162.0

There are no new features that are introduced in this release. For more information about updates in this release, see the Caveats section in this document.

Release 8.10.151.0

• Random MAC Filtering

  This feature provides enhanced security and telemetry based on the policies applied on the clients joining the network. You can configure the network to deny clients joining with random MAC address, also known as locally-administered MAC addresses, feature enabled.

Release 8.10.142.0

• Leading Spaces in SSID and WLAN Profile Names

  Starting from this release, new SSID and WLAN profile names can have up to four leading spaces. If there are more than four leading spaces in an SSID or WLAN profile name, an error message is displayed. If you upgrade to this release, the existing SSID and WLAN profile names that contain more than four leading spaces are not impacted.

  Note

  In a Cisco Mobility Express deployment, if you download the Day 0 configuration file through PnP on an AP, leading spaces in SSID names are not checked because of an XML limitation. However, if you convert the AP from another mode to the Mobility Express mode, leading spaces are checked during SSID creation.

Release 8.10.130.0

There are no new features that are introduced in this release. For more information about updates in this release, see the Caveats section in this document.

Release 8.10.121.0 and 8.10.122.0

• Configuring SNMP with Strong Passwords.

  Weak passwords are no longer allowed for SNMPv2 community strings and SNMPv3 user credentials. Strong password mode is enabled by default.

Release 8.10.105.0, 8.10.112.0, 8.10.113.0

• Support for WPA3

• Support Trap Notification via SNMPv3

• Support for RADIUS accounting messages for AP events

• Support for per AP group NTP Server

• Support for Mesh mode in Cisco Mobility Express

  • ME + RAP Support: 1542, 1562, 1815i, 1832, 1852, 2800, 3800, 4800, and 6300

  • Indoor Mesh Support: 1815i, 1832, 1840, 1852, 2800, 3800, and 4800

• Configuration Management enhancements

• Day 0 Flex+Bridge mode configuration

For Cisco Mobility Express solution software compatibility information, see the Cisco Wireless Solutions Software Compatibility Matrix.

The following table lists the Cisco Wireless Release 8.10.x.x software for Cisco Aironet APs that are Cisco Mobility Express capable (primary APs).

Note

After updating the Cisco Mobility Express software, clear your browser cache before continuing use. Do either of the following before using the Cisco Mobility Express GUI after the software update: Restart your browser and log in to the GUI. Log out from the GUI and login again. Choose the appropriate AP software based on the following: Cisco Mobility Express software to be used for converting the AP from the unified wireless network CAPWAP lightweight AP to a Cisco Mobility Express-capable AP (primary AP) AP software image bundle to be used either for upgrading the Cisco Mobility Express software on the primary AP or for updating the software on the subordinate APs or both

Prior to ordering these Cisco Aironet APs, visit the Cisco Aironet Access Points Ordering Guide.

For software installation instructions, see the “Getting Started” section in the relevant user guide at:

https://www.cisco.com/c/en/us/support/wireless/mobility-express/products-installation-and-configuration-guides-list.html

Note	Updating the Cisco Mobility Express software directly from Cisco.com is no longer supported. To update the software, you may use the other methods listed in the Updating the Cisco Mobility Express Software section of the Cisco Mobility Express User guide.

Known Limitations

• Internet Group Management Protocol (IGMP)v3 is not supported on Cisco Aironet Wave 2 APs.

• If you have IPv6 flex ACLs configured in the Cisco Mobility Express network, you may face issues downgrading the Cisco Mobility Express software image from Cisco Wireless Release 8.7.102.0 or newer to Cisco Wireless Release 8.6.101.0 or older.

  This issue can be resolved by removing all IPv6 ACLs as these are not supported in Cisco Mobility Express, Release 8.6.101.0 or older.

• If the Cisco AP has a Cisco Mobility Express software image, it will not support link aggregation groups (LAG) even if it is 802.3ad (LACP)-compliant.

• Over-the-DS fast BSS transition and fast transition PSK authentication are not supported.

• Starting from Cisco Mobility Express Release 8.8.111.0, when you set the Security Type for a WLAN to Central Web Auth, the required ACLs are no longer auto-generated. You must create the ACLs manually.

Caveats

Caveats describe unexpected behavior in the Cisco Mobility Express network solution. Severity 1 caveats are the most serious while Severity 2 caveats are less serious. Severity 3 caveats are moderately serious and only select severity 3 caveats are listed here.

This section provides lists of open and resolved caveats in the Cisco Mobility Express network solution for this release. The following information is provided for each caveat:

• Identifier—Each caveat is assigned a unique identifier (ID) with a pattern of CSCxxNNNNN, where x is any letter (a-z) and N is any number (0-9). These IDs are frequently referenced in Cisco documentation, such as Security Advisories, Field Notices and other Cisco support documents. Technical Assistance Center (TAC) engineers or other Cisco staff can also provide you with the ID for a specific caveat.

• Description—A description of what is observed when the caveat occurs.