This document helps customers to find the most reliable Wireless LAN Controller software available. The Cisco Wireless TAC (Technical Assistance Center) recommends AireOS builds from each train of released AireOS software. These recommendations may be updated on a weekly basis.
Escalation Builds/Maintenance Interims
In some cases, the TAC recommended build might be an escalation or maintenance interim/beta build. Such builds are not available on CCO (Cisco.com), but have important bug fixes (beyond what is available in CCO code), and will be operational in production at customer sites for several weeks.
Note that, in some cases, the beta/escalation/interim build will contain support for unreleased features and/or hardware. TAC does not support unreleased features or hardware - until official release, such support will come from the Business Unit (BU).
For released features and platforms, these builds are fully supported by TAC and the BU.
In order to request a TAC recommended escalation/maintenance interim build, open a Cisco TAC case on your Wireless LAN Controller contract.
TAC Recommended Builds
AireOS 18.104.22.168 and 22.214.171.124 are TAC supported releases. TAC recommends that customers with 802.11ax (Catalyst 9100 Series Wi-Fi 6) access points run 126.96.36.199.
FIPS customers must not use 188.8.131.52 as it can cause APs to become stranded, requiring physical access for recovery
This is CSCvt17801 (AP 2800/3800/4800/1560/IW 6300 gets into a loop after attempting to join WLC with FIPS enabled)
This bug does not affect 184.108.40.206
AireOS 220.127.116.11 and 18.104.22.168 are deferred. The 802.11ax APs require 8.9 or above; TAC recommends 22.214.171.124 for deployments with these APs.
For customers who require features or hardware (such as the AP4800 series) that are not supported in 8.5, TAC recommends 126.96.36.199 or 8.10, which also support Inter-Release Controller Mobility (IRCM) compatibility with Cisco 9800 controllers.
AireOS 188.8.131.52 is a short-lived release with no maintenance planned - see the End of Life bulletin. Customers who require new features that are unavailable in 8.5 should run 8.8 or 8.10.
AireOS 184.108.40.206 is a short-lived release with no maintenance planned, and is deferred - see the End of Life bulletin. Customers who require new features that are unavailable in 8.5 should run 8.8 or 8.10.
AireOS 220.127.116.11 is a TAC supported release. For deployments with hardware that is end of lifed in 8.5, TAC recommends 8.5.161.x Escalation code (available now from TAC.) 8.5 is the last train for the following platforms: AP1600, AP2600, AP3500, AP3600, AP1552 (128MB version), AP802, WLC2504, WLC5508, WLC7510, WLC8510, WiSM2.
8.5.161.x Escalation includes fixes for the following widely encountered bugs, which fixes are not present in 18.104.22.168:
CSCvq90572 Receive throughput degrades for 2800/3800/4800/1560 - AP fails to send block ACKs
CSCvt22353 2800/3800/4800/1560 APs not sending DHCP messages over the air
CSCvq16085 3504 boots with interfaces unreachable for some protocols
If Cisco 9800 controller compatibility with AireOS 8.5 is required, use the 22.214.171.124 "IRCM" special image for 5508/8510/5520/8540/3504. This image is not supported for other platforms, nor is it supported for non-IRCM deployments.
AireOS 8.4 is a short-lived release with no maintenance planned, and is deferred. Any deployment that requires post-8.3 features or hardware should run 8.5 instead.
For deployments that include hardware that is end of lifed in 8.3, TAC recommends 126.96.36.199 or 8.3.150.x Escalation code (available now from TAC.) 8.3 is the last train for the following platforms: AP1040, AP1140, AP1260, AP1552 (64MB version), OEAP600.
188.8.131.52 and 8.3.150.x Escalation code both include fixes for the following widely encountered bugs, beyond the 184.108.40.206 CCO release:
For 8.3 deployments with AP-COS, TAC recommends 8.3.150.x Escalation (available upon request.)
8.3.150.x Escalation has all of 220.127.116.11's bugfixes, as well as several key bugfixes which are not present in 18.104.22.168, including the following:
AP-COS: AP not joining after enabling MIC certificate expiry check (CSCvb93909 )
CSCvp73371 (see the tech tip ARP Responses for Default Gateway IP Address Point to Wireless Clients)
AP generating 'hostapd' core files, does not respond to EAPOL (CSCvi42632)
Cisco 1810W AP stops to send data frame intermittently (CSCvg91770)
Cisco 3800 AP FW stopped working on Radio 0 (CSCvh54235)
Cisco 2800,3800,1560 AP cannot forward packets downstream; 'Failed to get ARP entry for WLC' (CSCvg44450)
For deployments that require features or hardware introduced after 8.0, TAC supports 22.214.171.124. No further 8.2 releases are planned.
126.96.36.199 is the final maintenance release of AireOS 8.1, and is deferred. The recommended upgrade path for AireOS 8.1 customers is to 8.3 or, if feasible, 8.5.
For AireOS 8.0 customers, TAC supports 188.8.131.52. No further 8.0 releases are planned.
184.108.40.206 and 220.127.116.11 are susceptible to the AID Errors problem (CSCve81314 (local mode APs) and CSCve81269 (FlexConnect APs)). This is fixed in 8.0MR5esc, available from TAC. See the Field Notice for more details.
For Mobility Express deployments, TAC recommends using the latest 8.10 release.
Always refer to the SDA Compatibility Matrix for code combination recommendations that work best for SDA. It lists specific combinations of code on Cisco DNA Center, the Identity Service Engine (ISE), switches, routers and Wireless LAN Controller codes that have been tested by the SDA Solution Test team at Cisco.