Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco Prime Infrastructure 2.2.1 Release Notes

Available Languages

Download Options

  • PDF     (282.0 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (81.7 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (88.5 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:December 10, 2014

Table of Contents

Cisco Prime Infrastructure 2.2.1 Release Notes

Introduction

System Requirements

Installation Guidelines

Before You Begin Installing the Patch

Installing the Patch

Installing the Patch With High Availability

Troubleshooting Patch Installs in HA Implementations

Upgrading Cisco Prime Infrastructure

Submitting Feedback

Prime Infrastructure Licenses

Supported Devices

Supported Wireless LAN Controller Hardware Models

Non-Configurable Features for Wireless LAN Controller Software Releases

Non-Configurable Features for Wireless LAN Controller Release 8.0

Non-Configurable Features for Wireless LAN Controller Release 7.5

Non-Configurable Features for Wireless LAN Controller Release 7.4

New Features and Enhancements

Important Notes

FAQs: Operations Center and Prime Infrastructure

Open Caveats

Resolved Caveats

Related Documentation

Obtaining Documentation and Submitting a Service Request

Cisco Prime Infrastructure 2.2.1 Release Notes

This document contains the following sections:

Introduction

This is a patch release for Cisco Prime Infrastructure 2.2.

You can install this patch release on top of your existing Prime Infrastructure 2.2 installation.

System Requirements

For more information on server and web client requirements, see the System Requirements section of the Cisco Prime Infrastructure 2.2 Quick Start Guide

Installation Guidelines

The following sections explain how to install the patch.

Before You Begin Installing the Patch

Caution Once you install this patch, you cannot un-install or remove it.

Because the patch is not removable, it is important to have a way to revert your system to the original version in case hardware or software problems cause the patch installation to fail.

To ensure you can do this, take a backup of your system before downloading and installing this UBF patch.

To revert to the original Prime Infrastructure 2.2 installation, follow these steps:

1. Reinstall Prime Infrastructure 2.2 from an OVA or ISO distribution.

2. Restore the data from the backup that you made before applying the patch.

Similarly, if you are running Prime Infrastructure 2.2 in a Virtual Machine (VM) and your organization permits taking VM snapshots, use the VMware client to take a VM snapshot before applying this patch. Store the snapshot in an external storage repository, and restore from the snapshot if the patch is unsuccessful.

If you are installing the patch as part of a High Availability (HA) implementation, you will want to ensure that the network links between the two servers provide maximum bandwidth and low latency throughout the patch install. For more information, see Troubleshooting Patch Installs in HA Implementations.

Installing the Patch

Make sure you have completed the recommended preparation steps given in Before You Begin Installing the Patch.

If your current Prime Infrastructure implementation has High Availability enabled, follow the steps in Installing the Patch With High Availability instead of the steps below.

If you are currently using Prime Infrastructure without enabling High Availability, follow the steps below to install the patch.

Step 1 Point your browser to the software patches listing for Cisco Prime Infrastructure 2.2.

Step 2 Click the Download button for the Release 2.2.1 patch file (pi221_20150131-27.ubf), and save the file locally.

Step 3 Log in to the Prime Infrastructure server using an ID with administrator privileges and choose Administration > Software Update.

Step 4 Click Upload and browse to the location where you saved the patch file. Click OK to upload the file.

Step 5 When the upload is complete:

a. On the Software Update page, confirm that the File Name and Corresponding Updates in the “Files” table are correct.

b. Click Install. You will see a popup message indicating the manual restart of Prime Infrastructure. Click Yes for successful installation.

Step 6 Restart the server by first executing the ncs stop command and then the ncs start command, as explained in Restarting Prime Infrastructure in Cisco Prime Infrastructure 2.2 Administration Guide.

Step 7 Verify that the patch is installed by logging into the server and choosing Administration > Software Update. You should see a listing for the patch in the “Updates” table, with “Installed” in the “status” column.

 

Installing the Patch With High Availability

Make sure you have completed the recommended preparation steps given in Before You Begin Installing the Patch.

If your current Prime Infrastructure implementation has High Availability servers that are not at the same patch level, see Patching Paired High Availability Servers in Cisco Prime Infrastructure 2.2 Administration Guide.

If you are setting up a new Prime Infrastructure High Availability (HA) implementation and your new servers are not at the same patch level, see Patching New High Availability Servers in Cisco Prime Infrastructure 2.2 Administration Guide.

Troubleshooting Patch Installs in HA Implementations

Users who apply this patch in a High Availability (HA) implementation may experience difficulties if the network links between the two servers offer low bandwidth and high latency. In particular, this kind of low throughput can cause the post-patch restart and re-registration to take far longer than normal. In most cases, simply waiting longer will fix the problem with no intervention. In a few cases, continued or intermittent throughput problems can cause a complete failure. If you believe this has occurred, contact Cisco TAC.

If you are unable to verify that the patch has been applied to a server, or one or both of the servers fails to re-start properly after the patch, you may need to re-image the server as explained in Before You Begin Installing the Patch before continuing.

In all cases, you can use the backup logs command on one or both servers to get information on the source of the failure.

Upgrading Cisco Prime Infrastructure

For detailed information about upgrading from previous releases of Prime Infrastructure, including the list of versions from which you can upgrade, see the Upgrading Cisco Prime Infrastructure section of the Cisco Prime Infrastructure 2.2 Quick Start Guide.

Submitting Feedback

Your feedback will help us improve the quality of our product. To send your feedback, follow these steps:

Step 1 If you have configured your mail server, go to Step 8.

Step 2 Choose Administration > System Settings > Mail Server Configuration.

Step 3 In the Mail Server Configuration page, enter the mail server details.

Step 4 Click Save to save the configuration settings.

Step 5 Choose Help > Help Us Improve Cisco Products.

Step 6 In the Help Us Improve Cisco Products page, select the Yes, collect data periodically (monthly) option.

Step 7 Click OK.

Step 8 Choose Help > Submit Feedback (in the Classic theme) or click the question mark icon at the top right and then click Submit Feedback (in the Converged theme). You must configure the email server and then enable data collection to configure the feedback tool.

 

Prime Infrastructure Licenses

For detailed information on Prime Infrastructure licensing, see the Cisco Prime Infrastructure 2.2 Ordering and Licensing Guide.

Supported Devices

To see the list of devices supported in this release of Prime Infrastructure:

Step 1 Log in to Prime Infrastructure.

Step 2 Switch to the Converged Theme (if applicable).

Step 3 Click the question mark icon (Help) at the top right.

Step 4 Click Supported Devices List.

 

You can also view the Cisco Prime Infrastructure 2.2 Supported Devices list at the following URL:

http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-infrastructure/products-device-support-tables
-list.html

For detailed information on the software compatibility for the Cisco wireless devices, see the following URL:

http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html

To view the Prime Infrastructure supported devices for switches, wireless LAN controllers (WLC), access point images, Identity Services Engine (ISE), and Mobility Services Engines (MSE), see the Cisco Prime Infrastructure 2.2 Supported Devices list at the following URL:

http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-infrastructure/products-device-support-tables-
list.html

Supported Wireless LAN Controller Hardware Models

Table 1 lists the Prime Infrastructure supported devices for switches, WLCs, Access Points (APs), ISEs, and MSEs.

..

Table 1 Supported Device Matrix for Switches, WLC, MSE, ISE, and AP

Supported Switches
Supported Controllers
Supported MSE Devices
Supported ISE Devices
Supported Lightweight APs
Supported Autonomous APs

2960, 2975 Switches [Cisco IOS Release 12.2(50)SE],

Catalyst 3560 Switches [Cisco IOS Release 12.2(50)SE],

Catalyst 3650 Series Ethernet Stackable Switch

Catalyst 3750 Switches [Cisco IOS Release 12.2(50)SE],

Catalyst 3850 Series Ethernet Stackable Switch

Catalyst 3550 Series Ethernet Stackable Switch

Catalyst 4500 Switches [Cisco IOS Release 12.2(50)SG],

Catalyst 6500 Switches [Cisco IOS Release 12.2(33)SXI], and [Cisco IOS XE 03.07.00.E]

Cisco NAM 2304 Appliance, Cisco NAM 2320 Appliance, Cisco IE 2000 Series Switches.

Cisco 2100 Series

Cisco 2500 Series

Cisco 4400 Series

Cisco 5500 Series

Cisco Flex 7500 Series

Cisco 8500 Series

Cisco Virtual Controller

Cisco WiSM

Cisco WiSM2

Cisco Wireless Controller on Service Ready Engine (WLCM2 on SRE)

Catalyst 3750G Series Integrated Wireless LAN Controllers

Cisco 5700 Series Wireless Controller

Cisco 5700 Series Wireless Controller (STACK)

Cisco MSE 3355

Cisco MSE Virtual Appliance

Cisco ISE 1.0

Cisco ISE 1.1

Cisco ISE 1.2

Cisco ISE 1.31

Cisco 600 Series, Cisco 702W AP, Cisco 1040 AP, Cisco 1100 AP, Cisco 1120 AP, Cisco 1130 AP, Cisco 1140 AP, Cisco 1200 AP, Cisco 1230 AP, Cisco 1240 AP, Cisco 1250 AP, Cisco 1260 AP, Cisco 1500 AP,
Cisco 1524 AP,
Cisco 1552C AP,
Cisco 1552CU AP,
Cisco 1552E AP,
Cisco 1552EU AP,
Cisco 1552H AP,
Cisco 1600e AP,
Cisco 1600i AP,
Cisco 2600i AP,
Cisco 2600e AP,
Cisco 2700 AP,
Cisco 3500i AP, Cisco 3500e AP, Cisco 3500p AP,
Cisco 3600i AP, Cisco 3600e AP,
Cisco 3600p AP,
Cisco 3700i AP,
Cisco 3700e AP, Cisco 3700p AP
Cisco 802agn AP,
Cisco 802gn AP,
Cisco 802hagn AP,
Cisco 801gn AP,
Cisco 801agn AP,
Cisco 1700I AP,
Cisco 1700E AP
Cisco Aironet 1570 Series APs

Cisco 702 series APs

Cisco 1600 series APs

Cisco 1530 series APs

Cisco 3500 AP

Cisco 1260 AP

Cisco 1700 AP

Cisco 2600 AP

Cisco 2700 AP

Cisco 3600 AP

Cisco 3700 AP

Cisco 1520 AP /1550 AP

Cisco 1100 series APs

Cisco 1130 series APs

Cisco 1140 series APs

Cisco 1040 series APs

Cisco 1200 series (1200/1210/1220/1230)

Cisco 1240 series APs

Cisco 1800 AP

Cisco 800 ISR Series,

Cisco Aironet 1310 and 1410 Bridges,

Cisco 801 AP

1.Prime Infrastructure 2.2 supports ISE 1.3 in non-FIPS mode.

Non-Configurable Features for Wireless LAN Controller Software Releases

The following sections describe the Wireless LAN Controller software features that are not configurable in Prime Infrastructure Release 2.2.1 using the pre-packaged templates:

Non-Configurable Features for Wireless LAN Controller Release 8.0

The following Wireless LAN Controller 8.0 software features are not configurable in Prime Infrastructure Release 2.2.1 using the pre-packaged templates. You can use Prime Infrastructure CLI templates or Wireless Controller GUI to configure these features:

  • DHCP relay option 82 sub-options (5, 151)
  • CMX FastLocate
  • Advanced Rogue reporting
  • Client Deauth /Blacklist (Geo Fencing)
  • Adaptive wIPS enhancements
  • Q-in-Q
  • Bonjour per user and per device policies
  • WLC 2500 wired guest access
  • DCA RF Profiles
  • Data Packet RSSI
  • FlexConnect + Bridge Mode for mesh enabled FlexConnect Access points.
  • Receiver Start of Packet Detection Threshold (Rx-SOP)
  • HDX – optimized roaming
  • Video Stream support for FlexConnect local switched deployments
  • AP-701E (India only) with External Antenna support
  • OEAP-600 enhancements (basic Firewall, End-user GUI enhancements, Split-tunnel for Internet traffic, Voice QOS enhancements, HA support for OEAP)
  • AP700W vlan tagging support
  • AVC Directional Marking

Non-Configurable Features for Wireless LAN Controller Release 7.5

The following Wireless LAN Controller 7.5 software features are not configurable in Prime Infrastructure Release 2.2.1 using the pre-packaged templates. You can use Prime Infrastructure CLI templates or Wireless Controller GUI to configure these features.

  • DNS lookup for Radius and TACACS server
  • .FlexConnect AP authentication support for PEAP/EAP-TLS
  • FlexConnect AAA ACL
  • FlexConnect AAA QoS
  • Application Visibility and Control - downloadable protocol packs
  • Domain -Z support AP3600
  • Guest Access Management and web-authentication support

Non-Configurable Features for Wireless LAN Controller Release 7.4

The following Wireless LAN Controller 7.4 software features are not configurable in Prime Infrastructure Release 2.2.1 using the pre-packaged templates. You can use Prime Infrastructure CLI templates or Wireless Controller GUI to configure these features:

  • WIPS containment enhancements
  • WLC & AP provides AP NAME (MAC), AP Location string (AP Group Name) and VLAN ID for DHCP option 82 and AAA interim accounting
  • GPON support on 1552E/1552EU
  • GPS support for outdoor
  • Support all signatures in ELM
  • 11k Support
  • Spectrum Expert Mode
  • 802.11r
  • Band Select/Band Steering
  • DHCP Proxy in WLAN Configuration

New Features and Enhancements

There are no new features in this release.

The following enhancements have been made in this release:

  • Device 360° View - A new icon labeled as Connect to Device is added to the left of Alarm Browser icon. The Connect to Device icon allows you to connect to the device using Telnet, SSH, HTTP, and HTTPS protocols.
  • Support for MSE 3365 platform.

Important Notes

  • Prime Infrastructure 2.1.2 client can authenticate via Prime Infrastructure 2.2.1 single sign-on (SSO) server only if you apply the ISE patch pi212_PIGEN_CSCur43834_01.ubf from Home > Products > Cloud and Systems Management > Routing and Switching Management > Network Management Solutions > Prime Infrastructure > Prime Infrastructure 2.1 > Prime Infrastructure Patches-2.1.2 before adding a 2.2.1 SSO server in the Prime Infrastructure 2.1.2 client. It is a prerequisite to manage Prime Infrastructure 2.1.2 client in Prime Infrastructure 2.2.1 Manager of Managers (MOM).
  • Install Plug and Play gateway before installing Prime Infrastructure 2.2.1.
  • Prime Infrastructure 2.2.1 has a fix for Poodle vulnerability which disables SSLv3 and enables TLS on Prime Infrastructure server. The CNS agent on the devices currently support only SSLv3 and is poodle vulnerable (CSCus48378). Installing the Prime Infrastructure 2.2.1 patch would break the Secure PnP (SSL and HTTPS enabled) functionality in Prime Infrastructure for devices.

FAQs: Operations Center and Prime Infrastructure

For the frequently asked questions about Operations Center and its interactions with the instances of Prime Infrastructure that it manages, see Cisco Prime Infrastructure 2.2 Release Notes.

Open Caveats

Table 2 lists the Open Caveats in Cisco Prime Infrastructure Release 2.2.1

Click the identifier to view the impact and workaround for the caveat. This information is displayed in the Bug Search Tool. You can track the status of the open caveats using the Bug Search Tool.

 

Table 2 Open Caveats

Identifier
Description

CSCuh16286

Global search for IPv6 clients based on IP addresses is not working.

CSCul06347

When comparing the PI server and cluster, a few fields have mismatched data.

CSCul35804

Prime Infrastructure 2.0 has the CBC Mode vulnerability.

CSCuo68188

The syslogs tab does not display any data in the cluster server though the PI instance has data in it.

CSCuo70141

Failback fails due to low bandwidth.

CSCuo71039

IPsec credentials are updated when bulk importing the devices.

CSCuo89119

The switchport link down event is categorized incorrectly as WLC link down event.

CSCuo98439

During installation, the console window displays a spurious character on a blank screen for a long time.

CSCup25645

Cross-launching to the source IP address from the Events page displays the alarm tab with no data available.

CSCup94066

When selecting many devices, the filter criteria is minimized and does not show anything inside the filter.

CSCuq04072

Unable to map WLAN mobility anchor for IPv6 wireless controller.

CSCuq51763

Device selection refresh issue in IWAN workflow.

CSCuq76946

All MSEs show up as unreachable.

CSCuq93480

System templates are missing after restoring a backed up data from another server.

CSCur21924

The columns in Prime Infrastructure wIPS alarms have to be edited to show only relevant information.

CSCur23731

When you click a WLC device to view inventory details, the Operations Center is unable to load data.

CSCur26128

Credential profile is not associated with WLC device.

CScur45282

Auto SPT is running on adhoc rogues and showing false alarm.

CSCur45975

Backups with lengthy filenames are not restored.

CSCur49012

Inventory Cat 4500: Partial Collection Fails after adding devices and requires manual synchronization.

CSCur56614

Error thrown while configuring dhcp option 82 fields in interface page.

CSCur58621

The Import from device option fails and images are displayed as not available.

CSCur67549

IWAN: The HUB Master Controller template is not part of routing instance configuration.

CSCur72133

Date stamp is not being shown on some chart types in Client AP association.

CSCur75625

For client attribute "Cross launch to ISE", if the filter is set as end-point ID, the query returns no data.

CSCur83964

The failover operation is not successful during HA software update.

CSCur85223

The Initial Device Setup is empty for restored Server and any of the supported devices from “Unassigned” group is not listed.

CSCur85653

Location Groups are placed under All Devices.

CSCur85763

The report shows the status as Not Applicable, when only the Admin status of 802.11ac is configured via LWAP template.

CSCur87358

The Device Port Summary shows no information for 5508 Series WLAN Controller.

CSCur91049

ActiveMQ flooding slows down the process of creating a group.

CSCur94452

Unwanted dialog box appears while trying to open existing client reports.

CSCus13995

Disable Compliance Service feature.

CSCus15638

Misleading message shown under “Compliance Service” after clicking Save.

CSCus54753

Issue in setting up Multicast Address for both Cisco 5500 and 8500 devices with dual stack.

CSCus68493

Device delete fails when bulk controllers are selected.

CSCus72290

Swim image distribution to many devices in parallel may cause the job to be in pending state forever.

CSCus75042

Issue in cofing archive page - Device details are not displayed.

CSCus77041

Plug and Play day-0 functionality is not happening for HTTPS Provisioning.

CSCus78734

Prime Infrastructure 2.2.1 IPv6 Mobility anchor set issue.

CSCus88449

Rogue reports show “No data available” message for IPv6 controller filter.

Resolved Caveats

Click the identifier to view the impact and workaround for the caveat. This information is displayed in the Bug Search Tool. You can track the status of the resolved caveats using the Bug Search Tool.

Table 3 Resolved Caveats
Identifier
Description

CSCum51095

Identify Unknown Users option fails for wired clients in PI.

CSCun50841

SWIM's parallel distribution fails to copy the image to device.

CSCuq04356

Unable to set Mobility Group Multicast with IPv4 address.

CSCur07071

If Zone Base Fire Wall (ZBFW) rule is deleted, it breaks NAT44 rule that re-uses ZBFW ACLs.

CSCur27813

Prime Infrastructure : Evaluation of SSLv3 POODLE vulnerability.

CSCur51785

No data displayed under show analysis for Worst N Clients by ART Metrics.

CSCur54488

Prime Infrastructure does not allow more than 32+ characters in the “Password” field.

CSCur65712

NAM Configuration - System and Monitor UI Errors.

CSCur79123

NMS server was stopped and hprof is created on Prime Infrastructure server running customer's restored DB.

CSCur80193

Unable to add WLCs as Mobility Group Member using IPv6 Address.

CSCur87071

Guest Account Sync throws an exception (WLC - wrong CLI Credenatials).

CSCur87434

Map is not shown for client when you navigate from "Current Associated Clients" tab.

CSCur89574

Exception is thrown while deleting devices with QoS on Virtual-Template interface.

CSCur91955

Prime Infrastructure wireless maps archive import hangs on problematic JPGs in tar.gz.

CSCur92280

Unable to delete 3850s & Switches after upgrading Prime Infrastructure from 1.4.2 to 2.2.

CSCur92398

The reachable count link on the Network Device Summary dashlet does not show device list.

CSCur92605

If Autonomous AP is selected under Device type, it shows no data, "500 internal server error".

CSCur98071

Cisco 8500 does not show up on the mobility group member list page.

CSCus00485

The cronjob "cleanGroupMembersFromUnassigned.sh" runs every 5 minutes and generates email on every run.

CSCus04533

Topology interface assignment selections is incomplete.

CSCus04827

The ZBFW rule including ACL with port range is displayed in ZBFW Device Work Center as unsupported.

CSCus06590

While running AP Utilization report, Prime Infrastructure ran out of heap memory and is not responding.

CSCus08298

ASR/ISR not not shown in the device selector for Custome App Deployement.

CSCus10241

"Bootstrap and Initial Device Setup" links are missing in SSO client server setup.

CSCus10506

Occasionally, topology hangs up and topology maps do not load.

CSCus14306

Rogue removed from WLC- trap is not clearing the rogue alarm in Prime Infrastructure.

CSCus14936

In OPC, no data is displayed on Top N Site Alarms.

CSCus15006

Unable to add new managed servers in OPC under VD other than ROOT-DOMAIN

CSCus15053

Failed to add managed instance in Op Center.

CSCus15565

Some percent of Prime Infrastructure rogue alarms never get cleared.

CSCus18287

NMS Server stopped and there was a crash while CDB job got executed.

CSCus43839

Database file access issue affects HA Failback.

CSCus44225

Plug and Play process not coming up after Prime Infrastructure 2.2.1 UBF patch installation.

CSCus44826

Remove references to NG MSE.

CSCus48240

Secondary Sever not coming up after applying Prime Infrastructure 2.2.1 UBF patch.

CSCus50208

Radios API seems to be broken in Prime Infrastructure 2.2.

CSCus50841

Prime Infrastructure 2.2 Floor Image APs slow to load due to missing db partitions.

CSCus53312

ERROR popup needs to be modified while adding Prime Infrastructure 2.1.2 in Prime Infrastructure 2.2.1 Manager of Managers (MOM)

CSCus59276

QoS PAL reader fails to parse advanced MQC CLIs on IOS-XE.

CSCus63803

AP no longer exists in Converged Theme

CSCus64743

PI 2.2 Beta to PI 2.2 FCS missing partition of events and alarms tables

CSCus66143

PPM: Attempt to distribute PPM on a ISR-G2s with service modules fails.

CSCus73366

Unable to sync WLCs due to SNMP transport in credential table.

CSCus92828

The NMS Server stops functioning when the system resources are exhausted in Prime Infrastructure 2.2.

Related Documentation

You can access additional Cisco Prime Infrastructure documentation at:

http://www.cisco.com/en/US/products/ps12239/tsd_products_support_series_home.html

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html.

Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.

This document is to be used in conjunction with the documents listed in the “Related Documentation” section.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2012-2015 Cisco Systems, Inc. All rights reserved.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

Related Cisco Community Discussions

This Document Applies to These Products

About Us
Contact Us
Work with Us