First Published: June 8, 2020

Introduction

Cisco Prime Infrastructure is a network management tool that supports lifecycle management of your entire network infrastructure from one graphical interface. Prime Infrastructure provides network administrators with a single solution for provisioning, monitoring, optimizing, and troubleshooting both wired and wireless devices. Robust graphical interfaces make device deployments and operations simple and cost-effective.

Submitting Feedback

Your feedback will help us improve the quality of our product. You must configure the email server and then enable data collection to configure the feedback tool. To send your feedback, follow these steps:

Procedure

Step 1

If you have configured your mail server, go to Step 4.

Step 2

Choose Administration > Settings > System Settings > Mail and Notification > Mail Server Configuration.

Step 3

In the Mail Server Configuration page, enter the mail server details, then click Save to save the configuration settings.

Step 4

Choose Administration > Settings > System Settings > General > Help Us Improve.

Step 5

In the Help Us Improve Cisco Products page, select Yes, collect data periodically, then click Save.

Step 6

Click the Settings icon, then select Feedback > I wish this page would.

Step 7

Enter your feedback, then click OK.

Supported Devices

To see the list of devices supported in this release of Prime Infrastructure:

Procedure

Step 1

Log in to Prime Infrastructure.

Step 2

Click the wheel icon at the top right, then click Supported Devices.

What to do next

For detailed information on the software compatibility for the Cisco wireless devices, see the following URL:

http://www.cisco.com/en/US/docs/wireless/controller/5500/tech_notes/Wireless_Software_Compatibility_Matrix.html


Note
Prime Infrastructure does not support non-admin virtual device context (VDC) on Nexus devices.

Supported Wireless LAN Controller Hardware Models

Table 1 lists the Prime Infrastructure supported devices for switches, WLCs, Access Points (APs), ISEs, and MSEs.

Table 1. Supported Device Matrix for Switches, Cisco WLC, MSE, ISE, and AP

Supported Switches

Supported Controllers

Supported MSE Devices

Supported ISE Devices

Supported Lightweight APs

Supported Autonomous APs

Catalyst 3560 Series Switches [Cisco IOS Release 12.2(50)SE]

Catalyst 3650 Series Ethernet Stackable Switch*

Catalyst 3750 Switches [Cisco IOS Release 12.2(50)SE]

Catalyst 3850 Series Ethernet Stackable Switch*

Catalyst 4500 Switches [Cisco IOS Release 12.2(50)SG]*

Catalyst 6500 Switches [Cisco IOS Release 12.2(33)SXI] and [Cisco IOS XE 03.07.00.E]

Cisco NAM 2304 Appliance

Cisco NAM 2320 Appliance

Cisco IE 2000 Series Switches.

Catalyst 9800-40 Wireless Controller

Catalyst 9800-80 Wireless Controller

Catalyst 9800-CL Wireless Controller for Cloud

Catalyst 9800-L-C Wireless Controller

Catalyst 9800-L-F Wireless Controller

Cisco 3504 Wireless Controller

Cisco 8540 Wireless Controller

Cisco 8510 Wireless Controller

Cisco 5520 Wireless Controller

Cisco 5508 Wireless Controller

Cisco 4400 Series Wireless Controllers

Cisco 2504 Wireless Controller

Cisco Flex 7510 Wireless Controllers

Cisco Virtual Controller

Cisco Wireless Service Module (WiSM)

Cisco Wireless Service Module 2 (WiSM2)

Cisco Wireless Controller on Cisco Services-Ready Engine (WLCM2 on SRE)

Catalyst 3750G Integrated Wireless LAN Controller

Cisco 5760 Wireless LAN Controller

The following Cisco Mobility Express Controllers are supported:

  • Cisco Catalyst IW6300 Access Points

  • Cisco 6300 Embedded Services Access Points

  • Cisco Aironet 4800 AP

  • Cisco Aironet 2800 AP

  • Cisco Aironet 3800 AP

  • Cisco Aironet 1850 AP

  • Cisco Aironet 1830 AP

  • Cisco 1815 Series Controllers

  • Cisco 1540 Series Controllers

  • Cisco 1560 Series Controllers

Cisco 3355 Mobility Services Engine

Cisco MSE Virtual Appliance

MSE 8.0.150.0

CMX-10.4.x

CMX-10.5.x

CMX-10.6.x

Cisco ISE 2.6

Cisco ISE 2.4

Cisco ISE 2.3

Cisco ISE 2.2

Cisco ISE 2.1

Cisco ISE 2.0

Cisco ISE 1.4 with the required patch1

Cisco ISE 1.3

Cisco ISE 1.2

Cisco 6300 Series Embedded Services Access Points (ESW6300)

Cisco Catalyst IW6300 DCW Heavy Duty AP

Cisco Catalyst IW6300 AC Heavy Duty AP

Cisco Catalyst IW6300 DC Heavy Duty AP

Cisco Catalyst 9130AXE AP

Cisco Catalyst 9130AXI AP

Cisco Catalyst 9120AXI AP

Cisco Catalyst 9120AXE AP

Cisco Catalyst 9120AXP AP

Cisco Catalyst 9115AXE AP

Cisco Catalyst 9115AXI AP

Cisco Catalyst 9117AXI AP

Cisco Aironet 4800 AP

Cisco Aironet 3800i AP

Cisco Aironet 3800e AP

Cisco Aironet 3800p AP

Cisco Aironet 3700i AP

Cisco Aironet 3700e AP

Cisco Aironet 3700p AP

Cisco Aironet IW 3700 AP

Cisco Aironet 3600i AP

Cisco Aironet 3600e AP

Cisco Aironet 3600p AP

Cisco Aironet 3500i AP

Cisco Aironet 3500e AP

Cisco Aironet 3500p AP

Cisco Aironet 2800i AP

Cisco Aironet 2800e AP

Cisco Aironet 2700i AP

Cisco Aironet 2700e AP

Cisco Aironet 2700p AP

Cisco Aironet 2600i AP

Cisco Aironet 2600e AP

Cisco Aironet 1850i AP

Cisco Aironet 1850e AP

Cisco Aironet 1840I AP

Cisco Aironet 1830i AP

Cisco Aironet 1815i AP

Cisco Aironet 1815w AP

Cisco Aironet 1815t AP

Cisco Aironet 1815m AP

Cisco Aironet 1810 OfficeExtend Series AP

Cisco Aironet 1810w AP

Cisco Aironet 1800i AP

Cisco Aironet 1700i AP

Cisco Aironet 1700E AP

Cisco Aironet 1600i AP

Cisco Aironet 1600e AP

Cisco Aironet 1572IC AP

Cisco Aironet 1572EAC AP

Cisco Aironet 1572EC AP

Cisco Aironet 1562I AP

Cisco Aironet 1562E AP

Cisco Aironet 1562D AP

Cisco Aironet 1562 PS AP

Cisco Aironet 1552C AP

Cisco Aironet 1552CU AP

Cisco Aironet 1552E AP

Cisco Aironet 1552EU AP

Cisco Aironet 1552H AP

Cisco Aironet 1542I AP

Cisco Aironet 1542D AP

Cisco Aironet 1532I AP

Cisco Aironet 1200 AP

Cisco Aironet 1140 AP

Cisco Aironet 1130 AG AP

Cisco Aironet 1040 AP

Cisco Aironet 700 AP

Cisco Aironet 702W AP

Cisco Aironet 600 Series OfficeExtend AP

Cisco Aironet 3700 Series APs

Cisco Aironet 3600 Series APs

Cisco Aironet 3500 Series APs

Cisco Aironet 2700 Series AP

Cisco Aironet 2600 Series APs

Cisco Aironet 1700 Series APs

Cisco Aironet 1600 Series APs

Cisco Aironet 1550 Series APs

Cisco Aironet 1530 Series APs

Cisco Aironet 1570 Series APs

Cisco Aironet 1260 Series APs

Cisco Aironet 1140 Series APs

Cisco Aironet 1040 Series APs

Cisco Aironet 700W APs

Cisco Aironet 702I Series APs

Cisco Aironet 800 Series ISR

Cisco Aironet 1310 and 1410 Bridges,

Cisco IW3700 series APs.
1 If you are using Cisco ISE 1.4, you must have the patch ise-patchbundle-1.4.0.253-Patch3-141133.x86_64.tar.gz, which you can get from the following location: https://software.cisco.com/download/release.html?mdfid=283801620&flowid=26081&softwareid=283802505&release=1.4&relind=AVAILABLE&rellifecycle=&reltype=latest .

*Also acts as Cisco Wireless Controller.

Features Not Supported in Prime Infrastructure 3.8 Federal

Cisco Prime Infrastructure 3.8 Federal does not support the following features:

  • Operation Center.

  • Root Shell access (It is disabled by default and cannot be enabled).

  • DNA Centre co-existence support.

Wired

Inventory Enhancements

  • Inventory > Device Management > Network Devices - You can now view the model numbers of the devices in the Network Devices screen. Click the settings icon at the top right corner, expand the Columns menu and select the Model Number option.

  • Inventory > Device Management > Discovery - Options to Export and Refresh are introduced in the Discovery Job Instances section.

Wireless

Access Points Enhancements

  • Prime Infrastructure 3.8 introduces support for:

    • Managing the inventory and life cycle management of the new 11AX Access Point (Axel-9130 series).

    • Managing the 9120 and 9130 series access points with an external Self-identifying Antenna (SIA).

    • Configuring the Fast Locate feature on Vancouver and Axel Access Points (9120 and 9130 series Access Points).

    • Configuring Target Wake Time (TWT) feature on 11AX Access Points by enabling the Target Wakeup Time and Target Wakeup Time Broadcast checkboxes.

    • Downlink Multi User-Multiple Input Multiple Output (MIMO) on 11AX Access Points.

Catalyst 9800 Series Wireless Enhancements

  • Prime Infrastructure now allows you to manage the inventory and life cycle management of the new 11AX Access Point (Axel-9130 series) on Catalyst 9800 Series Wireless Controllers.

  • Prime Infrastructure now allows you to manage the inventory and life cycle management of the new IW3702 Access Point (Zephyr) on Catalyst 9800 Series Wireless Controllers.

  • Prime Infrastructure now allows you to manage the inventory and life cycle management of the new IOT Access Point (Duplo) on Catalyst 9800 Series Wireless Controllers.

  • Prime Infrastructure now allows you to manage BSS Coloring feature on Salt Spring and Vancouver Access Points (11AX) starting from 17.1 Catalyst 9800 Wireless Controllers except C9117 Access Point. You can enable this feature by selecting the BSS Color checkbox in the 11ax Parameters section.

  • Configuration > Wireless Technologies > Cisco Catalyst 9800 Configuration > WLAN Profile > Advanced-A new option, Allow Private Group, is added as a part of the Peer to Peer Blocking drop-down list.

Reports

  • Reports > Report Launch Pad > Device - A new report type, Third Party Device Details Report, is added. You can create a new Third Party Device Details Report by clicking the New button.

Prime Infrastructure 3.8 Federal mode installations

The Prime Infrastructure 3.8 Federal image is supported on virtual appliance and physical appliance mode of installation. For more information, see the Installation options section of the Cisco Prime Infrastructure 3.8 Quick Start Guide.

In Prime Infrastructure3.8 Fed mode install, be aware that:

  • Federal Mode is an installation option, Root Shell access is disabled by default and cannot be enabled

  • Web Login page and CLI show version details will be shown as PI 3.8 Federal.

  • In FED mode, FIPS approved ciphers are used for SSH and TLS.

  • In FED mode, Port 61617 is disabled. You can check using cli command – show security status.

  • In Prime Infrastructure FED mode , following CLI commands are disabled default, You cannot enabling them in order to ensure FED compliant operations.

    • ncs run ssh-server-single-legacy-algorithm

    • ncs run jms

    • ncs run ssh-server-legacy-algorithms

    • ncs run sshclient-nonfips-ciphers

    • ncs run firewall

  • Prime Infrastructure 3.8 FED is available on the Prime Infrastructure Physical Appliance and Digital Network Architecture Center (DNAC) Appliance. Prime Infrastructure 3.8 FED not supported on the PRIME-NCS-APL-K9 (also known as “Gen 1”). Prime Infrastructure 3.8 FED is supported on PI-UCS-APL-K9 (also known as the Gen 2 appliance), PI-UCSM5-APL-K9 and PI-UCSM5-APL-U-K9 (also known as Gen 3 appliance) and DN1-HW-APL and DN2-HW-APL known as DNAC Appliance)

  • You can back up your data from Prime Infrastructure 3.8 FED and Restore it on Prime Infrastructure 3.8 FED server only.

  • In Prime Infrastructure 3.8 Federal, you cannot restore to it a backup made on a Prime Infrastructure 38 non-FED enabled server. Conversely, you cannot restore a Prime Infrastructure 38 FED-enabled backup to a Prime Infrastructure 38 non-FED enabled Prime Infrastructure server.

  • You cannot restore backup of Prime Infrastructure 2.2 FIPS and 3.2 FIPS

  • Upgrade is not supported in PI 3.8 Federal release.

Important Notes

This section contains important notes about Prime Infrastructure.

  • Support for the MR and DP Patch releases for Prime Infrastructure 3.8 main release and Prime Infrastructure 3.8 Federal Releases are the same.

  • Prime Infrastructure does not support Data Center from Release 3.7. For more information see End-of-Sale and End-of-Life Announcement for the Cisco Prime Infrastructure Data Center.

  • Editing the schedule of an already-scheduled job will change the status of that job to Pending for Approval since each edit requires an approval from the user who created the job.

  • You must disable and enable the syslog forwarding feature and then refresh the page if Prime Infrastructure is not able to forward Syslogs to the remote server. If the issue persists, restart Prime Infrastructure.

  • Cisco Prime Infrastructure does not support monitoring for Cisco Application Control Engine (ACE) module, because ACE has been moved to end-of-life and does not respond to related monitoring MIBs.

  • In Prime Infrastructure after backup and restore, the huge amount of empty partitions from Alarm table fails to drop the old partitions. For more information see Techzone on how to drop partition.

  • Prime Infrastructure can handle 7k interfaces per device. It takes only a few hours for the inventory sync-up to complete for the devices within this range. For devices with more than 7k interfaces, a few days will be required for the sync-up and if the interfaces range exceeds 10k, server downtime is experienced.

  • You must perform the configuration instructions as described in the Basic Configuration of a Catalyst 9800 Running IOS to Support NETCONF/YANG Data Modelling section required for a Catalyst 9800 running IOS software to support NETCONF/YANG Data Modelling.


    Note

    Replace 3850 with 9800, wherever applicable.

  • Cisco Prime Infrastructure no longer supports the Datacenter feature.

  • Prime Infrastructure release 3.2 and above do not support multiple interfaces in the Gen-2 and Gen-3 appliances.

Open Caveats

The following table lists the open caveats in Prime Infrastructure Release 3.8.

Click the identifier to view the impact and workaround for the caveat. This information is displayed in the Bug Search Tool. You can track the status of the open caveats using the Bug Search Tool.

Table 2. Open Caveats

Identifier

Description

CSCvs57464

Swim CCO EULA & K9 agreement Links validation

CSCvt03789

PI: ISSU image upgrade is not working

CSCvt08641

Timezone reconfiguration may stop poller jobs from rescheduling and fail login with \"negative time\"

CSCvt09684

Unable to upload .dwg image into PI New Maps due to size of OBJECTS section

CSCvt13996

Interface Utilization report shows wrong interface details when we save and run it.

CSCvt23969

Importing CAD unique block instances failed under certain circumstances

CSCvt17772

PI 3.8 Dashboard page - Device down port links are not clickable

Resolved Caveats

The following caveats were resolved in this release. You can view additional information about these caveats in the Bug Search Tool.

Table 3. Resolved Caveats

Identifier

Description

CSCvu07252

OpenSSL vulnerability changes

CSCvu31658

Compliance job is running for long time.

CSCvu12157

Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

CSCvr20487

PI38 - Oracle Database Server Multiple Vulnerabilities

CSCvr20496

Medium Apache 2.4.x < 2.4.41 Multiple Vulnerabilities - port 8080

CSCvr43765

Prime Infrastructure generating alarms for unconfigured state as malicious and critical alarms

CSCvr44613

BGL18 Alpha: Prime Infrastructure 3.7.0.159 CCO upgrade stuck after stage 2

CSCvr59979

wcs_model_jar applied through modelHandler failed with Duplicate query mapping Exception

CSCvr68663

AireOS Config Translator - Fetch config is not working - showing browser error message

CSCvr98341

BGL18 Alpha: Unable to see the CLI Session for eWLC \"Failed to fetch device details using CLI\"

CSCvs03476

Tokelau 3.8.0.0.69 : Error while Updating User Password in NON ROOT user

CSCvs05236

Antenna Broken Traps are not available on Prime infrastructure

CSCvs08179

S&P:Constraint violation exception in prune.log

CSCvs19450

PI 3.8.0.0.81 installed in Hyperv : WSA service is in starting state

CSCvs25085

17.1 final build - coral needs to be integrated with Prime 3.8 release

CSCvs35005

NMS stopped due to OOM as client Traps being processed

CSCvs39987

Tokelau 3.8.0.0.96 : Secondary Server NMS is stopped after Force Failover

CSCvs41559

PI3.8: Heat maps not generated for some AP models

CSCvs41809

'Planning mode' page is not launched in Floor view

CSCvs43263

Page is showing blank after filtered User defined from network devices page

CSCvs66157

Some components of PI 3.8 using DES Algorithm

CSCvs69055

CMX10.6.MR1- Axel-E supporting Marlin-3, unable to distinguish on PI UI

CSCvs77406

Sensitive Data Disclosed in Job Logs and associated problems

CSCvs82198

Prime Infrastructure 3.7 Network Topology Fails to Load in Firefox browser

CSCvs86434

Software Image Upgrade Analysis flow not working.

CSCvs91117

PI can't edit admin user password after adding a security-admin user whose username contains \"admin\"

CSCvt11280

Database connection is not getting closed over period of time

CSCvt12447

BGL18 Alpha: 3.8 Prime showing AP/Client wrong Count because of congestion in TDL collector pipe

CSCvq27936

Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

CSCvq40623

PI Maps to support SD status refresh to propagate Green APs/radios to floors and up

CSCvq70433

Prime Infrastructure 3.5 not listing all routers in DMVPN report

CSCvq90726

Different timezone in HA logs in each browser

CSCvr01602

Invalid error message when CMX fails to add to Prime Infrastructure due to certificate issue

CSCvr05537

Jobs are not moving to running state after restore 3.5,3.4 backup over 3.7 in a specific scenario

CSCvr20470

PI38 - Nessus Scanner reported new issues

CSCvr23501

Saved Report Templates disappear from PI in 7 days after performing \"Save and Export\"

CSCvr23918

Prime Infrastructure shouldn't allow configuring RF profile with name exceeding 31 chars

CSCvr27680

9120i AP not showing heatmap for 802.11a band in Prime Infrastructure's Planning Mode

CSCvr36838

PI 3.5's new SSE API has inaccurate timestamps, appears to be timezone offset

CSCvr43065

On Demand Location - Missing location heatmap for radio slot 2 (XOR)

CSCvr43805

Prime Infrastructure - Autonomous AP dashlet not reflecting actual status of APs

CSCvr43929

Prime Infrastructure syslog report does not work when executed for Last 1 Hour

CSCvr43954

Syslog Report missing syslogs where the source IP is different than the management address

CSCvr54420

Evaluation of ncs for Intel 2019.2 IPU

CSCvr68467

Unable to import the template in PI 3.4

CSCvr74575

Rogue rules disappear from Prime Infrastructure 3.2

CSCvr76755

PI 3.x - APs do not show up in GUI due to high number of CDP neighbors

CSCvr86186

Site Maps AP has invalid AP height

CSCvr92146

PI: 360 View for Child VDCs are not working on the VDC tab

CSCvr94370

API template deployment shows max 5 device IP addresses in job deployment results

CSCvr94553

Prime Infrastructure 3.7 - Constraint violations encountered during pruning

CSCvs00025

Nessus scan: Vulnerabilities in kernel and sudo

CSCvs12312

Prime Infrastructure latency issue

CSCvs14132

DHCP timeout set to 5 in WLC DHCP Template

CSCvs15945

API provided by DeviceDashletService returns CPU/Memory utilization for only 5 CPUs

CSCvs17244

Credential Profile column missing from bulk import csv file in Prime Infrastructure 3.5 and later

CSCvs18656

Lightweight Client Status job is not able to update client status info

CSCvs21830

Oracle Java SE Multiple Vulnerabilities (22 )

CSCvs26806

Top N interface by netflow dashlet not loading for the Virtual Domain

CSCvs33171

TLS 1.2 support for SMTP traffic from Prime Infrastructure

CSCvs39214

PI38: NEssus Scan : New Vulnerabilities in kernel, tcpdump and sdl

CSCvs52218

PI 3.7 - DB Query tool not functioning as expected

CSCvs55479

Prime Infrastructure : Does not zip emailed reports

CSCvs56314

PI 3.7 - The Global Search Feature is Not Functioning

CSCvs62239

Prime Infrastructure's API for config archive differences may not work

CSCvs64140

PI 3.x - Custom dashboards/dashlets not saved after migrating from local to ISE managed account.

CSCvs69752

\"Interface Utilization Trend\" report execution fails to run when logging in to PI GUI in Japanese

CSCvs90142

Prime Infrastructure may not be able to insert new events in its database

CSCvs91256

Handle ArrayIndexOutOfBoundsException while loading WLANs page

CSCvs91910

Prime Infrastructure may be unable to insert unmanaged AP data into its database

CSCvt01325

Prime Infrastructure multiple interfaces on VM appliance are not supported

CSCvt19829

PI 3.x - DOC - Remove Reference to NetFlow Configurations for Nexus 7K Series Switches

CSCvt21027

Unable to update the client info in Basestation table

CSCvr31444

New audit mismatches discovered for template (QoSMapTemplate_4003)

CSCvr90362

Password policy in Prime Infrastructure's CLI doesn't work as expected

CSCvs13544

PI allows adding more than 25 license files; according to the documentation, should not exceed 25

CSCvs35925

\"partial success\" message while running config archive

CSCvr98841

Add variable dashlet in config templates incorrectly sized in fullscreen mode

CSCvs24969

Selection of WLANs on Flexconnect WLAN-VLAN mapping is not cleared after closing the window

CSCvo56964

Object-group commands for Zone Based Firewalls aren't supported on non-ISR G2 platforms

CSCvo67536

Customer Feedback:Include AP Model column in Copy & Replace AP feature for Single AP

CSCvq17967

Client Summary Report per SSID

CSCvq56160

Memory usage of the server in \"Memory Utilization\" graph shows wrong values

CSCvq24390

PI 3.x - Bulk import using a credential profile does not associate credential profile to the devices

CSCvr13071

Meraki devices in SNMP Connectivity Failed status in Prime Infrastructure 3.6

CSCvr66959

PI 3.x - Access Point deletion not reflected in Change Audit Dashboard

CSCvs01368

PI getting invalidate netflow application data with special characters and invalid selector ID

CSCvs77402

AP Groups NTP Feature support for PI 3.8

CSCvs81150

Query Optimization for Amazon(Radio Performance BG task)

CSCvr05537

Jobs are not moving to running state after restore 3.5,3.4 backup over 3.7 in a specific scenario

CSCvq90726

Different timezone in HA logs in each browser.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see What’s New in Cisco Product Documentation at: http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html .

Subscribe to What’s New in Cisco Product Documentation , which lists all new and revised Cisco technical documentation, as an RSS feed and deliver content directly to your desktop using a reader application. The RSS feeds are a free service.