WAP4410N and firmware 2.0.7.4 - Page 2

m.zafrany · ‎02-09-2014

Hi,

I tested the last firmware 2.0.7.4 on 10 AP. It was catastrophic because all access points stopped working (no SSID WIFI visible but Ethernet Interface OK) . I downgraded all AP to 2.0.6.1 to solve this problem.

Finally, i can't use the last firmware so i can't secure the system....

What about a new "GOOD" firmware ?

Thanks.

Norrie603 · ‎02-14-2014

I see Cindy Toy has now released the security bug fix for early WRVS4400N models, so the RVS4000 V01 FW fix will probably follow soon, as you predicted.

One question relating to my three WAP4410Ns, still running fine with the bug fixed v2.0.7.4...

Looking at System Performance (Wired):-

AP-1 (V01) up for 2 days 19 hours approx shows 56 Dropped Receive Packets.

AP-2 (also V01) up for 2 days 19 hours approx shows 214 Dropped Receive Packets.

AP-3 (my V02 model) up for 5 days 3 hours shows zero (0) Dropped Receive Packets.

Now AP-3 is a lot further away from my Computer Room than the two older APs. I also realise that these performance figures in themselves do not mean I have a poor wireless network. I am aware that there is an extra crystal to improve clock jitter, and this hardware tweak is what makes the difference between the V01 and V02 versions. Is this why I am seeing such a marked difference in Dropped Receive Packet errors?

FWIW V02s are still available for sale here, and for the small outlay I am very tempted just to go to 100% latest models. And eBay the older ones!

Cheers

Norrie

mpyhala · ‎02-14-2014

Norrie,

I am aware that there is an extra crystal to improve clock jitter, and this hardware tweak is what makes the difference between the V01 and V02 versions. Is this why I am seeing such a marked difference in Dropped Receive Packet errors?

It is certainly possible that the crystal is helping the V02 AP. Why not swap a version 1 for the version 2 and see if you get dropped packets on either of them in the new locations?

It is not uncommon to see some dropped packets on a wireless network. Did you notice any problems with connected devices? In other words, did all of the packets drop within a short time or was it a packet here and there? Usually intermittent loss is never noticed. An exception would be a VoIP network where a call could drop with too much loss.

- Marty

Norrie603 · ‎02-14-2014

Good suggestion, Marty. No idea when/how packets get dropped. I suspect your phrase "here and there" sums it up.I have no VoIP here at present, and realise all this is a bit academic. But I might have a go with VoIP sometime down the line.

So, yes, I will go ahead and swap over a V01 and V02 WAP4410N to see what happens. FWIW AP1 (V01) is direct to my main switch. AP-2 (V01) data passes from this main switch through an SD2008T en route, while AP-3 (V02) also passes via this SD2008T. The one with the best performance has a tortuous path and longer cable run than the other two.

Have a great weekend.

Norrie

m.zafrany · ‎02-14-2014

Hi !

I tested the solution provided by Marty but I have the same problem. I started the setup from the beginning on a new AP with firmware version 2.0.7.4.

All WIFI SSID disappear after 10-30 minutes. The web interface and SSH access remains active.

I am totally helpless. I will open a support ticket CISCO.

Have a nice weekend !

Michaël

Norrie603 · ‎02-16-2014

My three WAP4410Ns are all running fine with v2.0.7.4 FW. However one odd thing puzzles me, and I do not like things I do not understand. Until now I have used my PC's IE browser to access these three WAPs, and access is 100% irrespective of whether a WAP has V01 or V02 hardware.

After swapping WAP-2 and WAP-3 over just to see the efffect on Dropped Received Packets as per Marty's suggestion earlier in this thread, I decided to try casually monitoring results via my iPad while TV watching. No problem getting into WAP-1 & WAP-2, the V01 models. But Safari says "Safari cannot open the page because the network connection was lost" for WAP-3, the V02 model. Can anyone explain this?

FWIW, WAP-1 has dropped 94 Receive Packets in just over 4 days of uptime. After the swap 1 day 3 hours ago, WAP-2 (V01) has dropped 8, WAP-3 (V02) has not dropped a single packet. Because the cost is trivial, I am seriously thinking of going 100% V02, so would prefer to know why I cannot get into a V02 using Safari, and if there is a tweak that will fix this?

mpyhala · ‎02-16-2014

Norrie,

If I recall correctly, wireless management is disabled by default. You may either have to reach the AP through a wired connection or connect your iPad to one of the other APs to simulate a wired connection to the V02 AP.

Interesting that you are seeing the packet loss on the V01 hardware. Is the LAN port connected to the RVS4000 directly? I have seen packet loss and other strange issues with the WAP4410Ns when they were connected to a 10/100 switch. That is why the option to lower the LAN port speed to 10/100 was introduced in a firmware release a few years ago.

- Marty

Norrie603 · ‎02-17-2014

Marty, with three WAPs I had got confused about which one could not be accessed using Safari on my iPad. Of course you are correct, in that enabling wireless management on the relevant WAP4410N-AP1 (V01), means all three can now be interrogated or their settings tweaked either by PC or iPad. Result!

As for my Drop Receive Packets point, results today are:-

WAP4410N-AP1 (V01) after 5 days/15 hours 0 Error Packets Received 358 Drop Received Packets

WAP4410N-AP2 (V01) after 2 days/2 hours 0 Error Packets Received 16 Drop Received Packets

WAP4410N-AP3 (V02) after 2 days/ 2 hours 0 Error Packets Received 0 Drop Received Packets

Now, bearing in mind that I followed your suggestion to physically swap over a V02 and a V01, then it is clear from the V02's error-free performance when moved to the opposite end of the house, that it is not location dependent. BTW, both these two WAPs are connected direct to the same SD2008T-UK Switch downstairs.

To answer your latest query, none of the WAP LAN ports connect to my RVS4000 directly. My switch wiring is:-

Cable Modem --> RVS4000 --> GS116 --> WAP4410N-AP1 (V01)

.........................................................--> Other stuff

.........................................................--> SD2008T-UK

..............................................................--> WAP4410N-AP2 (V01)

..............................................................--> WAP4410N-AP3 (V02)

..............................................................--> Other stuff

..............................................................--> SD2005G

...................................................................--> Other stuff

All my switches are Gigabit capable, so your comment about lowering LAN port speed to 10/100 really should not be necessary.

I have two thoughts:-

1) Switch off AP-1 and AP-2 (both the V01s) to force all traffic through AP-3, the V02, and see if its zero error performance is sustained.

2) Given its low cost in the grand scheme of things, my inclination right now is to rush off and purchase another WAP4410N , double-checking of course to ensure it is the later version! Replace one of the V01s, see what happens.

Won't do anything till you feel we have exhausted all other setting choices that may be causing this difference between V01 and V02 models.

Cheers

Norrie

mpyhala · ‎02-17-2014

Norrie,

Unless you have made some obvious change to the configuration, there shouldn't be much difference between the devices.

I like your idea of forcing all traffic through the V02 as a test. That will eliminate some wireless client(s) as the culprit.

If you are inclined to purchase new Cisco hardware I am not going to dissuade you too much. Personally, unless the packet drops were affecting me in some way I would leave them alone and monitor occasionally to see if the issue gets worse, or starts to affect connectivity. With the new standard "AC" quickly replacing "N", I would wait for a little while and see what new devices come out.

- Marty

Norrie603 · ‎02-17-2014

Marty, thanks again. All three of my WAPs have more or less identical settings, so no explanation there then.

Running now with all traffic forced through my V02 model. Still error free, although I had a problem getting into it again via Safari. Wireless Web Access had reverted to Disabled again! Enabled | Saved | Rebooted this time, but to be fair this "access" issue from my iPad is really just a distraction from the main show!

My usual vendor has stock, but the boxes do not appear to indicate which variant is inside the box. Obviously he can't break the seals to check, but it's all new stock, so I am 99% sure they will be V02s. I take your point about waiting for 802.11ac, but frankly as I have no wireless clients that can make use of this anyway, my present inclination is just to buy another WAP4410N immediately to see what happens.

If it's a V02, upgrade it to v2.0.7.4, and monitor its performance. If it turns out to be yet another V01, then RMA it!

But if everything works out as I anticipate, go for 100% V02s, live with it, and draw a line in the sand under what has proved to be an interesting distraction. Remember I only ever set out to fix the WAP4410N & RVS4000 security bug.

Take care.

Norrie

mpyhala · ‎02-17-2014

Norrie,

It is very likely that the vendor has V02. The V01 hardware has been out of the distribution pipeline for years. If they do have V01 for some reason, they should return them to the distributor for replacement.

- Marty

Norrie603 · ‎02-18-2014

I am sure you are correct, and that my new WAP4410N will prove to be a V02. Very busy today, so had no time to place an order but will do so ASAP, tomorrow if I can manage it.

FYI, my single active V02 continues to exhibit zero errors after more than a day serving as my sole connection point for wireless client traffic. I will report back with my findings once the new Cisco WAP is installed and functional.

Thank you for your continued interest.

Norrie

Norrie603 · ‎02-23-2014

SUMMARY TO DATE

Well. Marty, I said I would follow up, so here goes.

1) The documented security bug has been fixed across all of my (3) WAP4410Ns simply by upgrading to v2.0.7.4 firmware. Now just awaiting the equivalent fix for my V01 RVS4000 Router. I do intend to move on soon to an RV320 Router probably, but that's for another day.

2) Purchased, received and installed a new WAP4410N V02 to see what happened to my Drop Receive Packet errors, which occur on my 2xV01s but not on my single V02. The new model arrived with v2.0.6.1, so I immediately installed v2.0.7.4. Did a reset to Factory Defaults, and then entered all settings manually.

First the good news... No Drop(ped) Receive Packets.

As I type this, results for my three WAP4410Ns are:-

WAP-1 (V01) up for 18 hours, 24 Drop Receive Packets

WAP-2 (my new V02) up for 3 hours, 0 errors

WAP-3 (my first V02) up for 15 hours, 0 errors.

Early signs are that a V01-to-V02 swap does cure this rather trivial but annoying problem. I will, of course, now go ahead at some point soon and replace the remaining V01, but am I there yet? Well, NO!

Let me explain...

Access to all three WAPs using Internet Explorer on PC is exactly as it should be. All settings are faithfully displayed, are as they were set to be, and can also be modified and saved. No problem.

Since heeding your advice Marty and enabling Wireless Web Access on all three WAPs, I can also now gain access and browse settings using Safari on my iPad. But...

1) When I go to Setup | Time, it fleetingly shows 'Automatically' to be checked, then flips to show 'Manually' is checked. Attempts to then return it to 'Automatically' and Save, just cause the device to go busy and hang.

2) When I open Administration | Management, SNMP 'Enabled' is checked. But I had chosen 'Disabled' when configuring the thing. If I now re-select 'Disabled' and Save, it quickly flips to 'Enabled' again. Closing Safari and revisiting the same page using IE on the PC, reveals that the settings are in fact OK. Odd behaviour, don't you think.

Now TBH, I seem to recall seeing this weird result previously, when messing around with firmware updates. To be absolutely clear about this...

Q1) Can this be fixed, Marty?

Q2) Step-by-step, what sequence should I follow during a firmware upgrade that will minimise the risk of issues like this, that could be down to spurious code not clearing properly when the RAM is flashed with a new version?

Cheers

Norrie

BTW, I wonder whatever happened with Michael's 10xWAP4410N issue? Michael, did you ever get a resolution?

mpyhala · ‎02-23-2014

Hi Norrie,

Thanks for the detailed update, I think that others will find this helpful in the future.

Regarding Safari on the iPad, I am not surprised that some pages have errors. The devices are designed to be managed using IE, and depending on the version of IE you might see similar issues. The bottom line is: Use what works when managing devices. I have found that Chrome works well with most of my devices although some have issues and I have to use IE. This goes for several third party devices that I own as well.

I am certain that there is nothing that can be done as far as firmware upgrades, configuration, etc. I would be very surprised if device manufacturers made a concerted effort to make all devices compatible with all browsers. Customers usually do not spend that much time in the GUI to put forth the effort.

I am also curious about Michael, I would have liked to get to the bottom of his issue.

- Marty

Norrie603 · ‎02-23-2014

Yes, Marty, hopefully others may benefit from my experience.

I did not realise that IE is the browser of choice for the Cisco GUIs. Won't waste any more time on Safari then, but my curiosity is aroused. Never occurred to me to give Chrome a whirl. Did so a moment ago, entering http://192.168.20.203, the IP for WAP4410N-1, but it gave me no access, just a long list of search results. Have not used Chrome much, so probably not doing it correctly. Will have a go tomorrow, if I can find some time.

You are correct, of course, about GUI use being minimal once a new network device has been commissioned and configured. I'll wait for a time before I lash out to buy my 3rd V02 WAP4410N, just to be 100% sure that the latest one continues to be error-free. No rush really.

Omens are good... Drop(ped) Receive Packets...

As I type this, results for my three WAP4410Ns are:-

WAP-1 (V01) up for 1 day 3 hours, 43 Drop Receive Packets

WAP-2 (my new V02) up for 11 hours, 0 errors

WAP-3 (my first V02) up for 1 day 0 hours, 0 errors

It has been fun posting to this thread, which I seem to have hijacked from Michael. Sorry Michael. However I do appreciate the time you have devoted to my questions, Marty, and I hope it does help others.

Kind regards

Norrie

PS: Not sure about the RV320. My RVS4000 does exactly what I need, especially regarding Static IP Mapping. Maybe once it has been flashed with the security bug fix, due soon one hopes, I will reconsider my decision to ditch it!

m.zafrany · ‎02-23-2014

Hi friends !

Cisco support sent me an email with this procedure :

the following settings will improve the stability :

Setup -> Advanced. Made LAN force to 100 Mbps Full
Wireless-> Basic Setup. Channel to less interference one (after checking site survey in AP mode->Wireless WDS repeater without saving)
Wireless-> Basic Setup. Mode to BGN mixed
Wireless-> Security. Security mode to WPA2-Personal
Wireless-> Advance. Worldwide mode to disabled
Wireless-> Advance. Beacon interval to 400ms
Upgrade firmware to latest from our website ( )

NOTHING CHANGE. About 15-30 minutes all 4 ssid disappear... (and "stuck beacon error" in log...)

I stay on STABLE firmware 2.0.6.1 (with beacon interval to 500ms) and i will change all AP when i can (and i will stop with Cisco wireless products)

Best regards.