Yep, 4.x and 5.x were really scary. I think most of our problem now lies with webauth.
I just upgraded our 4402 on 5.x to a 5508 on 7.x, which was a disaster. Our student login data lives in a server that services all the state community colleges, and only ldap(s) is available at the moment. Since we don't have a student pki and don't want to install shims on the clients, that leaves us with webauth for 90+% of our clients. All the EAP stuff worked great after the upgrade, but very few webauth clients had much luck. We back-rev'd to 6.0.19?.0 and improved from disaster to moderately painful. I talked to Lee about it, and he recommended using a Bluesocket box to do the webauth function. Depending how the end of year budget goes, we may do that. We're tiny compared to most folks on this list--1 WLC and ~50 AP's. It would have been nice to have everything on just one box, but I'm willing to give that up to keep my blood pressure under control ;) so webauth may move to its own non-Cisco box. Webauth has been painful at some level as long as we've been using it. The state folks are changing their auth system soon, and we'll have RADIUS available. Over the summer we hope to move to RADIUS with PEAP for students, and a small webauth ssid for cloudpath and students who can't/won't get encryption to work. One gotcha with new 7.x installs--dhcp proxy is turned on by default, and has a bug that kills dhcp for an interface with a local dhcp server if proxy is on. Lost a few hours of sleep over that one... John -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Jeffrey Sessler Sent: Friday, April 08, 2011 4:45 PM To: [email protected] Subject: Re: [WIRELESS-LAN] new Cisco software 6.0.202.0 I think when talking about 4.x and 5.x, nervous was the appropriate response. That said, I've found the 6.x, and now 7.x train of WLC releases to be pretty rock solid. Since moving to 6.x and then 7.x, I yet to find myself in a situation where I needed to back-rev. Jeff >>> John York <[email protected]> 4/8/2011 8:47 AM >>> What appears to be a bug fix version for WLC v6 appeared on the Cisco site early this week, 6.0.202.0. Does anyone have experience with it? Experience has made me very nervous about changing WLC software... Thanks John ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
