Controllerless Networks

last person joined: 41 minutes ago 

Aruba Instant Wi-Fi: Meet the controllerless Wi-Fi solution that's easy to set-up, is loaded with security and smarts, and won't break your budget.
Expand all | Collapse all

Instant 8.9.0 is released

This thread has been viewed 58 times
  • 1.  Instant 8.9.0 is released

    Posted Aug 26, 2021 09:54 PM

    here are the highlights of firmware 8.9.0.0 Release

     

    • New AP hardware platform
        • AP-635
    • Software solution enhancements
        • Zero Wait DFS for FCC​
        • IoT-Add DRT support for BLE and 802.15.4​
        • IoT-Azure IoT Hub Integration Ph 2 ​
        • IoT Radio Tx Power/Antenna Gain configurable ​
        • IoT-Customizable payload for APB beacons ​
        • Increase AM AP neighbor table for APs​
    • Instant Platform Enhancements
      • Custom Certificate provisioning for AP1X from Central/Airwave​
      • Reboot AP automatically when Config pushed from Central​
      • Enhance EST to support Radsec/AP1x certs on Instant ​
      • TLS 1.2 by default in Webserver on Instant​
      • Layer 3 DHCP Relay on Instant​
      • Add beacon-rate knobs in WLAN SSID profiles​
      • DDNS enhancement to include PTR records​
      • IAP failover to backup Airwave based on connectivity​
      • Update IAP-VPN display in controllers​
      • Fallback to Local Management Credentials only when Server times out​


    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------


  • 2.  RE: Instant 8.9.0 is released

    Posted Sep 02, 2021 04:26 PM
    I find that in 8.9.0.0 that "blacklist" is not "denylist".  I also find that it appears to be broken!
    Note also that where you had entries in the former blacklist, they get removed when you upgrade to this version.

    Even when blacklisting (denylisting) is enabled properly on SSID, your entries into the denylist visually appear until you save them, then they disappear!
    Unclear if they're really stored but just not visible.

    This release will likely get a quick update to 8.9.0.1 in short order I would think.  Like any other of the x.x.0.0 releases -- don't go there unless you have no choice until the next update for it comes out.  Don't roll into production lest you get unexpected surprises. (my opinion, and my practice) -- small test first!   Then another one, then a slightly larger one before going live...  The updates seem to be coming out much too quickly to get properly tested in-house and so WE become the testing group!

    ------------------------------
    Bryan Tetlow
    ------------------------------



  • 3.  RE: Instant 8.9.0 is released

    Posted Sep 02, 2021 10:49 PM
    where do you see "blacklist" under the SSID configuration?
    i see the correct denylisting.



    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 4.  RE: Instant 8.9.0 is released

    Posted Sep 03, 2021 09:43 AM
    What you show is correct --- Previous version of firmware used "Blacklisting" and the release notes for 8.9.0.0 also note in this version it's been changed to DENYLISTING.
    DENYLISTING formerly known as BLACKLISTING --  changed both within the SSID settings and the configuration/security sections of the firmware.

    Seemingly a minor name change -- However.....
    What happens is if you upgrade to 8.9.0.0, whatever you had under the former blacklisting table is removed.  Also, when you attempt to re-add them, they're not saved.  Thus effectively removing blacklisting/DENYLISTING as a working security option.

    I need to do another test, but it seems also that because of this change that if you had enabled BLACKLISTING on the older firmware, that this setting too is removed!

    So --- new name for same function (not a huge deal -- caught in release notes)....removal of anything with "BLACKLISTING" instead of converting it to the newly named function.  Removed from being enabled in SSID configuration, entries removed under configuration/security, and inability to put them back in and save them.

    In short -- it appears that BLACKLISTING, now known as DENYLISTING is totally broken in 8.9.0.0.....    I wouldn't recommend moving to this version for production if you need that function to satisfy a security need.

    ------------------------------
    Bryan Tetlow
    ------------------------------



  • 5.  RE: Instant 8.9.0 is released

    Posted Sep 03, 2021 08:14 PM
    I tested adding new entries to the denylist and they were save and worked fine for me.
    Also when i upgraded to 8.9 from previous version i did not have denylist enabled so I can't comment on that.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 6.  RE: Instant 8.9.0 is released

    Posted Sep 03, 2021 08:52 PM
    I have 2 test sites, and both did the same thing for me.

    Perhaps there's something different between the rest of our configurations.
    I use AP-515 in this case, and I upgraded from 8.8.0.1 to 8.9.0.0. 

    At both sites, blacklist entries disappeared, and I'm unable to re-add them.  It happily accepts them, but when I press SAVE, the list clears.

    My testing continues however, so we'll see what happens.

    ------------------------------
    Bryan Tetlow
    ------------------------------



  • 7.  RE: Instant 8.9.0 is released

    Posted yesterday
    Hi,
    I have the same problem. I have use 8.9.0.0 with AP-315.

    ------------------------------
    Lukas Oubrecht
    ------------------------------



  • 8.  RE: Instant 8.9.0 is released

    Posted 20 hours ago
    I suggest reaching out to TAC to get to the bottom of this issue.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------



  • 9.  RE: Instant 8.9.0 is released

    Posted 14 hours ago
    What is TAC?
    I had to make downgrade from 8.9.0.0 to older (8.7.1.4_80581).

    Now is problem with downloading firmwares from https://asp.arubanetworks.com too. I couldn't download older firmware from this page. Luckily, I found old firmware in my trash bin.


    ------------------------------
    Lukas Oubrecht
    ------------------------------