A new beta switchCatalyst firmware version is available. Firmware IOS XE 17.18.1 was just released on 2025-09-03 and has been in this firmware category since 2025-09-03.
After upgrading to IOS XE, downgrading to any CS version via the dashboard is restricted - a factory reset may be required and support assistance will be necessary. Please consider this before upgrading your network to Cloud Management with IOS XE. Learn more - http://cs.co/9002xhAan
Please review the list of supported models with minimum firmware support versions in the release notes below before proceeding with the upgrade. Attempting to convert unsupported models such as C9500X may result in an unusable switch.
Stacking Limit for C9200L series models: C9200L series models support stacking configurations of up to 5 members. Please ensure your stacks for these models adhere to this limit. Exceeding 5 members may lead to unexpected behavior. This will be resolved in a future release.
Switch Templates with bound networks won’t be able to directly upgrade from CS firmware to IOS XE firmware. The recommendation is to unbind and migrate networks independently rebinding into IOS XE switch template.
Cloud management with ios xe overview
Since the introduction of Cloud Management with IOS XE 17.15, users enjoy faster boot and initialization, a Cloud CLI Terminal for running troubleshooting commands directly from the dashboard, and a new generation of features powered by advanced IOS-XE capabilities!
The new 17.18.1 release brings cloud management to more switch platforms, including the C9200, C9300, and C9500 high performance families. It also unlocks more powerful IOS XE features like advanced routing, high availability, and expanded cloud-powered value, so you can manage a seamless, secure, and scalable network from access to core, all within one intuitive dashboard.
Release highlights
In this release, we are excited to support the following features and enhancements. Below are the key highlights:
Extending cloud management support to additional switch platforms from access to core, including C9200/CX, C9300LM, C9500 high performance models, all existing supported C9200L, C9300/L/X and MS390 models, and corresponding network module support. Please see supported models section below for details.
This release is also packed with powerful enterprise management capabilities, empowering you to deliver secure networking management with operational simplicity and scalability. Below are the key highlights:
High availability: StackWise Virtual (SVL) on C9500H; Rapid Per-VLAN STP (RPVST+); In-Service Software Upgrade (ISSU) is available from 17.18.1 and can be used for future upgrades
Cloud value expansion: SmartPorts Profiles; Intelligent Capture Scheduling; Device Uptime; Digital Optical Monitoring; VLAN to SGT; Radius Caching
Additional DHCP options (custom default router and domain-name suffix options)
For supported models with specific features, please refer to documentations.
Before you upgrade or migrate: key considerations
After migrating CLI/DNA managed switches to cloud configuration source, please note that console and SSH access are no longer available. All management access is only available via the cloud dashboard or the local status page through the rear management port.
Layer 3 switches cannot run DHCP servers on uplink interfaces. Please note that interfaces that have been designated as a preferred uplink cannot also run a DHCP server. Interfaces with both Preferred Uplink and DHCP server configurations will have the DHCP server configuration disabled on that interface.
Switches using the Alternative Management Interface (AMI) will require an L3 SVI to be configured for the same VLAN assigned to AMI. For AMI to work, your network must have AMI configured and your switch must have an SVI configured matching that AMI VLAN.
After upgrading from CS to Cloud Management with IOS XE firmware, port mirroring configurations on module ports will not be retained. Users will need to reconfigure port mirroring on module ports following the upgrade.
The 30-day grace period applies to licensing for Catalyst switches onboarded to Meraki Dashboard, allowing customers to trial cloud mode prior to fully committing. Valid DNA licenses can be converted to Meraki licenses through a qualified promotion process. Refer to http://cs.co/9005aw6VH for more details.
Share your post-upgrade feedback!
We value your feedback on our latest release! Please take a moment to complete this brief 5-minute survey http://cs.co/9001fpIhR and share your experience with us.
For supported network modules and their corresponding minimum firmware support, please refer to documentation http://cs.co/9006fsb86
Breakout Cables aren’t supported at this time.
C9350 Series Smart Switches. Please note, this is the first IOS XE release for C9350 series switch. These advanced layer 3 features are currently not supported: BGP, VRF, Rapid Per-VLAN STP (RPVST+), Routed Ports, Digital Optical Monitoring, Radius Caching, Intelligent Capture Scheduling, SmartPort- Profiles, Encrypted Traffic Analytics (ETA), Detailed Traffic Analytics on trunk ports, port channels, and uplink modules, and VLAN to SGT mapping. Certain fields in NetFlow exporters are not supported.
The following CS features are not supported in this release:
Sticky MAC
Gov(Federal), Canada, China, or India Cloud
Port mirroring (SPAN) configuration will need to be reconfigured post upgrade
Certain features will be added to the IOS XE versions in future releases. Refer to the cloud management with IOS XE documentation for further details: http://cs.co/9001Q4ALF
Transitioning from cs to ios xe 17.15 or 17.18: unsupported features
Known issues
Fixed IP assignment via DHCP lease can fail if client MAC addresses or IP addresses overlap
Adding an additional Fixed IP address or DHCP reserve range that is contiguous with an existing Fixed IP address or DHCP reserve range will will result in configuration update errors
If QoS is in use, C9350 switches will encounter errors applying new configuration (including during the Meraki onboarding process). QoS can be disabled to allow for normal operation until a fix is available.
Using MAC allow list on the default or currently installed network module ports will result in a config apply failure that will require a factory reset to resolve
Modifying the default DSCP-to-COS Mappings in the Quality of Service section of Switch settings results in errors. Networks that use non-default DSCP-to-COS Mappings may fail to correctly upgrade from CS 17 and earlier firmware versions.
Adaptive policy configurations are not carried over when migrating from a trunk / access port to a routed port and can cause configuration errors. You MUST remove the adaptive policy settings first before migrating to a routed port.
SNMPv3 only supports AES 256 and will be reconfigured as part of your transition to IOS XE 17.1X
CFLOW data may be missing when capturing packets from the uplink port
Client tracking is not available on ports at 10G or faster
Attempting to create a DHCP server using DHCP option 135 (DNS Suffix) with hex value greater than 180 characters results in an error
Device uptime for stack members incorrectly displays the stack active device’s uptime instead of the member device’s uptime
Named VLAN configuration for stacks generates configuration errors
The Default VLAN profile API appends new configurations instead of overwriting existing ones potentially leading to unexpected behavior.
Switch configuration is cleared after an immediate reboot following an upgrade from CS firmware to IOS XE firmware, causing the upstream Port-channel to enter a suspended state.
Network locations with unstable Dashboard connectivity may trigger UAC to use a non-preferred uplink. Once stable connectivity is restored on the preferred uplink, management IP may not automatically fall back to the preferred one.
Switch Client Summary displays incorrect VLAN for specific ports
Exported Netflow flow records incorrectly omit Adaptive Policy group information
Client devices that don’t support link auto-negotiation may cause their connected Port to show as disconnected on Dashboard
Download config keeps failing on port-security with uplink ports
When configuring an L3 aggregate interface you must first configure the required ports as routed ports on the switch ports page, then aggregate them as a L3 aggregate.
Overlapping DHCP pools cause configuration generation errors if VRFs are not configured first. Configure VRF prior to DHCP pool configuration.
The ARP table in Live Tools is incorrectly limited to a single page, showing only a partial list of ARP entries for both Default and custom VRFs.
C9200L supports 1 VRF. To update an existing VRF please remove the existing VRF before creating a new one.
Fixed issues
Resolved a bug that prevented the MTR life tool from correctly returning results
I know there are a LOT of caveats and known issues, but I'm upgrading the lab today as I really need this release train to get to stable, proper enterprise switching in the Meraki dashboard - A1
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.
