cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

Getting noticed

PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

The security vulnerability posted today - https://meraki.cisco.com/blog/2017/10/critical-802-11r-vulnerability-disclosed-for-wireless-networks...

 

My Help --> 802.11r vulnerability page stated I was covered when I was in fact not. 

 

If you are running a mixed network with MR72's and MR74's the MR74's will not upgrade firmware unless they are on beta. What this means is under firmware the network will state "up to date" with version 24.11(current) but the MR74's are still on version 25.1 and you cannot upgrade them unless you upgrade the entire wireless network to 25.5(firmware to fix the vulnerability on MR72's).

 

 

6 REPLIES 6
pjc
Building a reputation

Re: PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

Same problem with a mix of MR32 and a handful of newer MR33's...you'd have to clone the existing network, put the MR33 in the new network and just upgrade that new network

Getting noticed

Re: PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

You weren't able to just update all the AP's to 25-7? I was able to upgrade both my MR72's and MR74's on the network to 25-7. 

pjc
Building a reputation

Re: PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

Is 25.7 still beta ?  I don't want beta in production

Getting noticed

Re: PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

This is my issue as well. We have a mix of MR33s + some older MR24s/MR16s for a client.

 

I have tried the 25.5/6 on our office network (two MR52s) and found that MacBook Pros and some iPads will simply not connect to the wifi. We reverted back to the latest production version and no problems. 

 

Not sure I really want to take that risk for production kit not at our office. 

Getting noticed

Re: PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware


@AnythingHosted wrote:

This is my issue as well. We have a mix of MR33s + some older MR24s/MR16s for a client.

 

I have tried the 25.5/6 on our office network (two MR52s) and found that MacBook Pros and some iPads will simply not connect to the wifi. We reverted back to the latest production version and no problems. 

 

Not sure I really want to take that risk for production kit not at our office. 


@AnythingHosted - Interesting. We are running MR52's here on version 25-7 with no issues. Im on a mac posting right now from the Wifi.

Getting noticed

Re: PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware


@Tat0rt0t wrote:


@AnythingHosted - Interesting. We are running MR52's here on version 25-7 with no issues. Im on a mac posting right now from the Wifi.


@Tat0rt0t We actually upgraded to 25.8 about an hour ago to test it and everything seems fine for the moment. 

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.