Connectivity Issues with Windows 10/11 After AP Firmware Upgrade to 30.7.1

[Moxsan]

Dear Community,

After upgrading the AP firmware to version 30.7.1, we are encountering a peculiar issue in our network. Devices running Windows 7, Android, and macOS can connect to the access points and browse the internet without any problems. However, systems using Windows 10 and 11 are facing connectivity issues.

Although these machines successfully connect to the SSIDs, they are unable to access the internet. To troubleshoot, we created new, separate SSIDs, which worked fine for a few hours, but the issue resurfaced across all SSIDs.

Has anyone else experienced this problem? Any suggestions or solutions would be greatly appreciated!

Thanks

[SupaStud1994]

I dont know if this is your issue or not but you might adjust the WPA encryption mode. WPA 2 should be most common and work for just about everything. I had issues in the past with using the legacy options. 

[Moxsan]

Yes but WPA3 was working fine. All this started after firmware upgrade. Now mobile with Android OS and macOS machine are working fine via same APs

[PhilipDAth]

It would help to understand where the failure is happening.

Are you able to get an IP address via DHCP ok?

Can you ping your default gateway ok?

Are you able to ping the Internet using something like 8.8.8.8?

Are you able to ping the Internet using something like google.com?

Wireless Health is good at finding these kinds of issues as well.

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Meraki_Health_Overvie...

[Moxsan]

If we manually assign DNS settings to the affected machines, they start working normally on the same SSID. However, everything functions as expected on the LAN without any issues. We created new SSIDs as a workaround, but after a few hours, they started exhibiting the same behavior. Occasionally, the internet works on one browser while other browsers show no connectivity. At times, only the first website accessed after connecting works, while subsequent sites display "no internet."

[RSU21it]

By chance, do you have a Layer 7 Application deny rule in place (the Peer 2 Peer applications in particular) for that SSID under Wireless - Firewall & Traffic Shaping -Block applications and content categories?

If so, you might want to temporarily remove it if able to per your configuration requirements and monitor connectivity.

For reference, I experience seemly random loss of browsing (random devices on random APs) when on any network when the above is active.  This issue returns and stops when activating or deactivating this Deny rule.  I have a support case open as this Deny rule was in place for several years and appears to have only started since upgrading APs to 30.x Firmware.

[Moxsan]

Thank you for your detailed information. I have reviewed the settings you mentioned, and there is no deny rule present. Yesterday, I discovered that this is a global issue, as it has been reported in multiple countries. Cisco will need to provide a fix, or we may need to roll back to the 30.7 firmware. I will keep everyone updated on the progress.

[pjc]

Can you offer some more detail or links to the acknowledged 'global problem' please?  I haven't seen anything official on this forum.

I was due to update all of our AP's from 30.7 to 30.7.1 last week, but delayed it last week based on your experience here, and will hold off until it's confirmed there is a wider issue.

I have got a couple of AP's working fine in my production environment on 30.7.1, I do this every time for a week or so prior to rolling out a update

Thanks

[Moxsan]

I have rolled back to 30.7 and everything is back to normal on APs. Now we are probing the issue further. I will update more soon on it.

[Lukme]

We have may be the same issue. But the problem is still there also with version 30.7.
The problem is diverse, some times ok, some times not...

[pjc]

@Moxsan and @Lukme are you both using WPA3 ?  Do you have the same issues when using an SSiD using WPA2 ?  Don't know how that relates to DNS issues if at all but thought worth asking.

So when you get the issue, you say you have to enter manual DNS settings - can you not resolve names then prior to having to do that ?