PSA - 802.11r/k and mixed MR72/MR74 networks - check your firmware

[Tat0rt0t]

The security vulnerability posted today - https://meraki.cisco.com/blog/2017/10/critical-802-11r-vulnerability-disclosed-for-wireless-networks...

My Help --> 802.11r vulnerability page stated I was covered when I was in fact not. 

If you are running a mixed network with MR72's and MR74's the MR74's will not upgrade firmware unless they are on beta. What this means is under firmware the network will state "up to date" with version 24.11(current) but the MR74's are still on version 25.1 and you cannot upgrade them unless you upgrade the entire wireless network to 25.5(firmware to fix the vulnerability on MR72's).

[pjc]

Same problem with a mix of MR32 and a handful of newer MR33's...you'd have to clone the existing network, put the MR33 in the new network and just upgrade that new network

[Tat0rt0t]

You weren't able to just update all the AP's to 25-7? I was able to upgrade both my MR72's and MR74's on the network to 25-7. 

[pjc]

Is 25.7 still beta ?  I don't want beta in production

[AnythingHosted]

This is my issue as well. We have a mix of MR33s + some older MR24s/MR16s for a client.

I have tried the 25.5/6 on our office network (two MR52s) and found that MacBook Pros and some iPads will simply not connect to the wifi. We reverted back to the latest production version and no problems. 

Not sure I really want to take that risk for production kit not at our office. 

[Tat0rt0t]

---

@AnythingHosted wrote:

This is my issue as well. We have a mix of MR33s + some older MR24s/MR16s for a client.

I have tried the 25.5/6 on our office network (two MR52s) and found that MacBook Pros and some iPads will simply not connect to the wifi. We reverted back to the latest production version and no problems. 

Not sure I really want to take that risk for production kit not at our office. 

---

@AnythingHosted - Interesting. We are running MR52's here on version 25-7 with no issues. Im on a mac posting right now from the Wifi.

[AnythingHosted]

---

@Tat0rt0t wrote:

---

---

@AnythingHosted - Interesting. We are running MR52's here on version 25-7 with no issues. Im on a mac posting right now from the Wifi.

---

@Tat0rt0t We actually upgraded to 25.8 about an hour ago to test it and everything seems fine for the moment.