Release Information for ExtremeCloud IQ Virtual Appliance

In this topic, you can find information about IQ Virtual Appliance releases, upgrade process, hardware, supported software, devices, and browsers, and CLI reference and other guides.

ExtremeCloud IQ is the simplest, easiest network management system yet. From the guided network policy configuration that breaks the policy into logical sections while displaying your progress along the top of the GUI to numerous monitoring improvements, such as sliders that you can drag to determine any time period shown in a chart, this GUI makes device management task-oriented rather than feature-oriented. Features appear as you need them to perform a task, making it unnecessary to search through the GUI to find them.

Minimum Hardware Requirements

Low-Capacity Virtual Machine Recommendations

Recommended minimum hardware requirements for deploying a total of 500 APs or switches:

Low-capacity Virtual Machine Recommendations
(up to 500 devices)
Xeon E3-1220 v5, 3.0GHz, 8MB cache or better CPU
4 CPU Cores, and 4 Threads
24 GB RAM
SSD (solid state drive)
300 GB of Storage Capacity

High-Capacity Virtual Machine Recommendations

The IQ Virtual Appliance OVA defaults to the high-capacity version.

Recommended minimum hardware requirements for deploying a total of 5000 APs or switches:

High-capacity Virtual Machine Recommendations
(up to 5000 devices)
Xeon E5-2620 v4, 2.1GHz, 20MB cache or better CPU
8 CPU Cores, and 16 Threads
32 GB RAM
SSD (solid state drive)
300 GB of Storage Capacity
  • IQ Virtual Appliance does not support storage area networks (SAN).

Upgrading ExtremeCloud IQ Virtual Appliance

Version 12 of IQ Virtual Appliance introduced an improved architecture that expands and optimizes back-end functionality, while reducing the footprint. As a result of the change in architecture, special considerations are required during the upgrade process from version 11.26.3.5 to any version using the new architecture.

Upgrading to IQ Virtual Appliance 21.1.20.27

The following upgrade paths are supported when upgrading to IQ Virtual Appliance 21.1 using the Virtual Appliance Management System:

  • IQ Virtual Appliance 20.1.20.24 to IQ Virtual Appliance 21.1.20.27
  • IQ Virtual Appliance 20.1.6.4 to IQ Virtual Appliance 21.1.20.27
  • IQ Virtual Appliance 20.1.5.2 to IQ Virtual Appliance 21.1.20.27
  • Only upgrade from and to the versions specified. Attempting to upgrade across unsupported upgrade paths can result in unpredictable behavior.

To upgrade, perform the following steps:

  1. Download the upgrade package:

The 64-bit IQ Virtual Appliance software is available for Extreme Networks customers on the Extreme Networks Support Portal. After you log in, navigate to Software Downloads > Current Software Releases > ExtremeCloud IQ Releases > version_number > ExtremeCloud IQ Software to find the current version of IQ Virtual Appliance. The upgrade pack file name has the following format and is accompanied by a brief description of the file and the MD5 checksum value:

hivemanager-ng-upgrade-pack-<version>-<date>.tar.signed

Be sure to note the save location of the file, or choose a download location that is easy to find, such as on the Desktop.

  1. Backup your virtual machine by using the Snapshot feature of Vmware vCenter. The snapshot feature makes a complete backup of the virtual machine, including both the data and the software.
  2. When your backup is complete, log in to your Virtual Appliance Management System by directing your browser to one of the following URLs, and then entering your credentials:

    http://<IQ Virtual Appliance_ip_address>:3000

    or

    https://<IQ Virtual Appliance_host_name>.<your_domain>.com:3000

  3. Begin the upgrade by navigating to HM Upgrade, clicking Upload, choosing the file you saved in Step 1, and then clicking Open in the dialog.

You can learn more about the Virtual Appliance Management System by visiting "ExtremeCloud IQ Virtual Appliance Management Console".

Upgrading from other ExtremeCloud IQ Virtual Appliance versions

New Features and Enhancements

The April 21, 2021 release of IQ Virtual Appliance includes the following new versions of IQ Engine:

The following list contains the features included in the most recent feature release.

Changes of Behavior or Appearance

FASTPATH firmware downgrade change: To prevent problems with invalid certificates, ExtremeCloud IQ does not support firmware downgrades to versions below FASTPATH 8.2.0.2 v1.0.1.28.

VRRP Remote Router Support: You can enable support of Virtual Router Redundancy Protocol (VRRP) branch multiple router deployments after both routers are properly onboarded.

Topology enhancements: Network links now show connection type, capacity, and health by color and design. For example: an AP link running at reduced capacity is indicated by amber. Status colors: green-working properly, amber-reduced capacity, red-issue, light gray-unknown.

Device Entity Save Button Behavior Change: With this release, the Save button is disabled in the following Device Entity sections until you make actual configuration changes:

  • Interface Settings

  • Bonjour Gateway Settings

  • DHCP Server and Relay

  • Device Credentials

  • Neighboring Devices

Filters icon changes: The icons in the My Filter Criteria section have been updated.

Global Navigation: The ID of the active session of ExtremeCloud IQ appears in the upper left corner of the main window and indicates either Connect or Pilot.

Client-360 Client experience extended: Client-360 extends analytics to compare a client's connection experience with other clients on the same floor in addition to the connected AP.

Replace square flags with circled flags: Circle flags replace the current flags to improve visibility.

Left menus in alphabetical order: The left menu sub-sections are now listed in alphabetical order in the Common Objects and Device Template windows.

Change titles to changed to brand color: All orange titles have been replaced with purple.

ExtremeCloud IQ Cosmetic Enhancements: This release adds some cosmetic enhancements to the following elements:

  • Reset Password window
  • Create New Network Policy window
  • Create a New Password window
  • Empty widgets on the Dashboard
  • Create a Captive Web Portal window in the Network Policy guest access section

Multiple branch router configuration requirement: Onboarding branch routers with the same branch ID is a prerequisite to enabling VRRP.

Additional devices included the topology view: The topology view now includes an indication of link aggregation and switch stack connections.

Visual Enhancements to Network Topology: The release adds several visual enhancements to the Network 360 Monitor topology view and to the ExtremeCloud IQ iconography.

Left Vertical Navigation: The navigation menu for ExtremeCloud IQ now appears vertically on the left side of the main window.

Interface Improvements: Minor style updates have been made to input fields across the ExtremeCloud IQ interface for consistency.

Topology Icon Enhancement: Topology view icons have been enhanced in this release to remain sharp at any scale. Bread crumb icons are now interactive. When you select a bread crumb icon, you will see a window opens on top of the active window that shows details for the icon you selected.

Design Improvements: Table headers throughout the UI have been updated to match the current color palette.

Maximum VPN gateway count increased: With this release, the maximum number of network VPN gateways is now 20, up from the previous limit of 5. This new limit applies to routers acting as VPN gateways and to VPN Gateway Virtual Appliances (VGVAs) within a single network policy.

Enhanced SSID classification rule: The SSID classification rule is now on the Master Policy page. When cloning a new network policy, the Policy Details dialog no longer displays the location or cloud configuration group (CCG) as classification rule options.

Manage Devices action list updated: The Actions drop-down list on the Devices page now includes the Assign Network Policy option. Using this option, you can assign a network policy to a device directly from the Devices list.

Instant Context cosmetic upgrades: With this release, the Extreme Networks Instant Context feature contains updates addressing format issues with report generation and chat window displays. The information generated becomes part of the package submitted as a troubleshooting ticket.

Filter UI Enhancement: Several minor changes have been made to the Filter section of the UI in this release.

IQ Engine Support

This release of IQ Virtual Appliance supports devices running the following new IQ Engine versions:

New Hardware Support

With this release, support for the AP302W has been added to IQ Virtual Appliance. This includes a forced upgrade for these devices to 10.3r1, and their addition to onboarding, device templates, radio profiles, configuration workflows, device monitoring and management, topology, Network 360 displays, international SKU verification, international power tables, and DFS settings.

New Features and Enhancements

Support DFS on AP305C for FCC and Canada

DFD (dynamic frequency selection) is supported for AP305C devices for the FCC and Canada.

Topology View Change to LED Status Buttons

This release replaces the existing three separate LED status buttons (off, on, blinking) with one three way button, making it easier to see which function is active.

Update Audit Log to Include Alarm Clear

Alarm clearing has been added to the audit trail. Now, whenever a log is captured, you can see who cleared the alarm and for what device.

Extend Manage Alarms Window to Include Clearing of Alarms

The Manage Alarms window has been expanded to include the following information related to clearing alarms:

  • The time when the alarm appeared
  • The time when the alarm was cleared
  • The name of the person who cleared the alarm

Add New Device 360 Alarm Tab

A new Alarms tab has been added to Device 360 > Monitoring. This window contains a table of all active and all cleared alarms within a selected time range. The table includes status (active or cleared), severity, details, time raised, time cleared (if cleared), and the name of the person who cleared the alarm.

Update Device Health Graph

This release adds new interactivity points on the Device Health window. You can now click on any data point in the timeline to see additional information. Select blue data points to see the device name, health score, connected clients, the MAC address, (which is now linked to the Device Detail window) and overall usage for devices in descending order (by usage).

SD-WAN VPN Management - VRRP Address Assignment in Device Config

This release adds greater functionality to the device configuration VRRP window. You can now modify VRRP participation and priority for routers. The default VRRP IP address defaults to the gateway address, but you now have an option to select a different IP address. You can also now modify the pre-assigned router IP address.

AP150W Router Mode

You can configure AP150W devices running IQ Engine 10.0r9 to function as routers.

IP Object Enhancements

You can assign IP objects in a firewall policy using device classifier tags. This allows you to create custom firewall rules for multiple locations using one firewall policy and a single user profile, and assign routers based on IP object rules.

Topology View Persistence

Your network topology floor views now remain the same between sessions.

Enhanced Uplink Information in Topology View

This release adds more information about uplink performance and status in the network topology view. The new information includes:

  • Port speeds, represented by green (the negotiated speed matches the maximum port speed), and yellow (the negotiated speed is lower than the maximum port speed).
  • VLANs associated with each link.
  • Traffic received and sent.
  • Port mode (access or trunk).

PoE Quality for Switches and Routers in the Topology View

PoE consumption at the device and port level now appears in the network topology view (Insights > Network 360 Monitor). A new icon identifies PoE consumption at the device level, and you can select this icon to see additional information about PoE consumption.

AP150W Router Support, Port Type Configuration

This release adds the ability to configure phone and trunk ports for AP150W devices operating in router mode.

IQAgent Version Column in the Devices Table

This release adds a new column to the Devices Table where you can see which version of IQAgentis running on your network devices. Hover over this column to see the date and time of the last IQAgent update.

Device Health Score Enhancements

With this release, the device health score display has been updated and enhanced to include the following changes:

In the Overview window:

  • CPU and memory usage have been added to the time series view.

In the Wireless Interfaces section:

  • Device-level Wi-Fi scores have been added, including the average value for the selected timeline and contributing metrics for SNR and channel utilization.
  • A capacity score displays the average and peak scores for the selected timeline. The peak score is when the AP is operating at peak capacity.
  • Time series for average and peak scores have been added to the timeline. You have the option to view wifi0, wifi1 or both combined.

SD-WAN Addressing Management Enhancement for VRRP

This release adds configuration enhancements to VRRP redundancy for routers. You can enable or disable VRRP at the device level, and configure additional settings including VRRP ID, VRRP Group IP Address, add routers to the group, set an advertise timer, and select either Preempt Mode to replace a backup router with a higher-priority router (the default), or Track WAN to track WAN connections that are no long active.

Network Policy Advanced Settings (Wired and Wireless)

This release adds an Advanced Settings section to all of the configuration sections for both wired switching and routing and wireless devices. The following advanced settings are available for wired switches and routers:

  • Flow Control (Default: Off)
  • Port status Alerts (Default: Off)
  • MTU for Ethernet Interfaces (Default: 1500)
  • Management Interface Settings:
  • Infer from Device (Default: Selected)
  • VLAN Interface (Range: 1-4093)
  • Management IP Settings: Dynamic Address Configuration (DHCP; Default: Cleared)

The following advanced settings can now be made for wireless devices:

  • SSID availability schedule
  • Optional settings
  • Client Monitor (Default: On)
  • Mac Authentication (Default: Off)
  • Authentication Protocol
  • Default RADIUS Group
  • Apply RADIUS server groups to devices via classification (Default: Off)

Cloud View Updates

This release adds enhancements and updates to the Cloud View window. This window has been divided into three sections: the Global Deployments Map view, the Cloud Infrastructure Insights view, and Client Insights view, These sections are collapsed under the map.

The Cloud Infrastructure Insights view contains charts showing the following information:

  • Daily Management Events
  • Daily Device Updates
  • Pilot Virtual IQ vs. Connect Virtual IQ Pie Chart
  • Pilot Virtual IQ vs. Connect Virtual IQ Gauge
  • Pilot vs Connect Virtual IQ Trend
  • Pilot Virtual IQ Managed Devices Trend
  • Connect Virtual IQ Managed Devices Trend
  • Daily Admin Logins
  • Managed APs by type
  • Managed Switches by type

The Client Insights View contains charts showing the following information:

  • Daily Data Traffic
  • Active Clients
  • Unique Clients
  • Client OS Distribution
  • Client Spatial Stream Usage
  • Client Channel Bandwidth Usage
  • Client Connection Type

Simplified Device Firmware Update

IQ Virtual Appliance supports device firmware updates before the assignment of a network policy.

Consistent Device Reboot Process

The reboot process is now identical for switches, routers, and APs.

Updated IQ Virtual Appliance Navigation

This release contains an update of the IQ Virtual Appliance navigation color and format design.

Layer 2 VPN Split Tunnel Support

This release adds support for Layer 2 VPN split tunnels. Using split tunnels allows you to choose how to handle local traffic (such as traffic to local printers) and Internet traffic. When you enable this feature, local and Internet-bound traffic will circumvent the VPN. This feature improves performance and minimizes WAN usage.

Wi-Fi Capacity Score

The Wi-Fi capacity score is now calculated on a per radio basis (2.4 GHz, 5 GHz, or combined) and is a sum of all AP scores divided by number of APs at that location. This score now appears at the device level under the wireless section and is calculated and displayed for each radio separately, with the option of a combined view, which is an average of both scores. If one of the radios is turned off, the combined score is the score of the radio that is turned on.

Simplified Switch Port Configuration

You can now edit switch port parameters (port setting, STP, storm control, and PSE) at the device level. This removes the need to set these parameters by port type, simplifying port configuration.

Extended Switch Port Aggregation

You can now configure switch port aggregation at the device level.

User-defined Switch Port

You can now create custom switch port types. When you create a custom port type, you can also customize the configuration and behavior of the port type, such as port usage, MAC authentication, and QoS. You can deploy the custom port across multiple devices and templates rapidly.

Instant Context

With this release, the Instant Context feature includes device analytics such as device health, an alarm list, and interface stats which can be used to resolve network problems.

Health Graph Enhancements

The following health graphs have been updated with this release:

  • Wi-Fi Health Graph: The data in this graph is now interactive. Select any data point to see Wi-Fi health in descending order from worst to best for APs, the health score, data usage, SNR, channel utilization and the number of associated clients for each device. The MAC address is now a hyperlink to the overview for that device. There is now a search field at the top of this graph where you can search for devices by MAC address.
  • Network Health Graph: The data in the graph is now interactive. Select a blue (Network Health) data point to see device names, MAC addresses, overall usage, and overall device health in descending order from worst to best. The MAC address is now a hyperlink to the overview for that device. There is now a search field at the top of this graph where you can search for devices by MAC address.
  • Client Health Graph: The data in this graph is now interactive. Select any blue (Usage) data point to see client devices by name, MAC address, and health score in descending order from worst to best. The MAC address is now a hyperlink to the overview for that client. A troubleshooting button opens the Tools window with the MAC address of the device. There is now a search field at the top of this graph where you can search for clients by MAC address.

  • Device Health Graph: The data in this graph is now interactive. Select any blue (Usage) data point to see devices by name, MAC address, and overall usage in descending order from highest to lowest, the health score and a list of connected clients and their usage rates for each device. The MAC address is now a hyperlink to the overview for that device. There is now a search field at the top of this graph where you can search for devices by MAC address.

Extended PCG Topology Options

You can specify PCG service options to support one AP for multiple rooms through mDNS filtering.

User Classification Rules for Wired Ports

You can now apply different user-profiles to clients and user groups on wired ports when both User Authentication and MAC Authentication are turned off.

Placeholder Text in Port Description

All instances of the placeholder text Default settings for the access port have been removed from the Description field. This field is now blank.

Multiple VPN Gateways

You can deploy multiple VPN gateways behind an external IP address and firewall. When you configure port forwarding in the firewall and configure the corresponding ports in VPN setting, ExtremeCloud IQ can balance the load across multiple gateways either by assignment or automatically.

Expose the Number of Streams and Remove MCS Levels

The SSID Profile > Additional Settings > Radio and Rates section has been modified to expose only the number of streams actually supported for each standard (802.11ac, 802.11ax, and 802.11n). MCS (modulation and coding schemes) no longer appear here. .

Simplified Switch Port Configuration

You can make port configuration changes at the switch template port level.

User-defined Switch Port

You can now define new hardware port types.

Device Current Availability Tile Enhancement

Device availability scores are now interactive. Select any score to see the device name, MAC address, and status (available or unavailable). The MAC address is now a hyperlink to the overview page for that device.

Wired Clients Connected to Defender Devices

From the Defender > Clients window, select the Host Name or MAC column for a wired client to see a detailed window containing data widgets for that client.

VPN Tunnel Addressing Enhancements

The release adds a new section for tunnel addressing in the New VPN Service window. This section now provides the following options:

  • Auto: This is the default mode when the router acts as the DHCP server (you must enable DHCP on the router). The router takes addresses from the assigned management subnetwork available address pool, which guarantees unique addresses for each tunnel.
  • Use WAN Interface IP Addresses: This is the exiting method, which has been retained for backward compatibility. With this option, there is a risk of duplicate addresses.

Existing network policies retain the Use WAN Interface IP Address configuration.

SD-WAN VPN Support for Multiple Gateways

IQ Virtual Appliance now supports larger VPN deployments. In the VPN service configuration section, you can choose to allow backups and add multiple gateways, which can be primary, backup, or both (default). If you configure a single gateway, it is always primary. A VPN gateway assignment table displays primary and backup (if configured) assignments based on the number of established tunnels.

Enhance Audit Log Information

The following information is now displayed in audit logs:

  • Detailed information about what changed, and the values involved. For example, an SSID name was changed from Test to Test123.
  • Devices to which each update was pushed
  • Webhook API pushes, with an indication of success or failure
  • When email notifications were sent

Add Indoor/Outdoor Placement Option

In Monitor > Devices > device_name > Advanced Settings, a menu option for Outdoor or Indoor has been added for radio placement. Indoor APs default to the Indoor option and outdoor APs default to the Outdoor option.

Client 360: Show all Client Associations

The Clients table and Client details window now shows all failed client attempts to associate or authenticate (three failures are required to trigger this display). In the client trail list, red circles in the ASSOC and AUTH columns indicate failed attempts. Hover over the red circle for more information about the failure, including a failure error code.

Topology View Monitor Tab Reorder

In Network 360 Monitor, the Map tab and the Topology tab have been reordered so that the Topology view appears first.

Switch Port Management update

You can configure port aggregation and define new port types. This new feature permits you to define port configuration changes and port types outside of those created at the template level.

Expanded Client Connection Analytics

The Client360 widget reports status on each client's successful and failed network connection attempt, which includes AP association, security authorization, DHCP completion, default gateway connection and DNS completion status.

Private Client Group (PCG) Coverage Expanded

This release features enhanced support for a single access point, multi-room service as part of a Private Client Group solution using key-based filtering.

Legal Terms and Conditions link in ExtremeCloud IQ

This release includes terms and conditions details in the About page with links to Terms of Service, Evaluation Agreement, and Data Privacy and Protection.

Device 360 Timeline for Switch Stacks

The timeline at the top of the switch stack window now displays aggregated Rx and Tx data for all stack members, and CPU and memory usage for the stack master.

Select the check boxes below the graph for the stack master, stack standby, and each stack member to see data for a specific stack member, or for any combination of devices.

Stack members are identified by their slot in the stack, along with their role. For example: Slot 1 (master) Slot 2 (member). Slot 3 (standby).

Enhancements to Switch Data Displays

This release adds a connectivity health score and shows the percentage of time connected in the Device Details window for switches. The displayed data also includes the number of configuration update failures, the number of firmware update failures, and the average MAC table usage for the top 5 switches.

This release also adds greater visibility into switch health in the Device Details window. The timeline at the top of the window displays the following data:

  • Hardware score

  • Usage and throughput.

  • The number of connected clients at any given point in time

The following events, which can be shown or hidden, are tagged in the timeline with flags:

  • Device up/down

  • Device connected or disconnected

  • Port up or down

  • CPU exceeded CPU threshold (85% of CPU)

  • Memory exceeded memory threshold (85% of available memory)

  • MAC address table exceeded threshold (reported as percentage)

  • PoE consumption exceeded threshold. The PoE threshold is normally reported by the switch. Where it isn't, 90% of the maximum PoE budget is the threshold).

An overall health score is presented based on the following parameters:

  • Device availability

  • Device hardware health

  • Software health

  • Connectivity health

Tiles adjacent to the overall score present the following additional information:

  • Device availability: displays the number and percentage of connected and disconnected devices.

  • Device hardware health: displays devices with high CPU and memory usage, low PoE output, degraded fans, degraded PSUs, and high operating temperature.

  • Software health: displays devices with updated, pending, and failed configuration pushes; firmware failures, rebooted devices, and devices with high MAC table utilization.

  • Connectivity: displays the percentage of devices experiencing stacks issues, optics issues, and increasing numbers of errors on interfaces.

The following data is now displayed for port configurations:

  • Speed (10 Gbps, 5 Gbps, 2.5 Gbps, 1 Gbps,100 Mbps and 10 Mbps) in descending order.

  • Transmission speed (full duplex, half duplex).

  • Disabled PoE.

Switch alarms are displayed in order based on severity. Select an alarm to see additional details.

New health widgets display the following information for the top 5 devices:

  • Average CPU use

  • Average memory use

  • Average power use

  • Average temperature

  • The percentage of switches that are running either the template configuration, or a configuration that differs from the template, or are waiting for configuration updates.

  • Switch availability, including the percentage of connected and running switches, and disconnected switches.

  • Client connection speeds based on negotiated speeds (10 Mbps, 100 Mbps, 1 Gbps, 2.5 Gbps, 5 Gbps and 10 Gbps). The number and percentage of connected clients is shown, and client speeds are shown in order from highest to lowest.

New Wi-Fi Health Score

This release adds a new Wi-Fi Health Score widget to the Device details and the Wi-Fi score windows. This score is derived from interference and client load information.

Support Country Codes for Legacy APs

ExtremeCloud IQ now supports country codes for legacy APs.

Switch Port Aggregation Support

A Port Aggregation tab is included in the Port Setting widget to simplify the switch configuration.

Editable Text within ExtremeCloud IQ

You can now edit organization and personal information on the Account Details page.

Update Network Branch Import

You can now add branch networks to ExtremeCloud IQ when required. With the core network configured, you can import branch networks.

90-day Data Retention Base Index Roll-up

You now have the option to display network analytic information for a 60 day and 90 day period.

Expanded Create New or Edit Port Type Options

Editing a port type or creating a new port type now has the same flexibility as the device template's configuration.

Port Configuration for Switch Stacks

You can now configure ports at the device level for all switches in a stack directly from the Series-Stack overview window. You can quickly turn specific ports on or off quickly and name ports across the stack without having to create a separate template for each stack member.

Network 360 WAN Network Status

This release expands the Network 360 network status page to include WAN and VPN availability for connections and tunnels, WAN latency and VPN packet loss, and latency and jitter (if SD-WAN is enabled).

Device Availability Chart Enhancement

The device availability chart is now interactive. Click or select the device availability tile to see a list of devices with the device name, MAC address (and a link to the device view), and availability status.

New Port Type Configuration at Device Level for Switches

You can create a new port type at the device level for switches. The navigation path is Manage > Devices > switch_name > Configuration > Port Configuration, Configure Ports Individually > PSE tab.

Show Details for Wired Clients Connected to a Defender Device

In the Defender > Clients window, the host name and MAC columns are now interactive. Select either column to see the client detail page.

World SKU Support for AP510C and AP510CX

This release adds world SKU support for AP510C and AP510CX devices. ExtremeCloud IQ now tracks device location by country code or region. If ExtremeCloud IQ detects that a device has been relocated to a restricted domain (FCC, CAN, Israel and Egypt, for example) it issues a major alarm.

Support for AP460 Series Indoor/Outdoor Regulatory Channels

This release adds regulatory support for indoor and outdoor channels for AP460 series devices. You can now install these devices indoors inside freezer units, which allows roaming from non-freezer indoor areas to the AP460.

Network Allocation Assignment Enhancements

This release adds the following enhancements to the network allocation table in the router network policy configuration workflow:

  • The columns in the network allocation table now display custom and imported VLANs.

  • You can now assign serial numbers to branch IDs.

  • You can now modify subnetworks for each VLAN. For multiple networks, the list is segmented by network and can be expanded and collapsed for each network. Each network has an AUTO option.

  • ExtremeCloud IQ now recognizes and identifies imported networks.

  • For VRRP, multiple devices that share the same branch ID are grouped. You can assign a branch ID to a device that is associated with other routers. The device then appears under the assigned branch.

The following columns have been added to the table:

  • IP Network (IP address format)

  • Number of branches (allocated and total)

  • Number of clients

  • DNS service

ExtremeCloud IQ now checks for and issues alerts about network overlaps.

Installer Role for Mobile App

This release introduces the new admin account role of Installer. This role is primarily for administrators who need to remove devices or assign them to existing network policies or locations. Installers cannot view or change passwords, or add new users. Installers can perform limited actions both inside ExtremeCloud IQ and from the ExtremeCloud IQ Mobile App.

Device 360 Client Data Enhancements

Data retrieval has been improved for the client timeline view, client count, and client details.

Enhancement to 90-day Data Retention for ML Insights

The mechanism for computing 90-day data retention for Network health, Client health, Wi-Fi health and Device health has been improved.

Display Warning if Devices are Filtered between Page Views

Prior to this release, users updating devices across multiple device list windows were required to manually refresh the windows after updates to confirm that all updates were successful. If they did not refresh the page manually, configuration mismatches were missed. With this release, the window updates automatically and displays any mismatch errors.

Wired Client Session Details for AP150W

The following information now appears for wired networks in the Network 360 client data view:

• Total usage

• Last connected

• Total connected time

• Average data usage

• Average PPS

Enhancement to the Network Allocation Table

When a new branch is added to the network allocation table, it always appears at the top of the table, making it easier to locate.

Device Onboarding Enhancements

This release of ExtremeCloud IQ features a redesigned device onboarding workflow.

When beginning the process, you can select whether the device is to be managed by ExtremeCloud IQ (a cloud-managed device) or by a different management platform, such as Extreme Management Center, IQ Virtual Appliance, or a third-party management platform (a locally managed device).

In support of the new universal hardware platforms such as the 5520 switch and some access points, you can now also select which operating system to run on the device during the onboarding process.

You can find more information about the onboarding process by referring to the "Onboarding Getting Started Guide".

Enhanced Hardened Ports Widget

The Hardened Ports widget now displays the number of ports that are configured for static speed, duplex, or PoE output.

Common Hardware Support for AP305C, AP410C, and AP460C Devices

New tabs in the onboarding process enable you to designate AP410C, AP305C, and AP460C models as either WiNG7 devices or as Extreme Campus controller devices.

New Dropdown Option for 802.3bt 90W PSE Profile

When you configure a new PSE (Power Sourcing Equipment) profile for a switch, the drop-down list now contains the option to select 802.3bt 90W.

Enhancement to Account Management

This release adds a search field at the top of the Admin Accounts table on the Account Management page.

Enhancement to Client Issues Data

This release adds interactivity to the Client Issues chart in the Client Health window. Select any data point inside the chart to see details about device issues.

Country Code Support and Channel List Validation for AP460S6C and AP460S12C Devices

This release adds country code support and channel validation using a new CLM file for AP460S6C and AP460S12C devices.

IQ Virtual Appliance Support for Single Device Stack Visibility

A single switch that is configured as a stack will be displayed as a stack in ExtremeCloud IQ.

Client Health Data Enhancement

The Client Devices widget in the Client Health window is now interactive. Hover anywhere in the widget to see more details.

Wi-Fi Capacity Score Enhancement

This release adds a new Wi-Fi Capacity score widget in the Wi-Fi Health details window. For each location, the score is calculated on a per-radio basis (2.4 GHz, 5 GHz, or combined) and is a sum of all AP scores for that location.

New Access to Terms and Conditions on Registration Page

When creating a new administrator, the admin must review and accept the terms and conditions for the account. The admin can access the terms and conditions using the links provided.

Licensing Enhancements

ExtremeCloud IQ can retrieve license information and install and manage the licenses on selected switches. The Device Details page indicates the license status for the device.

PSE Level Clarification

This release clarifies the purpose of setting the PSE (Power Sourcing Equipment) level for a switch. ExtremeCloud IQ issues an alert when the power a device uses exceeds the specified PSE value.

Device 360 Client Data DisplayEnhancement

Data for the timeline, client count, and details in the Device 360 client display is now retrieved from the same source.

Device Table Icon Enhancements

The icons in the device table have been visually enhanced. Hover over any icon to see the icon name.

Communication Link between Extreme Oracle Database and ExtremeCloud IQ

This release adds a link between the Oracle database and ExtremeCloud IQ for device serial and model numbers.

Stacked Switch Total Port Count

The total port count for switch stacks no longer includes management ports.

Email Format Support Enhancement

This release supports email addresses that contain sequential hyphens.

WIPS Improvement for New AP Models

ExtremeCloud IQ now issues an alert when the admin installs a new AP that is not in the WIPS (Wireless Intrusion Prevention System) list. To add the new AP to the WIPS list, the admin must respond to the alert.

CHAP Option for Captive Web Portals with no Encryption

The CHAP (Challenge Handshake Authentication Protocol) option appears for captive web portals.

Configuration Delta Display Inprovements

You can now quickly identify configuration differences between template-level settings and device-level settings. Devices with device-level settings (configuration overrides) are identified by an amber diamond with a white exclamation point in the Status field of the Devices list. In the Monitor window, under Actions, you now have the option to revert to the template configuration and override local device settings, in the same way as you can do with switches. In the Device detail window, devices with overrides are identified as such by an Overrides label that appears above the image of the device.

CUID Display

To facilitate LEM (license entitlement management), the CUID now appears in VIQ accounts.

Add WPA3 Enterprise Support to WPA3 Certification

This release adds the 802.11ax WPA3 Enterprise options to WPA3 certification. You can now make the following selections:

  • Transition Mode - On/Off

  • 192-bit Mode - On/Off

  • If you select WPA3 under enterprise, the message you see now contains the following text: Options for transition mode and 192-bit encryption are supported by OS version 10.2r4 or later.

Updates to the Troubleshoot Now Function

This release includes the following updates to the Troubleshoot Now function in the Client 360 view:

  • ExtremeCloud IQ automatically selects APs that will troubleshoot a specific client.

  • Active troubleshooting on APs is now indicated in the Devices list by a dedicated status icon for the AP. This also applies to the associated clients in the Clients list.

  • Each troubleshooting session now appears as an event in the Client events table.

  • Each session has a timestamp, and identifies which user initiated the event. You can now enter additional information about the event in an editable description field.

  • For active sessions, a countdown timer for the session timeout (10 minutes) is displayed.

  • When you select client event entries, captured client events received are listed in the order in which they occurred.

  • A session, once initiated, is kept alive for each client for 10 minutes. When the session expires, the no exec client-monitor <client-mac> command is sent to the APs.

Enhancements to the Router Device Display in Device 360 and Device Monitor

The display of router information in the Device 360 and Device Monitor view has been enhanced to align with switch information. The following items have been added or enhanced:

  • In the device template, when you hover your mouse over a router port, you now see information details for that port.

  • As with switches, you can now bounce a router port from the template.

  • This release adds CPU, Memory, MAC address table, and PoE utilities.

Known and Addressed Issues

ExtremeCloud IQ Virtual Appliance 21.1.20.27

Addressed Issues in IQ Virtual Appliance 21.1.20.27

ID Description
CFD-6240 When an IQ Virtual Appliance login session timed out, administrators were unable to log in again when using a fully qualified domain name URL.

Note: After upgrading to IQ Virtual Appliance 21.1.20.27 from version 21.1.20.24, clear your browser cookies and cache to ensure that previous browser content does not interfere with the login process.
CFD-6230 Network users could not connect to the network using PPSK authentication.
CFD-6213 Administrators were unable to add devices to the inventory after upgrading to IQ Virtual Appliance 21.1.20.24.

ExtremeCloud IQ Virtual Appliance 21.1.20.24

Addressed Issues in IQ Virtual Appliance 21.1.20.24

ID Description
CFD-5951 The number of devices displayed on the Overview page, the device list, and site map was not consistent.
CFD-5931 ExtremeCloud IQ generated the incorrect spanning tree cost CLI for both SR-series switches when RSTP was enabled.
CFD-5913 Administrators were unable to update Dell EMC switches.
CFD-5912 Administrators could not remove imported captive web portal files via Common Objects.
CFD-5910 Delta configuration uploads were unsuccessful when the SNMP location field contained non-ASCII or accented characters.
CFD-5896 Changing the MAC filter configuration sometimes did not trigger the audit flag for devices.
CFD-5888 Configuration uploads were unsuccessful for AP370 when Voice Enterprise was enabled in a unified SSID that included different AP models.
CFD-5884 The default link-debounce setting was outside the supported range for SR2000- and SR-2100-series switches, causing configuration uploads to be unsuccessful.
CFD-5870 ExtremeCloud IQ sometimes displayed a message stating that the Device List might need to be reloaded or refreshed for changes to be visible.
CFD-5869 Guest Access SMS message containing user credentials was not sent to the users.
CFD-5864 AP template pages did not display correctly in Chinese, German, and Japanese languages.
CFD-5847 When the configuration of some APs enabled DFS, ExtremeCloud IQ disabled DFS in the configuration.
CFD-5838 RADIUS reply FilterID was ignored when it included a space.
CFD-5837 IGMP settings were erroneously available for XA-series switches.
CFD-5817 Administrators were unable to re-order IP firewall rules.
CFD-5816 Administrators could not configure RADIUS attributes for user-profile assignment when using Extreme Networks Radius Proxy.
CFD-5809 When an admin filtered the dashboard information to display a specific site, and then selected a device, ExtremeCloud IQ displayed selected devices for all sites.
CFD-5808 ExtremeCloud IQ was not sending email notification messages after and admin imported local PPSK user CSV file.
CFD-5807 Admin could not unzip the Network Summary report.
CFD-5804 Refreshing the Reports page caused some reports to disappear from the list.
CFD-5802 Administrators were sometimes unable to clone newly created SSIDs.
CFD-5800 PoE source power budget for FASTPATH switches was limited to 50 watts.
CFD-5784 Administrators could not configure port types for SR2000- and SR2100-series switches.
CFD-5772 Refresh icon on the Report page was missing in Hierarchical ExtremeCloud IQ.
CFD-5771 When an admin attempted to add a custom application detection rule, ExtremeCloud IQ displayed an error and prevented the action.
CFD-5759 LLDP & CDP was disabled on the eth0 interface at the device level on all AP230 access points.
CFD-5756 When an admin added a new classification rule based on LDAP User Group for assigning different user profiles, ExtremeCloud IQ automatically created a new user group matching the LDAP User Group, which had a default Re-auth Interval of 30 Minutes that the admin could not change.
CFD-5739 When cloning a network policy, Master Device Template Physical Interfaces were administratively down and could not be enabled.
CFD-5728 When an admin removes a column from the column pick list, the column sometimes returns to the list.
CFD-5718 After an admin changed the host name of an SR2348P switch, ExtremeCloud IQ sometime changed the switch host name back to the previous name.
CFD-5707 When an admin attempts to download troubleshooting information for more than 25 devices at a time using Get Tech Data, an error displays indicating an incorrect maximum number of devices allowed.
CFD-5705 Administrators could not expand the Device 360 client list filter tool when some time ranges were selected.
CFD-5701 X440-G2 device-level configuration port numbers were incorrect for ports 49 - 52.
CFD-5694 When an admin filtered the device view to view connected devices, ExtremeCloud IQ only displayed the connected clients listed on the first page of the original device view.
CFD-5686 ExtremeCloud IQ was not sending the correct management VLAN command to SR2000- and SR2100-series switches as configured in the device location assignment rule.
CFD-5681 AP template Advanced Settings did not display when a foreign language was selected.
CFD-5680 PoE configurations generated for N1108EP-ON included invalid parameters and could not be uploaded to devices.
CFD-5679 Guest setup wizard did not function properly when using cloned network policies.
CFD-5675 The My Reports page sometimes did not load properly.
CFD-5674 When an admin changes the security method from dot1x with pre-authentication enabled to a different security method, the pre-authentication configuration remained.
CFD-5653 When an admin filtered the device list by building, floors within the building were not visible in the filter hierarchy.
CFD-5650 When an admin changed the radio profile of an AP460, the radio profile name sometimes did not change in ExtremeCloud IQ.
CFD-5649 Administrators could not disable U-NII-3 channels at the device level on AP130 and AP230 access points.
CFD-5642 When an admin closed the GDPR banner message on the Device List page, the banner was displayed again after a page refresh.
CFD-5635 ExtremeCloud IQ did not upload the DFS configuration correctly to AP330 and AP390 access points.
CFD-5632 The weekly report were not generating when the recurrence date was set as Sunday.
CFD-5630 VRRP Network Settings table erroneously reported that no records were found.
CFD-5620 When an admin attempted to back up a VIQ, the process was unsuccessful and ExtremeCloud IQ displayed the message "Could not backup VHM".
CFD-5599 ML Insights data was missing from some device information tables, and ExtremeCloud IQ incorrectly indicated that some APs were not connected.
CFD-5585 One of the default AP650 device templates did not function properly.
CFD-5580 Administrators were unable to save port forwarding rules.
CFD-5576 ExtremeCloud IQ did not generate to correct CLI commands to configure mgt0.x VLAN settings.
CFD-5568 When administrators attempted to save classification rules, only the rules visible on the page were saved.
CFD-5566 When an admin filtered the dashboard information to display a specific site, and then selected a device, ExtremeCloud IQ displayed selected devices for all sites.
CFD-5564 When an admin onboarded WiNG devices, ExtremeCloud IQ sometimes did not assign Cloud Config Groups to them.
CFD-5559 Update dialog did not close after admin selected Perform Update.
CFD-5557 Duplicate firmware versions were visible in AP Template Advanced Settings.
CFD-5553 SR2148P bulk port configuration did not function properly.
CFD-5540 When an admin attempted to view the current running configuration of an AP130 or AP230 access point, ExtremeCloud IQ did not generate the configuration command list.
CFD-5537 In some languages, some filtering options were not visible.
CFD-5528 Using the Connection Status > Connected APs tool on the Manage Devices page did not function properly.
CFD-5527 PoE source power budget for SR2000 and SR2100 series switches was limited to 50 watts.
CFD-5521 Filters did not correctly save initial filter selections made by the administrator.
CFD-5515 Administrators could not save VRRP Network Settings.
CFD-5513 Updating devices to IQ Engine 10.0r9a was sometimes unsuccessful.
CFD-5493 Zooming in to a floorplan truncated the floorplan image so that moving the image using the arrow buttons did not reveal the hidden areas.
CFD-5489 ExtremeCloud IQ displayed the Login Successful message instead of the Registration Successful message after a successful registration.
CFD-5480 ExtremeCloud IQ was not classifying devices running iOS 14 properly using classification rules.
CFD-5459 ExtremeCloud IQ did not upload the correct CLI command sequence to enforce the configured wired port speed s.
CFD-5452 After uploading a configuration to a RADIUS server AP with Active Directory integration, the Delta configuration audit still displayed pending DNS configuration commands.
CFD-5451 The option to disable MFA in the password reset page was not available.
CFD-5439 Floor plans sometime required more than 90 seconds to display APs.
CFD-5435 When existing SR2348P switches were reconfigured to be members of a Switch Stack, administrators were unable to manage the configuration properly afterward.
CFD-5408 When an admin removed port mirroring functionality from a port, ExtremeCloud IQ continued to report that the port was mirrored.
CFD-5404 When an admin attempted to recreate an expired user name using XAPI, ExtremeCloud IQ displayed the message, "The credential (username) already exist".
CFD-5403 When viewing the Network Summary Report, the window scroll bar was not visible.
CFD-5399 OAuth API calls did not redirect correctly.
CFD-5391 Searching for a location was very slow.
CFD-5388 Some WiFi1 channels were missing from the list of available channels.
CFD-5382 ExtremeCloud IQ did not generate the CLI commands necessary to enable the short guard interval when the configuration was uploaded to the devices.
CFD-5373 When an admin attempted to configure WIPS, ExtremeCloud IQ displayed no APs and reported an unknown error.
CFD-5372 Administrators could not bounce a port on a switch running IQ Engine.
CFD-5366 After an admin added a new admin to an account, the audit logs did not specify the name of the new admin.
CFD-5365 When an admin starts spectrum analysis, the audit logs reported an unknown error.
CFD-5363 ExtremeCloud IQ interface included incorrect Japanese wording.
CFD-5361 ExtremeCloud IQ sometimes displayed invalid channel numbers during spectrum intelligence scans.
CFD-5358 An incorrect warning message appeared when an admin added an AP template.
CFD-5354 The device search functionality did not parse some search terms correctly.
CFD-5352 ExtremeCloud IQ did not correctly delete historical guest account association data when an admin manually deleted the guest account.
CFD-5351 Administrators were able to save port types when the storm control percentage value was greater than 100.
CFD-5349 Administrators could not manage accounts when a non-English language was selected.
CFD-5346 Administrators were able to run commands via the ExtremeCloud IQ Advanced CLI Access that caused the device storage to fill with data and the device to become unresponsive.
CFD-5345 Some devices stopped sending information, which caused ExtremeCloud IQ to place them in the Offline status.
CFD-5334 ExtremeCloud IQ did not generate correct CLI commands to create interface mgt0.x VLAN 1 for an XR series router.
CFD-5323 Administrators could not add RADIUS servers to a RADIUS server group.
CFD-5318 Wifi0 radio profile information was not displayed when SDR was enabled.
CFD-5313 The Redirect clients after a successful login attempt check box was missing when the captive web portal configuration used the Import HMTL option.
CFD-5302 Clearing the Column Picker filter resulted in an unknown error.
CFD-5294 Administrators were unable to get location assignments when importing switches via CSV file.
CFD-5290 CPU Usage and Memory Usage values were both zero at the end of the time chart on the Device 360 Overview page.
CFD-5288 When an admin edited and saved an existing external admin account, ExtremeCloud IQ deleted it from the Admin Accounts list.
CFD-5279 Usage-based report email messages did not contain the expected PDF and CSV file attachments.
CFD-5278 The Usage Based Report was empty.
CFD-5261 An admin with external monitor permission did not have the correct permissions
CFD-5258 When an admin created a new user within a new local user group, ExtremeCloud IQ did not the expected SMS or email message containing the details.
CFD-5254 When using the filter in ExtremeCloud IQ, the results often took a long time to display.
CFD-5250 ExtremeCloud IQ indicated a VRRP that was different from the configuration uploaded to the device.
CFD-5249 When an administrator attempted to view a configuration audit, ExtremeCloud IQ displayed a Java Error.
CFD-5248 Port configuration controls were missing for switch stacks on the Device 360 page.
CFD-5243 A three-pack of ATOM AP30 access points occupied three device licenses rather that one.
CFD-5238 Existing valid PPSK users were sometimes unable to log in successfully using an existing PPSK key.
CFD-5227 The configuration audit page content was not available for some devices after they connected.
CFD-5215 When an admin attempted to sort audit logs in ExtremeCloud IQ, ExtremeCloud IQ only sorted the log entries that appeared on the current page, rather than paginating the entire sorted log.
CFD-5214 The switch Port Type drop-down list did not list all port types.
CFD-5213 On the Device 360 page, the client list for SR-series switches is empty.
CFD-5207 When an admin attempted to view an issue list for a specific client device in Client Monitor, ExtremeCloud IQ displayed no events, even when events existed.
CFD-5220 Configurations that included WPA-PSK resulted in configuration mismatches after updating access points.
CFD-5212 XR-series router DHCP reservations disappeared from ExtremeCloud IQ after an administrator imported a configuration file that contained duplicate IP addresses.
CFD-5210 The AP305CX and AP510CX external antenna configuration reverted to the default Omni setting when saved.
CFD-5200 ExtremeCloud IQ incorrectly allowed administrators with Operator privileges to click the link to view account and licensing information, but correctly disallowed access to the account and licensing information page.
CFD-5199 In Hierarchical ExtremeCloud IQ, administrators of specific organizations were able to view WIPS reports with information about organizations to which they had no access.
CFD-5188 Device 360 page sometimes displayed an empty clients list when there were clients connected.
CFD-5167 Administrators could not classify an unauthorized AP as a neighbor AP.
CFD-5166 When an admin reuses a tunnel object on multiple user profiles, and the performs a delta upload, ExtremeCloud IQ does not generate the correct CLI commands to complete the configuration.
CFD-4945 ExtremeCloud IQ administrators in the Helpdesk role were able add simulated devices to inventory.
CFD-4877 HiveManager Classic VA backups did not import successfully into ExtremeCloud IQ.
CFD-4871 When a VLAN used classification rules to allocate a network, the network allocation information was not uploaded correctly to the device.
CFD-4870 ExtremeCloud IQ UI pages and tabs did not populate properly for administrators in the Helpdesk role.
CFD-4869 The name of the Japanese language displayed incorrectly in the language selection drop-down list.
CFD-4863 The destination URL of the daily report link in notification email messages did not render properly on Firefox and Microsoft Edge browsers.
CFD-4851 Administrators were receiving CAPWAP connection loss alert email notifications when WiNG APs were connected to ExtremeCloud IQ.
CFD-4847 ExtremeCloud IQ sometimes did not import Virtual IQ instances from IQ Virtual Appliance properly.
CFD-4845 ExtremeCloud IQ sometimes displayed the message, "Can not get the required device list" when an administrator attempted to view the Device List.
CFD-4841 ExtremeCloud IQ sometimes incorrectly indicated that access points possessed a mesh connection to another device.
CFD-4835 Delta configuration audit always displays the command ntp interval 180 for AP121 and AP330 access points in the VA2 RDC, even when there is no configuration mismatch.
CFD-4831 Administrators could not create AP650 templates in ExtremeCloud IQ.
CFD-4830 Administrators could not create and assign user profile assignment rules for the SR2024P, SR2124P, and SR2148P switches.
CFD-4828 ExtremeCloud IQ allowed administrators to create guest SSIDs inadvertently for existing network policies in the AP Advanced Onboarding wizard.
CFD-4827 The delta configuration tab in the AP305C access point audit window always contains a configuration mismatch.
CFD-4826 XAPI response data was affected by the contents of the ExtremeCloud IQ filter.
CFD-4825 When an admin attempts to create a user-authentication self-registration captive web portal, ExtremeCloud IQ displays an error and prevents further captive web portal configuration progress.
CFD-4817 ExtremeCloud IQ displayed a message when filtered results included an RFS4010 WiNG AP.
CFD-4816 When an admin configured logging on XR-series routers or AP150W, and then uploaded the configuration, ExtremeCloud IQ did not upload the logging configuration correctly.
CFD-4810 In the SSID Advanced Access Security Controls section, the Force the user to reauthenticate after control was visible when the SSID type was not Enterprise.
CFD-4809 The global default device template did not overwrite the template configured in the network policy
CFD-4797 When an admin added a PPSK user to a user group, ExtremeCloud IQ only generated passwords with the default length of 10 characters.
CFD-4791 After an admin configured a VLAN to use classification rules, ExtremeCloud IQ reported that the subnet for the configured VLAN was not found.
CFD-4784 Administrators could not add a device location using a csv file when the total number of folders is anything other than four.
CFD-4781 The device-specific Clients page displayed clients that were connected to other APs.
CFD-4773 In the Device 360 view, some SR2024P port icons were obscured by other GUI elements.
CFD-4772 When administrators attempted to configure monthly reports, ExtremeCloud IQ did not display the correct date choice
CFD-4751 The AP305C radiation pattern was not the correct size when viewed on the planner tool.
CFD-4744 After the ExtremeCloud IQ 20.3.2 patch update, some DHCP reservations were unavailable.
CFD-4741 ExtremeCloud IQ was not saving static management VLAN IP addresses.
CFD-4734 The ExtremeCloud IQ Connect Device Template page did not load properly.
CFD-4733 Administrators could not make device-level changes to SR2200- and SR2300-series switches.
CFD-4732 Administrators could not save changes to switches on the Device 360 page.
CFD-4729 After an admin changes the host name of a device, ExtremeCloud IQ sometimes incorrectly displayed the former host name.
CFD-4727 When an admin configured sFlow on a switch, the configuration uploaded correctly, but subsequent configuration upload attempts were unsuccessful and timed out.
CFD-4726 ExtremeCloud IQ reported the incorrect port usage information.
CFD-4725 Audit mismatch icon continued to appear after ignoring or clearing the audit mismatch.
CFD-4721 ExtremeCloud IQ could not retrieve detailed client information from within Client Monitor.
CFD-4720 Historical client information was not available to view.
CFD-4684 When an admin views the user data usage, ExtremeCloud IQ displayed and internal session ID instead of the client MAC address.
CFD-4672 ExtremeCloud IQ generated the incorrect CLI commands when and admin configured an AP150W port as a Phone with Data port.
CFD-4664 ExtremeCloud IQ displayed incorrect radio profile information on the Manage Device page.
CFD-4626 Administrators could not download Audit logs.
CFD-4421 When an admin used Guest Management in a Chrome browser, ExtremeCloud IQ did not display user groups.
CFD-4319 Administrators were unable to use the diagnostic tool on FASTPATH switches.
CFD-4407 Module switch ports sometimes appeared down or offline on a stack of SR2348P switches.
CFD-4403 When an admin tries to save more than one page of internal networks in a VGVA routing policy, only the last-viewed page saves.
APC-43679 When there was no delta configuration CLI present, the configuration audit displayed a change, and a configuration upload resulted in an error message indicating a configuration update timeout.
APC-43550 Administrators required sufficient legacy licenses to cover WiNG devices prior to using the new licensing features in Q4r1.
APC-43103 APs that were manage by ExtremeCloud IQ through a locally managed WiNG controller were not displaying as managed by ExtremeCloud IQ.
APC-43102 After upgrade, existing APs that an admin had changed from IQ Engine to WiNG within ExtremeCloud IQ, but which had not yet regained a connection, remained visible as a managed device in the Wireless View.
APC-42875 PSE on-off switch was visible for devices that did not use it.
APC-42616 Administrators could not create a new VLAN for a new port type because the Add button was missing.
APC-42419 When Extreme Management Console was disconnected from ExtremeCloud IQ, the devices managed by Extreme Management Console erroneously indicated a status of disconnected instead of unknown.
APC-42094 Top Wired and Top Access Point by Usage widgets contained no data when the time range was selected to be 30 days or 90 days in the ExtremeIOT Essentials Dashboard.
APC-41832 When filtering on the historical list of clients, the table displayed all clients, regardless of the filter settings.
APC-41291 ExtremeGuest Essentials advanced guest CLI commands continued to appear in the delta configuration audit after the configuration was uploaded.
APC-37603 When an admin searched a list of locations using specific criteria, the filter criteria became persistent only until the admin searching without criteria, at which time the filter configuration persistence was lost.
APC-36968 Within ExtremeCloud IQ, the X440G2-12-10G4 traffic metrics did not match the actual traffic metrics measured by the switch.

Known Issues in IQ Virtual Appliance 21.1.20.24

ID Description
CFD-5344 When the switch location is in a different region from the ExtremeCloud IQ RDC, updating the switch software from ExtremeCloud IQ is sometimes unsuccessful.
CFD-2493 The account of an ExtremeCloud IQ administrator sometimes becomes suspended, despite being an otherwise valid account.
CGUEST-440 When a user selects a social login without a walled garden configured, ExtremeCloud IQ sometimes displays an authentication error page instead of the correct message page.
XLOC-411 When all sites are selected, the Category Path Analytics widget does not display data correctly.
APC-42709 Throughput and application metrics for wired clients of AP150W access points sometimes do not match.
APC-41956 Client Trail and the client tracking tool sometimes displayed duplicate client session entries.
APC-42931 In some older browsers, ExtremeCloud IQ pages do not display properly.

Workaround: Upgrade browser to the latest version and refer to the list of supported browsers.
APC-41057 Legend labels on the switch stack graph sometimes disappear when attempting to download or print the graph.
APC-39971 Hierarchical ExtremeCloud IQ search function only displays five results for each search category.
APC-38369 When an admin updates EXOS switch firmware from 30.6 to 30.6.1.11-patch1-11, the switch loses connectivity to the cloud when IQAgent is configured using the CLI.
APC-38238 When an EXOS switch running 30.6.1.11-patch1-11 is downgraded to 30.6.1.11 by a firmware update in ExtremeCloud IQ, the switch cannot reconnect to ExtremeCloud IQ successfully.
APC-38236
APC-38372
When updating an EXOS switch to a patch of the current version, the admin must select Upgrade even if the versions are the same.
APC-38210 When an admin assigns a branch ID to an XR-series router, the branch ID is not updated on the Devices table.

Workaround: Refresh the page if the new branch ID is not visible.
APC-37835 When an admin deletes a RADIUS proxy profile, the deleted profile still appears in the Use Existing list.
APC-27965 ExtremeCloud IQ does not generate the correct CLI command set when an admin changes a device radio profile directly on the device using the Interface Settings.
APC-22297 ExtremeCloud IQ displays PoE configuration controls for all ports on the Dell EMC N1108P switch, even though the N1100P only supports PoE on ports 1 - 4.
APC-22222 If a member of the stack is disconnected, then you cannot upload a configuration to the stack while the stack is missing the member switch.

Workaround: If you want to push configuration with a member disconnected you will need to create a stack template that corresponds to the stack without the member that is disconnected and push that.
APC-21979 ExtremeCloud IQ does not allow an admin to add more than two AP150W device templates. When a third AP150W device template is added, ExtremeCloud IQ displays an error message and does not add the device to the template.
APC-21676 Hierarchical ExtremeCloud IQ improperly allows an admin to select locations in the Assign Location section of Account Management when the Organization is set to All Organizations.
APC-21667 ExtremeCloud IQ sometimes paginates the user list incorrectly, displaying the incorrect number of users per page.
APC-21634 If an admin enables HHM (Hierarchical ExtremeCloud IQ), and then attempts to restore ExtremeCloud IQ from a previous, non-HHM image, the restore is unsuccessful, and the admin can no longer log in to ExtremeCloud IQ.
APC-21456 In rare cases, HiveManager NG does not upload some IGMP sub-commands successfully.

Workaround: Use the Supplemental CLI feature to upload problematic commands.
APC-21409 After modifying a custom network service value (such as Service Idle Timeout or ALG Type), attempts to upload the change to devices are unsuccessful.
APC-21298 ExtremeCloud IQ returns an error message when an admin attempts to disable SDR (Software Defined Radio) on multiple APs simultaneously.
APC-21294 When an admin attempts to change a radio channel on multiple APs simultaneously to a channel that at least one of the radios does not support, ExtremeCloud IQ returns the error message "The channel [...] is not valid for country code [...].", which is unrelated to the actual issue that the channel is not supported by at least one of the selected radios.
APC-21215 ExtremeCloud IQ sometimes displays inaccurate Issue and Diagnosis count information within Client Monitor.
APC-21194 When an admin clicks Dashboard > Diagnostics, and then promptly clicks Monitor, ExtremeCloud IQ sometimes reports that the API calls were unsuccessful.
APC-21178 When an admin uses some diagnostic tools, the tools do not execute properly and ExtremeCloud IQ returns a message that the device on which the tool is run is unsupported.
APC-21053 When the admin disables LLDP, and then uploads the new configuration, ExtremeCloud IQ continues to display LLDP information.
APC-21015 When devices are removed from, and then re-added to ExtremeCloud IQ, ExtremeCloud IQ does not retain the LLDP information for display in the Monitoring tab.
APC-20760 ExtremeCloud IQ reports as unidentified any wired devices that are connected to an SR2208P switch.
APC-20735 Device-level storm control settings cannot be configured on a switch unless a template for the switch is part of the network policy.
APC-20734 When a configuration upload is unsuccessful because of improper Supplemental CLI commands, hovering the mouse over the upload message does not result in a tool tip containing the problematic CLI command.
APC-20707 When an admin selects multiple switches in ExtremeCloud IQ, the Get Tech Data utility becomes unavailable.
APC-20647 ExtremeCloud IQ does not successfully upload configurations that contain an external RADIUS server.
APC-20600 Some filter settings are not persistent after the admin navigates to different tabs.
APC-20371 After an admin adds a user profile to an existing list of user profiles in order to apply the new profile to the traffic, ExtremeCloud IQ does not successfully upload the new configuration.
APC-20172 The option to configure SSH appears when the admin is attempting bulk edits of multiple switches or of switches and APs together. When the admin is performing bulk edits of multiple APs only, ExtremeCloud IQ correctly hides the SSH configuration options.
APC-20132 Extreme Networks Connect administrators are unable to edit RBAC role details.
APC-20099 ExtremeCloud IQ does not display any CPU or memory usage information when the Switch Diagnostics graph is set to display a week of data.
APC-20092 In some cases, ExtremeCloud IQ does not allow an administrator configuring a switch template to configure a switch port as a Phone port.
APC-20063 ExtremeCloud IQ sometimes prompts the admin to add a license, even when the current license is sufficient.
APC-20018 When the admin is configuring device wireless settings, ExtremeCloud IQ sometimes returns a general error.
APC-19743 When the admin attempts to view a filtered list of several thousand devices, ExtremeCloud IQ sometimes cannot properly display the list of devices.
APC-19616 The status cards of the Monitor page in a managed service provider context do not update after the admin changes what organizations are displayed.
APC-19591 When there are more than 500 APs in ExtremeCloud IQ, it sometimes becomes unresponsive when reloading the Monitor page after the admin deletes a device.
APC-19515 When the number of digits in the alarm notification counters exceeds three, the notification counter background elements can no longer contain the value.
APC-19474 The type-ahead (live search) functionality sometimes displays incorrect or no information.
DAPC-394 Administrators sometimes cannot onboard N3024F, N2024P, N1108P, or N1524P switches after resetting the Virtual IQ.
DAPC-385 ExtremeCloud IQ sometimes displays the incorrect port number in the tool tip when the admin mouses over a stack port on the Port Status page.
DAPC-382 When an administrator attaches a switch stack to HiveManager Virtual Appliance, only the master switch is auto-detected. The administrator must subsequently onboard the remaining stack members manually.
DAPC-259 When stacks are merged, ExtremeCloud IQ sometimes reports the existence of a zero-member stack along with the merged stack. The existence of the zero-member stack can result in inconsistent data and unsuccessful configuration uploads.

Workaround: Delete any zero-member stack immediately after merging stacks.
DAPC-240
DAPC-234
When the master is removed from a stack, the stack retains the old MAC address. As a result, the master (now a standalone switch), and the original stack both have the same MAC address, which ExtremeCloud IQ cannot resolve.

Workaround: Before removing the master from a stack with the intention of continuing to use the master as a standalone switch, perform the following steps:
  1. Remove the stack from ExtremeCloud IQ.
  2. Perform the related command line operations on the stack to remove the master switch.
  3. Re-add the stack and the standalone switch to ExtremeCloud IQ.
DAPC-222 After an admin uploads stack template to a switch stack, ExtremeCloud IQ displays [-No Change-] in the Stack Template drop-down list, rather than the new template name.
DAPC-186 ExtremeCloud IQ does not display the management VLAN information in the Devices table.
DAPC-73 When resetting multiple switches simultaneously to factory default settings, ExtremeCloud IQ erroneously reports that the reset was unsuccessful.
DAPC‑38 When an admin updates Dell EMC switch configurations in ExtremeCloud IQ with the Update Network Policy and Configuration option cleared, ExtremeCloud IQ displays an updated timestamp, despite no configuration update occurring.

Workaround: Be sure to select either Update Network Policy and Configuration or Upgrade Dell Switch Images before clicking Perform Update.

Device Support Information

This section lists the devices that ExtremeCloud IQ supports and includes the latest version of the software that each device supports. Expand the sections below to view the list of supported devices.

Access Points

Device Model Latest Supported Release Comments
AP650, AP650X IQ Engine 10.0r9b Platform support introduced with IQ Engine 10.0r1.
AP630 IQ Engine 10.0r9b Platform support introduced with IQ Engine 10.0r1.
End of Life Information
AP560i-FCC WiNG 7.1.1 Monitor only
AP560h-FCC WiNG 7.1.2 Monitor only
AP505i WiNG 7.1.0 Monitor only
AP510i WiNG 7.1.0 Monitor only
AP505e WiNG 7.1.1 Monitor only
AP510C IQ Engine 10.0r9b Platform support introduced with IQ Engine 10.0r1.
AP510CX IQ Engine 10.0r9b Platform support introduced with IQ Engine 10.0r1.
AP460i WiNG 7.3.0 Monitor only
AP460e WiNG 7.3.0 Monitor only
AP460C IQ Engine 10.2r2 Platform support introduced with IQ Engine 10.1r2
AP410C IQ Engine 10.2r2 Platform support introduced with IQ Engine 10.1r2
AP305C IQ Engine 10.2r2 Platform support introduced with IQ Engine 10.1r1.
AP305CX IQ Engine 10.2r2 Platform support introduced with IQ Engine 10.1r1.
AP1130 IQ Engine 10.0r9b Platform support introduced with IQ Engine 8.2r1.
End of Life Information
AP550 IQ Engine 10.0r9b Platform support introduced with IQ Engine 7.0r3.
End of Life Information
AP390 IQ Engine 6.5r12 End of Life Information
AP370 IQ Engine 6.5r12 End of Life Information
AP350 IQ Engine 6.5r12 End of Life Information
AP340 IQ Engine 6.5r12 End of Life Information
AP330 IQ Engine 6.5r12 End of Life Information
AP320 IQ Engine 6.5r12 End of Life Information
AP250 IQ Engine 10.0r9b Platform support introduced with IQ Engine 7.0r2.
AP245X IQ Engine 10.0r9b Platform support introduced with IQ Engine 7.0r2.
End of Life Information
AP230 IQ Engine 10.0r9b Platform support introduced with IQ Engine 8.2r1.
End of Life Information
AP170 IQ Engine 6.5r12 End of Life Information
AP150W IQ Engine 10.0r9b Platform support introduced with IQ Engine 8.1r1.
AP141 IQ Engine 6.5r12 End of Life Information
AP130 IQ Engine 10.0r9b Platform support introduced with IQ Engine 8.2r1.
End of Life Information
AP122 IQ Engine 10.0r9b Platform support introduced with IQ Engine 7.0r4.
AP122X IQ Engine 10.0r9b Platform support introduced with IQ Engine 8.2r1.
End of Life Information
AP121 IQ Engine 8.4r11 End of Life Information
AP120 IQ Engine 8.4r11 End of Life Information
Atom AP30 IQ Engine 8.4r11 Platform support introduced with IQ Engine 8.3r2.

Switches and Routers

Device Model Latest Supported Release Comments
SR2024 IQ Engine 6.5r12 Not supported in ExtremeCloud IQ
End of Life Information
SR2024P IQ Engine 6.5r12 End of Life Information
SR2124P IQ Engine 6.5r12 End of Life Information
SR2148P IQ Engine 6.5r12 End of Life Information
SR2208P IQAgent 1.1.31  
SR2224P IQAgent 1.1.31  
SR2324P IQAgent 1.1.31  
SR2348P IQAgent 1.1.31  
BR100 IQ Engine 6.5r12 Not supported in ExtremeCloud IQ
End of Life Information
BR200 IQ Engine 6.5r12 Not supported in ExtremeCloud IQ
End of Life Information
BR200-LTE-VZ IQ Engine 6.5r12 Not supported in ExtremeCloud IQ
End of Life Information
BR200WP IQ Engine 6.5r12 End of Life Information
XR200P IQ Engine 6.9r4 Platform support introduced with IQ Engine 6.9r2
XR600P IQ Engine 10.0r7a Platform support introduced with IQ Engine 9.0r1
VGVA IQ Engine 6.9r3a  

Dell EMC Switches

ExtremeCloud IQ can manage the following Dell EMC N-Series switches running IQAgent versions up to 1.1.29:

Device Model Latest Supported Release Comments
N3132PX IQAgent 1.1.29  
N3024EF IQAgent 1.1.29  
N3024EP IQAgent 1.1.29  
N3024ET IQAgent 1.1.29  
N3048EP IQAgent 1.1.29  
N3048ET IQAgent 1.1.29  
N3024 IQAgent 1.1.29  
N3024F IQAgent 1.1.29  
N3024P IQAgent 1.1.29  
N3048 IQAgent 1.1.29  
N3048P IQAgent 1.1.29  
N2128PX IQAgent 1.1.29  
N2024 IQAgent 1.1.29  
N2024P IQAgent 1.1.29  
N2048 IQAgent 1.1.29  
N2048P IQAgent 1.1.29  
N1524 IQAgent 1.1.29  
N1524P IQAgent 1.1.29  
N1548 IQAgent 1.1.29  
N1548P IQAgent 1.1.29  
N1108T‑ON IQAgent 1.1.29  
N1108P‑ON IQAgent 1.1.29  
N1124T‑ON IQAgent 1.1.29  
N1124P‑ON IQAgent 1.1.29  
N1148T‑ON IQAgent 1.1.29  
N1148P‑ON IQAgent 1.1.29