Примечания к выпуску для Cisco Cisco 2106 Wireless LAN Controller

The LDAP backend database now supports these local EAP methods: EAP-TLS, EAP-FAST/GTC, 
and PEAPv1/GTC. LEAP, EAP-FAST/MSCHAPv2, and PEAPv0/MSCHAPv2 are also supported 
but only if the LDAP server is set up to return a clear-text password. For example, Microsoft Active 
Directory is not supported because it does not return a clear-text password.

You can configure the controller to allow users to access the controller GUI using browsers that 
support 128-bit (or larger) ciphers. This change provides increased security for secure web mode.

CLI commands containing locp have been changed to nmsp for Network Mobility Services Protocol 
(NMSP).

A new encryption option is available from the Privacy Protocol drop-down box on the SNMP V3 
Users > New page called CFB-AES-128 (Cipher Feedback Mode-Advanced Encryption 
Standard-128). This option is the default value.

A trap is generated if a WPA or WPA2 client requests a security policy that is inconsistent with the 
approved security configuration.

Over-the-air provisioning (OTAP) is now disabled by default on the controller.

Load-based call admission control (CAC) is now supported on Cisco 1000 series access points.

The controller’s bootup configuration file is now stored in an Extensible Markup Language (XML) 
format rather than in binary format. Therefore, you cannot download a binary configuration file onto 
a controller running software release 4.2.61.0. However, when you upgrade a controller from a 
previous software release to 4.2.61.0, the configuration file is migrated and converted to XML.

Do not attempt to make changes to the configuration file. If you do so and then download 
the file to a controller, the controller displays a cyclic redundancy checksum (CRC) error 
while it is rebooting and returns the configuration parameters to their default values.

This section contains important information to keep in mind when installing controllers and access 
points.