PRODUCT RELEASE NOTES

PRODUCT: ARRAY OPERATING SYSTEM

RELEASE DATE: 23 OCTOBER 2018
VERSION: 8.4.9 – 7335 MAINLINE

CONTENTS
1) New Features
2) Fixed Problems
3) Known Issues
4) Limitations and Conditions
5) Hardware and Software Requirements
6) Contacting Support

1) NEW FEATURES
• Bug-fixes

2) FIXED PROBLEMS
• 33712 - On 802.11ac Wave 2 APs (such as XD2-240, XD4-240) in timeshare monitor
mode, detected rogues don’t correctly show the channel on which they were found.
They are always shown as being on the same channel that the timeshared radio is
configured to use for wireless traffic.
• 33868 - On roaming back and forth between AP1 and AP2, after a few times the
station’s entry remains in AP1’s station table even after roaming to AP2 again.
• 33873 (AOS-129, AOS-159) - Stations have intermittent connectivity problem,
particularly when roaming.
• 33874 - 802.11r Fast Roaming functionality has been impaired.
• 33856 – Roam from AP1 to AP2 then back to AP1. AP1 deauthenticates station and a
fresh authentication takes place. Only occurs when using RADIUS with Session Timeout
not set.
• 33886 – For 2.4GHz only, AP calculates an RSSI value that is too low and sets TX rates
accordingly. This causes poor performance.
• 33892 – Stations are not able to associate to SSIDs that are configured to use only TKIP
encryption (WPA-TKIP & WPA2-TKIP).
• AOS-139 - RADIUS authentication slower after upgrade from 8.4.5 to 8.4.6.
• AOS-160 - When VLAN is set via SSID and Group/Device policy, stations are unable to
associate properly.
• AOS-197 – Stations experiencing problems connecting to Wave 2 APs. Fixed by process
serialization of its messaging to the lower layers.

3) KNOWN ISSUES
• 19319 - When Roaming between APs with Radius Accounting enabled, de-
authentication occurs before the authentication has completed.
• 20276 - Internal-Radius and Active-Directory did not start after a reboot. If the Internal
Radius SSID is disabled and you then reboot, Active-Directory will start.
• 20296 - Rogue AP – 802.11ac Wave 1 Radios are seeing rogue APs at higher RSSI levels.
• 25558 - Standby Mode – Enabling standby mode on an SSID could cause a General Error.
It is not recommended to use this feature with this release.
• 25764 - In noisy environments, clients may be slow connecting to 80MHz bonded
channels. A workaround is to avoid using 80 MHz channels in noisy environments.
• 26045 - Admin RADIUS is not working with IPv6 when logging on to the Web
Management Interface or the Command Line Interface.
• 26222 - No RADIUS packets are sent to server from PEAP client when primary server is
using IPv6.
• 26300 - Attempting to login to AP using IPv6 address via Admin RADIUS with WMI does
not work and causes WPA Authentication Engine restart. Workaround would be to
avoid Admin RADIUS logons w/ IPv6.
• 27041 - Radio assurance feature is not functional on 802.11ac Wave 2 products. Please
refrain from using this feature.
• 27376 - WPR SSL Redirect - Chrome does not allow the user to accept the SSL
Certificate. Use alternative browsers such as Safari or Internet Explorer.
• 27800 - Upstream traffic on the same clients is, in general, slower on 802.11ac Wave 1
AP’s than it is on 802.11ac Wave 2 AP’s – this has been observed infrequently on Intel
7625-based client chipsets.
• 28104 - On 802.11ac Wave 2 APs, the QoS UP bit in QoS Control Field is always set to
whatever QoS setting is set on the SSID.
• 28489 - Occasionally during boot-up AP sends out a couple of XRP packets with the
default IP address of 192.168.1.3. Administrators can safely ignore this debugging
message.
• 29728 - XR600 CRC error reporting numbers may not be accurate.

2
• 29831 - Wave 2-capable APs sometimes show negative RSSI, SNR and Silence values
when a station is first detected. This problem goes away and can be safely ignored.
• 32871 - The 2.5G Ethernet port on the XD4-240 links at 2.5G but sometimes will not
pass more than 1G of traffic and requires reboot to fix.
• 33188 - APs running AOS version 8.3.3-7084 are categorizing Epson's EasyMP projector
application traffic as proxy, which is denied, and causing the application on the MS
Surface to crash.
• 33396 - 802.11ac Wave 2 AP models have limitations supporting Layer 3 roaming.
• 33457 - When using WPR with Radius Accounting, the parameter Multi-Session-Id is
blank when station is de-authenticated from the AP and then re-authenticates.
• 33872 - A signed SSL Certificate uploaded to an AP that has had its name changed will
not be used.
• 33891 (AOS-168) – 802.11ac Wave 1 APs are not able to transmit packets at some .11ac
data rates when .11ac capable Chromebooks are associated.
• 33896 – 802.11r capable iPads are not able to associate to an SSID when 802.11r (fast
roaming) and .11w (Protected Management Frames) are enabled.
• Character set (XMSC-2268) - When entering text fields such as AP Location, you are
currently restricted to the Latin character set.

4) LIMITATIONS AND CONDITIONS

• 24598 - RADIUS – must use quotes “” to add the word “secret” as a password.
• 26606 - The Console timeout value is not respected. Workaround is to set the Xircon
timeout and the Console timeout to the same value. Working as designed.
• 28675 - Packet Counts for a DNS redirect filter may sometimes be less than the actual
number of DNS packets modified.
• 29454 - Deleting/Adding over 500 MAC addresses in Security/Access Control will give an
error.
• 30392 - Bonjour – AppleTV is not able to service a client on SSID with VLAN when
AppleTV is on the Bridged wired network. It is not recommended that you place
AppleTV on the Bridged Management LAN segment. This will cause a lot of multicast
traffic to be processed by the Array on the Management VLAN and can affect
performance of the Array. Isolation of Multicast Traffic is recommended to be handled
in VLAN’s that are not part of the Array Management VLAN.
• 30513 - Arrays with large numbers of VLANs (12 – 16+) may occasionally experience the
log message “Process Restart Required: WPA Authentication Engine, restarting process”
which indicates that the ability of clients to associate using WPA is being affected. The
recommended workaround is to reduce the number of VLANs. Hardware and Software
Requirements

3
5) HARDWARE AND SOFTWARE REQUIREMENTS
• XI-AC3470 is equipped with 4 Tx chains, Rx chains and 4 spatial streams. Depending on the Access Point
capacity, the AOS will automatically configure each radio module to obtain optimal functionality. The table
below lists different operating modes based on the HD modular AP and number of radios installed.

• Wave 2 Radio Module Operating Modes

Tx Rx
Model Streams Tx power per radio
Chains Chains

XR-2247 4 4 4 No Tx power restrictions

Mon + 5G + 5G + 2.4G 13 dBm(default)

5G + 5G + 5G + Mon 12 dBm
5G + 5G + 5G + 5G 12 dBm
XR-2447 3 4 3
5G + 5G + 5G + 2.4G 13 dBm
5G + 5G + 2.4G + 2.4G 14 dBm
5G + 2.4G + 2.4G + 2.4G 15 dBm

XR-4447 4 4 4 No Tx power restrictions

XR-4847 4 4 4 No Tx power restrictions

Mon + 2 2.4G + 5 5G 18 dBm (default)

XR-6847 4 4 4 All configurations + Mon 18 dBm
All radios with no Mon No Tx power restrictions

Mon + 3 2.4G + 8 5G 18 dBm (default)

XR-7247 4 4 4 All configurations + Mon 18 dBm
All radio with no Mon No Tx power restrictions

Mon + 3 2.4G + 12 5G 12 dBm (default)

Mon + 2 2.4G + 13 5G 10 dBm
XR-7647 4 4 4
Mon + 1 2.4G + 14 5G 8 dBm
Mon + 15 5G 6 dBm

• Wave 2 Radio Module Upgrade Configurations. The table below summarize power requirements
and configurations for installing XI-AC3470 radios in an XR modular AP.

# Radios
Upgraded Which Slots to Use (RF
Model Series after Watts / Injector Models
Model No Slot #s)
Upgrade
30W, PoE+
XR-2000 XR-2247 2 0, 2 XP1-MSI-30, XP1-MSI-75M, XP8-MSI-
70M, XT-5024/5048

4
 # Radios
Upgraded Which Slots to Use (RF
Model Series after Watts / Injector Models
Model No Slot #s)
Upgrade
40W
XR-2000 XR-2447 4 All slots XP8-MSI-70M,
XP1-MSI-75/75M
75W
XR-4000 XR-4447 4 1, 3, 5, 7 XP8-MSI-70M,
XP1-MSI-75/75M
75W
XR-4000 XR-4847 8 All slots
XP1-MSI-75/75M
95W
XR-6000 XR-6847 8 0, 2, 4, 6, 8, 10, 12,14
XP2-MSI-95M (one port)
0, 1, 2, 4, 5, 6, 8, 9,10, 95W
XR-7000 XR-7247 12
12,13,14 XP2-MSI-95M (two ports)
95W
XR-7000 XR-7647 16 All Slots
XP2-MSI-95M (two ports)

6) CONTACTING RIVERBED SUPPORT

Visit the Riverbed Support site to download software updates and documentation, browse our
library of Knowledge Base articles and manage your account. To open a support case, choose
one of the options below.
Phone
Riverbed provides phone support at 1-888-RVBD-TAC (1-888-782-3822). Outside the U.S. dial
+1 415 247 7381.
Online
You can also submit a support case online
Email
Send email to support@riverbed.com. A member of the support team will reply as quickly as
possible.

©2018 Riverbed Technology. All rights reserved. Riverbed and any Riverbed product or service name or logo
used herein are trademarks of Riverbed Technology. All other trademarks used herein belong to their respective
owners. The trademarks and logos displayed herein may not be used without the prior written consent of
Riverbed Technology or their respective owners.