AP1130 and AP650(AH) firmware divergence?

[systemscsn]

I noticed that firmware for the AP650(AH) is out, with the new version being 10.5.4.0.

I updated a few of the AP's that had zero clients, startign on my AP650(ah)'s, and then went to update the firmware on the AP1130's. thats when i noticed that 10.5.4.0 wasnt an option, only the previous version 10.5.3.0.

Whats going on?  since ive had this system (since Aerohive) its been the same firmware for the AP650's as it has for the AP1130's.

Dont tell me that the firmware is going to start to diverge based on the model of AP... please dont tell me that.... not a good idea..

Anyway, im interested why the latest isnt available for the AP1130's, anyone?

[systemscsn]

oh sh1t JA... thats not good.  I dont like their end of life methodology, given we have well over a year left of software maintenance, only to be told we are not goign to get that, and are now 3-4 firmware patches behind on the AP1130's.  That software maintenance, is part of the overall maint, which is somethign their customers pay for!!!!

so its beyond me how they can get away with this.  I suppose its like "we will escalate this", but the top of the tree can just say, "tough crap, its in the EULA" and we know how incidious EULA's can be, some companies have weaponized them, and this is starting to have the feel of that!

thanks for posting that, interesting.  Sorry you had to deal with the FRAG right after that.... guess you got newer AP's to stop that threat, right?

thanks, Jason.

[daniel1]

Just found these 2:
Security Advisory: SA-2023-066 - IQ Engine CAPWAP buffer overflow (CVE-2023-35802) | Extreme Portal ...
Security Advisory: SA-2023-067 - IQ Engine acsd service buffer overflow (CVE-2023-35803) | Extreme P...

Seems like we "just" have to wait for someone to discover security flaws in the firmware.

[systemscsn]

oh wow.  no I haven't seen that before.  I wonder if they are going to pull the same trick with the AP1130's!!

I have the original doc for those stating it doesn't end until July 2025, so if they change it to "its expired today", then i wonder if we have any recourse... we all probably agreed to allowing them to change anything they want, and without our consent or prior notification.. there are so many toxic EULA's out there that it wouldn't surprise me!

Thanks for bringing that up.

-Jason.

[James_A]

https://www.extremenetworks.com/support/end-of-sale-and-end-of-support-products/ says end of software maintenance is 24 months after end of sale. This has been the policy for a while now, and I think it's definitely too short. By comparison, Aruba and Cisco have 5 years to end of support after end of sale (and Cisco extended support for some APs due to chip shortages), Juniper Mist is 5 years, Fortinet is complicated - 3 years full support, 18 months engineering support for firmware = 54 months, Ruckus I'm not sure (could be 1 or 4 years depending on how you interpret it).

AP230 went end of sale in November 2020, so end of software support November 2022, AP1130 end of sale was July 2020 so it shouldn't have even gotten 10.5r3. I'm sure Extreme will still say the APs are supported in that you can get technical support and hardware replacements but they won't provide new firmware. I definitely think there's a competitive case to be made for 3 years of software support after end-of-sale, longer would be better of course. So contact your account managers and complain.

[daniel1]

@James_A On this page there's a link behind the AP230 and AP1130 names (https://bit.ly/30sLtmR) to a document, where it clearly states that both have software maintenance until 2025.

So Extreme is violating their own official supportdocument.