Aerohive (Extreme Networks) APs - No Controller Needed

Notice: Page may contain affiliate links for which we may earn a small commission through services like Amazon Affiliates or Skimlinks.

ioiioi

New Member
Mar 18, 2016
12
2
3
45
Hi all, I’m new here, and just wanted to say howdy before asking my question.
I have recently acquired 17 extreme AP305C’s. They are currently on-boarded to the previous owner’s XIQ account. Contacting GTAC, they informed me that I needed an active support contract before they could unboard the AP’s for me. Anyways, that brought me here to try configuring them via console/ssh, and with the help here I’ve had reasonable success. What I am wondering is if anyone out there has access to recent firmware images? The AP’s I have are running “HiveOS 10.6r5 build-d6d8840” from Nov 2023. I can’t find what the current firmware version is let alone find a downloadable image.
Try to config it through ssh first, do not spend times on finding the latest firmware, it's meaningless.
 

thigobr

Member
Apr 29, 2020
62
19
8
You can create a Trial Cloud account, adopt the APs and from there update to the latest firmware. But after your trial period ends no more updates. I did this last year and got the latest firmware at the time (10.7r2 ) for my AP650. Have been using it so far without any problems.
 
  • Like
Reactions: epicurean

owenthewizard

Member
Sep 15, 2022
35
8
8
Bought an AP650 today play around with.

I added it to the free tier to update the firmware. Poked around the options a bit but it's a bit convoluted for home use... not a huge surprise... Connecting via SSH went smoothly, was able to apply a reasonable config and everything works well... except...

WPA3-SAE doesn't seem to work, at least with some of my devices... both WPA2 (transition mode) and WPA3. Not sure what was wrong, since the previous TP-Link Omada EAP610 seemed to do fine with both.

Speed was maybe 50 Mbps better than the Omada (tested on my laptop with AC), but range was worse.

I think I'll switch back to the EAP610, not really because of the minor issues but because I already have another one downstairs, and this way I don't have to install a new mount on the ceiling :p.
 

COMSECWO2

New Member
Oct 14, 2025
1
0
1
I am new to the site... Please provide me with the current update to AP650's I have obtained a few and would like to see how well they perform. Thanks Kindly
 

dnlees

New Member
Nov 27, 2025
1
0
1
Hi @BlueFox

I found this really usefull - thanks....

How do you re-enable the system LEDs...?

Also, how do you Save the Config...?


cheers...
 
Last edited:

sebus

New Member
Jun 30, 2016
7
3
3
54
I am new to the site... Please provide me with the current update to AP650's I have obtained a few and would like to see how well they perform. Thanks Kindly
Here it is
Code:
https://1drv.ms/f/c/7821b2bbbb47b330/IgAws0e7u7IhIIB4ThYAAAAAAQ37VGzXw_3kBvGElxa8ekg?e=Fta552
 

BlueFox

Legendary Member Spam Hunter Extraordinaire
Oct 26, 2015
2,544
1,992
113
Hi @BlueFox

I found this really usefull - thanks....

How do you re-enable the system LEDs...?

Also, how do you Save the Config...?


cheers...
Pretty straightforward:
system led brightness bright

As for saving the configuration:
save config
 

hive-hercules

New Member
Feb 18, 2025
2
0
1
Has anyone experienced strange bugs with devices refusing to connect on 5ghz to newer (8021ax) devices? My iPhone for example refuses to connect stating ‘no internet’…
 

BlueFox

Legendary Member Spam Hunter Extraordinaire
Oct 26, 2015
2,544
1,992
113
My corporate iPhone has no trouble with 5GHz and 802.11ax on my AP650:

Code:
Ifname=wifi1.2, Ifindex=21, SSID=xxxx:
Mac Addr       IP Addr         Chan Tx Rate Rx Rate Pow(SNR)         A-Mode   Cipher  A-Time  VLAN Auth UPID Phymode LDPC Tx-STBC Rx-STBC    SM-PS Chan-width   MU-MIMO Release Station-State
-------------- --------------- ---- ------- ------- -------- -------------- -------- -------- ---- ---- ---- ------- ---- ------- ------- -------- ---------- --------- ------- -------------
xxxx:xxxx:xxxx xx.xx.xx.xxx      36 1200.9M     24M  -41(49)       wpa2-psk aes ccmp 134:05:40    1  Yes    0 11ax-5g  Yes    No      No     static    80MHz          No      No Good
 

sh1

New Member
Sep 20, 2020
12
6
3
Is there a guide on how to monitor various stats (connected client, signal quality, etc) just using cli?
 

mr2dave

New Member
Apr 25, 2021
2
1
3
Great thread, thanks. I just set up an AP650 and it's a noticeable upgrade from the old Ruckus R610.

If you're running VLANs and can't connect, the default user-profile mac and ip policies might be the problem:

user-profile [profile] ip-policy-default-action permit
user-profile [profile] mac-policy-default-action permit
 

Tim111

Member
Jan 9, 2019
50
10
8
I could not flash current ap650-10.8r3.img.S with web upload had to tftp it all said good now i can't login ssh error. it can't decide between 512 0r 256 bit. does any one have an older image i can try? i can still log it to web to try and upload firmware.
 

sh1

New Member
Sep 20, 2020
12
6
3
Has anyone set up AP650 in a noisy env with a lot of other APs around? Ruckus R710 seem to perform better than the AP650. I was hoping that the Aerohive would be an upgrade. Maybe the problem is because I set things up through the CLI?
 

BlueFox

Legendary Member Spam Hunter Extraordinaire
Oct 26, 2015
2,544
1,992
113
Has anyone set up AP650 in a noisy env with a lot of other APs around? Ruckus R710 seem to perform better than the AP650. I was hoping that the Aerohive would be an upgrade. Maybe the problem is because I set things up through the CLI?
As mentioned in my original post, across both bands, I have about 150 other APs in range. I don't have another AP to do A/B testing with however. Haven't had performance issues myself though and have been using my AP650 for 5 years now since I created this thread. I don't think CLI vs web UI is going to make any difference in regards to that for you.
 

klui

༺༻
Feb 3, 2019
1,045
622
113
I've been playing with the AP650 for the past several days. You may want to post your radio profile from your running configuration.

show run | include "radio profile"

Try playing with mu-mimo, 11ax ofdma-dl, band steering for your profiles. Issue show acsp neighbor to see where other APs' SNR values are in relation to your AP. I've never compared those values but I believe you can get it from show interface wifiX | include eirp. Replace wifiX with your base Wifi interfaces wifi0, wifi1, etc.

There are also interface radio settings that may help. I'm not a wireless engineer but I think you could use interface wifiX radio sensitivity to provide more leeway in how your clients connect to your APs. Maybe also check out interface wifiX radio antenna diversity, too.

Did you configure your AP with just the CLI? You can register for a free Extreme IQ Connect with limitations.

extreme-networks.my.site.com/ExtrArticleDetail?an=000110996

It's a bit complicated to set up but it will set a bunch of stuff for your radio profile then you can modify it through trial and error. There are a lot of concepts that are new to me but their default settings had a bunch of 11a, 11b, and 11g phymodes for the 5G radio profle. They also didn't set band-steering nor channel-width. Removed those 11 settings and adding band-steering and channel-width I could get pretty good throughput on 5Ghz on the gigabit (eth1) port. On a Vivobook I got 900 Mbps.

While XIQ is pretty useful, there are sore spots. I have not been able to figure out how to obtain some things it shows through the CLI. For example:
  • Client OS, hostname - only available in log and unless you send them to a syslog server (which I do) they will be lost from show tech.
  • Client capabilities involving channel width and spatial streams. Enabling data-collection on the AP doesn't seem to display these attributes and show client-info-collection always returns No client info yet even though I've enabled data-collection using the defaults (collect every hour and report every six).
  • RSSI and SNR (Rx Rate Pow(SNR) column, I think) shown in show station doesn't match XIQ.
The AP650 uses ~4-5 more watts than the R710 during a speed test, which is to be expected.

I posted some questions to /r/aerohive and Extreme's ExtremeCloud_IQ community but no help yet.

Ruckus Unleashed is much easier to manage and configure out of the box. Don't have to mess with channel width and stuff like that. Their Dyamic PSK is usable through Unleashed while XIQ Connect don't allow you to use Private PSK. I also prefer Unleashed because it's on-premises.

While XIQ's presentations are very nice, but some things are confusing and shows lack of holstic integration. I couldn't get details on a client by going to Manage Clients. My memory is foggy because I currently have no clients associated with the AP and I'm at work. But I recall it shows you a list of clients with some overall details much like Unleashed but it doesn't show traffic information and advertised capabilities. I had to go to ML Insights > Network 360 Monitor. Once there clicking on Clients up top only shows a dashboard of clients. I had to click on the Global View, navigate to my "floor," then click on the AP and click on an entry in the popup to get detailed client information. I'm no longer a young buck so it took me many tries to commit navigation to my long-term memory.

I may sound negative but I am grateful Extreme has a free tier and they seem genuinely sincere in helping people on their community web forum especially those who can't adopt an AP from eBay. They also permit the free tier to update the firmware. I like the hardware and while different from Ruckus Unleashed it was pretty had to pass up 5+1 Wifi 6 APs for $50 shipped. I paid $110 for 4 R710s several hours prior before I saw @BlueFox's reply to the Ruckus thread.
 
  • Like
Reactions: int0x2e

twitchytoes

New Member
Jan 10, 2024
10
0
1
I've been using 3 Aerohive APs for some time via the Extreme Networks CloudIQ and am finding myself at an impasse. Some of the settings I need to configure are paid only, or can be done via SSH. The caveat is any settings configured via SSH will be overwritten next time the APs reboot and talk to the cloud controller.

Has anyone used multiple APs configured locally? Do they roam well?

Has anyone configured them via the cloud controller then disabled the cloud controller with ```no capwap client enable```?
 

klui

༺༻
Feb 3, 2019
1,045
622
113
What experience have you had regarding their roaming performance? I am still learning about their capabilities but they roam as well as my Ruckus 11ac APs. Their "default" configuration is less aggressive about jumping onto 80 MHz channels after they've rebooted but after maybe 2-3 speed tests, they use the wider channels.

I didn't know a reboot would wipe local changes from the APs. What I have found is disabling capwap won't cause ExtremeCloud IQ to overwrite the local overrides after a reboot of a single AP or entire Hive (reboot all APs). After they are online again, capwap could be reenabled and they will be seen by Cloud IQ. Just have capwap disabled as the default setting then after a reboot, reenable capwap client if you want. Capwap settings don't get deleted if the client is disabled. It's good practice to regularly save the configuration to a remote configuration server.
 

twitchytoes

New Member
Jan 10, 2024
10
0
1
What experience have you had regarding their roaming performance? I am still learning about their capabilities but they roam as well as my Ruckus 11ac APs. Their "default" configuration is less aggressive about jumping onto 80 MHz channels after they've rebooted but after maybe 2-3 speed tests, they use the wider channels.

I didn't know a reboot would wipe local changes from the APs. What I have found is disabling capwap won't cause ExtremeCloud IQ to overwrite the local overrides after a reboot of a single AP or entire Hive (reboot all APs). After they are online again, capwap could be reenabled and they will be seen by Cloud IQ. Just have capwap disabled as the default setting then after a reboot, reenable capwap client if you want. Capwap settings don't get deleted if the client is disabled. It's good practice to regularly save the configuration to a remote configuration server.
Currently, the roaming seems to either be extremely aggressive or too passive. CloudIQ imposes great limitations on what you can configure in the free tier, with almost all of the roaming settings being behind that paywall. Currently, I have one AP in my living room, one in my kitchen on 5ghz only, and one on my back porch to extend reach of cameras primarily but it does have 5ghz enabled as well. This seemed to be the only way to prevent my living room and kitchen APs from fighting for clients, even when the clients are in the same room. This is with transmit power turned down to around 10.

Supposedly there are settings in CloudIQ for adjusting roaming assistant SNR, but I cannot touch those without licensing. I also found I needed to disable TWT to reduce stuttering of Moonlight streaming over wifi, which I've done via CLI thus far. I just don't want to delve too deep down the rabbit hole of CLI configurations if CloudIQ is going to wipe it with its config each time config is pushed.