New Features in 25.10.0-103 lists the new features introduced in ExtremeCloud IQ 25.10.0-103.
For more information about ExtremeCloud IQ features, see the ExtremeCloud IQ (Classic) v25.10.0 User Guide.
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
Onboard, Monitor, Config, Image Mgmt, and Global Download Support
New Features in release 25.10.0-103 lists the new features introduced in ExtremeCloud IQ (Classic) release 25.10.0-103.
| Feature ID | Feature | Description |
|---|---|---|
| XCP-16607 | AP5022 Access Point Support | Support is now offered for AP5022, AP5022FX, and AP5022S6D access points as cloud-managed devices. These devices appear as cloud-managed with the IQ Engine operating system type. While onboarding is blocked in ExtremeCloud IQ Classic, monitoring and statistics remain available in ExtremeCloud IQ Classic. |
| XCP-16608 | AP5060 Access Point Support | Support is now offered for AP5060U and AP5060D access points as cloud-managed devices. These devices can be onboarded manually or in bulk, with devices appearing as cloud-managed with the IQ Engine operating system type. While onboarding is blocked in ExtremeCloud IQ Classic, monitoring and statistics remain available in ExtremeCloud IQ Classic. |
| XCP-17874 | Guest Management Role Support | A dedicated Guest Management role is now offered that provides exclusive access to guest management tasks and credential distribution. This role grants direct access to and , and includes SSO/IDP enhancements that allow administrators to map a primary role to Guest Management through attribute mapping. Guest Management users have a streamlined interface without the 9-dot app switcher or notification bell icon to maintain focus on guest-related tasks. |
| XIQ-33345 | IQ Engine Support for Port and IP Ranges in Firewall Rules | IQ Engine now supports port and IP ranges in firewall rule configuration, allowing administrators to define a range of ports in a single rule instead of entering each port individually. |
| XIQ-35549 | IQ Engine Support | IQ Engine version 10.8.7 is now supported. |
| XIQ-44189 | IEEE 802.3az Standard Support | The IEEE 802.3az standard (Energy Efficient Ethernet) is now supported on the AP305C/X, AP410C, AP460C, AP460S6C, AP460S12C, AP510C, and AP510X access points. |
| XIQ-45685 | Direct RadSec Tunnel Configuration Support | ExtremeCloud IQ now supports direct RadSec tunnel configuration for ExtremeCloud Universal ZTNA (UZTNA) authentication on AP3000, AP5000, and Wi-Fi 7 access point series. Administrators can enable UZTNA on an SSID using the "Authentication with ExtremeCloud Universal ZTNA" toggle in the SSID settings. The system automatically deploys the UZTNA root CA, intermediate CA, and client certificate to access points. This capability coexists with the existing IDM tunnel, enabling PPSK to continue functioning while UZTNA reduces authentication latency. |
| XIQ-45854 | Client Mode Configuration Improvement | Client Mode configuration now includes a NAT enable/disable toggle in the device template and device configuration. When NAT is disabled, the default DHCP server and scope are also disabled, enabling use cases where devices on a Client Bridge require direct reachability from the uplink network. |
| XIQ-47128 | Real-Time Troubleshoot Support | Real-Time Troubleshoot (RTTS) now supports the AP5020 and AP4020 series Wi-Fi 7 access points, expanding coverage beyond the previously supported AP3000, AP3000X, AP5010, AP5050U, and AP5050D platforms. |
| XIQ-47402 | Power Profiles and Software Modes of Operation for AP5060 | Power profiles and software modes of operation are now defined for the AP5060U-WW and AP5060D-WW access points. Both models share the same power profiles and support tri-radio scan software modes with 2.4 GHz, 5 GHz, and 6 GHz radio configurations under both 802.3bt and 802.3at power standards. |
| XIQ-47404 | Power Profiles and Software Modes of Operation for AP5022 | Power profiles and software modes of operation are now defined for the AP5022-WW, AP5022FX-WW, and AP5022S6D-WW access points. All three models share the same power profiles and support tri-radio scan software modes with 2.4 GHz, 5 GHz, and 6 GHz radio configurations under both 802.3bt and 802.3at power standards. |
| XIQ-47766 | Automatic Configuration Push to Offline Devices Upon Reconnection | Support is now offered for automatic configuration push to offline devices upon reconnection. Administrators can enable or disable this feature at the VIQ level using the Automatically apply the latest configuration to offline devices at reconnect setting, which is off by default. When enabled, offline devices can be selected alongside online devices in for a configuration update. Offline devices display a Pending Config status until they reconnect and receive the latest configuration. A public API is available for this functionality. |
| XIQ-47891 | Client Lock Out Alert | ExtremeCloud IQ now generates an alert when a client is locked out. The Client locked out alert event integrates with the Alert Service and Notification Service, enabling delivery of lockout notifications to external systems through webhook or email. This feature applies to cloud PPSK users only. Local PPSK authentication is handled on-device and does not go through the cloud, so local PPSK clients are not in scope for lockout detection or alerting. |
| XIQ-48334 | Indoor Automated Frequency Coordination Support | Indoor Automated Frequency Coordination (AFC) is now supported on the AP5022, AP5022FX, and AP5022S6D access points. |
| XIQ-48811 | Multi-Link Operation (MLO) with Enterprise Security mode Support | ExtremeCloud IQ now supports enabling Multi-Link Operation (MLO) with Enterprise security mode for the AP4020 access point. The MLO enable/disable configuration option is now available when Enterprise security mode is selected. |
| XIQ-47935 | VOSS/Fabric Engine Support | Support is now offered for Fabric Engine/VOSS 9.4 for onboarding, monitoring, configuration management, and image drag-and-drop on supported Universal Switches, VSP7400, and VSP4900 platforms. Users can downgrade to a previous image, including the IQAgent image, without GTAC engagement. |
| XIQ-47949 | EXOS/Switch Engine 33.6 GA Download Support | Support is now offered for global image download for EXOS/Switch Engine 33.6 for all supported EXOS/Switch Engine SKUs, both single and stacked. The following images are available in the download dropdown: 31.7.4.2-patch1-7, 32.7.3.15-patch1-33, 33.5.2.118-patch1-6, and the latest 33.6. No other images are available. |
| XIQ-49264 | EXOS/Switch Engine 32.7.3.15-patch1-54 GA Download Support | Support is now offered for global image download for EXOS/Switch Engine 32.7.3.15-patch1-66 for all supported EXOS/Switch Engine SKUs, both single and stacked. The following images are available in the download dropdown: 31.7.4.2-patch1-7, 32.7.3.15-patch1-33, 33.5.2.118-patch1-6, and 33.5.2. No other images are available. |