Cisco Aironet 2800 end of support in 2027: your options

If your offices still run Cisco Aironet 2800 access points, 2027 is the year the clock runs out. The 2800 series left sale in 2022; according to Cisco's end-of-life bulletin, security vulnerability support and the last date of support both fall in 2027 (exact dates vary by SKU — check your own serial numbers against the bulletin). After that, an access point that is still working is also an access point nobody patches.

This is not a crisis. It is a planning exercise, and the earlier you run it, the cheaper it gets.

What actually stops working

Nothing stops on the day. The access points keep serving Wi-Fi. What changes is that Cisco no longer releases fixes for newly found vulnerabilities, TAC no longer takes cases for the platform, and your controller's software train will eventually leave the 2800 behind. In practice the risk is not a sudden outage; it is running Wi-Fi 5 hardware with unpatched firmware in an office where laptops, phones and printers already speak Wi-Fi 6 or 6E.

Two things are easy to miss:

• The controller is on the same clock. Many 2800 fleets sit behind an AireOS controller (3504, 5520, 8540). Those are also end-of-sale. If you plan to keep Cisco, the target is the Catalyst 9800 family — hardware or the 9800-CL virtual machine — and the access points have to be supported by it.
• Support contracts and licences expire on their own schedule. A hardware refresh decision made without a current view of contract coverage tends to be made twice.

The three realistic paths

1. Run it out, then refresh. Keep the 2800s until close to the last date of support, accept the unpatched window, and plan a refresh for 2027. Cheapest on paper; it is a bet that nothing serious is disclosed in the meantime. Reasonable for a small site with low exposure, not for an office that handles anything you would mind reading about in the news.

2. Stay with Cisco, refresh to Catalyst 9100. Wi-Fi 6/6E access points on a Catalyst 9800 controller (a 9800-CL virtual machine is free; the access points need DNA/Networking licences, typically Essentials). You keep the operating model your team knows, and if you also own Catalyst 9120 or 9130 access points, they carry over. The cost is the licence subscription per access point — the item most organisations forget to put in the five-year total.

3. Move to a licence-free platform at the refresh. If the fleet is due for replacement anyway, the refresh is the natural moment to compare a cloud-managed, licence-free platform side by side with the Cisco path: purchase, licences and running costs over five years. For a mid-size office the difference is usually decided by the licence line, not the hardware line. This is a decision about your operating model as much as about access points, so it deserves real numbers rather than a vendor slide.

There is a fourth path that we don't recommend: buying refurbished 2800s to "extend" the fleet. You would be adding unsupported hardware to an unsupported platform.

How to decide in one afternoon

1. Inventory — every access point model and serial, and which controller it joins.
2. Coverage — support-contract and licence status per device, with expiry dates.
3. Windows — when each site can take a change without hurting the business.
4. Two options, side by side — the Cisco refresh and one licence-free alternative, with purchase, licences and running costs over five years.

If you would like help with steps 1 to 4, that is exactly what our discovery audit does; the result is a written comparison you can take to whoever signs the budget.