Re: [WIRELESS-LAN] Birds of a feather reporting in Airwave?

[Holland, Ryan]

I didn’t see a reply to this, so fwiw, we use:

RF Health Report, looking for:
- APs with high 5ghz noise floor
- APs with sustained high average channel utilization
- APs with “lots” of channel changes

Device Summary report, looking for:
- APs with high maximum concurrent users
- Buildings/folders with more-than-expected max concurrent users

Client Session report, looking for:
- Device Type (AOS) breakdown
- Summary, which includes unique devices and total number of sessions

Hope that gives you a starting point / comparable.


Ryan Holland
Senior Network Engineer
The Ohio State University
Office of the Chief Information Officer
Telecommunications Network Center (TNC)
320 W. 8th Ave.
Columbus, OH 43201
614-292-9906 Office
holland@osu.edu 
ocio.osu.edu

On Dec 21, 2017, at 5:07 PM, Chad Burnham 
mailto:cburn...@du.edu>> wrote:

HI fellow list members,

I was looking for other folks on this list that use Aruba’s Airwave to generate 
meaningful reports to aid in monitoring and operating your wireless networks.

We have been trying to develop better and more meaningful reporting that shows 
a deeper understanding of the health of all of our wireless networks over time.

As we have invested significant resources in cabling, switches, controllers, 
Clearpass and Airwave servers and new/more next gen WAPs, we are trying to show 
the value more and more to senior management with our various tools.

We have got some reports working today (we are running 8.2.2.1); we are trying 
to find the “best of breed” reporting that you may rely in your environments 
and apply them here @ DU.

Knowing when we have problems before our users do is a goal. Increasing the 
customer perception of excellent wireless service is also a goal. Our audience 
types could be our own team or they may be senior management or even student 
government.

Yes, we are working with our local Aruba/HPE SE and the Aruba/HPE product 
manager of Airwave in this journey; they are an excellent resource and business 
partner.

Some of the area of theme/focus might include:
• Are the networks healthy?
• RF Performance
• RF Capacity
• RF Channel Utilization
• Bandwidth Usage
• Users, device types, etc.

Thanks in advance for anyone that can share what they might be proud of.

Happy Holidays,

Chad



Director of Network Services
Information Technology
University of Denver
2100 S. High St. #106
Denver, CO 80208
SIP URI = chad.burn...@du.edu
Desk Phone: 303-871-4441
Mobile Phone: 303-520-5657
https://du.webex.com/join/cburnham
https://udenver.zoom.us/my/cburnham




** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Packetfence - Aruba Webauth

[Trinklein, Jason R]

We should collaborate. We are running a cluster of three packetfence hosts; it 
will serve a captive portal with authentication using OAuth sources Facebook 
and Google, and also provide SMS and email based logins with verification. We 
are deploying out-of-band with webauth with two interfaces: management and 
portal.

We have not gotten the CoA/webauth to work yet and I’m seeking details on how 
this is accomplished.
--
Jason Trinklein
Wireless Engineering Manager
College of Charleston
81 St. Philip Street | Office 311D | Charleston, SC 29403
trinkle...@cofc.edu | (843) 300–8009
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Wesley Troy Scott 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Tuesday, January 30, 2018 at 1:27 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Packetfence - Aruba Webauth


Hi Jason,



The University of Wyoming is working on that now.



Troy

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Trinklein, Jason R 

Sent: Tuesday, January 30, 2018 8:52:06 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Packetfence - Aruba Webauth


Has anyone set up Packetfence webauth with Aruba for guest wireless access?



--

Jason Trinklein

Wireless Engineering Manager

College of Charleston

81 St. Philip Street | Office 311D | Charleston, SC 29403

trinkle...@cofc.edu | (843) 300–8009
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

[Jeffrey D. Sessler]

Sean,

Are you running a multi-controller setup? If so, I’d look to make sure 
inter-controller roaming and mobility groups are operating correctly. Have you 
removed the lower data rates from your AP’s so that clients don’t stick as long 
to distant APs?

Jeff

From: "wireless-lan@listserv.educause.edu"  
on behalf of "Gray, Sean" 
Reply-To: "wireless-lan@listserv.educause.edu" 

Date: Tuesday, January 30, 2018 at 8:55 AM
To: "wireless-lan@listserv.educause.edu" 
Subject: Re: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Hi Dave,

We didn’t see the client hitting our RADIUS server, and unfortunately these 
events aren’t typically reported when they happen.

I like your other thought about the AP power and cell size in relation to the 
clients output power. This never crossed my mind at the time, but I will 
certainly be looking more into this.

Thanks

Sean

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of LaPorte, David
Sent: January-29-18 3:45 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Sean,

A few different manifest the behavior your users are seeing, but here are a 
couple thoughts.

We use Radiator RADIUS for our 802.1x wireless network and were seeing errors 
in the logs that accompanied the credential pop-up.  It appeared as though the 
RADIUS controllers were receiving a large number of spurious packets mid-EAP 
transaction from our Cisco WISM2s.  That seemed like a bug, but I was able to 
work around the issue by ignoring the offending packets and never re-visited 
it.  Not sure if you are able to debug that deeply with ISE to see if that 
could be an issue.

Another thought, are your AP radios set to maximum power?  It’s possible that 
the user is at the edge of a coverage area and their device’s radio simply 
can’t reach the AP.

Regards,
Dave

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of "Gray, Sean" mailto:sean.gr...@uleth.ca>>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Monday, January 29, 2018 at 4:44 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Hi  Everyone,

I’m just wondering if anyone has experienced or heard reports of weird iPhone 
client behaviour.

We have had a couple of reports of iPhones throwing a “Incorrect Wi-Fi 
Password” error when the client is trying to join a network while walking 
around campus. The error resolves itself quite quickly if they hit cancel on 
the message as the correct credentials are cached on the device.

When I check the logs on our ISE server I see that the client never actually 
made an authentication attempt. So it may have been blacklisted on the WLC, 
unfortunately I don’t see a way to report on historical exclusion events.

No other client devices have been reported as experiencing the same issue, and 
it doesn’t appear to occur in the same geographic region. So I’m thinking this 
is a client side problem.

Thanks

Sean


Sean Gray | B.Sc (Hons)
Voice, Collaboration & Wireless Network Analyst
ITS, University of Lethbridge


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: Packetfence - Aruba Webauth

[Wesley Troy Scott]

Hi Jason,


The University of Wyoming is working on that now.


Troy


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Trinklein, Jason R 

Sent: Tuesday, January 30, 2018 8:52:06 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Packetfence - Aruba Webauth


Has anyone set up Packetfence webauth with Aruba for guest wireless access?



--

Jason Trinklein

Wireless Engineering Manager

College of Charleston

81 St. Philip Street | Office 311D | Charleston, SC 29403

trinkle...@cofc.edu | (843) 300–8009

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

[Gray, Sean]

Hi Dave,

We didn’t see the client hitting our RADIUS server, and unfortunately these 
events aren’t typically reported when they happen.

I like your other thought about the AP power and cell size in relation to the 
clients output power. This never crossed my mind at the time, but I will 
certainly be looking more into this.

Thanks

Sean

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of LaPorte, David
Sent: January-29-18 3:45 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Sean,

A few different manifest the behavior your users are seeing, but here are a 
couple thoughts.

We use Radiator RADIUS for our 802.1x wireless network and were seeing errors 
in the logs that accompanied the credential pop-up.  It appeared as though the 
RADIUS controllers were receiving a large number of spurious packets mid-EAP 
transaction from our Cisco WISM2s.  That seemed like a bug, but I was able to 
work around the issue by ignoring the offending packets and never re-visited 
it.  Not sure if you are able to debug that deeply with ISE to see if that 
could be an issue.

Another thought, are your AP radios set to maximum power?  It’s possible that 
the user is at the edge of a coverage area and their device’s radio simply 
can’t reach the AP.

Regards,
Dave

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of "Gray, Sean" mailto:sean.gr...@uleth.ca>>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Monday, January 29, 2018 at 4:44 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] iPhone - Incorrect Wi-Fi Password Error

Hi  Everyone,

I’m just wondering if anyone has experienced or heard reports of weird iPhone 
client behaviour.

We have had a couple of reports of iPhones throwing a “Incorrect Wi-Fi 
Password” error when the client is trying to join a network while walking 
around campus. The error resolves itself quite quickly if they hit cancel on 
the message as the correct credentials are cached on the device.

When I check the logs on our ISE server I see that the client never actually 
made an authentication attempt. So it may have been blacklisted on the WLC, 
unfortunately I don’t see a way to report on historical exclusion events.

No other client devices have been reported as experiencing the same issue, and 
it doesn’t appear to occur in the same geographic region. So I’m thinking this 
is a client side problem.

Thanks

Sean


Sean Gray | B.Sc (Hons)
Voice, Collaboration & Wireless Network Analyst
ITS, University of Lethbridge


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Wall plate AP and Coax line sharing box

[Alan D Wang]

Michael,
The part numbers are:
Panduit RJ45 lock in device: PSL-DCPLX-xx (where xx is color), these go on
the patch cords (10 in a pack, 1 key included)
Panduit RJ45 jack block out device: PSL-DCJB-BL for black block outs (10 in
a pack, 1 key included)

Both parts are available in 100 packs as well (w/ 10 "tools")

On Tue, Jan 30, 2018 at 11:03 AM, Hart, Michael 
wrote:

> Hector, do you have a part number I could use for ordering these cable
> connector locks?
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Hector J Rios
> *Sent:* Tuesday, January 30, 2018 8:10 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Wall plate AP and Coax line sharing box
>
>
>
> We came up with a simple solution. See the attached pics. We used locks on
> the cable connectors so students would not mess with them. We also used
> jack blockout devices to prevent users from connecting to the wrong port
> (console).
>
>
>
> Hector Rios
>
> Louisiana State University
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Alan D Wang
> *Sent:* Thursday, January 25, 2018 8:19 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN]
>
>
>
> Thanks everyone for the ideas.  For those running Cisco AP1810W or AP1815W
> does anyone use the plastic spacer kits that Cisco sells as an accessory?
> If so, can anyone comment on the depth of one of these? I am curious to
> know if you could possibly modify the spacer by drilling a hole on one of
> the sides of the spacer kit and threading through a female-female bulk head
> style coupler for the cable tv connection.
>
>
>
> On Tue, Jan 23, 2018 at 4:12 PM, Richard Nedwich 
> wrote:
>
> Hi Alan,
>
> I am not certain if this would fit the bill, but in case it helps please
> see this link to the Ruckus C110 wall plate AP with a built-in DOCSIS cable
> modem.  Coax in, dual Ethernet ports out, plus 2x2:2 802.11ac Wave 2
> Wi-Fi.  Note: you will need a CMTS in the building.
>
> https://s3.amazonaws.com/ruckus-www/pdf/solution-briefs/sb-docsis-c110.pdf
>
> Designed for hospitality and multi-dwelling units such as residence halls.
>
> Hope that helps,
> Rich
>
>
> **
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/discuss.
>
>
>
>
>
> --
>
> Alan Wang
>
> Network Analyst
>
> Binghamton University
>
> aw...@binghamton.edu
>
>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> discuss.
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> discuss.
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at http://www.educause.edu/
> discuss.
>
>


-- 
Alan Wang
Network Analyst
Binghamton University
aw...@binghamton.edu

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Wall plate AP and Coax line sharing box

[Hart, Michael]

Hector, do you have a part number I could use for ordering these cable 
connector locks?

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hector J Rios
Sent: Tuesday, January 30, 2018 8:10 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wall plate AP and Coax line sharing box

We came up with a simple solution. See the attached pics. We used locks on the 
cable connectors so students would not mess with them. We also used jack 
blockout devices to prevent users from connecting to the wrong port (console).

Hector Rios
Louisiana State University

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Alan D Wang
Sent: Thursday, January 25, 2018 8:19 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN]

Thanks everyone for the ideas.  For those running Cisco AP1810W or AP1815W does 
anyone use the plastic spacer kits that Cisco sells as an accessory?  If so, 
can anyone comment on the depth of one of these? I am curious to know if you 
could possibly modify the spacer by drilling a hole on one of the sides of the 
spacer kit and threading through a female-female bulk head style coupler for 
the cable tv connection.

On Tue, Jan 23, 2018 at 4:12 PM, Richard Nedwich 
mailto:rich.nedw...@brocade.com>> wrote:
Hi Alan,

I am not certain if this would fit the bill, but in case it helps please see 
this link to the Ruckus C110 wall plate AP with a built-in DOCSIS cable modem.  
Coax in, dual Ethernet ports out, plus 2x2:2 802.11ac Wave 2 Wi-Fi.  Note: you 
will need a CMTS in the building.

https://s3.amazonaws.com/ruckus-www/pdf/solution-briefs/sb-docsis-c110.pdf

Designed for hospitality and multi-dwelling units such as residence halls.

Hope that helps,
Rich

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



--
Alan Wang
Network Analyst
Binghamton University
aw...@binghamton.edu

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Packetfence - Aruba Webauth

[Trinklein, Jason R]

Has anyone set up Packetfence webauth with Aruba for guest wireless access?

--
Jason Trinklein
Wireless Engineering Manager
College of Charleston
81 St. Philip Street | Office 311D | Charleston, SC 29403
trinkle...@cofc.edu | (843) 300–8009

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.