RE: [WIRELESS-LAN] Apple TV/Apple Configurator
Thanks for the link, I’ve never seen that screen. Kanan Simpson Network Services Engineer Valdosta State University Dept: 229-333-7396 Office: 229-333-5740 Helpdesk: 229-245-4357 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Trenton Hurt Sent: Friday, May 19, 2017 3:39 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Apple TV/Apple Configurator The time issue was fixed couple software versions ago https://community.arubanetworks.com/t5/Technology-Blog/Apple-TV-EAP-PEAP-Configuration-Clock-Fix/ba-p/143391 I still would always push to have these wired for performance and stability. I've followed these instructions to build profiles. Of course you have to use your certs. You can get the required certs off a Mac that has successfully connected to the dot1X network. Just find them in keychain access and export them. http://technology.pitt.edu/support/connecting-your-apple-tv-to-wireless-pittnet On Fri, May 19, 2017 at 2:59 PM Kanan E Simpson mailto:kesim...@valdosta.edu>> wrote: Bruce, I’ve successfully built a wireless profile for Apple TVs using 802.1X (WPA2/AES) and PEAP/MSChapv2 in my lab. It worked fine until I removed the power of the Apple TV. Once power is removed, the Apple TV loses its time and can no longer validate certificates. You must then connect the Apple TV to an open or PSK network to get the time corrected before another successful 802.1X connection. Because of this, we will not connect the Apple TV to our dot1X wireless network. We connect them via guest/open WLAN and move them to another L3 network on the back end. Kanan Simpson Network Services Engineer Valdosta State University From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Entwistle, Bruce Sent: Friday, May 19, 2017 1:32 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Apple TV/Apple Configurator I am currently attempting to use the Apple configurator to build a wireless profile to be loaded to an Apple TV which will then make an authenticated connection to our wireless network. We are currently using our ClearPass server to authenticate this connection. I have utilized many different combinations of WPA/WPA2 authentication options along with different combinations of trusted certificates. These included the certificate from the authentication server(ClearPass) along with the associated root and intermediate certs. However the connection still fails with the following error message, Radius EAP: Client doesn’t support configured EAP methods. I was looking to see if anyone has been successful using the Apple configurator to build such a profile which contains the SSID, username, password, security type and certificates then pushing it to the Apple TV so it can connect to the wireless network. Thank you Bruce Entwistle Network Manager University of Redlands ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: Apple TV/Apple Configurator
The Apple Configurator requires an OS X computer and we are primarily Windows. We use ClearPass mac address authentication on our open Aruba Networks gaming SSID for Apple TVs. Even though the clients are on our secure SSID, the AirGroup software-defined networking connects the devices so they can communicate. Bruce Osborne Senior Network Engineer Network Operations - Wireless (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Entwistle, Bruce [mailto:bruce_entwis...@redlands.edu] Sent: Friday, May 19, 2017 1:32 PM Subject: Apple TV/Apple Configurator I am currently attempting to use the Apple configurator to build a wireless profile to be loaded to an Apple TV which will then make an authenticated connection to our wireless network. We are currently using our ClearPass server to authenticate this connection. I have utilized many different combinations of WPA/WPA2 authentication options along with different combinations of trusted certificates. These included the certificate from the authentication server(ClearPass) along with the associated root and intermediate certs. However the connection still fails with the following error message, Radius EAP: Client doesn't support configured EAP methods. I was looking to see if anyone has been successful using the Apple configurator to build such a profile which contains the SSID, username, password, security type and certificates then pushing it to the Apple TV so it can connect to the wireless network. Thank you Bruce Entwistle Network Manager University of Redlands ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
Re: [WIRELESS-LAN] Apple TV/Apple Configurator
The time issue was fixed couple software versions ago https://community.arubanetworks.com/t5/Technology-Blog/Apple-TV-EAP-PEAP-Configuration-Clock-Fix/ba-p/143391 I still would always push to have these wired for performance and stability. I've followed these instructions to build profiles. Of course you have to use your certs. You can get the required certs off a Mac that has successfully connected to the dot1X network. Just find them in keychain access and export them. http://technology.pitt.edu/support/connecting-your-apple-tv-to-wireless-pittnet On Fri, May 19, 2017 at 2:59 PM Kanan E Simpson wrote: > Bruce, > > > > I’ve successfully built a wireless profile for Apple TVs using 802.1X > (WPA2/AES) and PEAP/MSChapv2 in my lab. It worked fine until I removed the > power of the Apple TV. Once power is removed, the Apple TV loses its time > and can no longer validate certificates. You must then connect the Apple TV > to an open or PSK network to get the time corrected before another > successful 802.1X connection. > > > > Because of this, we will not connect the Apple TV to our dot1X wireless > network. We connect them via guest/open WLAN and move them to another L3 > network on the back end. > > > > > > *Kanan Simpson* > > Network Services Engineer > > Valdosta State University > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Entwistle, Bruce > *Sent:* Friday, May 19, 2017 1:32 PM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* [WIRELESS-LAN] Apple TV/Apple Configurator > > > > I am currently attempting to use the Apple configurator to build a > wireless profile to be loaded to an Apple TV which will then make an > authenticated connection to our wireless network. We are currently using > our ClearPass server to authenticate this connection. I have utilized > many different combinations of WPA/WPA2 authentication options along with > different combinations of trusted certificates. These included the > certificate from the authentication server(ClearPass) along with the > associated root and intermediate certs. However the connection still fails > with the following error message, Radius EAP: Client doesn’t support > configured EAP methods. I was looking to see if anyone has been successful > using the Apple configurator to build such a profile which contains the > SSID, username, password, security type and certificates then pushing it to > the Apple TV so it can connect to the wireless network. > > > > Thank you > > Bruce Entwistle > > Network Manager > > University of Redlands > > > > > > > > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: Apple TV/Apple Configurator
Bruce, I've successfully built a wireless profile for Apple TVs using 802.1X (WPA2/AES) and PEAP/MSChapv2 in my lab. It worked fine until I removed the power of the Apple TV. Once power is removed, the Apple TV loses its time and can no longer validate certificates. You must then connect the Apple TV to an open or PSK network to get the time corrected before another successful 802.1X connection. Because of this, we will not connect the Apple TV to our dot1X wireless network. We connect them via guest/open WLAN and move them to another L3 network on the back end. Kanan Simpson Network Services Engineer Valdosta State University From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Entwistle, Bruce Sent: Friday, May 19, 2017 1:32 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Apple TV/Apple Configurator I am currently attempting to use the Apple configurator to build a wireless profile to be loaded to an Apple TV which will then make an authenticated connection to our wireless network. We are currently using our ClearPass server to authenticate this connection. I have utilized many different combinations of WPA/WPA2 authentication options along with different combinations of trusted certificates. These included the certificate from the authentication server(ClearPass) along with the associated root and intermediate certs. However the connection still fails with the following error message, Radius EAP: Client doesn't support configured EAP methods. I was looking to see if anyone has been successful using the Apple configurator to build such a profile which contains the SSID, username, password, security type and certificates then pushing it to the Apple TV so it can connect to the wireless network. Thank you Bruce Entwistle Network Manager University of Redlands ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
Apple TV/Apple Configurator
I am currently attempting to use the Apple configurator to build a wireless profile to be loaded to an Apple TV which will then make an authenticated connection to our wireless network. We are currently using our ClearPass server to authenticate this connection. I have utilized many different combinations of WPA/WPA2 authentication options along with different combinations of trusted certificates. These included the certificate from the authentication server(ClearPass) along with the associated root and intermediate certs. However the connection still fails with the following error message, Radius EAP: Client doesn't support configured EAP methods. I was looking to see if anyone has been successful using the Apple configurator to build such a profile which contains the SSID, username, password, security type and certificates then pushing it to the Apple TV so it can connect to the wireless network. Thank you Bruce Entwistle Network Manager University of Redlands ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
