Re: [WIRELESS-LAN] IPv6 on wireless experiences?

2014-09-02 Thread Tristan Gulyas
Hi, Thanks for the heads-up! We use the same VLAN IDs in each different routed precinct for our wireless subnets. I saw this in the config guide: On the 7.4 release, the WLCs that have the same mobility group, same VLAN ID, and different IPv4 and IPv6 subnets, generate different IPv6 router

RE: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Eric T. Barnett
You are right, that command can cause some serious problems. The good news is that we moved to a Microsoft RADIUS server as a temporary check. It works great! I still need to wait until tomorrow morning for full peak, but during medium load today it worked perfectly. It wasn’t working well even

RE: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Tony Kord
Hi Yu: We went with option 2, setting up multiple server groups, aaa profiles, and virtual-ap profiles. As Tim says in that post, it's a pain to setup, but it works. But in the end, you get some load balancing with failover capability to the other server(s). Good luck! Tony -Original Message

RE: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Wang, Yu
Tony, Thanks for the information. Which option did you go with, 1) or 2)? We are running 6.3.1.9. I'll check with our wireless team on the 6.4 code. Yu Wang Network Architect Information Technology Services The Florida State University 850-645-6810 yu.w...@fsu.edu

RE: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Tony Kord
Hi Yu: >> Since there is no load balancing on aruba controllers (I was told it's coming this fall), all controllers send auth requests to one radius server. With the current Aruba OS, there is a way to send the requests from each controller to a different radius server. See this post: http://com

Re: [WIRELESS-LAN] IPv6 on wireless experiences?

2014-09-02 Thread Bruce Curtis
On Sep 1, 2014, at 1:20 AM, Tristan Gulyas wrote: > Hi all, > > We’re about to enable IPv6 on our wireless network (Cisco WiSM2, engineering > release which looks mostly like 7.6MR2) and we’d like to know if anyone has > seen any big show stoppers or if there’s anything we should be aware of.

Re: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Tony Juarez
Yu, What type of change did you make to the F5¹s we are seeing a similar issues with are Cisco wireless and F5 and LDAP authentications Tony Juarez, CCNP Wireless Network Engineer II IT Services 773-702-5592 (Office) 773-230-7923 (Cell) On 8/27/14, 2:15 PM, "Wang, Yu" wrote: >Where are al

RE: Authentication failures at peak times (Cisco)

2014-09-02 Thread Wang, Yu
Brandon, We made following major changes over the summer: 1. changed F5 from 'bandwidth savings over WAN' load balancing to performance load balancing; 2. Use read-only LDAP servers; 3. moved radius servers to the same subnet that wireless controllers are in; 4. added a new 7240 wireless control

RE: [WIRELESS-LAN] IPv6 on wireless experiences?

2014-09-02 Thread Hector J Rios
Tristan, Pay attention to the config guide on the section that talks about IPv6 Mobility. We had an issue in that past where we had three wireless core locations, and at each location we had the same VLAN ID, but s different subnet. This caused an issue where the controllers would forward RA's

Re: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Jeffrey Sessler
I don't know if it was mentioned here, but you may want to look at this if you have defined more than on raidus server on your controlers: config radius aggressive-failover disable This turns off the aggressive failover of RADIUS - this prevents the situation where a unknown user attempts to co

Re: IPv6 on wireless experiences?

2014-09-02 Thread Rick Coloccia, Jr.
+1. Really, exactly the same sentiment. (5508's with 7.6MR2) On 9/2/2014 8:44 AM, Jerry Bucklaew wrote: On 09/01/2014 02:20 AM, Tristan Gulyas wrote: Hi all, We’re about to enable IPv6 on our wireless network (Cisco WiSM2, engineering release which looks mostly like 7.6MR2) and we’d like

Re: [WIRELESS-LAN] IPv6 on wireless experiences?

2014-09-02 Thread Jerry Bucklaew
On 09/01/2014 02:20 AM, Tristan Gulyas wrote: Hi all, We’re about to enable IPv6 on our wireless network (Cisco WiSM2, engineering release which looks mostly like 7.6MR2) and we’d like to know if anyone has seen any big show stoppers or if there’s anything we should be aware of. Our limited

RE: [WIRELESS-LAN] Authentication failures at peak times (Cisco)

2014-09-02 Thread Case, Brandon J
Don, Yep the Timeout Requests counter on the controllers ticks up for the particular RADIUS server they’re talking to. I’ve also noticed the Pending Request timer increase at times but eventually it drops back to 0 when usage levels go down. Which vendor supported RADIUS appliances did you swit