RE: Apple iOS 8 WiFi Scanning Returns

2014-09-24 Thread Eric T. Barnett
This works in iOS 7 as well, but I don't see 5GHz on my 4S. Eric Barnett Wireless Administrator Information and Technology Services Arkansas State University 870 680 4243 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of

Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread Turner, Ryan H
We've had complaints for a while that would come in sporadically, but didn't pay them much mind as it was always difficult to reproduce. The complaint was with Apple devices (normally OSX) that would just drop connectivity and then reestablish moments later. People would complain that our

RE: Apple iOS 8 WiFi Scanning Returns

2014-09-24 Thread trent . hurt
The 4s is 2.4GHz only. The iphone 5 and up are 5GHz capable From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric T. Barnett Sent: Wednesday, September 24, 2014 10:20 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re:

RE: Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread Wang, Yu
I echo what Ryan described here. Ryan alerted me of this issue and after changing user logging level to notification on our Aruba controllers, we got quite a number of Ptk Challenge Failed in our logs. We have both OKC and Validate PMKID enabled and have not changed any of the settings as I saw

Re: [WIRELESS-LAN] Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread Kevin Patrick Grattan
We’ve had some success with this problem on our WPA2-Enterprise SSID by configuring the laptop to always trust the wireless certificate. This setting can be found in your keychain. Look for your wireless cert in keychain access and set the trust setting to “Always Trust”. This isn’t the

Re: [WIRELESS-LAN] Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread djohnson
Likewise, I see the same Ptk Challenge Failed errors show up in logs. Sometimes I've seen it when a client's having temporary issues, other times I'll see it when a client is roaming rapidly. As an example, when someone is walking across campus with a smartphone in their pocket (which never

RE: [WIRELESS-LAN] Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread Turner, Ryan H
Well, it's one of those issues that I think most users don't bother to take the time to actually report. Why I believe this is a bug is that it seems to only happen to Apple devices. When I search the logs, it ALWAYS ties back to an Apple device. I am sure I'll find something different

802.1x Certificates for RADIUS

2014-09-24 Thread Jason Wang
I'm curious which CA's you are using for your RADIUS servers for your 802.1x implementations. We are looking to renew our cert (coming up on expiration), which is signed by one of the Thawte CA's that is being deprecated. At the time we selected that CA because it was widely supported

Re: [WIRELESS-LAN] 802.1x Certificates for RADIUS

2014-09-24 Thread Julian Y Koh
On Wed Sep 24 2014 15:07:33 CDT, Jason Wang j.w...@its.utexas.edu wrote: I'm curious which CA's you are using for your RADIUS servers for your 802.1x implementations. We use the Comodo certs available via InCommon. -- Julian Y. Koh Acting Associate Director, Telecommunications and Network

RE: [WIRELESS-LAN] 802.1x Certificates for RADIUS

2014-09-24 Thread McClintic, Thomas
AddTrust via InCommon -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh Sent: Wednesday, September 24, 2014 3:09 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN]

RE: [WIRELESS-LAN] 802.1x Certificates for RADIUS

2014-09-24 Thread Turner, Ryan H
We use our own internal certificate authority. We WERE using a public CA. Ultimately we decided that if used our own CA, we were in total control, and not subject to changes and policies made on a public CA. Since people have to onboard with cloudpath to access our secure SSID, we can load

Re: 802.1x Certificates for RADIUS

2014-09-24 Thread Jason Healy
On Sep 24, 2014, at 4:14 PM, Turner, Ryan H rhtur...@email.unc.edu wrote: We use our own internal certificate authority. We WERE using a public CA. Ultimately we decided that if used our own CA, we were in total control, and not subject to changes and policies made on a public CA. We also

RE: [WIRELESS-LAN] Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread Jason Cook
Cisco here but we have had plenty of issues with Mac OS. Spent some time with TAC recently seeing what we can do about it with no real fix. Our EAP timers had gotten a bit out of whack, and adjusting them made improvements for some clients, but ultimately OSX clients just don't seem to like

Re: [WIRELESS-LAN] Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread djohnson
Apple resolved that issue. Simply configure each of your APs to broadcast its own unique SSID, and bam, no more roaming delays. :)I can attest to MacOS roaming issues. My own 2014 Air exhibited the same 10+ second roaming delay. After explicitly trusting the dot1x certs in keychain, roaming

Re: [WIRELESS-LAN] Apple devices dropping on WPA2-PSK and WPA2-Ent SSIDs Aruba 6.3

2014-09-24 Thread Tristan Gulyas
Hi, Can confirm the ten second roaming delay with 802.1X auth on OSX and it seems to be during re-auth. I'll have a play with tweaking certificate trusts. Cheers, Tristan On 25 Sep 2014, at 2:03 pm, Derek Johnson djohn...@fhsu.edu wrote: Apple resolved that issue. Simply configure each of