RE: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

[Johnson, Christopher]

Mike,

Very good idea – just occurred to me about that as we’ve had similar things in 
the past. The individual was stuck on the setup process – (couldn’t look up any 
information). That is worth a shot. Thank you!

Christopher Johnson
Wireless Network Engineer
AT Infrastructure Operations & Networking (ION)
Illinois State University
(309) 438-8444
Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook and 
Twitter
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike Atkins
Sent: Thursday, February 8, 2018 4:26 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

I have seen dot1x issues with Android tablets that do not have the lock enabled 
or have it removed after Wi-Fi is configured and working.  I know our onboard 
utility notifies the user that Screen Lock/Pin is required.  Does the 802.1x 
option show up if screen lock is enabled?






Mike Atkins
Network Engineer
Office of Information Technology
University of Notre Dame

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Johnson, Christopher
Sent: Wednesday, February 07, 2018 10:49 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

Good Morning,

I was curious if anyone had any of the newer Amazon Fire tablets and could 
confirm something for me? Our support center contacted me in regards to an 
issue with connecting to our secure network (they were only able to see our 
“open network”) which matches with our some newer devices will not even display 
networks that they are unable to connect to – such as WPA2 Enterprise. I had 
suggested that they attempt to manually create the profile and was disappointed 
when they confirmed that “802.1x” was no longer an option on the list of 
security types.

That’s unfortunate that their earlier generations had support, and it appears 
to have been removed. It’s been a few years since I’ve seen one, so no idea 
which generation this occurred (Fire 7 is their 7th generation). I just know 
the 1st and 2nd generation could connect since I got to be the one to figure it 
out all those years ago.

Christopher Johnson
Wireless Network Engineer
AT Infrastructure Operations & Networking (ION)
Illinois State University
(309) 438-8444
Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook and 
Twitter


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

[Mike Atkins]

I have seen dot1x issues with Android tablets that do not have the lock
enabled or have it removed after Wi-Fi is configured and working.  I know
our onboard utility notifies the user that Screen Lock/Pin is required.
Does the 802.1x option show up if screen lock is enabled?













*Mike Atkins *

Network Engineer

Office of Information Technology

University of Notre Dame



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Johnson, Christopher
*Sent:* Wednesday, February 07, 2018 10:49 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?



Good Morning,



I was curious if anyone had any of the newer Amazon Fire tablets and could
confirm something for me? Our support center contacted me in regards to an
issue with connecting to our secure network (they were only able to see our
“open network”) which matches with our some newer devices will not even
display networks that they are unable to connect to – such as WPA2
Enterprise. I had suggested that they attempt to manually create the
profile and was disappointed when they confirmed that “802.1x” was no
longer an option on the list of security types.



That’s unfortunate that their earlier generations had support, and it
appears to have been removed. It’s been a few years since I’ve seen one, so
no idea which generation this occurred (Fire 7 is their 7th generation). I
just know the 1st and 2nd generation could connect since I got to be the
one to figure it out all those years ago.



*Christopher Johnson*

Wireless Network Engineer

AT Infrastructure Operations & Networking (ION)

Illinois State University

(309) 438-8444

Stay connected with ISU IT news and tips with @ISU IT Help on Facebook
 and Twitter






** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

[Johnson, Christopher]

I stopped by a Best Buy and unfortunately the fire tablets were hard-locked 
into a “demo mode”. I almost thought again maybe it was user error when I 
checked out another 7” tablet – if held horizontally (the 802.1x) manual option 
is completely hidden (screen shot below) – at least at that point I would have 
started evaluating data rates/bands etc for why auto-scans weren’t working. 
Back to the drawing board for me though.

Ian – If you host the certificate on a web share and navigate to the full path 
of the certificate in a browser on the Fire tablet, newer Android devices tend 
to recognize the file type and prompt whether you want to install the 
certificate. That might be worth a try if haven’t already.

[cid:image001.jpg@01D3A0CB.60640810]

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joseph Bernard
Sent: Thursday, February 8, 2018 9:54 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

Unfortunately, I have no idea how to install the CA certificate.  I’m not much 
of an Android user.

Thanks,
Joseph B.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Ian McDonald 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Wednesday, February 7, 2018 at 11:29 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

Hi Joseph,

Can you install your CA certificate, and actually get the device to verify it?

Best Regards,

--
ian
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joseph Bernard
Sent: 07 February 2018 16:27
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: {Disarmed} Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support 
Dropped?

We use PEAP.

Thanks,
Joseph B.

Sent from my iPhone

On Feb 7, 2018, at 11:23 AM, Michael Dickson 
> wrote:
Joseph B.

Which EAP type did you use to Connecticut?

Mike

On Feb 7, 2018, at 10:52 AM, Joseph Bernard 
> wrote:
I have the latest 10" Fire tablet on our eduroam which uses 802.1x

Thanks,
Joseph B.

Sent from my iPhone

On Feb 7, 2018, at 10:49 AM, Johnson, Christopher 
> wrote:
Good Morning,

I was curious if anyone had any of the newer Amazon Fire tablets and could 
confirm something for me? Our support center contacted me in regards to an 
issue with connecting to our secure network (they were only able to see our 
“open network”) which matches with our some newer devices will not even display 
networks that they are unable to connect to – such as WPA2 Enterprise. I had 
suggested that they attempt to manually create the profile and was disappointed 
when they confirmed that “802.1x” was no longer an option on the list of 
security types.

That’s unfortunate that their earlier generations had support, and it appears 
to have been removed. It’s been a few years since I’ve seen one, so no idea 
which generation this occurred (Fire 7 is their 7th generation). I just know 
the 1st and 2nd generation could connect since I got to be the one to figure it 
out all those years ago.

Christopher Johnson
Wireless Network Engineer
AT Infrastructure Operations & Networking (ION)
Illinois State University
(309) 438-8444
Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook
 and 
Twitter


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at MailScanner has detected a 
possible fraud attempt from "urldefense.proofpoint.com" claiming to be 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at MailScanner has detected a 
possible fraud attempt from "urldefense.proofpoint.com" claiming to be 

Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

[Joseph Bernard]

Unfortunately, I have no idea how to install the CA certificate.  I’m not much 
of an Android user.

Thanks,
Joseph B.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Ian McDonald 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Wednesday, February 7, 2018 at 11:29 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support Dropped?

Hi Joseph,

Can you install your CA certificate, and actually get the device to verify it?

Best Regards,

--
ian
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joseph Bernard
Sent: 07 February 2018 16:27
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: {Disarmed} Re: [WIRELESS-LAN] Amazon Fire Tablet Line - 802.1x Support 
Dropped?

We use PEAP.

Thanks,
Joseph B.

Sent from my iPhone

On Feb 7, 2018, at 11:23 AM, Michael Dickson 
> wrote:
Joseph B.

Which EAP type did you use to Connecticut?

Mike

On Feb 7, 2018, at 10:52 AM, Joseph Bernard 
> wrote:
I have the latest 10" Fire tablet on our eduroam which uses 802.1x

Thanks,
Joseph B.

Sent from my iPhone

On Feb 7, 2018, at 10:49 AM, Johnson, Christopher 
> wrote:
Good Morning,

I was curious if anyone had any of the newer Amazon Fire tablets and could 
confirm something for me? Our support center contacted me in regards to an 
issue with connecting to our secure network (they were only able to see our 
“open network”) which matches with our some newer devices will not even display 
networks that they are unable to connect to – such as WPA2 Enterprise. I had 
suggested that they attempt to manually create the profile and was disappointed 
when they confirmed that “802.1x” was no longer an option on the list of 
security types.

That’s unfortunate that their earlier generations had support, and it appears 
to have been removed. It’s been a few years since I’ve seen one, so no idea 
which generation this occurred (Fire 7 is their 7th generation). I just know 
the 1st and 2nd generation could connect since I got to be the one to figure it 
out all those years ago.

Christopher Johnson
Wireless Network Engineer
AT Infrastructure Operations & Networking (ION)
Illinois State University
(309) 438-8444
Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook
 and 
Twitter


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at MailScanner has detected a 
possible fraud attempt from "urldefense.proofpoint.com" claiming to be 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at MailScanner has detected a 
possible fraud attempt from "urldefense.proofpoint.com" claiming to be 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at MailScanner has detected a 
possible fraud attempt from "urldefense.proofpoint.com" claiming to be 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 

RE: WLC Fails to catalog google services in AVC profile

[Lee H Badman]

We also hit this on early 8.2- any Google services ground to a halt. We also 
had other AVC issues that a lot of hours were put into. At this point, we have 
lost confidence in being able to safely use AVC in our environment, FWIW. 

Lee Badman | Network Architect 

Certified Wireless Network Expert (#200)
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hector J Rios
Sent: Thursday, February 08, 2018 10:38 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] WLC Fails to catalog google services in AVC profile

We got hit with this bug. Essentially, AVC would treat google services as bit 
torrent. We ended up having to remove the bit torrent application on our AVC 
profile. The link below mentions it affects 8.3, but we experienced this on 
8.2.161.0.  We also tried the suggested workaround and it did not work. We 
continue working with CiscoTAC. If you suspect you are having this issue, on 
your controller go to MONITOR -> Clients -> pick a client and select AVC 
statistics. By looking at the application stats and percentages you can get an 
idea as to how well your AVC profile is working. 

Never a boring day in our world, right? Good luck!

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf88246/?referring_site=bugquickviewredir

Hector Rios
Louisiana State University

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

WLC Fails to catalog google services in AVC profile

[Hector J Rios]

We got hit with this bug. Essentially, AVC would treat google services as bit 
torrent. We ended up having to remove the bit torrent application on our AVC 
profile. The link below mentions it affects 8.3, but we experienced this on 
8.2.161.0.  We also tried the suggested workaround and it did not work. We 
continue working with CiscoTAC. If you suspect you are having this issue, on 
your controller go to MONITOR -> Clients -> pick a client and select AVC 
statistics. By looking at the application stats and percentages you can get an 
idea as to how well your AVC profile is working. 

Never a boring day in our world, right? Good luck!

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvf88246/?referring_site=bugquickviewredir

Hector Rios
Louisiana State University

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.