Samsung S8 DHCP Failure

[King, Ronald A.]

Anyone else having an issue with connecting to some Samsung Android devices to 
their wireless environment?

We have tested and confirmed that a Samsung S4 authenticates and acquires a 
DHCP address on our Aruba AOS 8 network and Aruba 6 network (in process of mass 
conversion to new AOS). However, for a Samsung S8, we see that the AAA 
authentication succeeds, but, the DHCP response from the DHCP server is either 
not received or not applied. We have confirmed the DHCP server is sending it. 
We are working with Aruba to see what the issue is, but, we have not upgraded 
the APs or code on the AOS6 network, and it doesn't matter the AP. Yes, it was 
working before. The only change was an Android update to the Samsung S8.  We 
have Googled this and found a couple of instances, including one from on this 
Listserver from March 2017.

Thanks,
Ron

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu
www.nsu.edu
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [EXT] [WIRELESS-LAN] Samsung S8 DHCP Failure

[King, Ronald A.]

AOS 8 works for us. Its only on 6.4.  Version is 9 updated August 25.  Samsung 
support said it is a Google issue...

Ronald King
Chief Information Security Officer
 
Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu
www.nsu.edu
@NSUCISO (Twitter)



-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Anderson, Charles R
Sent: Wednesday, September 11, 2019 1:41 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [EXT] [WIRELESS-LAN] Samsung S8 DHCP Failure

I'm not having any issues with my Galaxy S8 on our AOS 8 network, EAP-TLS and 
DHCP.  The S8 is running the latest Verizon update with Android Pie.  What the 
the full Android version you are running?

On Wed, Sep 11, 2019 at 05:28:50PM +, King, Ronald A. wrote:
> Anyone else having an issue with connecting to some Samsung Android devices 
> to their wireless environment?
> 
> We have tested and confirmed that a Samsung S4 authenticates and acquires a 
> DHCP address on our Aruba AOS 8 network and Aruba 6 network (in process of 
> mass conversion to new AOS). However, for a Samsung S8, we see that the AAA 
> authentication succeeds, but, the DHCP response from the DHCP server is 
> either not received or not applied. We have confirmed the DHCP server is 
> sending it. We are working with Aruba to see what the issue is, but, we have 
> not upgraded the APs or code on the AOS6 network, and it doesn't matter the 
> AP. Yes, it was working before. The only change was an Android update to the 
> Samsung S8.  We have Googled this and found a couple of instances, including 
> one from on this Listserver from March 2017.
> 
> Thanks,
> Ron
> 
> Ronald King
> Chief Information Security Officer
> 
> Office of Information Technology
> (757) 823-2916 (Office)
> rak...@nsu.edu<mailto:rak...@nsu.edu>
> www.nsu.edu
> @NSUCISO (Twitter)
> [NSU_logo_horiz_tag_4c - Smaller]

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Samsung S8 DHCP Failure

[King, Ronald A.]

Thanks. We will give it a try.

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu<mailto:rak...@nsu.edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Floyd, Brad
Sent: Wednesday, September 11, 2019 2:59 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Samsung S8 DHCP Failure

Ron,
We had a few issues with Android somewhere around the Oreo or Pie updates where 
devices that did not (by default) trust our CA (InCommon) and were not able to 
connect to our 802.1X network. On those devices, we had to manually install the 
root certificate. Like I said, it was only a few devices that had this issue. 
Other than that, we haven't had major issues with Samsung devices.
Thanks,
Brad

From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of King, Ronald A.
Sent: Wednesday, September 11, 2019 12:29 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] Samsung S8 DHCP Failure

Anyone else having an issue with connecting to some Samsung Android devices to 
their wireless environment?

We have tested and confirmed that a Samsung S4 authenticates and acquires a 
DHCP address on our Aruba AOS 8 network and Aruba 6 network (in process of mass 
conversion to new AOS). However, for a Samsung S8, we see that the AAA 
authentication succeeds, but, the DHCP response from the DHCP server is either 
not received or not applied. We have confirmed the DHCP server is sending it. 
We are working with Aruba to see what the issue is, but, we have not upgraded 
the APs or code on the AOS6 network, and it doesn't matter the AP. Yes, it was 
working before. The only change was an Android update to the Samsung S8.  We 
have Googled this and found a couple of instances, including one from on this 
Listserver from March 2017.

Thanks,
Ron

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu<mailto:rak...@nsu.edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Samsung S8 DHCP Failure

[King, Ronald A.]

Thanks for the advice and help. We have tried importing the Root cert for WiFi 
with no luck. However we did find something interesting using packet captures. 
For AOS 6, during the DHCP negotiation, we found that both the discover and 
request messages from the S8 are received by the DHCP server but have "don't 
fragment" set to 1. The DHCP server is sending both the offer and ack with 
"don't fragment" set to 0, but the controller doesn't send the ack to the S8. 
For the S4, all messages have "don't fragment" is set to 0. As for AOS 8.5, the 
option "don't fragment" is set the same as above with all messages being sent 
and received by both devices, controller and DHCP server.

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu<mailto:rak...@nsu.edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of King, Ronald A.
Sent: Wednesday, September 11, 2019 3:02 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Samsung S8 DHCP Failure

Thanks. We will give it a try.

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu<mailto:rak...@nsu.edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Floyd, Brad
Sent: Wednesday, September 11, 2019 2:59 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Samsung S8 DHCP Failure

Ron,
We had a few issues with Android somewhere around the Oreo or Pie updates where 
devices that did not (by default) trust our CA (InCommon) and were not able to 
connect to our 802.1X network. On those devices, we had to manually install the 
root certificate. Like I said, it was only a few devices that had this issue. 
Other than that, we haven't had major issues with Samsung devices.
Thanks,
Brad

From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of King, Ronald A.
Sent: Wednesday, September 11, 2019 12:29 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] Samsung S8 DHCP Failure

Anyone else having an issue with connecting to some Samsung Android devices to 
their wireless environment?

We have tested and confirmed that a Samsung S4 authenticates and acquires a 
DHCP address on our Aruba AOS 8 network and Aruba 6 network (in process of mass 
conversion to new AOS). However, for a Samsung S8, we see that the AAA 
authentication succeeds, but, the DHCP response from the DHCP server is either 
not received or not applied. We have confirmed the DHCP server is sending it. 
We are working with Aruba to see what the issue is, but, we have not upgraded 
the APs or code on the AOS6 network, and it doesn't matter the AP. Yes, it was 
working before. The only change was an Android update to the Samsung S8.  We 
have Googled this and found a couple of instances, including one from on this 
Listserver from March 2017.

Thanks,
Ron

Ronald King
Chief Information Security Officer

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu<mailto:rak...@nsu.edu>
www.nsu.edu<http://www.nsu.edu/>
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [EXT] [WIRELESS-LAN] Aruba Hospitality Access Points

[King, Ronald A.]

Mike and the Group,

For those of you that have deployed Aruba hospitality APs to every dorm room, 
are there any concerns of interference? Do you shut down the 2.4 GHz band on 
some of the APs? If so, how did you determine which ones to turn it off?

Thanks,
Ron

Ronald King
Director of Technical Services and OIT Security

Office of Information Technology
(757) 823-2916 (Office)
rak...@nsu.edu
www.nsu.edu
@NSUCISO (Twitter)
[NSU_logo_horiz_tag_4c - Smaller]

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Michael Cole
Sent: Tuesday, March 3, 2020 4:32 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [EXT] [WIRELESS-LAN] Aruba Hospitality Access Points

We’ve used a lot more of the hospitality models than standard access 
points, for us, 225’s.   We try to put one in each student’s room for a double 
or a single.  It gives their 10 or so devices a home, and provides wired 
interfaces if they want/ need to use them.  This also provides decent coverage 
is one goes down in a room, the rooms around them pick up the traffic.  The 
failure rate over the past 5 years has been very minimal, and we’ve been very 
happy with them, vice putting one access point in an area for a suite, or 4-6 
rooms devices to connect to it.  We getting ready to do a refresh of access 
points and will put even more of the hospitality units in, in houses/and a Dorm 
we didn’t put them in on the original install.

Mike



Michael A. Cole
Manager of Network Operations
Information Technology Services
Carlson Hall, 950 Main st
Worcester, MA  01610
(508) 793 7772



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Ronald Loneker
Sent: Tuesday, March 03, 2020 4:26 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [EXT] [WIRELESS-LAN] Aruba Hospitality Access Points

Hi Everyone,

I've been following some of the various discussions where people have mentioned 
using Aruba's hospitality access points and I e-mailed our vendor who we use 
about them to compare them with the IAP 215 units we deployed a few years ago 
in our residence halls.

I didn't seem to get a good explanation so now I'm asking this group.

For those who have deployed the hospitality access points, how do they differ 
from an Aruba you would put in an academic/administrative building?

Do you find you are putting more of them into a residence hall?

I'd toy with the idea of possibly swapping the IAP-215 units with hospitality 
units if the numbers were similar and we could move the IAP-215 units into one 
of our buildings with legacy Arubas although from what I think I'm reading, it 
looks like some of you are putting more into the residence halls than we have 
put (it's definitely not one access point for every one or two rooms based on 
the heat maps that were done).

Any thoughts would be appreciated.

Ron Loneker, Jr.
Director, IT Special Projects
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rlone...@cse.edu








**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community