RE: [WIRELESS-LAN] WLC 8.10.121 Deferred
Rolling back to 8.10.113.0 fixed the issue. Cisco gave us a bug ID of CSCvt38486: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvt38486 -Original Message- From: Paul Smith Sent: Tuesday, June 30, 2020 10:52 AM To: The EDUCAUSE Wireless Issues Community Group Listserv Subject: RE: [WIRELESS-LAN] WLC 8.10.121 Deferred Cisco is advising us to roll back to 8.10.113. I'll update when we've had a chance to do so and test. ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: [WIRELESS-LAN] WLC 8.10.121 Deferred
Cisco is advising us to roll back to 8.10.113. I'll update when we've had a chance to do so and test. ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Re: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred
We have WPA2 and WPA3 checked at this time. The only issue we have seen have been with Windows 10 devices. We have a handful of Android 10 devices that as far as I know are mainly Pixel and Samsung that have not had issues. No Mac issues that I have heard about. Jason Mallon Network Engineer, OIT The University of Alabama jemal...@ua.edu On Jun 26, 2020 5:12 PM, Paul Smith wrote: Q. Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. A. No. WPA2 + WPA3, but only WPA2 is checked. I will experiment with this when I get back to the office. The big problem is it's impacting Windows 10 PCs. We have not seen the issue with iPhones or Android devices, but there may not be enough of them on campus right now to say for sure (we don't have a summer semester). We do have Mac's having a similar issue, but forgetting the SSID and re-selecting fixes any auth issues we see there. Q. FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. A. One of the engineers mentioned another setting was different (sorry, can't remember which it was), but then he called me right back and said that wasn't the issue. I believe there was something he found in the logs based on the conversation, so hopefully we'll have more info soon. It might've been beacon related, but I could have that planted in my head from an earlier post. Q. There was a memory leak in the AP. Clients were not moving from authentication to the AP through the association phase on the controller.(these terms seem backwards to me backwards -- authentication is finding the AP, association is the 802.1x/radius part). The AP was not forwarding the association PDU to the controller (so the radius servers never got to see request let alone send a rejection). Rebooting the AP at the time /might/ fix the problem, but if a large number of clients immediately connected to the newly rebooted AP it ran out memory and became semi-operational again. I'd check the AP rather than the controller logs to see what it's reporting. A. There's not an AP model on the campus that we've found the behavior any different. In our office where we test, it's a 2802 ... but the issue exists with the 3800's and even the new 9100's as well. Q. Have you tested your Android devices with FT disabled? (instead of FT Adaptive). I would be curious to hear what results you get. A. We haven't seen any issues with Android devices (yet), but we don't have enough on the campus to say for sure. We did go Adaptive at the suggestion of Cisco and a Presidio engineer because of some issues with iPads. So, I wouldn't be keen to change that. ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: WLC 8.10.121 Deferred
Hello Dennis, You are hitting a bug CSCvu24770<https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu24770>: 1. Some Android 10 devices having issues connecting to wireless network * Some devices from Nokia, Sony and Xiaomi running Android 10 and having specific Qualcomm chipsets having issues * The issue is due to a firmware bug in some Qualcomm chipsets. i. Qaulcomm is fixing it per device model with new security patches (Mi10 received it with April 2020 security Patch).<https://community.cisco.com/t5/wireless-and-mobility/issues-connecting-android-10-to-cisco-me/m-p/4096960#M116570> - Cheers, Kind regards, Tariq Adnan | Senior Network Engineer From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Dennis Xu Sent: Saturday, 27 June 2020 2:45 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We have upgraded to 8.10.121.0 for one month. We have seen some devices not able to connect. When they run into this issue, we don’t see any association requests from the devices. There are something in the beacon which are not liked by the devices so they do not want to join. Not a lot of devices affected, mainly from Android 10 devices(from MI, Huawei and Nokia vendors). I also have two Windows 10 laptops having similar issue but they were able to connect after a wireless driver upgrade. We only have WPA2 checked for WLAN security. I opened a TAC case. The only workaround for Android 10 is to set FT to enable instead of Adaptive, but I did not accept that as I am afraid it will cause bigger problem for other devices. My TAC engineer said Cisco is working on a fix for this issue and ETA of the release is in July. Dennis From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Christina Klam Sent: Friday, June 26, 2020 12:19 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ith...@uoguelph.ca<mailto:ith...@uoguelph.ca> All, FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. Christina Klam Network Engineer Institute for Advanced Study 1 Einstein Dr Princeton, NJ 08540 (m) +1 609-751-7899 (o) +1 609-734-8154 ck...@ias.edu<mailto:ck...@ias.edu> From: "Mallon, Jason" mailto:jemal...@ua.edu>> To: "The EDUCAUSE Wireless Issues Community Group Listserv" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Sent: Friday, June 26, 2020 10:24:20 AM Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred Paul, Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. Jason Mallon Network Engineer III, OIT The University of Alabama <https://protect-au.mimecast.com/s/lnN_CROND2uBN0nRt95bgh?domain=ua.edu/>jemal...@ua.edu<mailto:jemal...@ua.edu> From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Paul Smith mailto:psmi...@marian.edu>> Sent: Friday, June 26, 2020 9:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu<mailto:psmi...@marian.edu> 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://protect-au.mimecast.com/s/v0k5CVARKgC9Mk05czoQIY?domain=educause.ed
Re: [WIRELESS-LAN] WLC 8.10.121 Deferred
Interesting. For us it’s like one particular area with one particular mode of AP we don’t have anyplace else. It magically went away again today too. Nick Sent from my iPhone > On Jun 26, 2020, at 5:12 PM, Paul Smith wrote: > > *EXTERNAL EMAIL* > > Q. Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 > and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue > as well primarily with Windows devices. I have not seen any issues with Macs > and authentication. > > A. No. WPA2 + WPA3, but only WPA2 is checked. I will experiment with this > when I get back to the office. The big problem is it's impacting Windows 10 > PCs. We have not seen the issue with iPhones or Android devices, but there > may not be enough of them on campus right now to say for sure (we don't have > a summer semester). We do have Mac's having a similar issue, but forgetting > the SSID and re-selecting fixes any auth issues we see there. > > Q. FYI: I noticed that "over-the-ds" setting changed when we upgraded from > 8.5 to 8.10.121.0. There may be other settings that changed as well. > > A. One of the engineers mentioned another setting was different (sorry, can't > remember which it was), but then he called me right back and said that wasn't > the issue. I believe there was something he found in the logs based on the > conversation, so hopefully we'll have more info soon. It might've been beacon > related, but I could have that planted in my head from an earlier post. > > Q. There was a memory leak in the AP. Clients were not moving from > authentication to the AP through the association phase on the > controller.(these terms seem backwards to me backwards -- authentication is > finding the AP, association is the 802.1x/radius part). The AP was not > forwarding the association PDU to the controller (so the radius servers never > got to see request let alone send a rejection). Rebooting the AP at the time > /might/ fix the problem, but if a large number of clients immediately > connected to the newly rebooted AP it ran out memory and became > semi-operational again. I'd check the AP rather than the controller logs to > see what it's reporting. > > A. There's not an AP model on the campus that we've found the behavior any > different. In our office where we test, it's a 2802 ... but the issue exists > with the 3800's and even the new 9100's as well. > > Q. Have you tested your Android devices with FT disabled? (instead of FT > Adaptive). I would be curious to hear what results you get. > > A. We haven't seen any issues with Android devices (yet), but we don't have > enough on the campus to say for sure. We did go Adaptive at the suggestion of > Cisco and a Presidio engineer because of some issues with iPads. So, I > wouldn't be keen to change that. > > ** > Replies to EDUCAUSE Community Group emails are sent to the entire community > list. If you want to reply only to the person who sent the message, copy and > paste their email address and forward the email reply. Additional > participation and subscription information can be found at > https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: [WIRELESS-LAN] WLC 8.10.121 Deferred
Q. Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. A. No. WPA2 + WPA3, but only WPA2 is checked. I will experiment with this when I get back to the office. The big problem is it's impacting Windows 10 PCs. We have not seen the issue with iPhones or Android devices, but there may not be enough of them on campus right now to say for sure (we don't have a summer semester). We do have Mac's having a similar issue, but forgetting the SSID and re-selecting fixes any auth issues we see there. Q. FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. A. One of the engineers mentioned another setting was different (sorry, can't remember which it was), but then he called me right back and said that wasn't the issue. I believe there was something he found in the logs based on the conversation, so hopefully we'll have more info soon. It might've been beacon related, but I could have that planted in my head from an earlier post. Q. There was a memory leak in the AP. Clients were not moving from authentication to the AP through the association phase on the controller.(these terms seem backwards to me backwards -- authentication is finding the AP, association is the 802.1x/radius part). The AP was not forwarding the association PDU to the controller (so the radius servers never got to see request let alone send a rejection). Rebooting the AP at the time /might/ fix the problem, but if a large number of clients immediately connected to the newly rebooted AP it ran out memory and became semi-operational again. I'd check the AP rather than the controller logs to see what it's reporting. A. There's not an AP model on the campus that we've found the behavior any different. In our office where we test, it's a 2802 ... but the issue exists with the 3800's and even the new 9100's as well. Q. Have you tested your Android devices with FT disabled? (instead of FT Adaptive). I would be curious to hear what results you get. A. We haven't seen any issues with Android devices (yet), but we don't have enough on the campus to say for sure. We did go Adaptive at the suggestion of Cisco and a Presidio engineer because of some issues with iPads. So, I wouldn't be keen to change that. ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: WLC 8.10.121 Deferred
Hi Hector, The FT disabled option does not help. The only way to get these Android devices connected is to use FT enabled. Dennis From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Rios, Hector J Sent: Friday, June 26, 2020 2:32 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ith...@uoguelph.ca<mailto:ith...@uoguelph.ca> Dennis, Have you tested your Android devices with FT disabled? (instead of FT Adaptive). I would be curious to hear what results you get. Thanks, Hector Rios, Wireless Network Architect The University of Texas at Austin From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Dennis Xu Sent: Friday, June 26, 2020 11:45 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We have upgraded to 8.10.121.0 for one month. We have seen some devices not able to connect. When they run into this issue, we don’t see any association requests from the devices. There are something in the beacon which are not liked by the devices so they do not want to join. Not a lot of devices affected, mainly from Android 10 devices(from MI, Huawei and Nokia vendors). I also have two Windows 10 laptops having similar issue but they were able to connect after a wireless driver upgrade. We only have WPA2 checked for WLAN security. I opened a TAC case. The only workaround for Android 10 is to set FT to enable instead of Adaptive, but I did not accept that as I am afraid it will cause bigger problem for other devices. My TAC engineer said Cisco is working on a fix for this issue and ETA of the release is in July. Dennis From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Christina Klam Sent: Friday, June 26, 2020 12:19 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ith...@uoguelph.ca<mailto:ith...@uoguelph.ca> All, FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. Christina Klam Network Engineer Institute for Advanced Study 1 Einstein Dr Princeton, NJ 08540 (m) +1 609-751-7899 (o) +1 609-734-8154 ck...@ias.edu<mailto:ck...@ias.edu> From: "Mallon, Jason" mailto:jemal...@ua.edu>> To: "The EDUCAUSE Wireless Issues Community Group Listserv" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Sent: Friday, June 26, 2020 10:24:20 AM Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred Paul, Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. Jason Mallon Network Engineer III, OIT The University of Alabama <https://www.ua.edu/>jemal...@ua.edu<mailto:jemal...@ua.edu> From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Paul Smith mailto:psmi...@marian.edu>> Sent: Friday, June 26, 2020 9:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu<mailto:psmi...@marian.edu> 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription
RE: WLC 8.10.121 Deferred
Dennis, Have you tested your Android devices with FT disabled? (instead of FT Adaptive). I would be curious to hear what results you get. Thanks, Hector Rios, Wireless Network Architect The University of Texas at Austin From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Dennis Xu Sent: Friday, June 26, 2020 11:45 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We have upgraded to 8.10.121.0 for one month. We have seen some devices not able to connect. When they run into this issue, we don’t see any association requests from the devices. There are something in the beacon which are not liked by the devices so they do not want to join. Not a lot of devices affected, mainly from Android 10 devices(from MI, Huawei and Nokia vendors). I also have two Windows 10 laptops having similar issue but they were able to connect after a wireless driver upgrade. We only have WPA2 checked for WLAN security. I opened a TAC case. The only workaround for Android 10 is to set FT to enable instead of Adaptive, but I did not accept that as I am afraid it will cause bigger problem for other devices. My TAC engineer said Cisco is working on a fix for this issue and ETA of the release is in July. Dennis From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Christina Klam Sent: Friday, June 26, 2020 12:19 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ith...@uoguelph.ca<mailto:ith...@uoguelph.ca> All, FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. Christina Klam Network Engineer Institute for Advanced Study 1 Einstein Dr Princeton, NJ 08540 (m) +1 609-751-7899 (o) +1 609-734-8154 ck...@ias.edu<mailto:ck...@ias.edu> From: "Mallon, Jason" mailto:jemal...@ua.edu>> To: "The EDUCAUSE Wireless Issues Community Group Listserv" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Sent: Friday, June 26, 2020 10:24:20 AM Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred Paul, Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. Jason Mallon Network Engineer III, OIT The University of Alabama <https://www.ua.edu/>jemal...@ua.edu<mailto:jemal...@ua.edu> From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Paul Smith mailto:psmi...@marian.edu>> Sent: Friday, June 26, 2020 9:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu<mailto:psmi...@marian.edu> 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community T
RE: WLC 8.10.121 Deferred
We had that problem with 350x series AP ~ 18 months ago. I'll have to dig out the exact version number number but it was on the 8.3/8.5 train. There was a memory leak in the AP. Clients were not moving from authentication to the AP through the association phase on the controller. (these terms seem backwards to me backwards -- authentication is finding the AP, association is the 802.1x/radius part) The AP was not forwarding the association PDU to the controller (so the radius servers never got to see request let alone send a rejection). Rebooting the AP at the time /might/ fix the problem, but if a large number of clients immediately connected to the newly rebooted AP it ran out memory and became semi-operational again. I'd check the AP rather than the controller logs to see what it's reporting. /RjL -Original Message- From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Paul Smith Sent: Friday, June 26, 2020 10:45 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: WLC 8.10.121 Deferred
We have upgraded to 8.10.121.0 for one month. We have seen some devices not able to connect. When they run into this issue, we don’t see any association requests from the devices. There are something in the beacon which are not liked by the devices so they do not want to join. Not a lot of devices affected, mainly from Android 10 devices(from MI, Huawei and Nokia vendors). I also have two Windows 10 laptops having similar issue but they were able to connect after a wireless driver upgrade. We only have WPA2 checked for WLAN security. I opened a TAC case. The only workaround for Android 10 is to set FT to enable instead of Adaptive, but I did not accept that as I am afraid it will cause bigger problem for other devices. My TAC engineer said Cisco is working on a fix for this issue and ETA of the release is in July. Dennis From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Christina Klam Sent: Friday, June 26, 2020 12:19 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content is safe. If in doubt, forward suspicious emails to ith...@uoguelph.ca<mailto:ith...@uoguelph.ca> All, FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. Christina Klam Network Engineer Institute for Advanced Study 1 Einstein Dr Princeton, NJ 08540 (m) +1 609-751-7899 (o) +1 609-734-8154 ck...@ias.edu<mailto:ck...@ias.edu> From: "Mallon, Jason" mailto:jemal...@ua.edu>> To: "The EDUCAUSE Wireless Issues Community Group Listserv" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Sent: Friday, June 26, 2020 10:24:20 AM Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred Paul, Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. Jason Mallon Network Engineer III, OIT The University of Alabama <https://www.ua.edu/>jemal...@ua.edu<mailto:jemal...@ua.edu> From: The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Paul Smith mailto:psmi...@marian.edu>> Sent: Friday, June 26, 2020 9:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu<mailto:psmi...@marian.edu> 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Re: [WIRELESS-LAN] WLC 8.10.121 Deferred
All, FYI: I noticed that "over-the-ds" setting changed when we upgraded from 8.5 to 8.10.121.0. There may be other settings that changed as well. Christina Klam Network Engineer Institute for Advanced Study 1 Einstein Dr Princeton, NJ 08540 (m) +1 609-751-7899 (o) +1 609-734-8154 ck...@ias.edu From: "Mallon, Jason" To: "The EDUCAUSE Wireless Issues Community Group Listserv" Sent: Friday, June 26, 2020 10:24:20 AM Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred Paul, Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. Jason Mallon Network Engineer III, OIT [ https://www.ua.edu/ | The University of Alabama ] [ mailto:jemal...@ua.edu | jemal...@ua.edu ] From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Paul Smith Sent: Friday, June 26, 2020 9:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at [ https://www.educause.edu/community | https://www.educause.edu/community ] ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at [ https://www.educause.edu/community | https://www.educause.edu/community ] ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Re: WLC 8.10.121 Deferred
Paul, Are you by any chance running WPA2 + WPA3 Enterprise with both the WPA2 and WPA3 boxes checked? We are currently on 8.10.121 and seeing this issue as well primarily with Windows devices. I have not seen any issues with Macs and authentication. Jason Mallon Network Engineer III, OIT The University of Alabama <https://www.ua.edu/>jemal...@ua.edu<mailto:jemal...@ua.edu> From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Paul Smith Sent: Friday, June 26, 2020 9:44 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [EXTERNAL] Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Re: [WIRELESS-LAN] WLC 8.10.121 Deferred
We had the EXACT same issue in April. TAC was useless. We just rolled back to the earlier train, 8.5.161 in order to get everyone connecting again. As we are hoping to move back to the 8.10.X train this summer to get the DNAC benefits again, I will continue to watch this thread. Christina Klam Network Engineer Institute for Advanced Study 1 Einstein Dr Princeton, NJ 08540 (m) +1 609-751-7899 (o) +1 609-734-8154 ck...@ias.edu From: "Paul Smith" To: "The EDUCAUSE Wireless Issues Community Group Listserv" Sent: Friday, June 26, 2020 9:44:32 AM Subject: Re: [WIRELESS-LAN] WLC 8.10.121 Deferred We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: WLC 8.10.121 Deferred
We were running 8.10.121 on our 5520 and began having authentication issues. It is weird because radius isn't even seeing the attempts (or weren't logging rejections). The behavior persists even using local authentication. Eventually we can get the clients to connect, but it takes a number of attempts. It's very frustrating. Cisco had us upgrade to 8.10.122, but the problem still persists. We would roll back, but we have 9130's on the campus now and we need 8.10.122 to manage them. Such a headache right now. Paul Smith Network Administrator Marian University psmi...@marian.edu 317.955.6069 ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
RE: WLC 8.10.121 Deferred
I am planning to upgrade one 8540 pair from 8.10.121.0 to 8.10.122.0. It is associating 3700, 3800 and 9120 Aps. Though we have not hit this bug (I have reloaded the AP and upgraded it) so far but it is better to be on the safer end. - Cheers, Kind regards, Tariq Adnan | Senior Network Engineer ICT, Campus Network Services THE UNIVERSITY OF SYDNEY 316 Abercrombie Street, (G17) | The University of Sydney | NSW | 2006 T +61 2 8627 7885 | M +61 478 492 080 E tariq.ad...@sydney.edu.au<mailto:nadia.berto...@sydney.edu.au> | W http://sydney.edu.au<http://sydney.edu.au/> From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Rios, Hector J Sent: Tuesday, 23 June 2020 9:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] WLC 8.10.121 Deferred Not sure if everyone saw the deferral of 8.10.121.0 There is a single bug that is fixed on 8.10.122.0 Must be bad enough for Cisco to decide to pull 8.10.121.0 off the suggested list of releases. Regards, Hector Rios, Wireless Network Architect The University of Texas at Austin ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://protect-au.mimecast.com/s/tHFXCp81lrtX3XOGHPrGoO?domain=educause.edu> ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
WLC 8.10.121 Deferred
Not sure if everyone saw the deferral of 8.10.121.0 There is a single bug that is fixed on 8.10.122.0 Must be bad enough for Cisco to decide to pull 8.10.121.0 off the suggested list of releases. Regards, Hector Rios, Wireless Network Architect The University of Texas at Austin ** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
