Hi Jorj,
Could you tell me if you are using Cisco's WLC solution? I have seen a
lot of issues in the some of the more recent WLC software. The problem
with Vista was related to a problem in the DHCP renewal, for example
when roaming.
There is an option in the WLC configuration manager that tells the WLC
to verify the DHCP addresses of the connected clients: "DHCP Required"
If you read the release notes of the WLC software it states that it is
recommended to turn this option on to prevent a possible ARP attack on
the WLC controller:
http://www.securiteam.com/securitynews/5SP0N15M0A.html
With Vista however for some reason this prevents a client from receiving
the DHCP address it had a valid lease for. Turning this option off
resolved the problem with Vista.
Regards,
Tom Rixom
SecureW2
Jorj Bauer schreef:
All,
A number of Windows Vista laptops have started to arrive on our campus
with 802.11n draft 1.0 NICs. Over the past week we've found that the
combination of Windows Vista (mostly Ultimate), SecureW2's supplicant
(any version, but primarily 3.2), draft-n cards (primarily Intel), and
some types of 802.1x failures will put Vista into a state from which it
can't successfully perform any 802.1x authentications.
When the machine is in the failed state, reboots do not help. The best
fix is to remove Vista's saved settings for the wireless network,
manually set up a new network, and tell Vista to not automatically
associate. Then, once the network settings are reconfigured properly
(using SecureW2 rather than the built-in supplicant) the network can be
reconfigured to auto-associate without problems.
When the machines are working, they don't want to fail. But something
is occasionally perturbing them. A RADIUS server upgrade last week was
the catalyst for one set of failures.
Is anyone else seeing behavior like this? Our sample size is fairly
small at the moment, so we're looking for more data before the bulk of
our students return later this week.
Thanks in advance.
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
