2. GD code version for Cisco 4402 WLC 7.98.0 on WISM's,4400's,5508's and 2106 without issues.
-----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of WIRELESS-LAN automatic digest system Sent: Thursday, August 11, 2011 12:00 AM To: [email protected] Subject: WIRELESS-LAN Digest - 9 Aug 2011 to 10 Aug 2011 (#2011-131) There are 5 messages totalling 1156 lines in this issue. Topics of the day: 1. Any known problems with Mac OS 10.6 and MSCHAPv2 and Aruba equipment? (3) 2. GD code version for Cisco 4402 WLC 3. AT&T Wireless On Campus ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ---------------------------------------------------------------------- Date: Wed, 10 Aug 2011 09:36:11 +0200 From: Jeroen van Ingen <[email protected]> Subject: Re: Any known problems with Mac OS 10.6 and MSCHAPv2 and Aruba equipment? Hi Joy, > We are in the process of testing support for MSCHAPv2 on our wireless > network. (We have been supporting only TTLS/PAP up to now.) > > > I have a radiator/ntlm configuration that works with MSCHAPv2 and > Windows7 and Windows Vista machines. We cannot get it to work with Mac > OS 10.6 or MacOS Lion or iPhones or iPads. > > > I have the radiator logs in debug mode and it looks like the ntlm > authentication is working just fine. There are no error messages but > the Mac OS X machine never gets an IP address. > > > It seems that our problem might be related to the Aruba access points > we are using because we have an engineer that has a different type of > access point set up at home with a windows radius server and his Mac > works ok there with MSCHAPv2. > > > I'm wondering if there are any known problems with Aruba equipment and > MSCHAPv2 and Mac OS 10.6 and higher? The Aruba equipment is showing a > "mic failure" towards the end of the negotiation. > > > We are running version 4.7 of radiator on a linux machine. We support both EAP-TTLS/PAP and PEAP with Radiator; Cisco wireless infrastructure. I remember we had to add a couple of config directives to our Radiator to keep the various PEAP implementations working. Perhaps the issue is not with your Aruba gear, but rather the interaction between Radiator and the OS X supplicant. Copy/paste from our handler that does the outer authentication for TTLS & PEAP: # You can make PEAP Version 1 support compatible with # nonstandard PEAP V1 clients that use the old broken TLS # encryption labels that appear to be used frequently, due # to Microsofts use of the incorrect label in its V0 client. # You should use this with Funk Odyssey Client version 4 # when EAPTLS_PEAPVersion is set to 1 EAPTLS_PEAPBrokenV1Label # workaround for a bug in some EAP TTLS supplicants, # (notably PBG4 on MAC OSX) EAPTTLS_NoAckRequired Regards, Jeroen van Ingen ICT Service Centre University of Twente, P.O.Box 217, 7500 AE Enschede, The Netherlands ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ------------------------------ Date: Wed, 10 Aug 2011 06:58:41 -0500 From: Hector J Rios <[email protected]> Subject: Re: GD code version for Cisco 4402 WLC This is a multi-part message in MIME format. ------_=_NextPart_001_01CC5754.D932E821 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable 12 WiSMs running 7.0.98 for the past 8 months.=20 1 5508 running 7.0.116.0 for over a year. =20 All stable. =20 Hector Rios Louisiana State University =20 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Jamie Savage Sent: Friday, August 05, 2011 10:28 AM To: [email protected] Subject: [WIRELESS-LAN] GD code version for Cisco 4402 WLC =20 Hi all,=20 We have a Cisco 4402 WLC that we've been running for a while with no major issues. The code we're running is 6.0.182.0 and figured perhaps it's time to upgrade prior to the school year. As nothing on the Cisco web-site is labelled GD, I was looking for recommendations for a stable version to move to.=20 .................thanks in advance........................J=20 James Savage York University Senior Communications Tech. 108 Steacie Building [email protected] 4700 Keele Street ph: 416-736-2100 ext. 22605 Toronto, Ontario fax: 416-736-5830 M3J 1P3, CANADA ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.=20 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ------_=_NextPart_001_01CC5754.D932E821 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" = xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; = xmlns=3D"http://www.w3.org/TR/REC-html40";><head><META = HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"><meta name=3DGenerator content=3D"Microsoft Word 14 = (filtered medium)"><style><!-- /* Font Definitions */ @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} p {mso-style-priority:99; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:12.0pt; font-family:"Times New Roman","serif";} span.EmailStyle18 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-family:"Calibri","sans-serif";} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue = vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'>12 WiSMs running 7.0.98 for the past 8 months. = <o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'>1 5508 running 7.0.116.0 for over a year.<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'>All stable.<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'>Hector Rios<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'>Louisiana State University<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497= D'><o:p> </o:p></span></p><p class=3DMsoNormal><b><span = style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span>= </b><span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> = The EDUCAUSE Wireless Issues Constituent Group Listserv = [mailto:[email protected]] <b>On Behalf Of </b>Jamie = Savage<br><b>Sent:</b> Friday, August 05, 2011 10:28 AM<br><b>To:</b> = [email protected]<br><b>Subject:</b> [WIRELESS-LAN] GD = code version for Cisco 4402 WLC<o:p></o:p></span></p><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>Hi = all,</span> <br><span = style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'> = We have a Cisco 4402 WLC that we've been running for a = while with no major issues. The code we're running is 6.0.182.0 = and figured perhaps it's time to upgrade prior to the school year. = As nothing on the Cisco web-site is labelled GD, I was looking for = recommendations for a stable version to move to.</span> <br><br><span = style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>.............= ....thanks in advance........................J</span> <br><br><span = style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>James Savage = = York University = <br>Senior Communications Tech. = 108 Steacie Building<br><a = href=3D"mailto:[email protected]";>[email protected]</a> = = 4700 Keele Street<br>ph: 416-736-2100 ext. 22605 = Toronto, Ontario<br>fax: 416-736-5830 = = M3J 1P3, CANADA = </span>********** Participation and subscription information for this = EDUCAUSE Constituent Group discussion list can be found at <a = href=3D"http://www.educause.edu/groups/";>http://www.educause.edu/groups/<= /a>. <o:p></o:p></p></div></body></html> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. <p> ------_=_NextPart_001_01CC5754.D932E821-- ------------------------------ Date: Wed, 10 Aug 2011 09:07:51 -0400 From: "Osborne, Bruce W" <[email protected]> Subject: Re: Any known problems with Mac OS 10.6 and MSCHAPv2 and Aruba equipment? --_000_388A36C071DC684BAB4E53D59CC8FAD76618888807LUEMS04VSUniv_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Are you using Aruba's defaults for the dot1x authentication profile? Their = defaults are not very good. Here is an example I received from Washington = & Lee University. ! aaa authentication dot1x "Example" timer idrequest_period 10 max-requests 2 timer wpa-key-period 2000 timer wpa2-key-delay 120 timer wpa-groupkey-delay 100 validate-pmkid ! I know this has been tested on ArubaOS 3.1.4.x & 5.x. I am not sure about 6= .x. Bruce Osborne Wireless Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY 40 Years of Training Champions for Christ: 1971-2011 From: Joy Veronneau [mailto:[email protected]] Sent: Tuesday, August 09, 2011 4:31 PM Subject: Any known problems with Mac OS 10.6 and MSCHAPv2 and Aruba equipme= nt? Hi, We are in the process of testing support for MSCHAPv2 on our wireless netwo= rk. (We have been supporting only TTLS/PAP up to now.) I have a radiator/ntlm configuration that works with MSCHAPv2 and Windows7 = and Windows Vista machines. We cannot get it to work with Mac OS 10.6 or Ma= cOS Lion or iPhones or iPads. I have the radiator logs in debug mode and it looks like the ntlm authentic= ation is working just fine. There are no error messages but the Mac OS X ma= chine never gets an IP address. It seems that our problem might be related to the Aruba access points we ar= e using because we have an engineer that has a different type of access poi= nt set up at home with a windows radius server and his Mac works ok there w= ith MSCHAPv2. I'm wondering if there are any known problems with Aruba equipment and MSCH= APv2 and Mac OS 10.6 and higher? The Aruba equipment is showing a "mic fail= ure" towards the end of the negotiation. We are running version 4.7 of radiator on a linux machine. Any ideas appreciated :) Thanks- Joy Veronneau Identity Management Cornell University ********** Participation and subscription information for this EDUCAUSE Con= stituent Group discussion list can be found at http://www.educause.edu/grou= ps/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. --_000_388A36C071DC684BAB4E53D59CC8FAD76618888807LUEMS04VSUniv_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; xmlns=3D"http:= //www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content= =3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros= oft Word 14 (filtered medium)"><style><!-- /* Font Definitions */ @font-face {font-family:Cambria; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Tahoma; panose-1:2 11 6 4 3 5 4 4 2 4;} @font-face {font-family:Verdana; panose-1:2 11 6 4 3 5 4 4 2 4;} @font-face {font-family:Times-Roman;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} p {mso-style-priority:99; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:12.0pt; font-family:"Times New Roman","serif";} span.EmailStyle18 {mso-style-type:personal-reply; font-family:"Calibri","sans-serif"; color:#1F497D;} .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue vli= nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span style=3D'f= ont-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Are you u= sing Aruba’s defaults for the dot1x authentication profile? Their def= aults are not very good. Here is an example I received from Washingto= n & Lee University.<o:p></o:p></span></p><p class=3DMsoNormal><span sty= le=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o= :p> </o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.= 0pt;font-family:"Calibri","sans-serif";color:#1F497D'>!<o:p></o:p></span></= p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri= ","sans-serif";color:#1F497D'>aaa authentication dot1x "Example"<= o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;f= ont-family:"Calibri","sans-serif";color:#1F497D'> timer idreque= st_period 10<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-= size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'> = max-requests 2<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'fon= t-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>  = ; timer wpa-key-period 2000<o:p></o:p></span></p><p class=3DMsoNormal><span= style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D= '> timer wpa2-key-delay 120<o:p></o:p></span></p><p class=3DMso= Normal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";c= olor:#1F497D'> timer wpa-groupkey-delay 100<o:p></o:p></span></= p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri= ","sans-serif";color:#1F497D'> validate-pmkid<o:p></o:p></span>= </p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calib= ri","sans-serif";color:#1F497D'>!<o:p></o:p></span></p><p class=3DMsoNormal= ><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#= 1F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span style=3D'fon= t-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I know this= has been tested on ArubaOS 3.1.4.x & 5.x. I am not sure about 6.x.<o:p= ></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font= -family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><= p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","= sans-serif";color:#1F497D'><o:p> </o:p></span></p><div><p class=3DMsoN= ormal style=3D'margin-right:.5in;text-autospace:none'><b><span style=3D'fon= t-size:10.0pt;font-family:"Verdana","sans-serif";color:#001B3E'>Bruce Osbor= ne</span></b><span style=3D'font-size:10.0pt;font-family:"Verdana","sans-se= rif";color:#001B3E'><o:p></o:p></span></p><p class=3DMsoNormal style=3D'mar= gin-right:.5in;text-autospace:none'><i><span style=3D'font-size:10.0pt;font= -family:"Verdana","sans-serif";color:#001B3E'>Wireless Network Engineer</sp= an></i><span style=3D'font-size:10.0pt;font-family:"Cambria","serif";color:= #1F497D'><o:p></o:p></span></p><p class=3DMsoNormal style=3D'margin-right:.= 5in;text-autospace:none'><b><span style=3D'font-size:10.0pt;font-family:"Ve= rdana","sans-serif";color:#001B3E'>IT Network Services</span></b><span styl= e=3D'font-size:10.0pt;font-family:"Cambria","serif";color:#1F497D'><o:p></o= :p></span></p><p class=3DMsoNormal style=3D'margin-right:.5in;text-autospac= e:none'><span style=3D'font-size:10.0pt;font-family:"Verdana","sans-serif";= color:#001B3E'> </span><span style=3D'font-size:10.0pt;font-family:"Ca= mbria","serif";color:#1F497D'><o:p></o:p></span></p><p class=3DMsoNormal st= yle=3D'margin-right:.5in;text-autospace:none'><b><span style=3D'font-size:1= 0.0pt;font-family:"Verdana","sans-serif";color:#001B3E'>(434) 592-4229</spa= n></b><span style=3D'font-size:10.0pt;font-family:"Cambria","serif";color:#= 1F497D'><o:p></o:p></span></p><p class=3DMsoNormal style=3D'margin-right:.5= in;text-autospace:none'><span style=3D'font-size:10.0pt;font-family:"Verdan= a","sans-serif";color:#001B3E'> </span><span style=3D'font-size:10.0pt= ;font-family:"Cambria","serif";color:#1F497D'><o:p></o:p></span></p><p clas= s=3DMsoNormal style=3D'margin-right:.5in;text-autospace:none'><b><span styl= e=3D'font-size:10.0pt;font-family:"Verdana","sans-serif";color:#AA0000'>LIB= ERTY UNIVERSITY<o:p></o:p></span></b></p><p class=3DMsoNormal style=3D'marg= in-right:.5in;text-autospace:none'><i><span style=3D'font-size:11.0pt;font-= family:Times-Roman;color:#AA0000'>40 Years of Training Champions for Christ= : 1971-2011<o:p></o:p></span></i></p></div><p class=3DMsoNormal><span style= =3D'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p= > </o:p></span></p><div><div style=3D'border:none;border-top:solid #B5= C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b><span style= =3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><sp= an style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Joy Veronn= eau [mailto:[email protected]] <br><b>Sent:</b> Tuesday, August 09, 2011 4:3= 1 PM<br><b>Subject:</b> Any known problems with Mac OS 10.6 and MSCHAPv2 an= d Aruba equipment?<o:p></o:p></span></p></div></div><p class=3DMsoNormal><o= :p> </o:p></p><div><div><div><div><p class=3DMsoNormal><span style=3D'= font-size:10.5pt;font-family:"Calibri","sans-serif";color:black'>Hi,<o:p></= o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-size:10.= 5pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span= ></p></div><div><p class=3DMsoNormal><span style=3D'font-size:10.5pt;font-f= amily:"Calibri","sans-serif";color:black'>We are in the process of testing = support for MSCHAPv2 on our wireless network. (We have been supporting = ;only TTLS/PAP up to now.)<o:p></o:p></span></p></div><div><p class=3D= MsoNormal><span style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif= ";color:black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal>= <span style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";color:bl= ack'>I have a radiator/ntlm configuration that works with MSCHAPv2 and Wind= ows7 and Windows Vista machines. We cannot get it to work with Mac OS 10.6 = or MacOS Lion or iPhones or iPads.<o:p></o:p></span></p></div><div><p class= =3DMsoNormal><span style=3D'font-size:10.5pt;font-family:"Calibri","sans-se= rif";color:black'><o:p> </o:p></span></p></div><div><p class=3DMsoNorm= al><span style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";color= :black'>I have the radiator logs in debug mode and it looks like the ntlm a= uthentication is working just fine. There are no error messages but the Mac= OS X machine never gets an IP address.<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span style=3D'font-size:10.5pt;font-family:"Calibri","sa= ns-serif";color:black'><o:p> </o:p></span></p></div><div><p class=3DMs= oNormal><span style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";= color:black'>It seems that our problem might be related to the Aruba access= points we are using because we have an engineer that has a different type = of access point set up at home with a windows radius server and his Mac wor= ks ok there with MSCHAPv2.<o:p></o:p></span></p></div><div><p class=3DMsoNo= rmal><span style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";col= or:black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span= style=3D'font-size:10.5pt;font-family:"Calibri","sans-serif";color:black'>= I'm wondering if there are any known problems with Aruba equipment and MSCH= APv2 and Mac OS 10.6 and higher? The Aruba equipment is showing a "mic= failure" towards the end of the negotiation.<o:p></o:p></span></p></d= iv><div><p class=3DMsoNormal><span style=3D'font-size:10.5pt;font-family:"C= alibri","sans-serif";color:black'><o:p> </o:p></span></p></div><div><p= class=3DMsoNormal><span style=3D'font-size:10.5pt;font-family:"Calibri","s= ans-serif";color:black'>We are running version 4.7 of radiator on a linux m= achine.<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D= 'font-size:10.5pt;font-family:"Calibri","sans-serif";color:black'><o:p>&nbs= p;</o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-size= :10.5pt;font-family:"Calibri","sans-serif";color:black'>Any ideas appreciat= ed :)<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'f= ont-size:10.5pt;font-family:"Calibri","sans-serif";color:black'><o:p> = </o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-size:1= 0.5pt;font-family:"Calibri","sans-serif";color:black'>Thanks-<o:p></o:p></s= pan></p></div></div></div></div><div><p class=3DMsoNormal><span style=3D'fo= nt-size:10.5pt;font-family:"Calibri","sans-serif";color:black'>Joy Veronnea= u<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-= size:10.5pt;font-family:"Calibri","sans-serif";color:black'>Identity Manage= ment<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'fo= nt-size:10.5pt;font-family:"Calibri","sans-serif";color:black'>Cornell Univ= ersity<o:p></o:p></span></p></div><p class=3DMsoNormal>********** Participa= tion and subscription information for this EDUCAUSE Constituent Group discu= ssion list can be found at <a href=3D"http://www.educause.edu/groups/";>http= ://www.educause.edu/groups/</a>. <o:p></o:p></p></div></body></html>= ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. <p> --_000_388A36C071DC684BAB4E53D59CC8FAD76618888807LUEMS04VSUniv_-- ------------------------------ Date: Wed, 10 Aug 2011 15:50:19 -0400 From: Lee H Badman <[email protected]> Subject: AT&T Wireless On Campus --_000_D196C2E9B14AAA40915BEF109A39BC64146FEE3DFDSUEX07MBX05ad_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Does anyone who has gone down the AT&T "We'll be your WiFi service in your = stadium!" road feel like entertaining questions off list? Thanks- Lee Badman Lee H. Badman Wireless/Network Engineer Information Technology and Services Adjunct Instructor, iSchool Syracuse University 315 443-3003 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. --_000_D196C2E9B14AAA40915BEF109A39BC64146FEE3DFDSUEX07MBX05ad_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:x=3D"urn:schemas-microsoft-com:office:excel" xmlns:p=3D"urn:schemas-m= icrosoft-com:office:powerpoint" xmlns:a=3D"urn:schemas-microsoft-com:office= :access" xmlns:dt=3D"uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s=3D"= uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs=3D"urn:schemas-microsof= t-com:rowset" xmlns:z=3D"#RowsetSchema" xmlns:b=3D"urn:schemas-microsoft-co= m:office:publisher" xmlns:ss=3D"urn:schemas-microsoft-com:office:spreadshee= t" xmlns:c=3D"urn:schemas-microsoft-com:office:component:spreadsheet" xmlns= :odc=3D"urn:schemas-microsoft-com:office:odc" xmlns:oa=3D"urn:schemas-micro= soft-com:office:activation" xmlns:html=3D"http://www.w3.org/TR/REC-html40"; = xmlns:q=3D"http://schemas.xmlsoap.org/soap/envelope/"; xmlns:rtc=3D"http://m= icrosoft.com/officenet/conferencing" xmlns:D=3D"DAV:" xmlns:Repl=3D"http://= schemas.microsoft.com/repl/" xmlns:mt=3D"http://schemas.microsoft.com/share= point/soap/meetings/" xmlns:x2=3D"http://schemas.microsoft.com/office/excel= /2003/xml" xmlns:ppda=3D"http://www.passport.com/NameSpace.xsd"; xmlns:ois= =3D"http://schemas.microsoft.com/sharepoint/soap/ois/"; xmlns:dir=3D"http://= schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds=3D"http://www.w3= .org/2000/09/xmldsig#" xmlns:dsp=3D"http://schemas.microsoft.com/sharepoint= /dsp" xmlns:udc=3D"http://schemas.microsoft.com/data/udc"; xmlns:xsd=3D"http= ://www.w3.org/2001/XMLSchema" xmlns:sub=3D"http://schemas.microsoft.com/sha= repoint/soap/2002/1/alerts/" xmlns:ec=3D"http://www.w3.org/2001/04/xmlenc#"= xmlns:sp=3D"http://schemas.microsoft.com/sharepoint/"; xmlns:sps=3D"http://= schemas.microsoft.com/sharepoint/soap/" xmlns:xsi=3D"http://www.w3.org/2001= /XMLSchema-instance" xmlns:udcs=3D"http://schemas.microsoft.com/data/udc/so= ap" xmlns:udcxf=3D"http://schemas.microsoft.com/data/udc/xmlfile"; xmlns:udc= p2p=3D"http://schemas.microsoft.com/data/udc/parttopart"; xmlns:wf=3D"http:/= /schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss=3D"http://sche= mas.microsoft.com/office/2006/digsig-setup" xmlns:dssi=3D"http://schemas.mi= crosoft.com/office/2006/digsig" xmlns:mdssi=3D"http://schemas.openxmlformat= s.org/package/2006/digital-signature" xmlns:mver=3D"http://schemas.openxmlf= ormats.org/markup-compatibility/2006" xmlns:m=3D"http://schemas.microsoft.c= om/office/2004/12/omml" xmlns:mrels=3D"http://schemas.openxmlformats.org/pa= ckage/2006/relationships" xmlns:spwp=3D"http://microsoft.com/sharepoint/web= partpages" xmlns:ex12t=3D"http://schemas.microsoft.com/exchange/services/20= 06/types" xmlns:ex12m=3D"http://schemas.microsoft.com/exchange/services/200= 6/messages" xmlns:pptsl=3D"http://schemas.microsoft.com/sharepoint/soap/Sli= deLibrary/" xmlns:spsl=3D"http://microsoft.com/webservices/SharePointPortal= Server/PublishedLinksService" xmlns:Z=3D"urn:schemas-microsoft-com:" xmlns:= st=3D"" xmlns=3D"http://www.w3.org/TR/REC-html40";> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dus-ascii"= > <meta name=3DGenerator content=3D"Microsoft Word 12 (filtered medium)"> <style> <!-- /* Font Definitions */ @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:11.0pt; font-family:"Calibri","sans-serif";} a:link, span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} a:visited, span.MsoHyperlinkFollowed {mso-style-priority:99; color:purple; text-decoration:underline;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Calibri","sans-serif"; color:windowtext;} .MsoChpDefault {mso-style-type:export-only;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.Section1 {page:Section1;} --> </style> <!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3DEN-US link=3Dblue vlink=3Dpurple> <div class=3DSection1> <p class=3DMsoNormal>Does anyone who has gone down the AT&T “We&#= 8217;ll be your WiFi service in your stadium!” road feel like entertaining questions off list?<o:p></o:p></p> <p class=3DMsoNormal><o:p> </o:p></p> <p class=3DMsoNormal>Thanks-<o:p></o:p></p> <p class=3DMsoNormal><o:p> </o:p></p> <p class=3DMsoNormal>Lee Badman<o:p></o:p></p> <p class=3DMsoNormal><o:p> </o:p></p> <p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial","s= ans-serif"; color:black'>Lee H. Badman<o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial","s= ans-serif"; color:black'>Wireless/Network Engineer<o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial","s= ans-serif"; color:black'>Information Technology and Services<o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial","s= ans-serif"; color:black'>Adjunct Instructor, iSchool<o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial","s= ans-serif"; color:black'>Syracuse University<o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:10.0pt;font-family:"Arial","s= ans-serif"; color:black'>315 443-3003<o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:12.0pt;font-family:"Times New= Roman","serif"'> <o:p></o:p></span></p> <p class=3DMsoNormal><span style=3D'font-size:12.0pt;font-family:"Times New= Roman","serif"'> </span><o:p></o:p></p> </div> </body> </html> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. <p> --_000_D196C2E9B14AAA40915BEF109A39BC64146FEE3DFDSUEX07MBX05ad_-- ------------------------------ Date: Wed, 10 Aug 2011 13:52:49 -0600 From: Marcelo Lew <[email protected]> Subject: Re: Any known problems with Mac OS 10.6 and MSCHAPv2 and Aruba equipment? --_000_F8B9E55D08935149BDAE96765EB2716863999D2F4EEXCHduedu_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable There were several issues with Macs not getting an IP Address on a 802.1x = (MSCHAPv2) SSID a while back. Tweaking with the Aruba dot1x profile = worked for us. There is a pretty good thread about Mac WLAN issues (and = this one in particular) in the Aruba Airheads site (link below): http://airheads.arubanetworks.com/vBulletin/showthread.php?t=3D914 Marcelo Lew Wireless Enterprise Administrator University Technology Services University of Denver Desk: (303) 871-6523 Cell: (303) 669-4217 Fax: (303) 871-5900 Email: mlew=40du.edu<mailto:mlew=40du.edu> From: The EDUCAUSE Wireless Issues Constituent Group Listserv = =5Bmailto:WIRELESS-LAN=40LISTSERV.EDUCAUSE.EDU=5D On Behalf Of Osborne, = Bruce W Sent: Wednesday, August 10, 2011 7:08 AM To: WIRELESS-LAN=40LISTSERV.EDUCAUSE.EDU Subject: Re: =5BWIRELESS-LAN=5D Any known problems with Mac OS 10.6 and = MSCHAPv2 and Aruba equipment? Are you using Aruba's defaults for the dot1x authentication profile? Their = defaults are not very good. Here is an example I received from Washington = & Lee University. =21 aaa authentication dot1x =22Example=22 timer idrequest_period 10 max-requests 2 timer wpa-key-period 2000 timer wpa2-key-delay 120 timer wpa-groupkey-delay 100 validate-pmkid =21 I know this has been tested on ArubaOS 3.1.4.x & 5.x. I am not sure about = 6.x. Bruce Osborne Wireless Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY 40 Years of Training Champions for Christ: 1971-2011 From: Joy Veronneau =5Bmailto:jv11=40CORNELL.EDU=5D Sent: Tuesday, August 09, 2011 4:31 PM Subject: Any known problems with Mac OS 10.6 and MSCHAPv2 and Aruba = equipment? Hi, We are in the process of testing support for MSCHAPv2 on our wireless = network. (We have been supporting only TTLS/PAP up to now.) I have a radiator/ntlm configuration that works with MSCHAPv2 and Windows7 = and Windows Vista machines. We cannot get it to work with Mac OS 10.6 or = MacOS Lion or iPhones or iPads. I have the radiator logs in debug mode and it looks like the ntlm = authentication is working just fine. There are no error messages but the = Mac OS X machine never gets an IP address. It seems that our problem might be related to the Aruba access points we = are using because we have an engineer that has a different type of access = point set up at home with a windows radius server and his Mac works ok = there with MSCHAPv2. I'm wondering if there are any known problems with Aruba equipment and = MSCHAPv2 and Mac OS 10.6 and higher? The Aruba equipment is showing a = =22mic failure=22 towards the end of the negotiation. We are running version 4.7 of radiator on a linux machine. Any ideas appreciated :) Thanks- Joy Veronneau Identity Management Cornell University ********** Participation and subscription information for this EDUCAUSE = Constituent Group discussion list can be found at = http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE = Constituent Group discussion list can be found at = http://www.educause.edu/groups/. =2E= ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. --_000_F8B9E55D08935149BDAE96765EB2716863999D2F4EEXCHduedu_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D=22urn:schemas-microsoft-com:vml=22 = xmlns:o=3D=22urn:schemas-microsoft-com:office:office=22 = xmlns:w=3D=22urn:schemas-microsoft-com:office:word=22 = xmlns:m=3D=22http://schemas.microsoft.com/office/2004/12/omml=22 = xmlns=3D=22http://www.w3.org/TR/REC-html40=22><head><META = HTTP-EQUIV=3D=22Content-Type=22 CONTENT=3D=22text/html; = charset=3Dus-ascii=22><meta name=3DGenerator content=3D=22Microsoft Word = 12 (filtered medium)=22><style><=21-- /* Font Definitions */ =40font-face =09=7Bfont-family:=22Cambria Math=22; =09panose-1:2 4 5 3 5 4 6 3 2 4;=7D =40font-face =09=7Bfont-family:Cambria; =09panose-1:2 4 5 3 5 4 6 3 2 4;=7D =40font-face =09=7Bfont-family:Calibri; =09panose-1:2 15 5 2 2 2 4 3 2 4;=7D =40font-face =09=7Bfont-family:Tahoma; =09panose-1:2 11 6 4 3 5 4 4 2 4;=7D =40font-face =09=7Bfont-family:Verdana; =09panose-1:2 11 6 4 3 5 4 4 2 4;=7D =40font-face =09=7Bfont-family:Times-Roman;=7D /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal =09=7Bmargin:0in; =09margin-bottom:.0001pt; =09font-size:12.0pt; =09font-family:=22Times New Roman=22,=22serif=22;=7D a:link, span.MsoHyperlink =09=7Bmso-style-priority:99; =09color:blue; =09text-decoration:underline;=7D a:visited, span.MsoHyperlinkFollowed =09=7Bmso-style-priority:99; =09color:purple; =09text-decoration:underline;=7D p =09=7Bmso-style-priority:99; =09mso-margin-top-alt:auto; =09margin-right:0in; =09mso-margin-bottom-alt:auto; =09margin-left:0in; =09font-size:12.0pt; =09font-family:=22Times New Roman=22,=22serif=22;=7D span.EmailStyle18 =09=7Bmso-style-type:personal; =09font-family:=22Calibri=22,=22sans-serif=22; =09color:=231F497D;=7D span.EmailStyle19 =09=7Bmso-style-type:personal-reply; =09font-family:=22Calibri=22,=22sans-serif=22; =09color:=231F497D;=7D =2EMsoChpDefault =09=7Bmso-style-type:export-only; =09font-size:10.0pt;=7D =40page WordSection1 =09=7Bsize:8.5in 11.0in; =09margin:1.0in 1.0in 1.0in 1.0in;=7D div.WordSection1 =09=7Bpage:WordSection1;=7D --></style><=21--=5Bif gte mso 9=5D><xml> <o:shapedefaults v:ext=3D=22edit=22 spidmax=3D=221026=22 /> </xml><=21=5Bendif=5D--><=21--=5Bif gte mso 9=5D><xml> <o:shapelayout v:ext=3D=22edit=22> <o:idmap v:ext=3D=22edit=22 data=3D=221=22 /> </o:shapelayout></xml><=21=5Bendif=5D--></head><body lang=3DEN-US = link=3Dblue vlink=3Dpurple><div class=3DWordSection1><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'>There were several issues with Macs not getting an IP Address = on a 802.1x (MSCHAPv2) SSID a while back. Tweaking with the Aruba = dot1x profile worked for us. There is a pretty good thread about Mac = WLAN issues (and this one in particular) in the Aruba Airheads site (link = below):<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><a = href=3D=22http://airheads.arubanetworks.com/vBulletin/showthread.php?t=3D91= 4=22>http://airheads.arubanetworks.com/vBulletin/showthread.php?t=3D914</a>= <o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><div><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>Marcelo = Lew<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>Wireless Enterprise = Administrator<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>University Technology = Services<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>University of = Denver<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>Desk: (303) = 871-6523<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>Cell: (303) = 669-4217<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>Fax: (303) = 871-5900<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:10.0pt;color:=231F497D'>Email: <a = href=3D=22mailto:mlew=40du.edu=22><span = style=3D'color:blue'>mlew=40du.edu</span></a><o:p></o:p></span></p></div><p= class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><div><div = style=3D'border:none;border-top:solid =23B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in'><p class=3DMsoNormal><b><span = style=3D'font-size:10.0pt;font-family:=22Tahoma=22,=22sans-serif=22'>From:<= /span></b><span = style=3D'font-size:10.0pt;font-family:=22Tahoma=22,=22sans-serif=22'> The = EDUCAUSE Wireless Issues Constituent Group Listserv = =5Bmailto:WIRELESS-LAN=40LISTSERV.EDUCAUSE.EDU=5D <b>On Behalf Of = </b>Osborne, Bruce W<br><b>Sent:</b> Wednesday, August 10, 2011 7:08 = AM<br><b>To:</b> WIRELESS-LAN=40LISTSERV.EDUCAUSE.EDU<br><b>Subject:</b> = Re: =5BWIRELESS-LAN=5D Any known problems with Mac OS 10.6 and MSCHAPv2 = and Aruba equipment?<o:p></o:p></span></p></div></div><p = class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'>Are you using Aruba&=238217;s defaults for the dot1x = authentication profile? Their defaults are not very good. Here is an = example I received from Washington & Lee = University.<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'>=21<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'>aaa authentication dot1x = "Example"<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'> timer idrequest_period 10<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'> max-requests 2<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'> timer wpa-key-period 2000<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'> timer wpa2-key-delay 120<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'> timer wpa-groupkey-delay = 100<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'> validate-pmkid<o:p></o:p></span></p><p = class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'>=21<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'>I know this has been tested on ArubaOS 3.1.4.x & 5.x. I am = not sure about 6.x.<o:p></o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><div><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><b><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'>Bruce Osborne</span></b><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'><o:p></o:p></span></p><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><i><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'>Wireless Network Engineer</span></i><span = style=3D'font-size:10.0pt;font-family:=22Cambria=22,=22serif=22;color:=231F= 497D'><o:p></o:p></span></p><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><b><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'>IT Network Services</span></b><span = style=3D'font-size:10.0pt;font-family:=22Cambria=22,=22serif=22;color:=231F= 497D'><o:p></o:p></span></p><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'> </span><span = style=3D'font-size:10.0pt;font-family:=22Cambria=22,=22serif=22;color:=231F= 497D'><o:p></o:p></span></p><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><b><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'>(434) 592-4229</span></b><span = style=3D'font-size:10.0pt;font-family:=22Cambria=22,=22serif=22;color:=231F= 497D'><o:p></o:p></span></p><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23001B3E'> </span><span = style=3D'font-size:10.0pt;font-family:=22Cambria=22,=22serif=22;color:=231F= 497D'><o:p></o:p></span></p><p class=3DMsoNormal = style=3D'margin-right:.5in;text-autospace:none'><b><span = style=3D'font-size:10.0pt;font-family:=22Verdana=22,=22sans-serif=22;color:= =23AA0000'>LIBERTY UNIVERSITY<o:p></o:p></span></b></p><p = class=3DMsoNormal style=3D'margin-right:.5in;text-autospace:none'><i><span = style=3D'font-size:11.0pt;font-family:Times-Roman;color:=23AA0000'>40 = Years of Training Champions for Christ: = 1971-2011<o:p></o:p></span></i></p></div><p class=3DMsoNormal><span = style=3D'font-size:11.0pt;font-family:=22Calibri=22,=22sans-serif=22;color:= =231F497D'><o:p> </o:p></span></p><div><div = style=3D'border:none;border-top:solid =23B5C4DF 1.0pt;padding:3.0pt 0in = 0in 0in'><p class=3DMsoNormal><b><span = style=3D'font-size:10.0pt;font-family:=22Tahoma=22,=22sans-serif=22'>From:<= /span></b><span = style=3D'font-size:10.0pt;font-family:=22Tahoma=22,=22sans-serif=22'> Joy = Veronneau =5Bmailto:jv11=40CORNELL.EDU=5D <br><b>Sent:</b> Tuesday, August = 09, 2011 4:31 PM<br><b>Subject:</b> Any known problems with Mac OS 10.6 = and MSCHAPv2 and Aruba equipment?<o:p></o:p></span></p></div></div><p = class=3DMsoNormal><o:p> </o:p></p><div><div><div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>Hi,<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>We are in the process of testing support for MSCHAPv2 on our = wireless network. (We have been supporting only TTLS/PAP up to = now.)<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>I have a radiator/ntlm configuration that works with MSCHAPv2 and = Windows7 and Windows Vista machines. We cannot get it to work with Mac OS = 10.6 or MacOS Lion or iPhones or iPads.<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>I have the radiator logs in debug mode and it looks like the ntlm = authentication is working just fine. There are no error messages but the = Mac OS X machine never gets an IP = address.<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>It seems that our problem might be related to the Aruba access = points we are using because we have an engineer that has a different type = of access point set up at home with a windows radius server and his Mac = works ok there with MSCHAPv2.<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>I'm wondering if there are any known problems with Aruba equipment = and MSCHAPv2 and Mac OS 10.6 and higher? The Aruba equipment is showing a = "mic failure" towards the end of the = negotiation.<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>We are running version 4.7 of radiator on a linux = machine.<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>Any ideas appreciated :)<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'><o:p> </o:p></span></p></div><div><p class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>Thanks-<o:p></o:p></span></p></div></div></div></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>Joy Veronneau<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>Identity Management<o:p></o:p></span></p></div><div><p = class=3DMsoNormal><span = style=3D'font-size:10.5pt;font-family:=22Calibri=22,=22sans-serif=22;color:= black'>Cornell University<o:p></o:p></span></p></div><p = class=3DMsoNormal>********** Participation and subscription information = for this EDUCAUSE Constituent Group discussion list can be found at <a = href=3D=22http://www.educause.edu/groups/=22>http://www.educause.edu/groups= /</a>. <o:p></o:p></p><p class=3DMsoNormal>********** Participation and = subscription information for this EDUCAUSE Constituent Group discussion = list can be found at http://www.educause.edu/groups/. = <o:p></o:p></p></div></body></html> <BR> =2E ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. <p> --_000_F8B9E55D08935149BDAE96765EB2716863999D2F4EEXCHduedu_-- ------------------------------ End of WIRELESS-LAN Digest - 9 Aug 2011 to 10 Aug 2011 (#2011-131) ****************************************************************** ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
