Are Cisco customers seeing this as well? I'm seeing a number of Macs falling back to a guest portal from our WPA2, and I'm wondering if this problem is related to it. Jeff
>>> On Tuesday, September 24, 2013 at 6:24 AM, in message <CAHh=-9XjmX=fbwata0glcjb4pna8hao628yarc3zc1t29lt...@mail.gmail.com>, "Hanson, Mike" <[email protected]> wrote: Jason, Here is more information from an Aruba wireless forum. Seems to be an issue with Macs and certs. http://community.arubanetworks.com/t5/groups/groupmessagepage/board-id/edu/message-id/200#M200 Mike Mike Hanson, CISSP Network Security Manager The College of St. Scholastica Duluth, MN 55811 On Mon, Sep 23, 2013 at 7:59 PM, Jason Cook <[email protected]> wrote: Just wondering what the various workarounds people have tried with any success at all to this issue? The first patch doesn’t appear to have done the job, and who knows when the final fix will come. I seem to remember it took Intel the best part of a year to resolve 802.11n issues in their 5000 series cards. We had one user who was getting dropouts every couple of minutes with sometimes an almost instant re-connect to minutes. This was after installing the update patch. The device has no such issues however on a WPA2/AES-PSK network. This has been good to provide a solution there, however PSK’s are not overly scalable for a campus. Another user reports that disabling v6 & some sleep settings have helped the situation somewhat. I’m hoping to get more information on that sometime today. I see Travis mentioned below an idrequest time-out increase from 5-30 seconds on Aruba. I’m doing a bit of research now and considering little session of testing later in the week so was interested to see what people have tried and how much it’s helped. Either client or network side. -- Jason Cook Technology Services The University of Adelaide, AUSTRALIA 5005 Ph : +61 8 8313 4800 ( tel:%2B61%208%208313%204800 ) From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Shandon Bates Sent: Saturday, 20 July 2013 10:19 AM To: [email protected] Subject: Re: [WIRELESS-LAN] Problems with new Apple Laptops Should be patch issued... Sent from my iPhone On Jul 19, 2013, at 5:10 PM, "Shandon Bates" <[email protected]> wrote: Patch issues for air issues. http://mashable.com/2013/07/19/macbook-air-wifi-fix/ Sent from my iPhone On Jul 19, 2013, at 4:53 PM, "Travis Schick" <[email protected]> wrote: I've been getting reports of issues with macbooks on our wpa2-enterprise ssid - then I finally got one and was able to do some hands on troubleshooting. It appeared the mac would decide to roam - but then would fail to auth - and get stuck in authentication step - wifi menu icon just cycling like no connection. Worked with our vendor (aruba) and decided to increase the default idrequest timeout from 5 sec to 30sec. I think there's something going on when reauthenticating to another AP on the same ssid. tunnel setup takes a while on the macbook - I think it may be related to the cert - using the incommon cert - so have server cert incommon intermediate and addtrust root ca... this is a chunk of data that gets fragmented... not sure if the mac doesn't like reassembling it - takes exception to it comming from a new bssid or what. But it does look like increasing the timeout helps... still a few second without connectivity - but sure as heck beats the macbook getting stuck in its authentication step and staying offline until user intervenes. so still looking into it, but perhaps that info might prove helpful to others. macbook is running 10.8.4 - and I was running that prior to changing my timer settings. Travis Schick UCDavis Network Operations Center . ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
