Since these questions get to what people are doing to deal with Apple
MacOS and iOS clients, I'm curious as to what, if any issues others on the
list are seeing. Here's mine.
- MacOS mid-2012 to recent macbooks are randomly dropping off the wlan
- The above macbooks take 30 seconds or more to reconnect with roamed to
APs
Apple has produced a patch specifically for mid-2013 MacbookAirs, but
nothing for the other models.
If you are also seeing these issue on your campus, what eap-type,
certificate size and wireless vendor are you using?
We are using eap-ttls, 2048 bit certificates and Aruba wireless.
To Jason's question:
Apple configs, none that I know of (except cert settings below).
Aruba configs, in the 802.1x profile, turn off OKC (Apple doesn't support
it anyway), turn on Validate PMKID.
General Wifi configs, turn on band-steering (may or may not help depending
on your coverage), client certificates should always trust EAP and SSL, and
remove revocation settings. Also see Travis Schick's in depth post
regarding the ID request timer.
- Don Wright
Brown University
On Wed, Oct 23, 2013 at 9:56 PM, Jason Healy <[email protected]> wrote:
> Hello all,
>
> Over the past weeks/months there have been a few threads about Mac OS X,
> and various tidbits about tweaks, configs, changes, and other items that
> help with the different problems. I'm hoping to roll these all together on
> this thread for easier reference.
>
> We're an all-Apple campus with an Aruba setup and 802.1X (PEAP) for our
> primary SSID. We push the server cert out to all clients, and then they
> authenticate with their normal LDAP credentials. It works "most of the
> time", but there are always issues here and there.
>
> I just want to make sure we're doing what we should to help the user
> experience. I'd appreciate any:
>
> - Apple configs (settings on the client)
> - Aruba configs (if they are specific settings there)
> - General Wifi configs (e.g., raising auth timers, band steering,
> certificate sizes, etc).
>
> Please share any changes you make to a vanilla system to help the Macs
> along...
>
> Thanks,
>
> Jason
> **********
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
>
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
