You mentioned "load balance mode", were you running band-steering and spectrum-load-balancing at the same time on the same APs? Check with Aruba, but I think they will tell you this is not a recommended practice and better to stick with band-steering only assuming your coverage will support both radios. Also, I read somewhere that recent MacOS updates already try to "band-steer" the client to the 5GHZ radio? If that's true, your controller setting really isn't having an affect anyway, and the client are getting themselves into trouble.. - Don
On Fri, Jan 31, 2014 at 2:03 PM, Edward Ip <[email protected]> wrote: > When we did a packet capture, we saw that the Mac clients would try to > associate on the 2.4GHz band and then move over to the 5GHz band and then > back. We saw this happen quite a bit. This made the re association longer > when our clients roamed. > > > > Sometimes in certain areas of our college if 2 APs are within range with > about the same SNR, the Mac client would get shifted between the two APs > due to load balance mode turned on. Due to the cert issue and the re > association process it would drive our Mac clients (err...students) crazy > around crunch time. > > > > *Edward Ip* > > *Algonquin College* | 1385 Woodroffe Avenue | Room C316 | Ottawa | > Ontario|K2G 1V8|Canada > > algonquincollege.com > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > [email protected]] *On Behalf Of *Norman Elton > *Sent:* Friday, January 31, 2014 1:57 PM > > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] OS X 802.1x auth issue > > > > Interesting. What were the band-steering symptoms? Any way to pin the > problem down to band-steering, or was it trial and error? > > > > Norman > > > > On Fri, Jan 31, 2014 at 1:44 PM, Edward Ip <[email protected]> > wrote: > > I agree with Jeff, we recently disabled band steering on our Aruba > controllers and it has helped a bit. > > *Edward Ip* > > *Algonquin College* | 1385 Woodroffe Avenue | Room C316 | Ottawa | > Ontario|K2G 1V8|Canada > > algonquincollege.com > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > [email protected]] *On Behalf Of *Jeffrey Sessler > *Sent:* Friday, January 31, 2014 1:40 PM > > > *To:* [email protected] > *Subject:* Re: [WIRELESS-LAN] OS X 802.1x auth issue > > > > We've seen the cert issue, and OS 10.8 and 10.9 don't seem to like > band/load-steering. The cert issue coupled with band-steering and/or > load-steering make the Mac's very unhappy. > > > > Jeff > > >>> On Friday, January 31, 2014 at 10:05 AM, in message < > CAPCnwUdAuZqKuFwOycKrGmXgiKCrb_Wy82=o5xc3be+o7an...@mail.gmail.com>, > Norman Elton <[email protected]> wrote: > > And a follow up. Has anyone actually confirmed that this bug is > actually causing client complaints? We do seem to riding a wave of > complaints from MacBook owners. We are only just now starting to > change cert trust settings. Hopefully we'll know more next week as > students have a chance to test things out over the weekend. > > Norman Elton > College of William & Mary > > On Fri, Jan 31, 2014 at 12:59 PM, Norman Elton <[email protected]> > wrote: > >> It also appears specific to certs based on 2048 bit keys. Also there > is no > >> cert validation delay upon initial connect... only when attempting to > >> reauth... ie after a death or a roam event. > > > > Can anyone confirm the bug only affects certs with 2048 bit keys? I > > don't see that listed anywhere in Apple's release. It's an interesting > > twist. > > > > Thanks! > > > > Norman Elton > > College of William & Mary > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at > http://www.educause.edu/groups/.<http://www.educause.edu/groups/> > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
