We only used spectrum-load balance mode in very high dense classrooms, but we have this feature turned off now. We now also have band steering turned off based on recommendation we got from an Aruba ACE engineer. The band steering feature was causing problems mainly amongst the Apple smartphones.
Edward Ip Algonquin College | 1385 Woodroffe Avenue | Room C316 | Ottawa | Ontario | K2G 1V8 | Canada algonquincollege.com From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Wright, Don Sent: Monday, February 03, 2014 11:44 AM To: [email protected] Subject: Re: [WIRELESS-LAN] OS X 802.1x auth issue You mentioned "load balance mode", were you running band-steering and spectrum-load-balancing at the same time on the same APs? Check with Aruba, but I think they will tell you this is not a recommended practice and better to stick with band-steering only assuming your coverage will support both radios. Also, I read somewhere that recent MacOS updates already try to "band-steer" the client to the 5GHZ radio? If that's true, your controller setting really isn't having an affect anyway, and the client are getting themselves into trouble.. - Don On Fri, Jan 31, 2014 at 2:03 PM, Edward Ip <[email protected]<mailto:[email protected]>> wrote: When we did a packet capture, we saw that the Mac clients would try to associate on the 2.4GHz band and then move over to the 5GHz band and then back. We saw this happen quite a bit. This made the re association longer when our clients roamed. Sometimes in certain areas of our college if 2 APs are within range with about the same SNR, the Mac client would get shifted between the two APs due to load balance mode turned on. Due to the cert issue and the re association process it would drive our Mac clients (err...students) crazy around crunch time. Edward Ip Algonquin College | 1385 Woodroffe Avenue | Room C316 | Ottawa | Ontario | K2G 1V8 | Canada algonquincollege.com<http://algonquincollege.com> From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Norman Elton Sent: Friday, January 31, 2014 1:57 PM To: [email protected]<mailto:[email protected]> Subject: Re: [WIRELESS-LAN] OS X 802.1x auth issue Interesting. What were the band-steering symptoms? Any way to pin the problem down to band-steering, or was it trial and error? Norman On Fri, Jan 31, 2014 at 1:44 PM, Edward Ip <[email protected]<mailto:[email protected]>> wrote: I agree with Jeff, we recently disabled band steering on our Aruba controllers and it has helped a bit. Edward Ip Algonquin College | 1385 Woodroffe Avenue | Room C316 | Ottawa | Ontario | K2G 1V8 | Canada algonquincollege.com<http://algonquincollege.com> From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Jeffrey Sessler Sent: Friday, January 31, 2014 1:40 PM To: [email protected]<mailto:[email protected]> Subject: Re: [WIRELESS-LAN] OS X 802.1x auth issue We've seen the cert issue, and OS 10.8 and 10.9 don't seem to like band/load-steering. The cert issue coupled with band-steering and/or load-steering make the Mac's very unhappy. Jeff >>> On Friday, January 31, 2014 at 10:05 AM, in message >>> <CAPCnwUdAuZqKuFwOycKrGmXgiKCrb_Wy82=o5xc3be+o7an...@mail.gmail.com<mailto:CAPCnwUdAuZqKuFwOycKrGmXgiKCrb_Wy82=o5xc3be+o7an...@mail.gmail.com>>, >>> Norman Elton <[email protected]<mailto:[email protected]>> wrote: And a follow up. Has anyone actually confirmed that this bug is actually causing client complaints? We do seem to riding a wave of complaints from MacBook owners. We are only just now starting to change cert trust settings. Hopefully we'll know more next week as students have a chance to test things out over the weekend. Norman Elton College of William & Mary On Fri, Jan 31, 2014 at 12:59 PM, Norman Elton <[email protected]<mailto:[email protected]>> wrote: >> It also appears specific to certs based on 2048 bit keys. Also there is no >> cert validation delay upon initial connect... only when attempting to >> reauth... ie after a death or a roam event. > > Can anyone confirm the bug only affects certs with 2048 bit keys? I > don't see that listed anywhere in Apple's release. It's an interesting > twist. > > Thanks! > > Norman Elton > College of William & Mary ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.<http://www.educause.edu/groups/> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
