Hi,
FWIW: we've had a pretty long TAC case because of an IPv6 address
tracking bug. We first noticed this issue in March '16 (iirc running 8.0
code back then), but didn't get enough reports from users to track it
down. More user complaints a year later, so contacted Cisco in March '17.
Long story short: after countless attempts on both sides, we managed to
reproduce and narrow down, and Cisco identified CSCvg40792 somewhere in
November '17.
Fixed in 8.2MR7, 8.3MR4, 8.5MR3. We confirmed the fix both on an 8.3
interim and on 8.2MR7 which we're running in production since it has
been released.
Regards,
Jeroen van Ingen, Network Engineer
University of Twente | Library, ICT Services & Archive (LISA)
P.O.Box 217, 7500 AE Enschede, The Netherlands
On 28-08-18 23:25, Price, Jamie G wrote:
Hi Christina,
What we see with our IPv6 wireless:
1.SLAAC hands out addresses, you can join.
2.While running pings PCs and older MACS the pings will dropout and
only High Sierra will come back after about 4-6 pings with a new address.
We ran some captures over the air and full communication appears to stop
from the AP (not being a client based issue). We have a case open with
TAC and we are pretty sure we hit a bug. We are looking forward to
stable 8.5 code.
Best of luck with the issue!
-Jamie
*Jamie Price │Senior Network Engineer*
303.724.8970| [email protected]
1945 N Wheeling Street, MS F408, Denver, CO, US 80045
*From:*The EDUCAUSE Wireless Issues Constituent Group Listserv
<[email protected]> *On Behalf Of *Brady J. Ballstadt
*Sent:* Tuesday, August 28, 2018 3:06 PM
*To:* [email protected]
*Subject:* Re: [WIRELESS-LAN] 802.11R
We are on 8.3.143.0 on a pair of 8510s. Had some weird behavior at the
start that has seemed to work itself out. Currently investigating some
roaming issues that may or not be an issue with the code.
Brady Ballstadt
UITS
Get Outlook for iOS <https://aka.ms/o0ukef>
------------------------------------------------------------------------
*From:*The EDUCAUSE Wireless Issues Constituent Group Listserv
<[email protected]
<mailto:[email protected]>> on behalf of Christina Klam
<[email protected] <mailto:[email protected]>>
*Sent:* Tuesday, August 28, 2018 4:02:00 PM
*To:* [email protected]
<mailto:[email protected]>
*Subject:* Re: [WIRELESS-LAN] 802.11R
Another question, has anyone installed 8.3.143.0 yet? It seems to have
a number of fixes for 2800/3800.
Christina Klam
Network Engineer
Institute for Advanced Study
+1 609-734-8154
[email protected] <mailto:[email protected]>
----- Original Message -----
From: "C. Klam" <[email protected] <mailto:[email protected]>>
To: [email protected]
<mailto:[email protected]>
Sent: Tuesday, August 28, 2018 4:45:56 PM
Subject: Re: [WIRELESS-LAN] 802.11R
Jamie,
Can you describe more the IPV6 issue with 8.3.133.0? For about a year
we have been running that code. And strangely enough, we have had
issues with iOS not staying connected when roaming. As all modern
systems try IPv6 before IPv4, if there is an issue with IPv6, this would
explain the delay.
Christina Klam
Network Engineer
Institute for Advanced Study
+1 609-734-8154
[email protected] <mailto:[email protected]>
----- Original Message -----
From: "Price, Jamie G" <[email protected]
<mailto:[email protected]>>
To: [email protected]
<mailto:[email protected]>
Sent: Tuesday, August 28, 2018 4:34:18 PM
Subject: Re: [WIRELESS-LAN] 802.11R
We are running 2 sets of 8510’s and 1 set of 5520’s on 8.3.133.0.
We are running 802.11k/v/r and it has made a tremendous difference in
our roaming (and many less complaints). We have an IPv6 issue with
8.3.133.0 with IPv6. On PCs, it times out. On MACs it times out and
recovers. This is not a production network- but it will be once we can
find code without this bug. Otherwise 8.3.133.0 has been great.
Jamie Price │Senior Network Engineer
303.724.8970| [email protected] <mailto:[email protected]>
1945 N Wheeling Street, MS F408, Denver, CO, US 80045
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
<[email protected]
<mailto:[email protected]>> On Behalf Of Joseph Bernard
Sent: Tuesday, August 28, 2018 1:27 PM
To: [email protected]
<mailto:[email protected]>
Subject: Re: [WIRELESS-LAN] 802.11R
Our CTO just mentioned this today as we have passed the peak wireless
stress point without issues for today’s class changes. While this isn’t
answering your question, I thought I might share what we have. We have
close to 30,000 wireless devices connected and have our F5 load
balancing 6 VMs running FreeRADIUS that in turn query our eDirectory
backend through LDAP. One feature that you should make sure is enabled
is “config radius ext-source-ports enable”.
On 8540’s, you should see this if it’s on:
(Cisco Controller) >show radius queue
Max Radius Queues Per Server..................... 16
…[snip]…
Thanks,
Joseph B.
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
<[email protected]<mailto:[email protected]
<mailto:[email protected]%3cmailto:[email protected]>>>
on behalf of "Phillips, Rick"
<[email protected]<mailto:[email protected]
<mailto:[email protected]%3cmailto:[email protected]>>>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv
<[email protected]<mailto:[email protected]
<mailto:[email protected]%3cmailto:[email protected]>>>
Date: Tuesday, August 28, 2018 at 3:11 PM
To:
"[email protected]<mailto:[email protected]>
<mailto:[email protected]%3cmailto:[email protected]%3e>"
<[email protected]<mailto:[email protected]
<mailto:[email protected]%3cmailto:[email protected]>>>
Subject: [WIRELESS-LAN] 802.11R
We recently promoted eduroam to the primary network at the University of
Kentucky. We utilize Cisco WLC 8540’s (2 HA pairs), Cisco APs (mostly
3702’s) and Cisco ISE for portals, authentication and authorization. We
were seeing the ISE authentication service jump up in latency and we
would get calls that users could not connect to eduroam. We have
determined that our size and number of authentications, particularly at
each class change event, are such that we should be using hardware load
balancing. We are in process of setting that up but each class
transition results in a short period where authentication latency can
get to be a problem and users have a less than desirable experience.
During the time we are building this out our engineers are wanting to
enable 802.11R (Fast Transition) on our controllers. We currently do not
support this feature on the WLCs. We are running 8.2.166.0 code on our
WLCs and we have heard other have issues with this code release. While
we are not experiencing the same results or hitting the same bugs, I am
concerned that turning on this feature might have ramifications related
to the code release we are running.
My question to the group is who has used 802.11R and would you be
willing to shoot me a private message with configuration and/or your
results?
Thanks in advance,
Rick
Rick Phillips
Executive Director, Networking & Infrastructure
Information Technology Services
University of Kentucky
301 Rose St. Hardymon Building Rm 102
Lexington, KY 40506-0496
(859) 257-4106 (Office)
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/discuss.
