Thanks for the advice and help. We have tried importing the Root cert for WiFi with no luck. However we did find something interesting using packet captures. For AOS 6, during the DHCP negotiation, we found that both the discover and request messages from the S8 are received by the DHCP server but have "don't fragment" set to 1. The DHCP server is sending both the offer and ack with "don't fragment" set to 0, but the controller doesn't send the ack to the S8. For the S4, all messages have "don't fragment" is set to 0. As for AOS 8.5, the option "don't fragment" is set the same as above with all messages being sent and received by both devices, controller and DHCP server.
Ronald King Chief Information Security Officer Office of Information Technology (757) 823-2916 (Office) [email protected]<mailto:[email protected]> www.nsu.edu<http://www.nsu.edu/> @NSUCISO (Twitter) [NSU_logo_horiz_tag_4c - Smaller] From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> On Behalf Of King, Ronald A. Sent: Wednesday, September 11, 2019 3:02 PM To: [email protected] Subject: Re: [WIRELESS-LAN] Samsung S8 DHCP Failure Thanks. We will give it a try. Ronald King Chief Information Security Officer Office of Information Technology (757) 823-2916 (Office) [email protected]<mailto:[email protected]> www.nsu.edu<http://www.nsu.edu/> @NSUCISO (Twitter) [NSU_logo_horiz_tag_4c - Smaller] From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> On Behalf Of Floyd, Brad Sent: Wednesday, September 11, 2019 2:59 PM To: [email protected]<mailto:[email protected]> Subject: Re: [WIRELESS-LAN] Samsung S8 DHCP Failure Ron, We had a few issues with Android somewhere around the Oreo or Pie updates where devices that did not (by default) trust our CA (InCommon) and were not able to connect to our 802.1X network. On those devices, we had to manually install the root certificate. Like I said, it was only a few devices that had this issue. Other than that, we haven't had major issues with Samsung devices. Thanks, Brad From: The EDUCAUSE Wireless Issues Community Group Listserv [mailto:[email protected]] On Behalf Of King, Ronald A. Sent: Wednesday, September 11, 2019 12:29 PM To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] Samsung S8 DHCP Failure Anyone else having an issue with connecting to some Samsung Android devices to their wireless environment? We have tested and confirmed that a Samsung S4 authenticates and acquires a DHCP address on our Aruba AOS 8 network and Aruba 6 network (in process of mass conversion to new AOS). However, for a Samsung S8, we see that the AAA authentication succeeds, but, the DHCP response from the DHCP server is either not received or not applied. We have confirmed the DHCP server is sending it. We are working with Aruba to see what the issue is, but, we have not upgraded the APs or code on the AOS6 network, and it doesn't matter the AP. Yes, it was working before. The only change was an Android update to the Samsung S8. We have Googled this and found a couple of instances, including one from on this Listserver from March 2017. Thanks, Ron Ronald King Chief Information Security Officer Office of Information Technology (757) 823-2916 (Office) [email protected]<mailto:[email protected]> www.nsu.edu<http://www.nsu.edu/> @NSUCISO (Twitter) [NSU_logo_horiz_tag_4c - Smaller] ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
