Tim,

We use:

EAP Method = PEAP
Phase 2 = MSCHAPv2
CA Certificate = Unspecified
Identity = [username]
Password = [password]

The credentials trigger the return of a filter-ID from the RADIUS server to
the controller, which the controller then uses to put the user into a VLAN.

Some android devices that are running version 11 no-longer have an option
of “unspecified” under CA Certificate, and none of the other choices seem
to work.




__________________________________
__________________________________

Fishel Erps,
Sr. Network & Infrastructure Engineer
School of Visual Arts
<x-apple-data-detectors://0/1>136 W 21st St., 8th Floor
<x-apple-data-detectors://0/1>
<x-apple-data-detectors://0/1>New York, NY, 10011
<x-apple-data-detectors://0/1>
LL: 212-592-241 <212-592-2416>6
E:  [email protected]
_______________________________

Please excuse any typographical
errors as this e-mail has been sent
from my mobile device
_______________________________


On Sep 22, 2020, at 12:04, Tim Cappalli <
[email protected]> wrote:


Can you please provide some basic details?

   - What exactly is "broken"?
   - Which EAP method?
   - Which credential type?
   - How is/was the supplicant provisioned?
   - Are only new devices affected or just upgraded devices?

------------------------------
*From:* The EDUCAUSE Wireless Issues Community Group Listserv <
[email protected]> on behalf of Fishel Erps <
[email protected]>
*Sent:* Tuesday, September 22, 2020 12:02
*To:* [email protected] <[email protected]
>
*Subject:* [WIRELESS-LAN] Android 11 and WPA-Enterprise

Hi,

v11 seems to have broken credential authentication for RADIUS and
WPA2-Enterprise/802.1x.

Has anyone found a workaround?



__________________________________
__________________________________

Fishel Erps,
Sr. Network & Infrastructure Engineer
School of Visual Arts
136 W 21st St., 8th Floor
New York, NY, 10011
LL: 212-592-2416
C:  347-539-6380
E:  [email protected]
_______________________________

Please excuse any typographical
errors as this e-mail has been sent
from my mobile device
_______________________________

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community
list. If you want to reply only to the person who sent the message, copy
and paste their email address and forward the email reply. Additional
participation and subscription information can be found at
https://www.educause.edu/community
<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ctim.cappalli%40MICROSOFT.COM%7Cc513832f4fde442dae2508d85f10ebc1%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637363873568555671&sdata=0GlPZcJBj%2B7eA4oEvpfBfuCWaZxZqCpEGym%2FG18SrXk%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community
list. If you want to reply only to the person who sent the message, copy
and paste their email address and forward the email reply. Additional
participation and subscription information can be found at
https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Reply via email to