Hello everyone, We’ve been having issues on 8.10.130.0 where a client could connect to a certain 2800/3800/9120 but didn’t have network access. Since the client was already connected they couldn’t roam to another AP.
We first thought it to be this bug: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv78366 Cisco thinks this is only cosmetic… so they now think we are facing this bug: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv78719%20/?rfs=iqvred Their (temporary) solution is to Step 1 Choose WLANs and click the WLAN ID. Step 2 In the Advanced tab, check or uncheck the 11ac MU-MIMO check box. Step 3 In the 802.11ax BSS Configuration section, check or uncheck the Down Link MU-MIMO and Up Link MU-MIMO disable MU-MIMO on 802.11ax APs. I’m not to keen on doing this. It makes our 2800/3800/9120’s pretty worthless. We also saw these bugs: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk68674/?rfs=iqvred https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh04804/?rfs=iqvred We are waiting for MR4 were hopefully these bugs will be gone (We can only hope 😊) Regards, Mathieu Sturm Hoofdmedewerker Netwerkbeheer [https://www.hogent.be/www/assets/Image/logo2018.png] Directie Financiën, Infrastructuur en IT Afdeling Netwerkbeheer Campus Schoonmeerssen - Gebouw B Lokaal B0.75 Valentin Vaerwyckweg 1 - 9000 Gent +32 9 243 35 23 www.hogent.be<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cmathieu.sturm%40hogent.be%7C86879fbc6e8c49ab13ff08d67ac4edef%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C0%7C636831383554731873&sdata=8NfYjNEE4XDViDT6wMtCYFa0cY8g5CXqS9kf7VtYBcU%3D&reserved=0> Van: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> Namens Phill Solomon Verzonden: donderdag 1 oktober 2020 1:15 Aan: [email protected] Onderwerp: Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues We have upgrade 2/3 WLC pairs from 8.5.151 to 8.10.103.0 – seems to be going ok with the exception of DNAC-C reporting slower / more DHCP failures – while we have received no support calls – just wondering if anyone else has seen this? Mathieu, thanks for the tip on the bug, now watching that too. thanks Phill Solomon Senior Network Engineer Deakin University, IS - AV & Networks, ICT Infrastructure Services, eSolutions • Phone: +61 3 924 46069 From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> On Behalf Of Mathieu Sturm Sent: Thursday, 24 September 2020 10:13 PM To: [email protected]<mailto:[email protected]> Subject: Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues Little update, I came across this bug id: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu65125/?rfs=iqvred<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbst.cloudapps.cisco.com%2Fbugsearch%2Fbug%2FCSCvu65125%2F%3Frfs%3Diqvred&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528043511&sdata=oRxCC%2BNXXmwGOXEMbFpukuN2uMj9Xjg1%2FUgBzxIbH%2FE%3D&reserved=0> (thanks Jeff for the hint about version 8.10.139.43) So I decided to change the settings on the SSID from WPA2 + WPA3 back to WPA+WPA2 and this seems to have resolved our issues (we’re testing right now). My wife is about to deliver our 2nd daughter so I will ask my colleagues to update if possible. Regards, Mathieu Sturm Hoofdmedewerker Netwerkbeheer [https://www.hogent.be/www/assets/Image/logo2018.png] Directie Financiën, Infrastructuur en IT Afdeling Netwerkbeheer Campus Schoonmeerssen - Gebouw B Lokaal B0.75 Valentin Vaerwyckweg 1 - 9000 Gent +32 9 243 35 23 www.hogent.be<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528053512&sdata=uSvsKRztnJ9S70n420KbR622SG%2Bs1tDC8vngr2MjP2o%3D&reserved=0> Van: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> Namens Tristan Gulyas Verzonden: donderdag 24 september 2020 7:22 Aan: [email protected]<mailto:[email protected]> Onderwerp: Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues Hi, Watching this thread closely. We're currently on 8.5.151 but need to migrate to an 8.10 release for the 9130ax's. If anyone has any TAC cases or bug IDs that may reference this issue, that would be super useful! Tristan -- TRISTAN GULYAS Senior Network Engineer Technology Services, eSolutions Monash University 738 Blackburn Road Clayton 3168 Australia E: [email protected]<mailto:[email protected]> monash.edu<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmonash.edu%2F&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528063501&sdata=EYV0uFpBTglzm79TX2xp29PiZoeaB2kt19CK64SksQE%3D&reserved=0> On 24 Sep 2020, at 2:23 am, Jeffrey D. Sessler <[email protected]<mailto:[email protected]>> wrote: You probably want 8.10.139.43, which is fully BU supported and suggested for production. This is a link to the release notes, I’d check to see if any of these apply. Also, verify your timeouts aren’t set too low for the radius responses coming from eduroam. I ran into this at Cal Poly in Pomona, where I could not interactively login to eduroam, but I could save my credentials and it worked just fine. I suspected a timeout set too low (this was Aruba equipment however). Had an entire group there for a meeting that faced the same issues. https://www.cisco.com/web/software/280926587/153915/Release_Notes_8_10_139_43.pdf<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisco.com%2Fweb%2Fsoftware%2F280926587%2F153915%2FRelease_Notes_8_10_139_43.pdf&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528063501&sdata=wN%2FG7JCRh1PYIe8%2BdZMh2jpzS0yM9Sl%2FsA1VWYIpWic%3D&reserved=0> Jeff From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> On Behalf Of Mathieu Sturm Sent: Wednesday, September 23, 2020 3:07 AM To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues Hello, We updated our Cisco 5520 controllers from 8.5.151.0 to 8.10.130.0. Since the update we have issues with eduroam. Before the update the students and other users could select the ssid eduroam and fill in the credentials and they were connected. Now we have to update the NIC’s (mostly AX200) to the latest version and/or update to W10 version 2004. And even then we often have to configure the SSID manually and save credentials. We see that the users get to the ISE and are permitted but the WLC doesn’t always see this permit. Or the ISE gives a certificate warning (I’ve checked our certificates, all are valid). Is anyone experiencing the same thing? We went tot 8.10.130.0 for our new 9120’s. Mathieu Sturm Hoofdmedewerker Netwerkbeheer <image001.png> Directie Financiën, Infrastructuur en IT Afdeling Netwerkbeheer Campus Schoonmeerssen - Gebouw B Lokaal B0.75 Valentin Vaerwyckweg 1 - 9000 Gent +32 9 243 35 23 www.hogent.be<https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528073502&sdata=ZVrnVmDR1wxaaSsdx0NnzOhKi0Ly2JXrGnluBhcksB0%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528083504&sdata=%2BC9x3BBfwgWsPaoD7bFhx%2BHqpzfbZf0OqFLu%2FTpD1Tg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528083504&sdata=%2BC9x3BBfwgWsPaoD7bFhx%2BHqpzfbZf0OqFLu%2FTpD1Tg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528093494&sdata=hZsCmfFJwysYXcJzDANHZh%2B2i1T3gkbTQvkqnqH1IB0%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528103494&sdata=CRHYgGNa6K0%2BZJUfSyV3RoO61GIfUXWDcCRL6asIFuU%3D&reserved=0> Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone. Deakin University does not warrant that this email and any attachments are error or virus free. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cmathieu.sturm%40HOGENT.BE%7C8f16fa3f458248ddd86808d86596c4fd%7C5cf7310e091a4bc5acd726c721d4cccd%7C1%7C1%7C637371045528103494&sdata=CRHYgGNa6K0%2BZJUfSyV3RoO61GIfUXWDcCRL6asIFuU%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
