Ian, iOS 14.0 introduced private MAC addresses. It was broken and devices spoke with both their real MACs and their private MACs. This caused the controllers to blacklist the devices for ARP spoofing. Once the timer expired, the device reconnected again for a while... 14.0 and 14.1 were broken this way. 14.2 fixed it and 14.3 worked fine. I have recently been receiving some tickets for 14.7 and it seems like the bad behavior is back. Our solution to restore connectivity is to have them turn off the private MAC address setting for our SSID(s). Thanks, Brad
From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Ian Lyons Sent: Wednesday, September 1, 2021 10:32 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) [EXTERNAL SENDER] Same environment (6.x to 8.x) but no, radius is fine for us. We are on 535's with older 325/303's. (we are AOS 8.6.0.10 which seems -knock on wood -very stable) Our issue is with IOS 14.7 and Crestron Airmedia2's -I suspect the privacy settings are causing us issues. Same Apple hardware ~ 14.3 or earlier is fine. Not to hijack your thread, Ryan. Cheers Ian J Lyons Network Architect - Rollins College 401.413.1661 Cell 407.628.6396 Desk ________________________________ From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Turner, Ryan H <rhtur...@email.unc.edu<mailto:rhtur...@email.unc.edu>> Sent: Wednesday, September 1, 2021 11:27 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) * External Email * This is a stab in the dark. With the University mostly shutdown since the Spring of 2020 (=not operating in standard mode and most people work from home), we got campus upgraded from 6.X to 8.X code base. We've also installed many 515 series APs. We are getting a large number of complaints in large classrooms that connecting to things like eduroam takes a long time. Looking into the connection, we see many incomplete RADIUS challenges. The general complaints are 'we come into the classroom, and for some folks it can take up to 5 minutes to get connected'. The odd thing is that our RADIUS infrastructure is very large, polished and load shared, and we can see no performance issues with any of the RADIUS servers. We have begun reducing power in the large classrooms to make association issues better, but so far that hasn't changed much. We anticipate opening a ticket with Aruba, soon. We do seem to see the most complaints in the big classrooms. But I do keep going back to the RADIUS Challenges incomplete. I know if no reason for those not to complete unless the connection is broken midway. Has anyone else seen something like this? Ryan Turner Head of Networking Communication Technologies | Information Technology Services r...@unc.edu<mailto:r...@unc.edu> +1 919 445 0113 (Office) +1 919 274 7926 (Mobile) ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cilyons%40ROLLINS.EDU%7Ce2e13ef2ff654bab861708d96d5cfb60%7Cb8e8d71a947d41dd81dd8401dcc51007%7C0%7C0%7C637661068384958917%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=oIZc8yvMlX8TyJuTUk0ZTRxKNSK%2BGUgco9fdKVA1vJA%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
