We had disabled "Prohibit ARP Spoofing" at one point to appease the 14+ code. The issue was resolved in a later release and we enabled it again.
We are not currently seeing any issues 8.5.0.11, moving to 13 now. Thanks From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Enfield, Chuck Sent: Wednesday, September 1, 2021 4:29 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) **** EXTERNAL EMAIL **** We feel your pain, Patrick! Keep up the good fight. From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Patrick McEvilly Sent: Wednesday, September 1, 2021 5:25 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) I will hold off on providing details for now but when you have to push a code upgrade in the middle of the day on the first day class it's been a rough day. We hit some major issues related to STM and then other fall out after doing the required code upgrade. We pushed the changes below at 2am this morning. It did help a bit, but issues resurfaced again at 10am. We are still on a call with Aruba TAC and don't have anything at this time to share that would help others. Patrick From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Cody Ensanian <censa...@uccs.edu<mailto:censa...@uccs.edu>> Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Wednesday, September 1, 2021 at 5:13 PM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) To all chiming in regarding the Aruba issues - thank you! I love seeing the collaboration and detail sharing. Chad - will be curious to hear if you push the band-aids to production and re-enable airwaves, if this helps your situation. -Cody From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Street, Chad A Sent: Wednesday, September 1, 2021 3:01 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) Cody and all... We are also seeing STM spikes that are impacting associations. We have also disabled all our polling ( Airwave, Orion, etc ) and reduced the client load balancing thresholds so that we have around 4K clients per controller. This seemed to help a great deal. After working with Aruba today, my understanding of the primary cause of the STM spikes is due to the MM polling the MCs. With large client loads on the MCs ( combined with all the other SNMP polling going on ), this seems to take longer and sometimes does not work. When it does not work, it bootstraps which spikes the STM process. The suggested band-aid is to block the GUI polling traffic between the MM and MC. You will lose the GUI information from your MM, but all the MC information is still present. We have applied this to our lab and we are going to push to production tonight to see if it helps. If it does help, we plan on turning back up our monitoring tools ( Airwave ). fingers crossed here is how to block the traffic: cd /md/yourrootlocation firewall-cp ipv4 deny any proto 6 ports 15260 15261 position 1 ! Chad chad.str...@emory.edu<mailto:chad.str...@emory.edu> ________________________________ From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Cody Ensanian <censa...@uccs.edu<mailto:censa...@uccs.edu>> Sent: Wednesday, September 1, 2021 11:41 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) I'm hearing issues of high cpu utilization for STM on the controllers causing issues. Maybe check your controllers and see if you are seeing the high cpu use for STM. Heard earlier today from our SE that Aruba has "identified the issue and is working on a fix." I suggest opening the TAC case so they can track it better, and help them hone in on a fix better. We're seeing the high cpu use on one of our controllers (but this controller also has higher client load). However, we have not had a flood of calls to our help desk for wireless issues (not saying they aren't happening). Our SE also said if you're experiencing the issue, disabling any system or process level debugging as helped, as well as disabling any SNMP polling. [cid:image002.jpg@01D79F4F.00C60850] -Cody UCCS From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Turner, Ryan H Sent: Wednesday, September 1, 2021 9:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13) This is a stab in the dark. With the University mostly shutdown since the Spring of 2020 (=not operating in standard mode and most people work from home), we got campus upgraded from 6.X to 8.X code base. We've also installed many 515 series APs. We are getting a large number of complaints in large classrooms that connecting to things like eduroam takes a long time. Looking into the connection, we see many incomplete RADIUS challenges. The general complaints are 'we come into the classroom, and for some folks it can take up to 5 minutes to get connected'. The odd thing is that our RADIUS infrastructure is very large, polished and load shared, and we can see no performance issues with any of the RADIUS servers. We have begun reducing power in the large classrooms to make association issues better, but so far that hasn't changed much. We anticipate opening a ticket with Aruba, soon. We do seem to see the most complaints in the big classrooms. But I do keep going back to the RADIUS Challenges incomplete. I know if no reason for those not to complete unless the connection is broken midway. Has anyone else seen something like this? Ryan Turner Head of Networking Communication Technologies | Information Technology Services r...@unc.edu<mailto:r...@unc.edu> +1 919 445 0113 (Office) +1 919 274 7926 (Mobile) ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam10.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Furldefense.proofpoint.com-252Fv2-252Furl-253Fu-253Dhttps-2D3A-5F-5Fnam11.safelinks.protection.outlook.com-5F-2D3Furl-2D3Dhttps-2D253A-2D252F-2D252Fwww.educause.edu-2D252Fcommunity-2D26data-2D3D04-2D257C01-2D257Ccstree2-2D2540EMORY.EDU-2D257C5708a9f9983c4d7c2e2a08d96d5eeb0d-2D257Ce004fb9cb0a4424fbcd0322606d5df38-2D257C0-2D257C0-2D257C637661076706815129-2D257CUnknown-2D257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-2D253D-2D257C1000-2D26sdata-2D3Dl9j1wMMeqkODSIIY-2D252BItYoCpXWA3zx8poT1eW9r7q74I-2D253D-2D26reserved-2D3D0-2526d-253DDwMFAg-2526c-253DWO-2DRGvefibhHBZq3fL85hQ-2526r-253DNEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM-2526m-253D0BzeKRFf2ZTlNo1vPO3f9ZSkIejEwfL897AivHQD88E-2526s-253DTsveZv-5FyrqOZM3uRPqueu25dG-5FMYoM8HeQy5KWvehYc-2526e-253D-26data-3D04-257C01-257Ccae104-2540PSU.EDU-257Cac5c4735929a4b89891708d96d8f05b1-257C7cf48d453ddb4389a9c1c115526eb52e-257C0-257C0-257C637661283317006565-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C1000-26sdata-3DAKjIgGh4Jsp8YR4ABtm8Eo0HYpbHoVJ8Cpc5hGL2zvY-253D-26reserved-3D0&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=wLdFd1ZL0ZcUbF2oBZW_IGbytKgpgr2PoVwEtmgISwA&m=UwLAZACTlEGCzxpkfpSc9tXz5P8iqDko9eFE7q8DKAk&s=UeXO0ufQXbJP8REj19ND-vFhlOnMgU8R_M5fky0FYqY&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam10.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Furldefense.proofpoint.com-252Fv2-252Furl-253Fu-253Dhttps-2D3A-5F-5Fnam11.safelinks.protection.outlook.com-5F-2D3Furl-2D3Dhttps-2D253A-2D252F-2D252Fwww.educause.edu-2D252Fcommunity-2D26data-2D3D04-2D257C01-2D257Ccstree2-2D2540EMORY.EDU-2D257C5708a9f9983c4d7c2e2a08d96d5eeb0d-2D257Ce004fb9cb0a4424fbcd0322606d5df38-2D257C0-2D257C0-2D257C637661076706825122-2D257CUnknown-2D257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-2D253D-2D257C1000-2D26sdata-2D3D4QrFiIfK-2D252BSQsyoRsdeBr8H-2D252Fp4CC0OBCinGCtj62orPw-2D253D-2D26reserved-2D3D0-2526d-253DDwMFAg-2526c-253DWO-2DRGvefibhHBZq3fL85hQ-2526r-253DNEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM-2526m-253D0BzeKRFf2ZTlNo1vPO3f9ZSkIejEwfL897AivHQD88E-2526s-253DIWCxtFwhcNsIanWp54h2ygOgHubpieQnTHooYjzIDUg-2526e-253D-26data-3D04-257C01-257Ccae104-2540PSU.EDU-257Cac5c4735929a4b89891708d96d8f05b1-257C7cf48d453ddb4389a9c1c115526eb52e-257C0-257C0-257C637661283317016559-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C1000-26sdata-3D4qLyl-252F7DRBBv-252FIa-252Fa2yfMy4I-252BfG8abk4WLPy373MoBA-253D-26reserved-3D0&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=wLdFd1ZL0ZcUbF2oBZW_IGbytKgpgr2PoVwEtmgISwA&m=UwLAZACTlEGCzxpkfpSc9tXz5P8iqDko9eFE7q8DKAk&s=Xar_t85NP0pONSf14NS_8I4EN4wafAfrQt2_oTucECc&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam10.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Furldefense.proofpoint.com-252Fv2-252Furl-253Fu-253Dhttps-2D3A-5F-5Fwww.educause.edu-5Fcommunity-2526d-253DDwMFAg-2526c-253DWO-2DRGvefibhHBZq3fL85hQ-2526r-253DNEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM-2526m-253D0BzeKRFf2ZTlNo1vPO3f9ZSkIejEwfL897AivHQD88E-2526s-253DohJBe-5FyJMB4HGLbadf6V8OwjG7NihSfMR6BQrrWo7go-2526e-253D-26data-3D04-257C01-257Ccae104-2540PSU.EDU-257Cac5c4735929a4b89891708d96d8f05b1-257C7cf48d453ddb4389a9c1c115526eb52e-257C0-257C0-257C637661283317016559-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C1000-26sdata-3DVGmcQ5FBHID6Y1I97SbNDxRE1ZiS-252FQozY1-252BKL7yPqaQ-253D-26reserved-3D0&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=wLdFd1ZL0ZcUbF2oBZW_IGbytKgpgr2PoVwEtmgISwA&m=UwLAZACTlEGCzxpkfpSc9tXz5P8iqDko9eFE7q8DKAk&s=Anf0Wj7GyWiP7765dMjfZQagPGh-8i9Gbfn66GAEjo4&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam10.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Furldefense.proofpoint.com-252Fv2-252Furl-253Fu-253Dhttps-2D3A-5F-5Fwww.educause.edu-5Fcommunity-2526d-253DDwMFAg-2526c-253DWO-2DRGvefibhHBZq3fL85hQ-2526r-253DNEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM-2526m-253D0BzeKRFf2ZTlNo1vPO3f9ZSkIejEwfL897AivHQD88E-2526s-253DohJBe-5FyJMB4HGLbadf6V8OwjG7NihSfMR6BQrrWo7go-2526e-253D-26data-3D04-257C01-257Ccae104-2540PSU.EDU-257Cac5c4735929a4b89891708d96d8f05b1-257C7cf48d453ddb4389a9c1c115526eb52e-257C0-257C0-257C637661283317026553-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C1000-26sdata-3DdNmasm0BwEkbMa6D6pze8y4srf8xJqDP94VjjNGQhnQ-253D-26reserved-3D0&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=wLdFd1ZL0ZcUbF2oBZW_IGbytKgpgr2PoVwEtmgISwA&m=UwLAZACTlEGCzxpkfpSc9tXz5P8iqDko9eFE7q8DKAk&s=9bVK2ghDfVLOMDcAaCpvmnT_Z9jpcOAJlptA5VV-zLs&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__nam10.safelinks.protection.outlook.com_-3Furl-3Dhttps-253A-252F-252Fwww.educause.edu-252Fcommunity-26data-3D04-257C01-257Ccae104-2540PSU.EDU-257Cac5c4735929a4b89891708d96d8f05b1-257C7cf48d453ddb4389a9c1c115526eb52e-257C0-257C0-257C637661283317026553-257CUnknown-257CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0-253D-257C1000-26sdata-3DhCvmDPbRaT3j2vrGICvTqtOALkqKufKdlBYPNxNKZSU-253D-26reserved-3D0&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=wLdFd1ZL0ZcUbF2oBZW_IGbytKgpgr2PoVwEtmgISwA&m=UwLAZACTlEGCzxpkfpSc9tXz5P8iqDko9eFE7q8DKAk&s=wuW1FuigSqYbgVEK8LOOZ3OqsoxTbzkZuzvbIlgIc30&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMFAg&c=bKRySV-ouEg_AT-w2QWsTdd9X__KYh9Eq2fdmQDVZgw&r=wLdFd1ZL0ZcUbF2oBZW_IGbytKgpgr2PoVwEtmgISwA&m=UwLAZACTlEGCzxpkfpSc9tXz5P8iqDko9eFE7q8DKAk&s=xbRinT8ynP78dqupiDaUyC4sJSniq3nWSSVnIlUdfYk&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
