Re: [WIRELESS-LAN] Your eduroam semi-annual report

[Patrick McEvilly]

As the admin contact I was getting them but asked if we could add some internal 
mailing lists.  In your eduroam profile they have added a “report contact” 
option which is working well.

 

Patrick

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of "Watters, John" 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Friday, July 6, 2018 at 8:01 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
Resent-From: Patrick McEvilly 

 

What person at a school receives them? I want to see ours. 

 

Thanks. 

Sent from my iPhone


On Jul 6, 2018, at 6:40 AM, Philippe Hanset 
<005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote:

Yahya, 

 

These reports are provided to all IdPs

and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2 has 
built those reports based on the US top level RADIUS logs. 

 

Philippe 

Philippe Hanset, CEO 

ANYROAM LLC

www.anyroam.net

www.eduroam.us


On Jul 6, 2018, at 6:17 AM, Yahya M. Jaber  wrote:

Is this only for Idp’s who has it as primary network? Eduroam is a secondary 
one for us here.

 

 

Best Regards,

 

Yahya Jaber  

Sr. Wireless Engineer

IT Network & Communications – Engineering

 

Email yahya.ja...@kaust.edu.sa

Office +966 (0) 12 8081237

Mobile +966 (0) 558697555

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Friday, July 6, 2018 4:03 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Fwd: Your eduroam semi-annual report

 

All: 

 

We have run eduroam as our primary SSID for several years.  For those 
institutions that do not, but wonder what it might look like for those that do, 
I’ve included our semi annual report. 

Ryan Turner 

Senior Manager of Networking, ITS

The University of North Carolina at Chapel Hill

+1 919 274 7926 Mobile

+1 919 445 0113 Office


Begin forwarded message:

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

 

This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

[Patrick McEvilly]

I agree with you, all vendors will have bugs and it’s how the vendor responds 
is what matters.  Our experience on how Aruba handles them has been nothing but 
positive.

We have found our fair share of bugs on Aruba and yes some of them probably 
should not have been found by customers.  The support/response from Aruba has 
always been top notch.  Usually within 24 hours of reporting the bug the issue 
has been identified and the fix is in the next release.  We do allow our SE 
remote access into our infrastructure which helps with not draining our own 
resources while working to resolve these problems. Our Aruba SE takes care of 
reporting the bugs and gets them prioritized for us so for the most part we are 
hands off when dealing with Aruba support.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of "Turner, Ryan H" 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Thursday, January 9, 2020 at 12:01 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

>From my standpoint, it really isn’t about having bugs. They will all have 
>them.  Its how the vendor handles the request when it comes in.

Extreme is a very good example of this.  While we have bugs, I know I can 
escalate it all the way to the C level of executives if I don’t think an issue 
is getting handled quickly.  If I tell them a bug is critically important, then 
very soon we are on the call with a 10+ developers/coders/executives working to 
fix the problem.  While not everything has been perfect, I know that if I tell 
Extreme something is important, things get resolved.  I feel as though I’ve had 
to complain so much in the past two years over issues that I’ve become chicken 
little.  It should be obvious to an executive team monitoring an account that 
when you have significant bugs exceed 2-3 months, the wagons need to be 
circles.  It doesn’t seem to be automatic.

So, in short, its not always the existence of bugs that is the problem.  It is 
the company’s response to the problem.

Ryan

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jeffrey D. Sessler
Sent: Thursday, January 9, 2020 11:56 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

Our consortium had both Cisco and Aruba, and about 12-18 months ago the Aruba 
folks tossed in the towel and went Cisco. Various unresolvable problems with 
Aruba AP’s, including one that required a weekly reboot of a particular model.

As Lee mentions, the grass isn’t always greener, so expect that you’re going to 
run into issues with any vendor. As such, it’s going to come down to 
support/resolution and your relationship with the vendor.  Startups are great 
as they have a single product with a single code-train, so they tend to be 
pretty responsive at the start. Once they have a few years under their belt, 
and their code base starts to fragment, you’ll get to the same point you have 
with the big incumbents i.e. too many code bases to support effectively.

Jeff


From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Thursday, January 9, 2020 at 8:15 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?
All:

We’ve been an Aruba shop for a very long time and have around 10,000 access 
points.  While every relationship with vendors have their ups and downs, my 
frustration with the Aruba is finally peaking to the point that I am 
considering making the enormous move to choose a different vendor.  The biggest 
reason is with the 8.X code train, and bugs that we just don’t consider 
appropriate to use in production.  It has been one thing after the other, and 
my extremely talented and qualified Network Architect (Keith Miller) might as 
well be on the Aruba payroll as much work as he has been doing for them to 
solve bugs.  Just when we think we have one fixed, another one crops up.

The big one as of late is with 515s running 8.5 code train.  We have them 
deployed in one of our IT buildings.  Periodically, people that are connected 
to these APs in the 5G band will stop working.  To the user, they are browsing 
a site, then it becomes unresponsive.  If they are on their phone, they will 
disconnect from wifi and everything works fine on cell.  Nothing makes an 
802.11 network look worse than switching to cell and seeing a problem resolve.  
Normally, if the users disconnect then reconnect, their problems will go ahead 
(but I think they end up connecting in the 2.4G band).   We’ve been working on 
this problem with them for months.  It always seems as though we have to prove 
there is a real issue.  I’m fed up with it.  We are a sophisticated shop.  If 
we have a problem, 9 times out 

Re: [WIRELESS-LAN] securew2 onboarding server maintenance

[Patrick McEvilly]

https://status.securew2.com/



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Michael Davis 
Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Wednesday, January 29, 2020 at 10:33 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] securew2 onboarding server maintenance

Yes.

On 1/29/20 10:31 AM, Hurt,Trenton W. wrote:
Hey are other securew2 edu’s getting server maintenance messages for the 
onboarding url?

Servers are currently down for maintenance.
Public pages are still available, and all servers will be back online shortly.
We apologize for any inconvenience this may have caused.
Please write to supp...@securew2.com if you would 
like more information.
We appreciate your patience and thank you for being a SecureW2 customer.





**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community




--

 Mike Davis

 IT - University of Delaware  - 302.831.8756

 Newark, DE  19716 Email da...@udel.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Patrick McEvilly]

We have been in 8.5.0.5 for several months now with no immediate issues.  We 
are planning on upgrading our testing cluster to 8.5.0.7 this Wednesday 
morning.  We ran into an issue with 535 APs with two ethernet cables connected 
and AAA enabled on the switch ports causing the radios to shut off.  We are 
about to roll out 800 Aps in this configuration and need this one fixed.


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of "McClintic, Thomas" 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Monday, March 30, 2020 at 3:38 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

We moved to 8.5.0.6 for about 30 days. Okay so far. We moved for some features 
to 8.5 and 6 was required for a RAP issue we were having for LMS preemption.


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Enfield, Chuck
Sent: Monday, March 30, 2020 2:33 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7


 EXTERNAL EMAIL 
We’re considering 8.5.0.7 for some minor bug fixes, but we’ve been on 8.5.0.6 
for about 6 weeks and have no major problems.

Chuck

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Cesar Fernandez
Sent: Monday, March 30, 2020 3:15 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ArubaOS 8.5.0.7


Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an 
Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to the 
8.5 code we've encountered several critical issues requiring upgrades, and 
subsequent downgrades, between various 8.5.0.X versions. We have been on 
8.5.0.1 for the better part of the school year as it has been the most stable 
for our environment.  A couple weeks before the COVID-19 crisis, 3 of our 4 MD 
controllers randomly crashed.  TAC is now recommending that we upgrade to 
8.5.0.7, which was released last week.

Are there any universities on this list that have recently upgraded to 8.5.0.7? 
If so, what has been your experience?

I understand most campuses are only seeing a fraction of the normal wireless 
traffic load as most students are currently not on campus - so any feedback 
would be greatly appreciated.


Cesar Fernandez
Sr. Network Engineer
University of San Diego


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Request for outdoor wifi access point mounting example photos

[Patrick McEvilly]

We were looking around at outdoor solutions to handle three attached PoE 
devices and came across this product.  It seems like they put a lot of thought 
into the device and the features.  The fiber splice kit is a nice option to 
terminate fiber inside the enclosure.  They also have a “power over fiber” 
hybrid cable option, perhaps this product could be powered using their 48v 
remote power supply, it could be worth asking.  We have not purchased or used 
the product so we don’t have anything to share other than we thought it was a 
nice small design that had all the bits we needed.

https://www.berktek.us/eservice/US-en_US/navigate_370831/PowerGIG_OAC_Fully_Managed_and_Hardened_Gigabit_PoE_Switch.html

https://marketing.berktek.us/acton/attachment/2338/f-1768bcfd-ad84-45f3-ac9c-0dbab9a15f83/1/-/-/-/-/BSP0404.B_PowerGIG-FMK_Installation_Guide.pdf?sid=TV2:Jev9BdPwU


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Ricardo Stella 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Tuesday, July 21, 2020 at 1:21 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Request for outdoor 
wifi access point mounting example photos


One of our reqs when we added outdoor units, was to light up a couple of 
parking lots. Trenching at the time was cost prohibitive. We used AP-277 with 
external antennas as a mesh portal, and two AP-275 as mesh points, mounted in 
light poles. We use 5ghz for the mesh, and 2.4ghz for client access on both the 
portal and mesh units.

But the poles were powered remotely on a timer so we used Solis Energy 
Continuous Power Bridges. These boxes have a battery that gets recharged at 
night when the lights are on, and then they seamlessly switch to battery power 
during the day without interruption. 
https://solisenergy.com/product/continuous-power-bridge/




On Mon, Jul 20, 2020 at 9:27 PM Blake Brown 
mailto:blake.br...@mhcc.edu>> wrote:
How are you providing AC/DC power and are these setup in a mesh configuration 
or wired back into the network?

Thanks,
Blake
Sent from my cell phone


On Jul 20, 2020, at 6:20 PM, Smith, Nayef 
mailto:nayef.z.sm...@emory.edu>> wrote:
 External Email
Thanks Ricardo.  I agree with your observation regarding limited options. We’ve 
deployed the x75s using the nearest utility poles up to this point and painted 
them. We’re now challenged with providing service to our main quad with few 
utilities structures and buildings with specialized exterior surfaces.  The 
“bee hives” just aren’t subtle.

Nayef

Nayef Z Smith
Emory University - Network Services
404-727-6019

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Ricardo Stella mailto:ste...@rider.edu>>
Sent: Monday, July 20, 2020 8:47:45 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [External] Re: [WIRELESS-LAN] Request for outdoor wifi access point 
mounting example photos


When you mention "minimizing visual impact" you reduce your options big time. 
Basically for this, my suggestion is to use NEMA enclosures for the AP. For 
Aruba, you could use AP-367 for example (not sure which are the 500 equivalent) 
which can be mounted horizontally and don't require antennas. Otherwise you 
would need an enclosure for the AP and another one for the external antennas. 
The enclosures can be painted to somewhat match the exterior color.

Otherwise, omni units will need an arm that extends out, and the AP hanging 
below it. Aruvb's x75 units look like a bucket. x65 units are narrow but also 
hang below.

You can always hide them like Disney does. Except in Galaxy's Edge..




On Mon, Jul 20, 2020 at 5:26 PM Hales, David 
mailto:dha...@tntech.edu>> wrote:

We had a really good thread about this a while back, The subject line was 
“Aruba AP-3XX mounting question” and it was last July in case anyone wants to 
look in the old digests.  I’m forwarding you a copy of the thread directly.



David Hales

Network Systems Administrator

Information Technology Services

1010 N. Peachtree

Clement Hall 117

Cookeville, TN 38505

P 931-372-3983

F 931-372-6130

E dha...@tntech.edu

www.tntech.edu/its

Re: [WIRELESS-LAN] Aruba Captive Portals and Login Pages

[Patrick McEvilly]

We found the mac address was only appended if the controller actually did the 
redirect.  If the users went directly to the captive portal page (as all our 
documentation says to do) the mac address was not there and caused confusion.  
We frontend clearpass with a load balancer.  We added an option to call out to 
the InfoBlox API to resolve the IP to mac address from the DHCP lease and then 
we stuff the mac address into the url.  That has worked every time for us.

Patrick

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Tim Cappalli 
<0194c9ecac40-dmarc-requ...@listserv.educause.edu>
Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Tuesday, August 25, 2020 at 2:31 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Aruba Captive Portals and Login Pages

The MAC address is appended to the redirect URL (login-page) as the query 
parameter “mac” on all Aruba platforms automatically.

tim

From: Higgins, Benjamin J
Sent: Tuesday, August 25, 2020 14:30
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Aruba Captive Portals and Login Pages

Words from the trenches:

Anyone here know if you can pass the MAC Address to ClearPass when using a 
“login-page” in an “aaa authentication captive-portal”?  If so, how would you 
do it.

Appreciated!

--ben

--
Benjamin J. Higgins (‘97)   |  bjhigg...@wpi.edu
Manager of Network Operations   |  Office 508.831.4860
Worcester Polytechnic Institute |  Cell   508.713.1739


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?

[Patrick McEvilly]

Hello

Does anyone know if the Intel driver issue depends on the authentication 
method?  Would an open SSID that gets folks to a captive portal where we can 
have information/links to get to download/update drivers work?  For some reason 
I thought the issue was limited to 802.1x SSIDs but now I'm thinking I made 
that up.  If anyone here that might have seen the problem first hand could 
comment that would be appreciated.

Thanks

Patrick



On 9/25/20, 10:42 AM, "The EDUCAUSE Wireless Issues Community Group Listserv 
on behalf of Enfield, Chuck"  wrote:

I don’t think waiting to enable ax features will provide much relief for 
the intel driver problem.  People don’t update their wireless drivers without a 
reason, so most of the drivers that are incompatible today will still be 
incompatible next fall.  IMHO, we're just going to have to suffer through that 
problem.

My  bigger concern is IoT stuff, which is far less likely to have a fix 
available.  Anybody have ax enabled in their dorms?  How's it working there?

Thanks,

Chuck

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Norman Elton
Sent: Wednesday, September 23, 2020 9:44 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?

We uncovered the same driver issue shortly after deploying 802.11ax.
We mitigated by leaving 802.11ax enabled on the 5GHz radios, but disabling 
on the 2.4 radios. This way, compliant devices can connect and take advantage 
of 5Ghz connectivity. Those devices with faulty Intel drivers can still 
connect, albeit at substantially reduced data rates. There may be some inner 
workings of 802.11ax that I don't recall, but this worked for us!

This was on our Mist AP43s, limited to a single building. The rest of 
campus is running 802.11ac access points from Aerohive.

Norman Elton
William & Mary

On Wed, Sep 23, 2020 at 5:38 PM Lee H Badman 
<00db5b77bd95-dmarc-requ...@listserv.educause.edu> wrote:
>
> What is truly frustrating is that all vendors involved are likely members 
of the Wi-Fi Alliance, whose "interoperability" testing obviously isn't getting 
it done.
>
> One man's opinion. 
> From: The EDUCAUSE Wireless Issues Community Group Listserv 
>  on behalf of Ethan Grinnell 
> 
> Sent: Wednesday, September 23, 2020 5:31:30 PM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> Subject: Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?
>
> I recently wanted to do testing with an affected driver and was able 
> to obtain them on OEM websites instead of directly from Intel. This 
> build has the issue with WiFi6 SSID visibility: 
> https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupp
> ort.lenovo.com%2Fus%2Fen%2Fdownloads%2FDS103594&data=02%7C01%7Ccae
> 104%40PSU.EDU%7C5f85db20ad6a480d24b008d8602b46f9%7C7cf48d453ddb4389a9c
> 1c115526eb52e%7C0%7C0%7C637365086281023045&sdata=45PRv3hF8%2FwfgFb
> uci2U1gIqrlC17XAGILCWUBy%2F4Qo%3D&reserved=0
>
> Also, I noticed that the Windows 10 built-in driver for many Intel 
> WiFi chips is version 17.x (It was on my test client) which didn't 
> seem to have the issue. So that's fun, it's not just versions lower 
> than some baseline build number being affected. I didn't test many 
> different builds, but it looked like 17.x was good, 18.x, 19.x, and 
> 20.x had some affected builds. More information here: 
> https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> intel.com%2Fcontent%2Fwww%2Fus%2Fen%2Fsupport%2Farticles%2F54799%2
> Fnetwork-and-i-o%2Fwireless.html&data=02%7C01%7Ccae104%40PSU.EDU%7
> C5f85db20ad6a480d24b008d8602b46f9%7C7cf48d453ddb4389a9c1c115526eb52e%7
> C0%7C0%7C637365086281023045&sdata=lD4k2P%2BlL0%2Ba6GKJKfOCpo7OClpi
> GeJ2pLYAfUHR%2F6U%3D&reserved=0
>
> The issue is still around. Many BYOD types require users to update their 
own drivers, which few seem to do. Windows doesn't always update the drivers 
either, so there could potentially be lingering issues from outdated drivers 
for a long time.
>
> Ethan Grinnell
> CCIE R&S #39723, BS CmpE
> Network Engineer
> Office of Information Technology, Technology Infrastructure, 
> Networking Portland State University
>
>
> On Wed, Sep 23, 2020 at 2:01 PM Mike Atkins  wrote:
>>
>> We deployed our ax capable APs without ax enabled for the same Intel 
driver issues.  I wanted to test something with a flawed driver recently and 
noticed it is no longer available from Intel.  I think Intel revamped their 
downloads page at the end of last year to remove all but the newest revisions 
of drivers.   We use SecureW2 for eduroam onboarding so we can get a sense of 
drivers used by Windows devices.  We will probably enable Wi-Fi 6 ne

Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?

[Patrick McEvilly]

Thanks Brad.  Not exactly what I wanted to hear but good to know for sure.

The option mentioned by Norman Elton of disabling 802.11ax on 2.4ghz is 
interesting.  Have other done something similar?


On 10/1/20, 1:04 PM, "The EDUCAUSE Wireless Issues Community Group Listserv on 
behalf of Floyd, Brad"  wrote:

Patrick,
Neither my open guest network nor my 802.1X network appeared to a client 
with the impacted Intel drivers while the ax features were enabled. As soon as 
the ax features were disabled, the SSIDs appeared.
Thanks,
Brad

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Patrick McEvilly
Sent: Thursday, October 01, 2020 12:01 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?

[EXTERNAL SENDER]


Hello

Does anyone know if the Intel driver issue depends on the authentication 
method?  Would an open SSID that gets folks to a captive portal where we can 
have information/links to get to download/update drivers work?  For some reason 
I thought the issue was limited to 802.1x SSIDs but now I'm thinking I made 
that up.  If anyone here that might have seen the problem first hand could 
comment that would be appreciated.

Thanks

Patrick



On 9/25/20, 10:42 AM, "The EDUCAUSE Wireless Issues Community Group 
Listserv on behalf of Enfield, Chuck"  wrote:

I don’t think waiting to enable ax features will provide much relief 
for the intel driver problem.  People don’t update their wireless drivers 
without a reason, so most of the drivers that are incompatible today will still 
be incompatible next fall.  IMHO, we're just going to have to suffer through 
that problem.

My  bigger concern is IoT stuff, which is far less likely to have a fix 
available.  Anybody have ax enabled in their dorms?  How's it working there?

Thanks,

Chuck

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Norman Elton
Sent: Wednesday, September 23, 2020 9:44 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?

We uncovered the same driver issue shortly after deploying 802.11ax.
We mitigated by leaving 802.11ax enabled on the 5GHz radios, but 
disabling on the 2.4 radios. This way, compliant devices can connect and take 
advantage of 5Ghz connectivity. Those devices with faulty Intel drivers can 
still connect, albeit at substantially reduced data rates. There may be some 
inner workings of 802.11ax that I don't recall, but this worked for us!

This was on our Mist AP43s, limited to a single building. The rest of 
campus is running 802.11ac access points from Aerohive.

Norman Elton
William & Mary

On Wed, Sep 23, 2020 at 5:38 PM Lee H Badman 
<00db5b77bd95-dmarc-requ...@listserv.educause.edu> wrote:
>
> What is truly frustrating is that all vendors involved are likely 
members of the Wi-Fi Alliance, whose "interoperability" testing obviously isn't 
getting it done.
>
> One man's opinion. 
> From: The EDUCAUSE Wireless Issues Community Group Listserv 
>  on behalf of Ethan Grinnell 
> 
> Sent: Wednesday, September 23, 2020 5:31:30 PM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> Subject: Re: [WIRELESS-LAN] Status of Wi-Fi 6 Client Drivers?
>
> I recently wanted to do testing with an affected driver and was able 
> to obtain them on OEM websites instead of directly from Intel. This 
> build has the issue with WiFi6 SSID visibility: 
> https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsupp
> ort.lenovo.com%2Fus%2Fen%2Fdownloads%2FDS103594&data=02%7C01%7Ccae
> 104%40PSU.EDU%7C5f85db20ad6a480d24b008d8602b46f9%7C7cf48d453ddb4389a9c
> 1c115526eb52e%7C0%7C0%7C637365086281023045&sdata=45PRv3hF8%2FwfgFb
> uci2U1gIqrlC17XAGILCWUBy%2F4Qo%3D&reserved=0
>
> Also, I noticed that the Windows 10 built-in driver for many Intel 
> WiFi chips is version 17.x (It was on my test client) which didn't 
> seem to have the issue. So that's fun, it's not just versions lower 
> than some baseline build number being affected. I didn't test many 
> different builds, but it looked like 17.x was good, 18.x, 19.x, and 
> 20.x had some affected builds. More information here: 
> https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.
> intel

Re: [WIRELESS-LAN] Amazon Sidewalk

[Patrick McEvilly]

This might help with some of the privacy/security concerns.

https://m.media-amazon.com/images/G/01/sidewalk/final_privacy_security_whitepaper.pdf

P.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of "Sullivan, Don" 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Wednesday, June 2, 2021 at 12:20 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: [WIRELESS-LAN] Amazon Sidewalk

Our Security guy has asked me about Amazon Sidewalk and the possible concerns 
it may present for an enterprise network. I had never heard of it till he 
mentioned it and have started doing some research. It seems to be talking about 
setting up some kind of mesh network though the amazon devices but I am still a 
fuzzy on it. Has anyone else started looking into this and determined whether 
there are concerns, security or otherwise, that might impact our wireless 
networks? Just curious.

https://www.aboutamazon.com/news/devices/amazon-sidewalk-a-new-way-to-stay-connected

Don Sullivan
Network Administrator
Technology Services

205-726-2111 | office
dsulli...@samford.edu
LinkedIn
www.samford.edu
800 Lakeshore Drive
Birmingham, AL 
35229

[Samford Samford University Logo]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] MPSK SSID Names

[Patrick McEvilly]

Hi Brian

We are struggling with a name that would work for this.  We have “Harvard 
Secure” as our 802.1x SSID, “Harvard University” as our legacy MAC registered 
SSID and eduroam.  We want to use the MPSK SSID to solve for all things – IoT, 
gaming consoles, Alexa, Smart*, AV gear, for both BYOD and for infrastructure 
devices.  We are also interested in hearing what others have named their SSIDs 
or suggestions that would represent the general-purpose use of such an SSID.

Patrick

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Brian Helman 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Tuesday, June 8, 2021 at 3:04 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: [WIRELESS-LAN] MPSK SSID Names

Anyone using Aruba’s (or if other manufacturers have a similar feature) MPSK 
service?  What did you use for an SSID – looking for naming ideas.

-Brian


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13)

[Patrick McEvilly]

I will hold off on providing details for now but when you have to push a code 
upgrade in the middle of the day on the first day class it’s been a rough day.  
We hit some major issues related to STM and then other fall out after doing the 
required code upgrade.  We pushed the changes below at 2am this morning.  It 
did help a bit, but issues resurfaced again at 10am.  We are still on a call 
with Aruba TAC and don’t have anything at this time to share that would help 
others.

Patrick


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Cody Ensanian 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Wednesday, September 1, 2021 at 5:13 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

To all chiming in regarding the Aruba issues – thank you! I love seeing the 
collaboration and detail sharing.

Chad – will be curious to hear if you push the band-aids to production and 
re-enable airwaves, if this helps your situation.

-Cody


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Street, Chad A
Sent: Wednesday, September 1, 2021 3:01 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)


Cody and all...

We are also seeing STM spikes that are impacting associations.

We have also disabled all our polling ( Airwave, Orion, etc ) and reduced the 
client load balancing thresholds so that we have around 4K clients per 
controller.  This seemed to help a great deal.  After working with Aruba today, 
my understanding of the primary cause of the STM spikes is due to the MM 
polling the MCs.  With large client loads on the MCs ( combined with all the 
other SNMP polling going on ), this seems to take longer and sometimes does not 
work.  When it does not work, it bootstraps which spikes the STM process.

The suggested band-aid is to block the GUI polling traffic between the MM and 
MC.  You will lose the GUI information from your MM, but all the MC information 
is still present.  We have applied this to our lab and we are going to push to 
production tonight to see if it helps.  If it does help, we plan on turning 
back up our monitoring tools ( Airwave ).

fingers crossed

here is how to block the traffic:
cd /md/yourrootlocation
firewall-cp
 ipv4 deny any proto 6 ports 15260 15261 position 1
!

Chad
chad.str...@emory.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Cody Ensanian mailto:censa...@uccs.edu>>
Sent: Wednesday, September 1, 2021 11:41 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the 
fall with large classrooms and delayed connection times (Aruba 8.5.0.13)


I’m hearing issues of high cpu utilization for STM on the controllers causing 
issues. Maybe check your controllers and see if you are seeing the high cpu use 
for STM. Heard earlier today from our SE that Aruba has “identified the issue 
and is working on a fix.” I suggest opening the TAC case so they can track it 
better, and help them hone in on a fix better. We’re seeing the high cpu use on 
one of our controllers (but this controller also has higher client load). 
However, we have not had a flood of calls to our help desk for wireless issues 
(not saying they aren’t happening). Our SE also said if you’re experiencing the 
issue, disabling any system or process level debugging as helped, as well as 
disabling any SNMP polling.

[cid:image001.png@01D79F56.585D43B0]



-Cody

UCCS





From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Turner, Ryan H
Sent: Wednesday, September 1, 2021 9:27 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large 
classrooms and delayed connection times (Aruba 8.5.0.13)



This is a stab in the dark.  With the University mostly shutdown since the 
Spring of 2020 (=not operating in standard mode and most people work from 
home), we got campus upgraded from 6.X to 8.X code base.  We’ve also installed 
many 515 series APs.  We are getting a large number of complaints in large 
classrooms that connecting to things like eduroam takes a long time.  Looking 
into the connection, we see many incomplete RADIUS challenges.  The general 
complaints are ‘we come into the classroom, and for some folks it can take up 
to 5 minutes to get connected’.  The odd thing is that our RAD

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13)

[Patrick McEvilly]

Just a quick update that might be good information for others to have. We were 
running 8.7.1.3 since June 10th with no issues until yesterday.  We were seeing 
STM crash across several controllers and caused a significant outage in our 
wireless service.  We did the same things others here were told to do, remove 
SNMP, amp, add the FW rule etc.  We did an emergency upgrade to 8.7.1.4 today 
to address a bug that caused STM to crash.  We ran into another issue after the 
upgrade to 8.7.1.4 that would not allow about 50% of our APs to rejoin the 
controllers.  It is unknown if the issue was introduced in the new code or if 
it was pre-existing (unlikely pre-existing as we had to do a full controller 
reload last night and all the APs came back just fine). Over the course of the 
last 4-5 hours the remaining APs are still trickling in but we are not at 100%.

TAC are analyzing everything they captured on our marathon Zoom session.  For 
now, we are in a holding pattern and waiting for direction on how to proceed.  
If we make any breakthroughs we will be sure to share it here.

Patrick



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of "Enfield, Chuck" 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Wednesday, September 1, 2021 at 5:29 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

We feel your pain, Patrick!  Keep up the good fight.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Patrick McEvilly
Sent: Wednesday, September 1, 2021 5:25 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

I will hold off on providing details for now but when you have to push a code 
upgrade in the middle of the day on the first day class it’s been a rough day.  
We hit some major issues related to STM and then other fall out after doing the 
required code upgrade.  We pushed the changes below at 2am this morning.  It 
did help a bit, but issues resurfaced again at 10am.  We are still on a call 
with Aruba TAC and don’t have anything at this time to share that would help 
others.

Patrick



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Cody Ensanian mailto:censa...@uccs.edu>>
Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Wednesday, September 1, 2021 at 5:13 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

To all chiming in regarding the Aruba issues – thank you! I love seeing the 
collaboration and detail sharing.

Chad – will be curious to hear if you push the band-aids to production and 
re-enable airwaves, if this helps your situation.

-Cody


From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Street, Chad A
Sent: Wednesday, September 1, 2021 3:01 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)


Cody and all...

We are also seeing STM spikes that are impacting associations.

We have also disabled all our polling ( Airwave, Orion, etc ) and reduced the 
client load balancing thresholds so that we have around 4K clients per 
controller.  This seemed to help a great deal.  After working with Aruba today, 
my understanding of the primary cause of the STM spikes is due to the MM 
polling the MCs.  With large client loads on the MCs ( combined with all the 
other SNMP polling going on ), this seems to take longer and sometimes does not 
work.  When it does not work, it bootstraps which spikes the STM process.

The suggested band-aid is to block the GUI polling traffic between the MM and 
MC.  You will lose the GUI information from your MM, but all the MC information 
is still present.  We have applied this to our lab and we are going to push to 
production tonight to see if it helps.  If it does help, we plan on turning 
back up our monitoring tools ( Airwave ).

fingers crossed

here is how to block the traffic:
cd /md/yourrootlocation
firewall-cp
 ipv4 deny any proto 6 ports 15260 15261 position 1
!

Chad
chad.str...@emory.edu<mailto:chad.str...@emory.edu>
__

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13)

[Patrick McEvilly]

Speaking from experience, I would be very concerned.  We had no issues until 
students returned and we went downhill from there.


On 9/2/21, 8:50 AM, "The EDUCAUSE Wireless Issues Community Group Listserv on 
behalf of Rob Harris"  wrote:

Has anyone seen any details regarding what they consider "Large" 
environments? We upgraded during the break, but both before and after versions 
are affected. We didn't notice this happening before, should we be concerned 
now?

The "dropped" is 0 and the stm cpu usage is in single digits, but client 
count is really low (they come back this weekend as well), could we be in the 
clear?

(asked the SE team and opened a tac call, same questions to them)

thx

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jason Healy
Sent: Thursday, September 2, 2021 8:45 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else 
seeing any issues in the fall with large classrooms and delayed connection 
times (Aruba 8.5.0.13)

CAUTION: This email originated from outside The Culinary Institute of 
America. Do not click links or open attachments unless you recognize the sender 
and know the content is safe.

FWIW, Aruba just posted an advisory regarding this issue:

Aruba Support Advisory ARUBA-SA-20210901-PLVL04, "Wi-Fi Client Connectivity 
Failures in Large Client Environments"

Good luck to those of you hit by this. My students start coming back this 
weekend so I'll be watching this closely!

Jason
**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7CRobert.Harris%40CULINARY.EDU%7C9624098759e143958e1708d96e0f8742%7C91b9485d8b6d4e2da3caf432e56721bd%7C0%7C0%7C637661835282336222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=%2Bram23JxP8FS6%2BUruT13pfiX%2F5z8mYsT5yywvQeWTTo%3D&reserved=0

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13)

[Patrick McEvilly]

A quick update on where we are at.  We had many of the same issues being 
reported and did the same workarounds.  However, we ran into a few further 
issues that others might want to be aware of.

We had one AP group that did not have our AP crash dump server configured and 
was using the "default" which is the controller itself.  ~300 APs in that AP 
group had core dumped and were trying to write to the controller.  There is 
some mechanism that checks for available space on the controller before 
dumping.  This was jamming up the same queue that is used for other critical 
processes such as STM.  This caused a huge problem for us.  We changed this one 
AP group to point to our dump server and saw immediate relief.  All APs came 
back online and clients reconnected.  

Two hours later we dropped to ~100 APs connected and only 17 clients (yes 17, 
not 17,000) on our wireless network.  We had a cluster event that triggered the 
controllers to send an invalid IPv4 address to all APs which in turn caused 
every AP to go into a core dump loop (that was not fun).  The only recovery 
option available was to reboot all controllers.  It is believed this is related 
to 8.7 now supporting IPv6 in the clustering configuration.  Our controllers 
are dual stack but our APs are not.  It is possible if the APs were dual 
stacked they would have used IPv6 and continued to operate over IPv6.  Per 
Aruba removing IPv6 from the controllers is also not an option, we could still 
experience this problem.  This one was a real burn and we continue to be 
susceptible to this condition.

We are anticipating an emergency code release from Aruba in the next few days.


Patrick






On 9/3/21, 11:20 AM, "The EDUCAUSE Wireless Issues Community Group Listserv on 
behalf of Jerry Bucklaew"  wrote:

Scott, 

  I have heard it worked in several places, but we are like you.  Put in 
all the recommended changes last night and it is still happening.

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Scott Swartzentruber
Sent: Friday, September 3, 2021 10:41 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else 
seeing any issues in the fall with large classrooms and delayed connection 
times (Aruba 8.5.0.13)

Has anyone had success in resolving the client drops we have been 
discussing?  We had Aruba on the phone very early this morning - put the 
recommended ACL in place and did a a rolling restart of all 3 of our 
controllers.  We only had to wait to our first class change to see a huge drop 
of clients and another at the next class change.  Seems clear that the change 
and the reboot made no difference.  back on the phone with Aruba now to see 
what else they come up with...


I don't like this ride anymore - can I get off now?



Western Carolina University
Scott Swartzentruber
Director, Networking and Communications
Forsyth Bldg, Room B-16
828.227.3212
sco...@wcu.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cjpb%40buffalo.edu%7Cf58d662303514aa7e05808d96eea39ec%7C96464a8af8ed40b199e25f6b50a20250%7C0%7C0%7C637662774536265169%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=QcSqYr93it4Sn%2Fc1GaKHK4AGNRz77g7qR8SZ4EbPpKA%3D&reserved=0

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] Who wifi vendors does everyone use?

[Patrick McEvilly]

Harvard is a Cisco shop with about 6500 APs.

Patrick McEvilly
Harvard University


On 3/31/16 4:42 PM, Sullivan, Ryan wrote:
> Same for UCSD - Cisco -- just under 6K APs right now.
> 
> Ryan Sullivan
> 
> 
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv 
> [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
> on behalf of Watters, John [john.watt...@ua.edu]
> *Sent:* Thursday, March 31, 2016 9:44 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Who wifi vendors does everyone use?
> 
> Cisco -- just under 6K APs right now.
> 
>  
> 
>  
> 
>  
> 
>  
> 
> -jcw  
> UA Logo
> 
> *_
>  
> _*
> 
> John Watters   The University of Alabama
> 
> Office of Information 
> Technology
> 
> 205-348-3992
> 
>  
> 
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion
> list can be found at http://www.educause.edu/groups/
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_groups_&d=CwMFAw&c=WO-RGvefibhHBZq3fL85hQ&r=e5s-FEqiSci1utohhmEZbsmAZvjxyM8AjmFW66dISHc&m=AAilX-Cj7TFxs-YUbSlZnTzB75L2Kofi2PdBTBCVsTk&s=AoQdqF22o7Hw-I-CQ3If5nVKGM2nKqY0muxzEFpfZA0&e=>.
> 
> 
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion
> list can be found at http://www.educause.edu/groups/
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_groups_&d=CwMFAw&c=WO-RGvefibhHBZq3fL85hQ&r=e5s-FEqiSci1utohhmEZbsmAZvjxyM8AjmFW66dISHc&m=AAilX-Cj7TFxs-YUbSlZnTzB75L2Kofi2PdBTBCVsTk&s=AoQdqF22o7Hw-I-CQ3If5nVKGM2nKqY0muxzEFpfZA0&e=>.
> 
> 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Clearpass Bug - Posture and Profile Data update

[Patrick McEvilly]

We are on 6.6.7 and we’re affected. 

Patrick

> On Oct 11, 2017, at 7:27 PM, Norton, Thomas (Network Operations) 
>  wrote:
> 
> Fortunately for us we weren’t affected by this, what code rev were you guys 
> running? 
>  
> We are currently running 6.6.5
>  
> T.J. Norton
> Wireless Network Architect
> Network Operations
>  
> (434) 592-6552 
>  
> 
> 
> 
> Liberty University  |  Training Champions for Christ since 1971
>  
>  
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>  on behalf of Scott Bertilson 
> 
> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> 
> Date: Wednesday, October 11, 2017 at 7:23 PM
> To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
> Subject: Re: [WIRELESS-LAN] Clearpass Bug - Posture and Profile Data update
>  
> Bit us at 2:38 AM, took until 5 AM before I got called.  By the time I got to 
> it the necessary correct update was in place so the policy server restart got 
> us on the air again.
>  
> Pretty tempted to block CP access to the CP update site so that we can open 
> it up at times more convenient for us.  We're so new to Aruba and ClearPass 
> that we're not even using the feature.
>  
> Definitely want to see syslog messages for this activity.  Going to have to 
> activate SNMP traps.
>  
> On Wed, Oct 11, 2017 at 5:43 PM, Joachim Tingvold  
> wrote:
> On 11 Oct 2017, at 19:01, Ferguson, Michael wrote:
> I didn’t see any (until Chad posted later) and so we thought our issue was 
> more isolated. We wasted 20 minutes of valuable MTTR time collecting Server 
> Logs when all we needed to do was start the “Policy server” service.
> 
> "Only start the Policy Server" was not the case for most of us. The bad 
> update came, followed by failure of the "Policy Server". CPPM tried to 
> restart it (entries in event viewer), but seems to only try that for a 
> pre-defined number of times before "giving up", at which point the "Policy 
> Server" becomes "permanently" stopped (regardless of updates, unless manually 
> started).
> 
> In our case, the bad update came in at around 09:03 CEST, we discovered it a 
> few minutes later, went on call with Aruba/HPE support (which after about 
> 10-15 minutes could tell us that "the whole world has the same issue", more 
> or less). At about 10:10 CEST a new update came, followed by yet another 
> update at 10:50 CEST or so. At this point we had an Aruba-engineer on the 
> phone, but even when starting "Policy Server" manually, it shut down after a 
> few seconds. It wasn't until a third update, at around 11:23 CEST,  that the 
> service remained running after a manual start. We had to manually start it on 
> all members in the cluster, for all our clusters.
> 
> Fun times (-:
> 
> -- 
> Joachim
> 
> 
> **
> Participation and subscription information for this EDUCAUSE Constituent 
> Group discussion list can be found at http://www.educause.edu/discuss.
>  
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion list can be found at 
> http://www.educause.edu/discuss.
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion list can be found at 
> http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] WLC Mobility Groups

[Patrick McEvilly]

We have about 7000 APs running on ten WiSM2s (don't judge) in a single
mobility group with a peak of about 35,000 concurrent devices across all
SSIDs.  We are running 8.3.121.15.  This year we made a big push to move
from an open SSID to our dot1x SSID.  We crossed over the 15,000 PMK
cache limit and since then we are having ongoing issues where the device
re-prompts for the users credentials.  If you just hit escape it will
reconnect fine but most users re-enter their credentials which gets old
real fast.  Cisco claims even after exceeding the PMK cache limit the
controller would just send the radius request up to our radius servers
and do a re-auth, there would be a small impact on the time required to
do that but should not be user impacting.  Maybe folks using EAP-TLS are
not noticing this problem as there is no username/password?  Or could
this be an 8.3 thing?  Cisco wants us to predict the next client that is
going to have the problem ans start a client debug before it happens.
If I had that ability I would be in Vegas!

@Eriks Of the 25k concurrent devices associated how many are dot1x and
what EAP method are you using?

Patrick


On 11/15/17 10:55 AM, Eriks Rugelis wrote:
> FWIW, our Keele campus has twelve WLC5508's which together support approx. 
> 4900 APs.  We have a single Mobility Group configured for all APs located at 
> this campus.  The campus has daily peaks of approx. 25K concurrent devices 
> associated.   We are not aware of any operationally 'bad' system behaviour 
> related to mobility group configuration which is impacting the ability of our 
> end-users to successfully use the service.   Perhaps we aren't paying enough 
> attention to the relevant metrics?
> 
> We are presently running v8.0.152.0 and are pre-production testing v8.5 due 
> to imminent deployment of AP1815w's in residence buildings.
>  
> Eriks Rugelis,
> Manager, Network Development
> York University, Toronto
> 
> **
> Participation and subscription information for this EDUCAUSE Constituent 
> Group discussion list can be found at http://www.educause.edu/discuss.
> 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.