Re: [WIRELESS-LAN] SSID jumping with Win 8.1 (Surface Pro 3) on Aruba

2015-07-23 Thread Chuck Anderson
On Thu, Jul 23, 2015 at 11:17:25AM +, Osborne, Bruce W (Network Services) 
wrote:
 That may be the issue. Our Guest SSID has a portal, but for a while we ran an 
 open SSID with no portal.
 With no portal, we quickly found DHCP scopes filling up due to mobile devices 
 constantly associating, checking for Internet access as they roamed around 
 campus.

Even with a portal, don't devices still get a DHCP lease?  We had to
deal with this by making our subnet and DHCP scope large enough for
any potential mobile devices automatically associating, even if they
didn't have credentials for the portal.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] SSID jumping with Win 8.1 (Surface Pro 3) on Aruba

2015-07-23 Thread David Gillett
  I typically see that 30-50% of devices which associate and get a DHCP lease 
from our wireless networks never log onto the portal and actually use the 
wireless connection...  This apparently includes many devices which remain on 
campus (plugged in to charge?) overnight.  (Our guest network does have a 
portal, it just doesn't do any stringent authentication...)

David Gillett
CISSP CCNP

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chuck Anderson
Sent: Thursday, July 23, 2015 6:49 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] SSID jumping with Win 8.1 (Surface Pro 3) on Aruba

On Thu, Jul 23, 2015 at 11:17:25AM +, Osborne, Bruce W (Network Services) 
wrote:
 That may be the issue. Our Guest SSID has a portal, but for a while we ran an 
 open SSID with no portal.
 With no portal, we quickly found DHCP scopes filling up due to mobile devices 
 constantly associating, checking for Internet access as they roamed around 
 campus.

Even with a portal, don't devices still get a DHCP lease?  We had to deal with 
this by making our subnet and DHCP scope large enough for any potential mobile 
devices automatically associating, even if they didn't have credentials for the 
portal.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at 
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_groups_d=AwIBAgc=xoYdONxMEGxjdvKj5bOdEOV28uakaJ20R4TjadGGZBcr=k9GuXUxBnq8dKeP-TM4_u3H9MTZhXcX7GvfnnTt9LsEm=2_Cir644y4cMBCwXxQcx7Rt3mVqqL3a4WleO5Irbydws=8KpqnUqgYO06O8oZ9LJGYzz5eQHD2iyh81VRzcCRdewe=
 .

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] SSID jumping with Win 8.1 (Surface Pro 3) on Aruba

2015-07-22 Thread Chuck Enfield
I’m having similar problem on a Win7 SP1 laptop.  When I enable my wireless 
adapter it connects to our guest network instead of our 802.1X network.  The 
order of the profiles in the network list doesn’t matter, and even deleting 
the guest network profile doesn’t help.  Once I manually choose the 1x 
network it doesn’t generally “jump” to guest, but I recall that happening at 
least once.  My theory was that my connection dropped, giving my machine a 
chance to exercise its newly-found preference for the guest network over all 
others.  I don’t have this problem on any other devices, and I haven’t heard 
any reports from anybody else yet, so I assumed my laptop was the problem. 
That said, the laptop was problem-free for years.  If the problem coincided 
with an AOS upgrade, I failed to make the connection.



When I thought this was just a problem with my laptop I opted to work around 
it, but maybe it deserves some attention.  Windows devices make up a modest 
percentage of our wireless clients, so others could be having the same 
experience and word just hasn’t reached me yet.  I’ll get a packet capture 
next time I put this device on the Wi-Fi.  If I turn up anything suspicious 
I’ll post to the group.



Chuck Enfield

Manager, Wireless Systems  Engineering

Telecommunications  Networking Services

The Pennsylvania State University

110H, USB2, UP, PA 16802

ph: 814.863.8715

fx: 814.865.3988



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Osborne, Bruce W 
(Network Services)
Sent: Wednesday, July 22, 2015 7:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] SSID jumping with Win 8.1 (Surface Pro 3) on 
Aruba



I have not seen this here at Liberty University with our Aruba 6.3.1.16 
network. We will be moving to 6.4 soon.



In fact, I use a Surface Pro 3 as my daily computer.







Bruce Osborne

Wireless Engineer

IT Infrastructure  Media Solutions



(434) 592-4229



LIBERTY UNIVERSITY

Training Champions for Christ since 1971



From: David Gillett [mailto:gillettda...@fhda.edu]
Sent: Tuesday, July 21, 2015 4:37 PM
Subject: SSID jumping with Win 8.1 (Surface Pro 3) on Aruba



  Anybody else seen this?  I’ve seen devices reconnect to the sane SSID as a 
previous session, and I believe I’ve seen them connect to an SSID that was 
“the only one visible.”  But twice now, I’ve seen my Surface Pro 3, in the 
midst of logging in to our “primary” SSID, suddenly bring up the login page 
for our secondary “guest” Wi-Fi service, to which it had never previously 
been connected….
  Is this a Windpws 8.1 (mis)feature?  An Aruba bug?  A quirk of the 
wireless interface chip Microsoft chose to use in he Surface Pro 3?

   Or perhaps something else, stranger than I can imagine?



David Gillett CISSP CCNP



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] SSID jumping with Win 8.1 (Surface Pro 3) on Aruba

2015-07-22 Thread Kevin McCormick

Not sure if this will help at all.

With Cisco the surface will not connect to a secure SSID with PMF dot1x 
set as optional.


We had to disable PMF dot1x and only use dot1x.

There are some strange issues with the wireless on the Surface.

Kevin McCormick
Western Illinois University

On 7/21/2015 3:37 PM, David Gillett wrote:


  Anybody else seen this?*I’ve seen devices reconnect to the sane SSID 
as a previous session, and I believe I’ve seen them connect to an SSID 
that was “the only one visible.”  But twice now, I’ve seen my Surface 
Pro 3, in the midst of logging in to our “primary” SSID, suddenly 
bring up the login page for our secondary “guest” Wi-Fi service, to 
which it had never previously been connected….
  Is this a Windpws 8.1 (mis)feature?  An Aruba bug?  A quirk of the 
wireless interface chip Microsoft chose to use in he Surface Pro 3? *


  Or perhaps something else, stranger than I can imagine?

David Gillett CISSP CCNP

** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.





**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.