Mathieu, Our Android is a little on the bare side. Most of our mobile devices are iOS based, and they were still seeing the issue. It was honestly pick and choose what would connect and what wouldn’t. Sometimes trying for 9 or 10 times the device would suddenly connect. This didn’t matter if it was eduroam or PSK. We have had good luck with adaptive Fast Transition across all devices.
I’m with you on 8.10MR4. Not ready to start testing another controller code. Thanks, Jason Mallon | Network Engineer III [/var/folders/h2/r448cc4j4_v70yns10brx6r00000gq/T/com.microsoft.Outlook/Content.MSO/90F25235.tmp] OIT The University of Alabama <https://www.ua.edu/>jemal...@ua.edu<mailto:jemal...@ua.edu> [/var/folders/h2/r448cc4j4_v70yns10brx6r00000gq/T/com.microsoft.Outlook/Content.MSO/8434B70B.tmp] From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Thursday, October 1, 2020 at 8:30 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [EXTERNAL] Re: [WIRELESS-LAN] Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues @Phil, I requested more information about that bug (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu65125/?rfs=iqvred<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbst.cloudapps.cisco.com%2Fbugsearch%2Fbug%2FCSCvu65125%2F%3Frfs%3Diqvred&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558546973711&sdata=5Tyx74RSXK5oqa%2Fjlhxz2lgFE%2FycxV%2Bj%2F%2B4iMmBNrG0%3D&reserved=0>) and Cisco TAC send me this: FT : disabled PMF : optional policy : wpa2 + wpa3 wpa2 : enabled wpa3 : enabled Condition is this : When a user configures WPA2 PSK in pre WPA3 supported version and upgrades to WPA3 supported WLC version. The SAE password store is not configured during upgrade. This causes no passphrase to be sent to AP that causes no client connection @Jason On 8.10.121.0 we had issues with android devices that wouldn’t connect. Updating to 8.10.130.0 and changing Fast Transition to enable fixed this (https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu24770/<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbst.cloudapps.cisco.com%2Fbugsearch%2Fbug%2FCSCvu24770%2F&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558546983707&sdata=snMiWoIKZSSAVKCdVWhcAS7I%2F2Wz8f%2FMlHL7aOntslQ%3D&reserved=0>). There is also this bug https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu67048 on 8.10.121.0<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbst.cloudapps.cisco.com%2Fbugsearch%2Fbug%2FCSCvu67048%2520on%25208.10.121.0&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558546983707&sdata=8zCfawFJn%2BRAVVHHFLXnaIlCg%2BsGGk0KF7%2BC2MA517g%3D&reserved=0> Regarding 8.10.130.0 Our IT helpdesk has had their work on upgrading NIC’s. Most of our issue’s are solvable with updating the NIC or manually making a profile in W10. The eduroam cattool has helped a lot as well. I saw that there is a beta for 8.10MR4 but I’m not to keen to experiment with this. Mathieu Sturm Hoofdmedewerker Netwerkbeheer [cid:image002.png@01D697D0.A3C50C40] Directie Financiën, Infrastructuur en IT Afdeling Netwerkbeheer Campus Schoonmeerssen - Gebouw B Lokaal B0.75 Valentin Vaerwyckweg 1 - 9000 Gent +32 9 243 35 23 www.hogent.be<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558546993704&sdata=G7TpXCegeyjLyN5iPXusBPjfijBNeHHFQDlPw6Q5tNg%3D&reserved=0> Van: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Namens Mallon, Jason Verzonden: donderdag 1 oktober 2020 2:17 Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Onderwerp: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues We saw this all the way through 8.10.121 and actually thought the radius servers/NAC were causing an issue. We had multiple TAC cases opened, before Cisco finally recommended we move to 8.10.130. Upgrading code solved a lot of our issues. There are still a handful of devices that have issues, and we have been working on getting them to upgrade their drivers. Jason Mallon Network Engineer, OIT The University of Alabama jemal...@ua.edu<mailto:jemal...@ua.edu> On Sep 30, 2020 18:16, Phill Solomon <00000150915d379b-dmarc-requ...@listserv.educause.edu<mailto:00000150915d379b-dmarc-requ...@listserv.educause.edu>> wrote: We have upgrade 2/3 WLC pairs from 8.5.151 to 8.10.103.0 – seems to be going ok with the exception of DNAC-C reporting slower / more DHCP failures – while we have received no support calls – just wondering if anyone else has seen this? Mathieu, thanks for the tip on the bug, now watching that too. thanks Phill Solomon Senior Network Engineer Deakin University, IS - AV & Networks, ICT Infrastructure Services, eSolutions • Phone: +61 3 924 46069 From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Mathieu Sturm Sent: Thursday, 24 September 2020 10:13 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues Little update, I came across this bug id: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvu65125/?rfs=iqvred<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbst.cloudapps.cisco.com%2Fbugsearch%2Fbug%2FCSCvu65125%2F%3Frfs%3Diqvred&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547003698&sdata=cb1e8XxgMCyWLZIUOR%2BpwBulK%2FfYwxaDSlg5gcigNpE%3D&reserved=0> (thanks Jeff for the hint about version 8.10.139.43) So I decided to change the settings on the SSID from WPA2 + WPA3 back to WPA+WPA2 and this seems to have resolved our issues (we’re testing right now). My wife is about to deliver our 2nd daughter so I will ask my colleagues to update if possible. Regards, Mathieu Sturm Hoofdmedewerker Netwerkbeheer [https://www.hogent.be/www/assets/Image/logo2018.png] Directie Financiën, Infrastructuur en IT Afdeling Netwerkbeheer Campus Schoonmeerssen - Gebouw B Lokaal B0.75 Valentin Vaerwyckweg 1 - 9000 Gent +32 9 243 35 23 www.hogent.be<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547003698&sdata=H28WIo%2B3k%2FeNL8MgRyzm92xK4M3tli%2BsgowA9Q4YEPU%3D&reserved=0> Van: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Namens Tristan Gulyas Verzonden: donderdag 24 september 2020 7:22 Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Onderwerp: Re: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues Hi, Watching this thread closely. We're currently on 8.5.151 but need to migrate to an 8.10 release for the 9130ax's. If anyone has any TAC cases or bug IDs that may reference this issue, that would be super useful! Tristan -- TRISTAN GULYAS Senior Network Engineer Technology Services, eSolutions Monash University 738 Blackburn Road Clayton 3168 Australia E: tristan.gul...@monash.edu<mailto:tristan.gul...@monash.edu> monash.edu<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fmonash.edu%2F&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547013694&sdata=KKzm6%2FmzT4Unly8r8kjn%2BvYoQmNubtsbhAWnz6ykRyo%3D&reserved=0> On 24 Sep 2020, at 2:23 am, Jeffrey D. Sessler <j...@scrippscollege.edu<mailto:j...@scrippscollege.edu>> wrote: You probably want 8.10.139.43, which is fully BU supported and suggested for production. This is a link to the release notes, I’d check to see if any of these apply. Also, verify your timeouts aren’t set too low for the radius responses coming from eduroam. I ran into this at Cal Poly in Pomona, where I could not interactively login to eduroam, but I could save my credentials and it worked just fine. I suspected a timeout set too low (this was Aruba equipment however). Had an entire group there for a meeting that faced the same issues. https://www.cisco.com/web/software/280926587/153915/Release_Notes_8_10_139_43.pdf<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisco.com%2Fweb%2Fsoftware%2F280926587%2F153915%2FRelease_Notes_8_10_139_43.pdf&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547023695&sdata=VZfGIHRoAqxIpXusXyBjDTb4Wl48YBVh7Sm3PR76v5E%3D&reserved=0> Jeff From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Mathieu Sturm Sent: Wednesday, September 23, 2020 3:07 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Cisco 8.10.130.0 eduroam issues Hello, We updated our Cisco 5520 controllers from 8.5.151.0 to 8.10.130.0. Since the update we have issues with eduroam. Before the update the students and other users could select the ssid eduroam and fill in the credentials and they were connected. Now we have to update the NIC’s (mostly AX200) to the latest version and/or update to W10 version 2004. And even then we often have to configure the SSID manually and save credentials. We see that the users get to the ISE and are permitted but the WLC doesn’t always see this permit. Or the ISE gives a certificate warning (I’ve checked our certificates, all are valid). Is anyone experiencing the same thing? We went tot 8.10.130.0 for our new 9120’s. Mathieu Sturm Hoofdmedewerker Netwerkbeheer <image001.png> Directie Financiën, Infrastructuur en IT Afdeling Netwerkbeheer Campus Schoonmeerssen - Gebouw B Lokaal B0.75 Valentin Vaerwyckweg 1 - 9000 Gent +32 9 243 35 23 www.hogent.be<https://nam11.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.hogent.be%2F&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547023695&sdata=ulOwXqwYPwecOqqHeC4oRCSEudtrcmLMc2Rdqf%2FwR%2BA%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547033690&sdata=xXMyxSoFZytH2cNTQ3AfkgU2dPOu9zv%2Bgx7k3hvWe%2B4%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547043686&sdata=SHbhfXwZG5oLziINaP%2BpBuIs3OOwdofI32Th1jNuSqg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547043686&sdata=SHbhfXwZG5oLziINaP%2BpBuIs3OOwdofI32Th1jNuSqg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547053677&sdata=IFqYgg6%2FXeMTXqjDhKu6dUaW0dOSSsExvApgZmyDv6w%3D&reserved=0> Important Notice: The contents of this email are intended solely for the named addressee and are confidential; any unauthorised use, reproduction or storage of the contents is expressly prohibited. If you have received this email in error, please delete it and any attachments immediately and advise the sender by return email or telephone. Deakin University does not warrant that this email and any attachments are error or virus free. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547063671&sdata=7lREMZwNarLYv4B3aBCONofgUbgGQ0XLxqVDjlo%2Bk5k%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547063671&sdata=7lREMZwNarLYv4B3aBCONofgUbgGQ0XLxqVDjlo%2Bk5k%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cjemallon%40ua.edu%7C2e450bdee7f5410da76308d8660e0c24%7C2a00728ef0d040b4a4e8ce433f3fbca7%7C0%7C0%7C637371558547073669&sdata=ylJDalup%2F28Asg7s0qkp5a1SxNpMS7sl0MwU%2BiylrIE%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
