Wireless Access

last person joined: 2 hours ago 

Access network design for branch, remote, outdoor and campus locations with Aruba access points, and mobility controllers.
Expand all | Collapse all

Mac OS X Lion/MacBook Air issue

Jump to Best Answer
  • 1.  Mac OS X Lion/MacBook Air issue

    Posted May 02, 2012 09:37 AM

    I've been struggling with an issue since upgrading our controller to v. 6.1.3.1 from 5.0.4.0 a few weeks ago. We have recently deployed a bunch of 2011 MacBook Airs running the latest version of OS X Lion (10.7.3). They appear to get disconnected from the wireless several times throughout the day, which resets their connections to our email system and Filemaker server which ultimitely causes them to lose work and get very frustrated that they have to log back into these systems.

     

    I've done a ton of research on the Apple forums and on here and while many people reported issues with Lion and wireless, I haven't found anyone with issues while using Aruba specificially. The thing is, these clients all appeared to work fine before we upgraded to the v.6 code. I've been working with Aruba support for the past 2 weeks and they've gone into the controller and tweaked a bunch of settings in accordance to best practices, but nothing has seemed to help.

     

    One thing I've notied is if I ping a client, the response times are all over the place unless they are downloading or doing something on the Internet. That makes it sound like the wireless card is going into power save mode, but there's no way to modify those settings on the Mac like you can on Windows. I've also set up a little Belkin router to test with and when I connect one of the clients to that wirelessly, the ping times are >1 ms, right where they should be. I've tried all of the suggestions on the client site including replacing kernel extensions for wireless with those from an old OS, but the ping times are still all over the place. Older Mac clients, running on 10.6.8, and our many iPads and iPhones are working just fine. I know it sounds like an Apple specific issue, but it's a combination of them and Aruba v.6. 

     

    I've called Apple this morning and of course they are pointing the finger at the wireless. I've actually been on hold with them twice this mornig and gotten disconnected twice, so I'm at my wit's end! Any suggestions would be greatly appreciated! TIA!



  • 2.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 02, 2012 04:55 PM

     

    I'm afraid I don't have an answer for you and haven't yet received such reports from Apple laptop users but I can relate.  We did the upgrade from 5.0 to 6.1.3.1 last week and it tripped up a few systems.  We had a number of Dell laptops running XP with earlier generation 802.11n dual-band chipsets that all needed wireless driver updates to work again.  Also we had one case of an iPhone 4 running iOS 4.2 that refused to stay connected to wireless until it was upgraded to the latest iOS 5 release.

     

    If you have the spare controllers and APs around and are motivated enough I'd suggest comparing what an AP beacon looks like coming from an ArubaOS 5 and a 6.1.3.1 infrastructure and seeing what new functionality is being broadcast that could be triggering a power save bug, etc.  I've been able to resolve such issues here without resorting to that but it might be worth it for you.  Just an idea.





  • 3.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2012 09:51 AM

    Thank you for the reply. It certainly sounds like a driver incompatibility issue here too. I do have some extra APs that I've tested with, but unfortunately not a spare controller. I set up a wide open SSID yesterday and tested a client on that and I see similair behavior. The Aruba tech wanted me to test this way to see if it was a TKIP issue as I guess that's a fairly common issue with Macs. I'm hoping 10.7.4 will be out soon with new drivers, but we'll see. I'm going to try caling Apple back again today too. :smileyindifferent:



  • 4.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 10:43 AM

    I just wanted to bump this back up with an update and to see if anyone else has been experiencing this. I've gotten both Aruba and Apple to admit that this is a known issue and to look for an upcoming software update to help fix it, but that's been a month ago now. I've installed 10.7.4 and a beta of 10.7.5, even the 10.8 beta but I still see the same behavior on a client. I've also updated the controller to 6.1.3.2 but that didn't help either. Is anyone else seeing similar behavior and/or have any fixes/workarounds? TIA!



  • 5.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:05 AM

    I can tell you that we have quite a few of the laptops and the version of Lion you mention running well:

     

    What is your encryption?

    How many clients are on your WLAN? (total)

    Do the wireless clients share a subnet with wired clients?

     



  • 6.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:10 AM

    Thanks for the quick reply! We are using WPA2 Personal encryption to join the network and MAC radius authentication from there using a Bradford Network Sentry. During the school year we are right around 400 clients, but during the summer it's just over 100 and we are seeing the same issues. We split students YOG into subnets and for employees, wired and wireless clients do share the same subnet. We only have a handful of wired employee clients though.



  • 7.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:12 AM

    What is the known issue?  What happens and what is the sequnce of events?

     



  • 8.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:20 AM

    They're really just getting crappy performance on the wireless network. If I ping a Lion client that's just sitting on my desk, the response times are all over the place and you will eventually see big chunks of timeouts. When there's about 15+ timeouts in a row, the clients will lose connection to their email client (FirstClass) and Filemaker. This can lead to them losing work and/or having to sign in multiple times a day and it drives them nuts. If the clients are actively downloading something from the Internet though, the ping times are consistently right at 1ms. It's something to do with the wireless card going into some sort of sleep mode, I'm guessing to save battery life.

     

    Aruba has been able to replicate the issue in their test environment, but believes that the APs are working as they should and it's the clients that are not behaving correctly. The last email I recieved from support:

     

    "We did some testing using the same clients and found out that the clients are sending the PS frame very frequently and then when AP’s are scanning other channel to find a better channel, that’s the time when the frame goes missing and AP thinks that client is still awake and keep sending data.

     

    One of the option we tested is to disable Scanning to validate the above theory and it helped the situation, however Disabling Scanning will not be recommended since it means asking ARM not to perform.

     

    So as of now the AP’s are behaving normal and scanning other channel for the defined scan time hence we cannot change the scan algorithm because it’s a huge change and might bring up another issue with the ARM functionality.

     

    However, in order to understand the behavioral change with these new MacBook Version I am also checking on the possibility of providing some data to Apple support and get their views on the same. Will keep you updated on the same."

     

    Apple said that they know about this issue with Aruba hardware and to look for a future OS release to fix it. 10.7.5 was supposed to be focused on network reliability and performance but the golden master beta doesn't appear to address it.



  • 9.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:22 AM

    Are you dropping broadcast traffic on that Virtual AP?

     



  • 10.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:28 AM

    Yes we are. I've had our VAR and the Aruba techs go over everything in the config as well and they say it all looks good.



  • 11.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 12, 2012 11:34 AM

    Okay.  I will wait for someone else to comment, because I have not seen that..

     



  • 12.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 23, 2012 02:08 PM

    Wow - anything further on this - I'm having the same issue with some of the macs I have here - this one is still running snow leopard however - just drops randomly, has issues actually getting connected to an ap. The interesting thing I see on the controller is that their connection time keeps incrementing when they disconnect - so the user will report getting disconnected 3 times in the last hour, but age of the connection is 4 hours. Also seeing it on PCs with Linux and Windows 7 - working with an aruba engineer  right now trying different drivers (for windows) to see if there is any change.

     

    Right now I'm running my system fully wirelessly to see if I see the same issues - so far it's ok....

     

    Lirria



  • 13.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 23, 2012 07:35 PM

    @Lirria wrote:

    Wow - anything further on this - I'm having the same issue with some of the macs I have here - this one is still running snow leopard however - just drops randomly, has issues actually getting connected to an ap. The interesting thing I see on the controller is that their connection time keeps incrementing when they disconnect - so the user will report getting disconnected 3 times in the last hour, but age of the connection is 4 hours. Also seeing it on PCs with Linux and Windows 7 - working with an aruba engineer  right now trying different drivers (for windows) to see if there is any change.

     

    Right now I'm running my system fully wirelessly to see if I see the same issues - so far it's ok....

     

    Lirria


    Lirria,

     

    We have to make sure that we are dealing with the same issue.  Lets us know the result of the troubleshooting.

     

     



  • 14.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 24, 2012 09:56 AM

    Of course - it's just nice to know what resolved it for somebody else so it gives you things to look at to see if that is also another issue in your environment. We are waiting on the results from the lastest debug log review - hopefully there will be something in there.

     

    thank you

     

    Lirria



  • 15.  RE: Mac OS X Lion/MacBook Air issue

    Posted Nov 19, 2012 11:57 AM

    I wanted to let you know that we have a similar problem in our office.  10.6, 10.7, 10.8 and we get clients roaming from one AP to the Next and intermittently getting knocked off.  The Airport menulet shows the antenna signal animation moving up and down like it's trying to connect.  If you click on the Airport Menulet it will say Authenticating.  I have a ticket open with Aruba for over 2 months now, they have tried best practices fixes, Upgrading the OS on the 650 controller to the latest and still not resolved.  

     

    We do not run any wireless PC's in our office to test with.  Seems to be an Aruba Mac issue?

     

     



  • 16.  RE: Mac OS X Lion/MacBook Air issue

    Posted Nov 19, 2012 12:40 PM

    I would have to say that since I worked with the engineers my issues have mostly resolved (or people just aren't reporting them) I have a total of 27 aps, 11 are local 16 are remote. All have a variety of OS's (Linux, Mac, Windows) and we are what I would classify as stable.  I usually spend 1 week a quarter running on nothing but wireless to make sure there are no issues. I also reboot the controller and all AP's monthly - hasn't seemed to cause any issues and thing seem to be running better - plus it clears out the bootstrap log so you can actually tell when you have an issue.

     

    RIght at the moment I have 229 connections to the aps - yes some are passive, but some are active and are working well - I just completed a skype meeting with 2 other people in the same room - 2 of the 3 of us were on wireless with no issues.

     

    Please continue working with the tech support group to get the issue resolved - they really can help.

     

    Lirria



  • 17.  RE: Mac OS X Lion/MacBook Air issue

    Posted Nov 19, 2012 09:02 PM

    @DJMagicMelliott wrote:

    I wanted to let you know that we have a similar problem in our office.  10.6, 10.7, 10.8 and we get clients roaming from one AP to the Next and intermittently getting knocked off.  The Airport menulet shows the antenna signal animation moving up and down like it's trying to connect.  If you click on the Airport Menulet it will say Authenticating.  I have a ticket open with Aruba for over 2 months now, they have tried best practices fixes, Upgrading the OS on the 650 controller to the latest and still not resolved.  

     

    We do not run any wireless PC's in our office to test with.  Seems to be an Aruba Mac issue?

     

     


    Do you know if you have OKC (Opportunistic Key Caching) on your 802.1x profile Unchecked? MACs do not support this and it definitely could cause issues with roaming.  Look under configuration> Security> Authentication> L2 Authentication> 802.1x profiles.  Find the one that corresponds to your WLAN and make sure OKC is unchecked under the Advanced tab.

     



  • 18.  RE: Mac OS X Lion/MacBook Air issue

    Posted Dec 05, 2012 03:57 PM

    Update on our situation:

     

    We are using 802.1x. The certificate that's sent over as part of the 802.1x authentication process is signed by a CA, and the signing chain makes the cert long enough that it doesn't fit into a single packet. When OSX 10.8.2 Macs roamed between APs, they'd get this cert sent to them, the roam event would usually take upwards of 15 seconds, and potentially not work at all. Disabling OCSP and CRL checks on the Mac clients had no effect.

     

    Switching to a self-signed cert, which does fit into a single packet, pretty much eliminated the roaming problem. We're still having other issues with Mac clients, but the self-signed cert fixed our most annoying and reproduceable issue.



  • 19.  RE: Mac OS X Lion/MacBook Air issue

    Posted Dec 05, 2012 04:01 PM

    Good tip - glad things are working better for you!

     

    Lirria



  • 20.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2013 10:03 AM

    We have started deploying 10.8.3 to our Mac clients, and things seem to be better. The drops/disconnects seem to come in waves now. It will be fine for a week or two, and then all of a sudden one day or night I'll get a bunch of reports of people not being able to connect, or getting dropped a bunch. It seems to be limited to areas where we still have some AP61s in production, but I've also gotten reports in areas where we have 105s deployed.

     

    On a related note, I did upgrade a lot of areas from older AP61s to 105s recently, and some of the reports I've gotten indicate that the coverage isn't as good in some spots with the newer APs, mounted in the same locations that the 61s were. I know they probably don't have the same coverage pattern, but I wouldn't think it would be any worse! 



  • 21.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2013 10:08 AM

     

    Not sure if you are doing this but one of the things that what suggested by one of the Aruba engineers was to enable validate-pmkid when you have OKC enabled under the 802.1x profile since the Mac devices don't work properly when roaming if that is not enabled

     

    Please read this post :

    http://community.arubanetworks.com/t5/Mobile-Device-Configuration-and/MAC-WLAN-Client-quot-Nuances-quot/td-p/1461/page/2

     

     



  • 22.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2013 10:11 AM

    That is currently enabled and OKC is disabled so it probably doesn't even matter, right?



  • 23.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2013 10:14 AM

     

    OKC is good for the other devices (Non - Mac) since it speeds up the roaming process and doesn't have to do the whole full 802.1x process everytime the device roams within the ESS .

     

     



  • 24.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2013 10:22 AM

    We are about 90-95% Mac/iPad so I'm not to worried about the few Windoze clients out there! :smileywink:



  • 25.  RE: Mac OS X Lion/MacBook Air issue

    Posted May 03, 2013 10:23 AM

     

     

    Good deal



  • 26.  RE: Mac OS X Lion/MacBook Air issue
    Best Answer

    Posted Oct 04, 2013 01:20 PM

    We were having a terrible time with our Mac clients roaming to different access points, even when the computers were sitting still, and dropping connections to our email server. After a lot of troubleshooting, the technician we were working with suggested running the following command on the Macs:

     

    sudo defaults write /Library/Preferences/com.apple.airport.opproam disabled -bool true

     

    The difference has been like night and day. It stops the Macs from aggressively roaming, which in turn stops 802.1X re-authentication and dropped connections. The clients that we've done this to have reported that their connections now rarely (if ever) are dropped while sitting still. If you've got Mac clients, are using 802.1X, and are dropping connections frequently, I think it's worth looking into.



  • 27.  RE: Mac OS X Lion/MacBook Air issue

    Posted Oct 29, 2013 09:38 AM

    Thank you very much for sharing, I'm going to try it out on a few clients as we still see disconnects from time to time!



  • 28.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 24, 2012 02:47 PM

    We are seeing the same issue occur on our RAP environment (6.1.3.0) -- our production wirless is 3.4.2.4/5.0.4.2 so I do not know how this fares in the office. From what I have been told, this is only affecting Macs. After a random period of time thier connection just "dies". They can see other SSIDs available, but not the one they are currently connected to in airport. To fix they must either connect to a different SSID and connect back, or run the Apple wireless network repair tool (can't recall the actual name of the utility). I have an open case with TAC but have not gotten anywhere as of yet.



  • 29.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 27, 2012 12:48 AM

    i also encountered same issue where is wifi connection suddenly drop and very difficulties to connect. i've reported and login case to Aruba, and the Aruba Engineer has did a remote site support to our controller to solve this issue. But unfortunately that my problem still remain and couldnt be solve by Aruba Engineer. and the Aruba engineer told me that this issue is come from Apple instead of Aruba.

     

    what is a good answer and solution from Aruba.



  • 30.  RE: Mac OS X Lion/MacBook Air issue

    Posted Jul 27, 2012 01:33 AM
    Although we are still monitoring the issue and do not have a resolution, we have noticed fewer complaints from the Mac users that have been upgraded to lion (not mountain lion) We will continue to work with Aruba to find a solution. Lirria


  • 31.  RE: Mac OS X Lion/MacBook Air issue

    Posted Aug 09, 2012 04:28 PM

    Unfortuantely, Macs have had connectivity issues for some time. I've experienced this myself as a Mac only user. 

     

    I have noticed that the last Lion update and going into Mountain Lion that there are issue with the Keychain. I've found myself having to manually delete certs and passwords and then reauth to get connected.

     

    This is a know issue and not an issue with Aruba. The finger should be pointed at Apple.



  • 32.  RE: Mac OS X Lion/MacBook Air issue

    Posted Aug 09, 2012 05:45 PM

    After spending 3 weeks monitoring the macs (win7 and linux too) on the network we found a couple of things.

     

    1. Upgrading the OS to Lion (not mountain lion yet) improved connectivity.

    2. Changing the settings for 802.1x for Delay between WPA/WPA2 Unicast Key and Group Key Exchange and Delay between EAP-Success and WPA2 Unicast Key Exchange which apparently have to deal with Macs.

     

    Between those 2 things our one Mac user that had been dropping 6-7 times a day has dropped once in 7 days, and added bonus has been the linux systems are also staying connected better.

     

    Working with the support staff was time consuming but they did find a least some config settings that had to be changed to make things better.

     

    Definitely think Apple is not providing a current driver for snow leopard and that is part of the issue.

     

    Lirria



  • 33.  RE: Mac OS X Lion/MacBook Air issue

    Posted Sep 07, 2012 09:18 AM

    have you tried diabling IPv6?  This can only done at the terminal.

     

    >networksetup -setv6off Wi-Fi

     

     



  • 34.  RE: Mac OS X Lion/MacBook Air issue

    Posted Sep 07, 2012 10:23 AM

    We normally disable ip v6 on all systems (network and desktops)  Not the best long term solution - but it keeps many of the issues down we have seen. The Macs and Linux systems definately are more likely to have issues with ip v6 enabled.

     

    Lirria



  • 35.  RE: Mac OS X Lion/MacBook Air issue

    Posted Oct 11, 2012 03:45 PM

    Wow - sorry I haven't checked this thread in a while, I thought I was getting email alerts when there were responses, but I guess not.

     

    Lirria - we are definitely not having the same issue if Lion fixes it for you. We have Snow Leopard clients working flawlessly, but it's ONLY our Lion and Mountain Lion computers that are having issues. Unfortunately most of our production machines shipped with Lion so we have to deal with it.

     

    We haven't seen any improvements in performance. I had a user just today say that they dropped their connection 10 times! Aruba says that Apple knows of the issue and is working on a fix in a future release, but 10.7.5 and 10.8.2 haven't fixed it yet. I'm not so sure that a 10.7.6 is even going to come out!



  • 36.  RE: Mac OS X Lion/MacBook Air issue

    Posted Oct 11, 2012 03:57 PM

    Sorry to hear that - hopefully it will get all worked out for you. I know with Lion things did get better which does point to something in the OS (most likely driver based) that's the issue. Hopefully some patches will fix the issue.

     

    Best of luck!

     

    Lirria



  • 37.  RE: Mac OS X Lion/MacBook Air issue

    Posted Oct 17, 2012 08:45 AM

    Interesting read, we've upgraded from 5.0.3.x to 6.1.3.2 and are now starting to receive reports of the same type as reported earlier in this thread.  Interesting as we are also getting more reports from Apple-based devices than others.

     

    We were running pretty stable on the 5.x codetrain and only reason we were going to 6.x was to support the AP-135's that were to be deployed at the end of the year.

     

    Looks like we might have to roll-back to 5.x code train...



  • 38.  RE: Mac OS X Lion/MacBook Air issue

    Posted Oct 17, 2012 10:48 AM

    @jasonmathew1 wrote:

    Interesting read, we've upgraded from 5.0.3.x to 6.1.3.2 and are now starting to receive reports of the same type as reported earlier in this thread.  Interesting as we are also getting more reports from Apple-based devices than others.

     

    We were running pretty stable on the 5.x codetrain and only reason we were going to 6.x was to support the AP-135's that were to be deployed at the end of the year.

     

    Looks like we might have to roll-back to 5.x code train...


    Jasonmatthew1,

     

    You should open a TAC case to ensure that your specific issue is being troubleshot....  Please do not assume you have the same issue.  Let's see what we can do for your situation.

     



  • 39.  RE: Mac OS X Lion/MacBook Air issue

    Posted Nov 07, 2012 04:09 PM

    @jasonmathew1 wrote:

    Interesting read, we've upgraded from 5.0.3.x to 6.1.3.2 and are now starting to receive reports of the same type as reported earlier in this thread.  Interesting as we are also getting more reports from Apple-based devices than others.

     

    We were running pretty stable on the 5.x codetrain and only reason we were going to 6.x was to support the AP-135's that were to be deployed at the end of the year.

     

    Looks like we might have to roll-back to 5.x code train...


    Do you have any more specific information about your issue? Right now we're being told from Aruba that they've talked to engineers at Apple and they have confirmed that it's an issue with some Broadcom wifi cards and will be working on a fix in a future firmware release. I haven't heard a peep about 10.7.6 coming out any time soon, so I think we are SOL. Meanwhile we still have tons of clients complaining about poor wifi performance. :smileyfrustrated:



  • 40.  RE: Mac OS X Lion/MacBook Air issue

    Posted Nov 14, 2012 01:23 PM

    This sounds incredibly similar to the issue I am facing.

     

    Mac laptops affected more than any other device. (iPads seem fine. Windows is fine.) 10.6 not really affected, 10.7 and10.8 are very bad. Users report random disconnects while sitting at their desks. Mac roaming performance is generally poor, with 15+ seconds of downtime when switching between APs.

     

     

    Running ArubaOS 6.1.3.3 and 135 APs.

     



  • 41.  RE: Mac OS X Lion/MacBook Air issue

    Posted Mar 14, 2014 01:24 PM

    Hello rmcleod

     

    Hid you ever get a resolution. I have been battling this exact issue for over a year. Only our Mac clients are experiencing WiFi issues and it causes Firstclass email to disconnect



  • 42.  RE: Mac OS X Lion/MacBook Air issue

    Posted Mar 14, 2014 01:30 PM

    Hi Brad,

    Bill's command to disable roaming has been the fix for us. As long as the clients have strong signal strength, and we run that command on their laptops, they are no longer getting disconnected all the time. I've also been setting the MTU to 1493 as I read that somewhere else, but not sure if it's helping much.



  • 43.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 01:57 PM

    We're experiencing this same issue. Only certain users. Tried disabling Client Match and Band Steering, but some Mac clients just keep getting dropped from Firstclass again and again. 

     

    Tried running the command mentioned in this thread, we'll see if it helps. 



  • 44.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 02:04 PM

    theiglu,

     

    Have you opened a case to see if there is anything underlying that could be causing your issue?

     



  • 45.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 02:43 PM

    Yes I have. We disabled Client Match, but beyond that there isn't much they can do. I can't reproduce the issue for them and my users are very hard to get any feedback from. I actually just closed the case this morning after but then heard about more users experiencing the problem. 

     

    So far the debug logs show nothing that correlates to the drops for particular users. The timestamps are hard to go by since the drops usually don't appear until a few minutes after Firstclass loses connection. It sits there and doesn't say it has disconnected for a while until it errors out, sometimes this can go on for 4-5 minutes. 



  • 46.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 02:56 PM

    I did notice that OKC was enabled on our 802.1X profile. I have disabled it for now since the majority of our faculty are on OSX devices. 



  • 47.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 03:13 PM

    theiglu,

     

    That is a big one.



  • 48.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 03:39 PM

    Just had a device roam to another AP while she was sitting at her desk. This is a user that I just this afternoon cleaned her entire Wifi settings and performed the roaming command mentioned earlier. Just heard back from her that is occurring again. Here is the debug from the last few minutes, MDNS stuff excluded:

     

    Apr 22 15:27:46 :501109: <NOTI> |AP JRCAC-203@10.10.161.70 stm| Auth request: a8:bb:cf:04:0d:98: AP 10.10.161.70-00:24:6c:80:84:d9-JRCAC-203 auth_alg 0
    Apr 22 15:27:46 :501093: <NOTI> |AP JRCAC-203@10.10.161.70 stm| Auth success: a8:bb:cf:04:0d:98: AP 10.10.161.70-00:24:6c:80:84:d9-JRCAC-203
    Apr 22 15:27:46 :501109: <NOTI> |AP JRCAC_202@10.10.161.87 stm| Auth request: a8:bb:cf:04:0d:98: AP 10.10.161.87-00:1a:1e:89:fa:e1-JRCAC_202 auth_alg 0
    Apr 22 15:27:46 :501093: <NOTI> |AP JRCAC_202@10.10.161.87 stm| Auth success: a8:bb:cf:04:0d:98: AP 10.10.161.87-00:1a:1e:89:fa:e1-JRCAC_202
    Apr 22 15:27:46 :501095: <NOTI> |stm| Assoc request @ 15:27:46.565546: a8:bb:cf:04:0d:98 (SN 79): AP 10.10.161.87-00:1a:1e:89:fa:e1-JRCAC_202
    Apr 22 15:27:46 :522036: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98 Station DN: BSSID=00:24:6c:80:84:d9 ESSID=Academic8021X VLAN=75 AP-name=JRCAC-203
    Apr 22 15:27:46 :522234: <DBUG> |authmgr| Setting idle timer for user a8:bb:cf:04:0d:98 to 300 seconds (idle timeout: 300 ageout: 0).
    Apr 22 15:27:46 :522152: <DBUG> |authmgr| station free: bssid=00:24:6c:80:84:d9, @=0x0x1570e2c.
    Apr 22 15:27:46 :501095: <NOTI> |AP JRCAC_202@10.10.161.87 stm| Assoc request @ 15:27:51.739606: a8:bb:cf:04:0d:98 (SN 79): AP 10.10.161.87-00:1a:1e:89:fa:e1-JRCAC_202
    Apr 22 15:27:46 :501100: <NOTI> |AP JRCAC_202@10.10.161.87 stm| Assoc success @ 15:27:51.741375: a8:bb:cf:04:0d:98: AP 10.10.161.87-00:1a:1e:89:fa:e1-JRCAC_202
    Apr 22 15:27:46 :501080: <NOTI> |stm| Deauth to sta: a8:bb:cf:04:0d:98: Ageout AP 10.10.161.70-00:24:6c:80:84:d9-JRCAC-203 STA has roamed to another AP
    Apr 22 15:27:46 :501100: <NOTI> |stm| Assoc success @ 15:27:46.569271: a8:bb:cf:04:0d:98: AP 10.10.161.87-00:1a:1e:89:fa:e1-JRCAC_202
    Apr 22 15:27:46 :522035: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98 Station UP: BSSID=00:1a:1e:89:fa:e1 ESSID=Academic8021X VLAN=75 AP-name=JRCAC_202
    Apr 22 15:27:46 :522077: <DBUG> |authmgr| MAC=a8:bb:cf:04:0d:98 ingress 0x0x10324 (tunnel 804), u_encr 64, m_encr 64, slotport 0x0x2100 , type: local, FW mode: 0, AP IP: 0.0.0.0 mdie 0 ft_complete 0
    Apr 22 15:27:46 :522078: <DBUG> |authmgr| MAC=a8:bb:cf:04:0d:98, wired: 0, vlan:75 ingress:0x0x10324 (tunnel 804), ingress:0x0x10324 new_aaa_prof: Academic8021X-AAA, stored profile: Academic8021X-AAA stored wired: 0 stored essid: Academic8021X, stored-ingress: 0x0x1001f
    Apr 22 15:27:46 :522247: <DBUG> |authmgr| User idle timer removed for user with MAC a8:bb:cf:04:0d:98.
    Apr 22 15:27:46 :501105: <NOTI> |AP JRCAC-203@10.10.161.70 stm| Deauth from sta: a8:bb:cf:04:0d:98: AP 10.10.161.70-00:24:6c:80:84:d9-JRCAC-203 Reason STA has roamed to another AP
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 0 derivation_type Reset VLANs for Station up index 14.
    Apr 22 15:27:46 :501000: <DBUG> |AP JRCAC-203@10.10.161.70 stm| Station a8:bb:cf:04:0d:98: Clearing state
    Apr 22 15:27:46 :522255: <DBUG> |authmgr| "VDR - set vlan in user for a8:bb:cf:04:0d:98 vlan 75 fwdmode 0 derivation_type Default VLAN.
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 75 derivation_type Default VLAN index 15.
    Apr 22 15:27:46 :522255: <DBUG> |authmgr| "VDR - set vlan in user for a8:bb:cf:04:0d:98 vlan 75 fwdmode 0 derivation_type Current VLAN updated.
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 75 derivation_type Current VLAN updated index 16.
    Apr 22 15:27:46 :522246: <DBUG> |authmgr| Idle timeout should be driven by STM for MAC a8:bb:cf:04:0d:98.
    Apr 22 15:27:46 :522254: <DBUG> |authmgr| VDR - mac a8:bb:cf:04:0d:98 rolename logon fwdmode 0 derivation_type Initial Role Contained vp not present.
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 0 derivation_type Reset Role Based VLANs index 17.
    Apr 22 15:27:46 :522083: <DBUG> |authmgr| Skip User-Derivation, mba:0 udr_exist:0,default_role:logon,pDefRole:0x0xdafcc4
    Apr 22 15:27:46 :524124: <DBUG> |authmgr| dot1x_supplicant_up(): MAC:a8:bb:cf:04:0d:98, pmkid_present:False, pmkid:N/A
    Apr 22 15:27:46 :522243: <DBUG> |authmgr| MAC=a8:bb:cf:04:0d:98 Station Updated Update MMS: BSSID=00:1a:1e:89:fa:e1 ESSID=Academic8021X VLAN=75 AP-name=JRCAC_202
    Apr 22 15:27:46 :527000: <DBUG> |mdns| mdns_parse_auth_userapname_message 447 Auth->MDNS User APNAME: MAC:a8:bb:cf:04:0d:98, NEW AP NAME:JRCAC_202
    Apr 22 15:27:46 :522038: <INFO> |authmgr| username=cmerrill MAC=a8:bb:cf:04:0d:98 IP=0.0.0.0 Authentication result=Authentication Successful method=802.1x server=CushDCSrv02
    Apr 22 15:27:46 :522044: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98 Station authenticate(start): method=802.1x, role=faculty/faculty//logon, VLAN=75/75, Derivation=2/1, Value Pair=1, flags=0x8
    --More-- (q) quit (u) pageup (/) search (n) repeat Apr 22 15:27:46 :522017: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98 IP=?? Derived role 'faculty' from server rules: server-group=CushTest, authentication=802.1x
    Apr 22 15:27:46 :522127: <DBUG> |authmgr| {L2} Update role from faculty to faculty for IP=0.0.0.0.
    Apr 22 15:27:46 :522049: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98,IP=N/A User role updated, existing Role=faculty/faculty, new Role=faculty/faculty, reason=Station Authenticated with auth type: 4
    Apr 22 15:27:46 :522128: <DBUG> |authmgr| download-L2: acl=55/0 role=faculty, tunl=0x0x10324, PA=0, HA=1, RO=0, VPN=0 L3MOB=0.
    Apr 22 15:27:46 :522050: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98,IP=N/A User data downloaded to datapath, new Role=faculty/55, bw Contract=0/0, reason=Download driven by user role setting, idle-timeout=300
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 0 derivation_type Reset Dot1x VLANs index 18.
    Apr 22 15:27:46 :522254: <DBUG> |authmgr| VDR - mac a8:bb:cf:04:0d:98 rolename NULL fwdmode 0 derivation_type Dot1x Aruba VSA vp present.
    Apr 22 15:27:46 :527000: <DBUG> |mdns| mdns_parse_auth_userrole_message 287 Auth User ROLE: MAC:a8:bb:cf:04:0d:98, NAME:cmerrill, ROLE_NAME:faculty
    Apr 22 15:27:46 :522254: <DBUG> |authmgr| VDR - mac a8:bb:cf:04:0d:98 rolename NULL fwdmode 0 derivation_type Dot1x MSFT Attributes vp present.
    Apr 22 15:27:46 :522254: <DBUG> |authmgr| VDR - mac a8:bb:cf:04:0d:98 rolename NULL fwdmode 0 derivation_type Dot1x Server Rule vp present.
    Apr 22 15:27:46 :522259: <DBUG> |authmgr| "VDR - Do Role Based VLAN Derivation user a8:bb:cf:04:0d:98 role faculty authtype 4 rolehow Matched server rule.
    Apr 22 15:27:46 :522254: <DBUG> |authmgr| VDR - mac a8:bb:cf:04:0d:98 rolename faculty fwdmode 0 derivation_type Dot1x Server Rule Role Contained vp not present.
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 0 derivation_type Reset Role Based VLANs index 19.
    Apr 22 15:27:46 :522161: <DBUG> |authmgr| Valid Dot1xct, remote:0, assigned:75, default:75, current:75,termstate:0, wired:0, dot1x enabled:1, psk:0 static:0 bssid=00:1a:1e:89:fa:e1.
    Apr 22 15:27:46 :522255: <DBUG> |authmgr| "VDR - set vlan in user for a8:bb:cf:04:0d:98 vlan 75 fwdmode 0 derivation_type Current VLAN updated.
    Apr 22 15:27:46 :522258: <DBUG> |authmgr| "VDR - Add to history of user user a8:bb:cf:04:0d:98 vlan 75 derivation_type Current VLAN updated index 20.
    Apr 22 15:27:46 :522260: <DBUG> |authmgr| "VDR - Cur VLAN updated a8:bb:cf:04:0d:98 mob 0 inform 1 remote 0 wired 0 defvlan 75 exportedvlan 0 curvlan 75.
    Apr 22 15:27:46 :522029: <INFO> |authmgr| MAC=a8:bb:cf:04:0d:98 Station authenticate: method=802.1x, role=faculty/faculty//logon, VLAN=75/75, Derivation=2/1, Value Pair=1
    Apr 22 15:27:46 :522008: <NOTI> |authmgr| User Authentication Successful: username=cmerrill MAC=a8:bb:cf:04:0d:98 IP=10.10.75.23 role=faculty VLAN=75 AP=JRCAC_202 SSID=Academic8021X AAA profile=Academic8021X-AAA auth method=802.1x auth server=CushDCSrv02
    Apr 22 15:27:46 :522053: <DBUG> |authmgr| PMK Cache getting updated for a8:bb:cf:04:0d:98, (def, cur, vhow) = (75, 75, 1) with vlan=0 vlanhow=0 essid=Academic8021X role=faculty rhow=2



  • 49.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 03:40 PM

    That mainly happens when the power is too high.  When you have time, please constrain your Min and Max to 12 and 18 when you feel comfortable.  Do the same to your 2.4ghz and 5ghz to start.



  • 50.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 03:51 PM

    @theiglu wrote:

    Yes I have. We disabled Client Match, but beyond that there isn't much they can do. I can't reproduce the issue for them and my users are very hard to get any feedback from. I actually just closed the case this morning after but then heard about more users experiencing the problem. 

     

    So far the debug logs show nothing that correlates to the drops for particular users. The timestamps are hard to go by since the drops usually don't appear until a few minutes after Firstclass loses connection. It sits there and doesn't say it has disconnected for a while until it errors out, sometimes this can go on for 4-5 minutes. 


     

     

    theiglu,

     

    I would say that rarely is Clientmatch a problem.  You should re-enable it.  Clientmatch can only do so much in a poor environment.  To get some ideas, please look at the post here:  http://community.arubanetworks.com/t5/Technology-Blog/Removing-the-Bottleneck-in-Wireless/ba-p/77978

     



  • 51.  RE: Mac OS X Lion/MacBook Air issue

    Posted Apr 22, 2014 04:01 PM