Controllerless Networks

Hi all, hope this is the correct forum to ask. 

Been troubleshooting some issues where a small number of Chromebooks just sit at connecting while others work fine. Seems to be random over the campus (we have 75 APs) and at a loss. The only unusual thing I can see in the fault history is APs occasionally failing to authenticate with the NPS. Again, seems to be random and transient, different APs at different times. Screenshot below, ignore the AP being down from yesterday as this is one on my bench for testing. There is only one in the history as I have updated/rebooted recently. Not sure if related.

Affected devices are on a specific SSID with pre-shared key (assigned via Gsuite). None of our APs are near their client limits (from what the web UI tells me). The Chromebooks just sit on "Connecting" to the specified SSID. It's weird because there can be 25 or more devices working fine and 2 or 3 that refuse to connect. Any time I am present to troubleshoot, everything just works. Turning the Chromebooks off and on or turning WiFi on and off usually resolves. This is over different makes and models of Chromebook, in different parts of the building/s. Signal is good in every classroom. Can't see any clues in NPS log for AP authentication.

Does anyone have any ideas or come across something similar?

Device network general settings: 

Primary usage: Employee, Key WPA2-Personal (pre-shared and enforced on devices)

Broadcast filtering: ARP Multicast transmission Enabled

Fast Roaming:

802.11r: Disabled (I think this is right as all of our APs are on the same VLAN, based on this KB Configuring Fast Roaming for Wireless Clients)

802.11k: Enabled

802.11v: Enabled

RF settings: Prefer 5GHz

Fairness mode: Fair Access (was on default)

Client match enabled, CM calc interval 30 seconds, CM neighbor matching % 65%, CM key blank (have not changed anything here)

We have a BYOD network for staff and student personal devices authenticating with WPA2-Ent (user AD credentials) to our domain controller which works perfectly, and there are maybe 3 or more times as many devices connected to that at any one time.

Any ideas appreciated! 

You're using WPA2-Personal with MAC auth?

Hi all, hope this is the correct forum to ask. 

Been troubleshooting some issues where a small number of Chromebooks just sit at connecting while others work fine. Seems to be random over the campus (we have 75 APs) and at a loss. The only unusual thing I can see in the fault history is APs occasionally failing to authenticate with the NPS. Again, seems to be random and transient, different APs at different times. Screenshot below, ignore the AP being down from yesterday as this is one on my bench for testing. There is only one in the history as I have updated/rebooted recently. Not sure if related.

Affected devices are on a specific SSID with pre-shared key (assigned via Gsuite). None of our APs are near their client limits (from what the web UI tells me). The Chromebooks just sit on "Connecting" to the specified SSID. It's weird because there can be 25 or more devices working fine and 2 or 3 that refuse to connect. Any time I am present to troubleshoot, everything just works. Turning the Chromebooks off and on or turning WiFi on and off usually resolves. This is over different makes and models of Chromebook, in different parts of the building/s. Signal is good in every classroom. Can't see any clues in NPS log for AP authentication.

Does anyone have any ideas or come across something similar?

Device network general settings: 

Primary usage: Employee, Key WPA2-Personal (pre-shared and enforced on devices)

Broadcast filtering: ARP Multicast transmission Enabled

Fast Roaming:

802.11r: Disabled (I think this is right as all of our APs are on the same VLAN, based on this KB Configuring Fast Roaming for Wireless Clients)

802.11k: Enabled

802.11v: Enabled

RF settings: Prefer 5GHz

Fairness mode: Fair Access (was on default)

Client match enabled, CM calc interval 30 seconds, CM neighbor matching % 65%, CM key blank (have not changed anything here)

We have a BYOD network for staff and student personal devices authenticating with WPA2-Ent (user AD credentials) to our domain controller which works perfectly, and there are maybe 3 or more times as many devices connected to that at any one time.

Any ideas appreciated!