{"id":49,"date":"2016-05-03T08:15:47","date_gmt":"2016-05-03T12:15:47","guid":{"rendered":"http:\/\/badger-fi.com\/?p=49"},"modified":"2016-05-03T08:15:47","modified_gmt":"2016-05-03T12:15:47","slug":"husband-father-wifi-fixe802-11r","status":"publish","type":"post","link":"https:\/\/www.badger-fi.com\/?p=49","title":{"rendered":"Husband, Father, Wifi Fixe(802.11)r"},"content":{"rendered":"

****UPDATE****<\/p>\n

Thanks to Andrew von Nagy and Jason Hintersteiner for bringing this to my attention.\u00a0 The 802.11r (FT) default setting in both the Meraki dashboard and Cisco WLC is in fact set to DISABLED.\u00a0 I don’t recall changing this setting, but I must have.\u00a0 My apologies.<\/p>\n

***************<\/p>\n

 <\/p>\n

At my house I have many duties.\u00a0 I am husband, father, plumber, carpenter, lawn mower, wood-cutter\/splitter, etc.\u00a0 The list is long and I enjoy every one of them (most of the time).\u00a0 I am also the CIO.\u00a0 We don\u2019t have a sophisticated ticket system for entering technology problems, but we do have a sophisticated alert system named \u201cElla.\u201d\u00a0 This system has been online since August 2011 and is very good at letting me know when the \u201cwifi is not working\u201d or the \u201cinternet is down.\u201d\u00a0 Ella is my daughter.\u00a0 When Netflix comes to a screeching halt I know of the problem in very short order and there is very little tolerance for downtime.\u00a0 Of course most issues that the end users experience at home (much the same at work) look like a wifi problem but a lot of times are not.\u00a0 Most issues can easily be solved by cycling the power on either the WatchGuard Firewall running pfSense or the cable modem.\u00a0 I have an assistant that I have trained to handle such tasks when I am not around.\u00a0 His name is William and he is my nine-year old son.\u00a0 He used to be a reliable network monitoring system like his sister but sports have replaced technology for the time being.<\/p>\n

This brings me to a recent issue that we experienced on the home front.\u00a0 It WAS a wifi issue\u2026kinda.\u00a0 My wife brought me her work issued MacBook Air which would not connect and was asking for WPA2 Enterprise credentials.\u00a0 \"Cisco8021x\"<\/a>The MBA was one of the first and hasn\u2019t been updated in a very long time (OS X 10.8).\u00a0 It should be noted that I offer up three different flavors of wifi at the house; Cisco, Meru, and Meraki.\u00a0 Each iteration offers one SSID of which her MBA would not connect to any.\u00a0 Each SSID uses the same WPA2-PSK passphrase and runs the most current version of code on the back-end.\u00a0 Of course my wife made it very clear to me that \u201cit works just fine at work\u201d in her classroom (also Meru).\u00a0 All other devices were working fine including both of our iPhones and my Dell with Intel 7260.\u00a0 I mulled it over for a few minutes but could not figure out why her MBA continuously asked for WPA2 Enterprise credentials on all of my SSIDs.\u00a0 A quick Google search didn\u2019t reveal anything obvious and a station log remained empty on the Meru controller.\u00a0 The only thing that stood out in my mind was that I recently updated my Meru controller and turned on all the latest bells and whistles.\u00a0 She had only ever been connected to the Meru SSID so I started there.\u00a0 I created a very generic SSID named affectionately \u201cForYourDumbMac\u201d and configured it very similar to the others but left most settings default; all legacy rates enabled, same WPA2-PSK passphrase, etc.\u00a0 The MBA connected to the new SSID on the first try!\u00a0 I started flipping switches on \u201cForYourDumbMac\u201d one by one until the MBA would no longer connect and I was prompted for WPA2 Enterprise credentials.\u00a0 Lo and behold the last switch that was flipped before the MBA stopped working was to enable 802.11r (Fast BSS Transition).\u00a0 I toggled 802.11r back off and the MBA happily connected again.\u00a0 For those of you not in the know, 802.11r allows for a more speedy transition while roaming between APs.\u00a0 This is of course a very basic explanation and a more detailed explanation of 802.11r can be found in this CWNP whitepaper written by Devin Akin<\/a>:\u00a0 https:\/\/www.cwnp.com\/uploads\/802-11_rsn_ft.pdf<\/a> .<\/p>\n

\"Courtesy<\/a>
Courtesy of https:\/\/supportforums.cisco.com\/sites\/default\/files\/media\/802.11r_support.png<\/figcaption><\/figure>\n

Once I was able to determine that 802.11r was causing the issue I turned it off (which is the default setting) on the original Meru SSID and the MBA connected right away.\u00a0 Further research turned up a chart (right) that showed 802.11r was first supported in OS X Yosemite 10.10.<\/p>\n

EDIT – The following sentence is incorrect.\u00a0 The default setting for 802.11r is DISABLED.<\/strong><\/p>\n

I checked both the Cisco controller and Meraki dashboard and they both had 802.11r (FT) enabled by default for PSK SSIDs but not 802.1x SSIDs.<\/p>\n

\"CiscoFT\"<\/a>
Cisco 2504 WLC running 8.2.100.0<\/figcaption><\/figure>\n
\"MerakiFT\"<\/a>
Meraki Dashboard running latest firmware as of 05\/02\/2016<\/figcaption><\/figure>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

So I had to do the one thing that I hate to do.\u00a0 I had to tailor\\dumb-down the entire network (albeit my small home network) to support a single client.\u00a0 But you know the saying, \u201chappy wife\u2026happy life.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

****UPDATE**** Thanks to Andrew von Nagy and Jason Hintersteiner for bringing this to my attention.\u00a0 The 802.11r (FT) default setting in both the Meraki dashboard and Cisco WLC is in fact set to DISABLED.\u00a0 I don’t recall changing this setting, but I must have.\u00a0 My apologies. ***************   At my house I have many duties.\u00a0 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-49","post","type-post","status-publish","format-standard","hentry","category-wifi"],"_links":{"self":[{"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=\/wp\/v2\/posts\/49","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=49"}],"version-history":[{"count":0,"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=\/wp\/v2\/posts\/49\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=49"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=49"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.badger-fi.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=49"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}