Annoying behaviour on WPA Enterprise wireless LAN

I have a PB 1.67 running OS X 10.3.9 (all patches installed)
When I connect it to our WPA Enterprise wireless LAN, I experience the following annoying behaviour.
Authentication may be slow (sometimes 10 to 15 minutes), but connection usually succeeds.
Then while I am actively web browsing or retrieving email, things are ok. However if I have to leave the computer for about 3 or more minutes, it seems to decide that it should no longer be on the network and I have to disconnect and then reconnect.
No send/rec errors show up in the info tab of network utility. IP address is there, status is active and the link is reported as 54Mb. It appears that my machine is not interested in participating on the network until it has been reconnected.
Does anybody have any ideas on how to track down what might be happening?
Thanks in advance.

A follow up:
I have observed that when I am this non-working state, my 802.1x authentication status shows idle.
Is there a way that I can trace what is happening at the 802.1x layer?

Similar Messages

Wpa enterprise help

I have a MacBook, that is running leopard. I am having trouble connecting to my schools wpa enterprise wireless. I am regestered to access the wireless, but am having trouble connecting. I think my problem is that i dont know how to tell the computer which domain on the wireless network. The connection i am trying to get has many domains.

Ok, sorry for the super delayed response but I didn't have access to my laptop, then I was busy with midterms. I successfully connected manually with wpa_supplicant with this config file:
[phil@pwned network.d]$ cat /etc/wpa_supplicant.conf
ctrl_interface=/var/run/wpa_supplicant
eapol_version=1
ap_scan=1
fast_reauth=1
network={
ssid="uw-secure"
scan_ssid=1
key_mgmt=WPA-EAP
eap=PEAP
identity="rofl"
password="lolol"
phase1="peaplabel=0"
I then updated my uw-secure file so that it referenced the new wpa config file:
[phil@pwned network.d]$ cat uw-secure
CONNECTION="wireless"
DESCRIPTION="secure uw"
INTERFACE="wlan0"
IP="dhcp"
SECURITY="wpa-config"
SCAN="YES"
WPA_CONF="/etc/wpa_supplicant.conf"
I then tried to connect with netcfg, and I got this:
[phil@pwned network.d]$ sudo netcfg uw-secure
:: uw-secure up
wlan0 Interface doesn't support scanning : Device or resource busy
wlan0 Interface doesn't support scanning : Network is down
wlan0 Interface doesn't support scanning : Network is down
wlan0 Interface doesn't support scanning : Network is down
wlan0 Interface doesn't support scanning : Network is down
- Network not present.
any help would be appreciated.

10.4.2 and WPA Enterprise NOT working

Dears,
I have 2 machines configured in this way:
- 10.3.9 with Airport card (no Extreme) and latest Airport drivers;
- 10.4.2 with Airport Extreme card and latest Airport drivers;
I try to connect to our WPA Enterprise wireless network and i got 2 different results:
- 10.3.9 connects and works;
- 10.4.2 returns an error, the logs show the following:
2005-08-18 13:23:17.601 SystemUIServer[380] EAPOLControlCopyStateAndStatus failed for "en1" (err = 6)
There was an error trying to get authentication status: 6
com.apple.network.EAPOLController not active
Before upgrading to 10.4.2 the same machine with 10.4.1 was able to connect to WPA Enterprise.
I further investigated on this, seems that under 10.4.2 the folder /System/Library/SystemConfiguration/EAPOLController.bundle is empty, while under 10.4.1 it contained some files (oh yes, I have the disk image of the workstation when it had 10.4.1).
Maybe the guru guys from Apple can see if the 10.4.2 updater deleted those files in error.. bye !

Hi Rick,
I did the following:
- Re-install 10.4.2 upgrade;
- Re-install Airport 4.2 upgrade;
- Repair permissions;
- Check Keychain.
I still got those errors in the logs:
2005-08-19 16:01:07.966 Internet Connect[280] EAPOLControlCopyStateAndStatus failed for "en1" (err = 6)
There was an error trying to get authentication status: 6
com.apple.network.EAPOLController not active
2005-08-19 16:01:07.971 Internet Connect[280] EAPOLControlCopyStateAndStatus err = 6
com.apple.network.EAPOLController not active
Using Internet Connect I can see our wireless network, that is correctly identified as being encrypted with "WPA Enterprise" but after I entered user/password I got the following error:
"WPA Authentication failed. There was an error trying to get authentication status: 6"
I double checked username/password, mac address, base station configuration (Cisco AP-1131) and Radius server, are all ok (the other mac, with 10.3.9 joins our WPA network succesfully).
I'm stuck here..

WPA Enterprise on Palm Pre

We have found that the Palm Pre will not connect to our WPA Enterprise wireless system, because our network needs clients to eliminate the "validate server certificate" process. For example, our standard laptops use the SecureW2 client and the "validate server certificate" needs to be disabled in the client software. If this option is enabled, the SecureW2 client won't connect either (just like the Palm Pre won't).
How can this be done on a Palm Pre?
Thanks.
PS-- the Palm Pre connects perfectly to WPA personal networks
Post relates to: Pre p100eww (Sprint)

juhanima wrote:
If the WiFi setup doesn't require a user certificate, you should select "None" for a certificate when defining the connection. The CA certificate(s) you installed earlier are used automatically as long as they are enabled for WiFi usage.
Here are the settings for the network for a Nokia N82. Maybe, this will help shed some light on the issue. FYI - I could not make these settings work for my Nokia N8 as well. The IT help desk says they are unable to solve the issue.
juhanima wrote:
The connection dialog is supposed to show only actual user certificates to choose from, but it is a known bug in the current N9 FW that if you install something that is not a CA certificate it is taken for a user certificate by default and shown as an option in the connection dialog. The bug will be fixed in the next FW update I believe.
I have only installed one CA certificate (the one which can be found at the link I provided above). It does not ask for any password when I install it. When I go to Certificate Manager and try to change the password it informs that there is no password for the certificate.
juhanima wrote:
On the other hand, if the connection does require a user certificate you should have received one from the network's administrator in a PKCS#12 package with a password. You need the password when installing the package and later when using the private key related to the user certificate. But it sounds like this is not the case, so just select "None".
Hope this helps.
Juhani Mäkelä
Harmattan certificate manager maintainer
So I did choose "None" as certificate. EAP Type - PEAP and EAP MSCHAPv2 as the EAP method. I could not connect to the network using these settings. The certificate was installed at this point. If I try connecting using the certifcate it asks me for the password. So, right now, it is a problem connecting to the network. Would appreciate any help in this regard.
Cheers
Rahul

IOS 5 can't connect to WPA/WPA2 Enterprise Wireless Network

After upgrading multiple iPhone 4 (CDMA versions) to IOS 5.0, I have not been able to get them to connect to our WPA/WPA2 Enterprise wirless network. We use a Cisco Wireless LAN Controller. The wireless network is capable of doing WPA or WPA2 Enterprise with PEAP. These phones all connected to this network fine before the upgrade.
When connecteding to the network, it prompts me for the username and password and when I tap join it sits for about 10-15 seconds then says "Unable to join the network" with a Dismiss button.
It connects to non-Enterprise networks just fine. I have tested it on WPA Personal and WPA2 Personal networks and it has worked on several without issue.
I have tried "forget this network" with no success.
Is anyone else having this problem? I know of at least three Verizon iPhone 4's that have this exact same problem. I haven't seen one working with this configuration yet.

I have the same problem:
Cisco WLC's -> WPA2 Enterprise AES + EAP-PEAP 802.1x with CCKM
Pre 5.0 - all worked fine
Post 5.0 - it tries to connect and after few moments i get error - couldn't connect.
Info from controller:
10/17/2011 12:16:37 CEST           INFO           172.16.16.X           Sending EAP request to client from radius server. 6.f. ..l
10/17/2011 12:16:38 CEST           ERROR           172.16.16.X           Retransmitting EAP-ID request to client,retransmission timer expired. 5.y. ..l
10/17/2011 12:16:39 CEST           ERROR           172.16.16.X           Retransmitting EAP-ID request to client,retransmission timer expired. 5.y. ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           Authentication failed for client as EAP ID request from AP reached maxmium retransmissions. 5.yp ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           De-authentication sent to client. 5.oP ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           5.yp ..l
10/17/2011 12:16:40 CEST           ERROR           172.16.16.X           EAPOL-key is invalid, scheduling client for deletion. 5.yp ..l
On the Radius server i don't see any activity regarding this device.
I had this network configured on my iPhone - after upgrade and restore it remembered it. Every time i was in vicinity of my Enterprise WLAN it tried to connect - resulting int express battery drain - 6-7 hrs and battery was empty from 100%

WPA issue on Intel(R) PRO/Wireless LAN 2100 3B

Hi,
I'm trying to use the WPA authentication using my Toshiba's Tecra S1 with an integrated Intel(R) PRO/Wireless LAN 2100 3B. I've read that this adapter supports WPA. I've installed the newest drivers under my Windows xp SP2, but the OS doesn't allows me to select WPA authentication in the wireless properties.
Any help is wellcome.
Thanks in advance.

Hi
The Wlan encryption standard you will find in the WLan properties.
You have to select you SSID and click on the properties.
If there you will not find any option for WPA so this WLan miniPCI card doesnt support this encryption option.
Note: This option depends on the hardware and not on the software. You cannot enable the encryption by updating any drivers or any SP.

Enterprise Wireless

Has anyone had any luck pushing a a WPA enterprise profile to a AppleTV and it actually work? I have a profile in Apple Configurator that only sets the WIFI settings and pushes the necessary cert, the device fails to connect to the wireless network. Which im assuming is a kerberose issue since we cant manually set the date and time on the ATV. And if i restart the ATV either through the menus or by pulling the power cable I am greated my a connect to itunes graphic when it powers up.

Simple answer is to implement QoS in your wireless for voice/video.
There are lots of work to do. Refer this design document as a guide.
Real-Time Traffic over Wireless LAN Solution Reference Network Design Guide
In high level here are some task you can independantly check & configure if it is not align to recommended design guides.
1. end to end QoS configured on your wired switch network. Below blog post may give some help
http://mrncciew.com/2012/11/26/375035602960-wired-qos/
2. WLC management to be on tagged vlan.(see this TechNote)
3. If all AP are local mode, then trust DSCP on switchports where AP connected.
http://mrncciew.com/2013/02/24/best-practice-qos-config/
4. Trust CoS on WLC connected switchports
5. Video traffic to be classified (AF41) and allocate bandwidth across your network.
6. WLAN QoS profile to be configured as Gold or Platinum
http://mrncciew.com/2012/12/02/understanding-wireless-qos-part-3/
7. Plan your wireless to have around 10 clients per AP if they are using Video.
8. If you are using Multicast for video streaming, then you need to enable video stream feature as well.
http://mrncciew.com/2012/12/24/understanding-videostream-feature/
HTH
Rasika
**** Pls rate all useful responses ****

WPA Enterprise Question - Convince My School to Accept Macs on Wi-Fi!

It's been a whole year since I've been able to use my MBP on my school's wifi. Currently, they are using WPA2 Personal (which I think gives you a good definition of the idiots I'm dealing with).
I've just heard about WPA Enterprise and what is allows - which is great! But one question just to convince them:
I understand every user has their own username/password for WPA Enterprise; so what security precautions can be taken in order to prevent students from sharing their username/password to those unauthorized?
If someone can answer this question - I think I'll finally be able to convine my school's IT department to allow me (and so many others) on the network. Thanks!
Message was edited by: Appleologist

It's not trivial if you aren't already familiar with the various components of public-key infrastructures and implementing them.
Here's the Wikipedia article on the subject: [Extensible Authentication Protocol|http://en.wikipedia.org/wiki/ExtensibleAuthenticationProtocol]
There's lots of information out on the net about different methods of implementing WPA2 enterprise. It takes some planning, but the gist is that you can configure an environment where you issue certificates to machines to connect to the wireless LAN, and revoke them, if necessary. A unique certificate is provided to each machine and/or user.

WPA enterprise (need to not validate Certificate)

We currently use WPA Enterprise and we require the network to be configed manually to get it to work on a windows 7 pc.
We have to create the Wireless as so:
Network name: XYZ
Security: WPA-Enterprise
Encrypton type: TKIP
Under Properties for network... we need to change PEAP and uncheck Validate server certificate
Either we enable single signon if it's a domain joined PC and tell it to send user info from logged in user...
Or we store user info for non domain joined PC's.
Ok so that's how we get a PC running windows 7 to join the network...
I can't get an Iphone running 3.1.3 or an Ipad wifi model to connect.
Note: the iphone used to work on our network (nothing changed in 1 year)
WE use Cisco Wireless LAN controllers 4400 series and ABG light weight Access points.
How can I manually configure the wifi on an apple product? iphone/ipad

Try using the iPhone Configuration Utility.
http://support.apple.com/kb/DL851 - (for Mac)
http://support.apple.com/kb/DL926 - (for Windows)
It will let you manually select the security type and protocol. It also lets you install certificates and set trust exceptions on the devices.
You can find detailed information about the iPhone Configuration Utility in the Enterprise Deployment Guide, which is available here: http://manuals.info.apple.com/enUS/Enterprise_DeploymentGuide.pdf

WPA-Enterprise - Satellite S1400

I have a Satellite S1400 with integrated wireless (pre centrino). I'm trying to connect it to our Cisco WAPs which are configured with WPA-Enterprise.
As XP doesn't have any built-in apps to handle WPA-Enterprise, we have been using the real good Intel software.
This however will not work with W/Lan cards which are not intel based.
Does anyone out there know if:
a) Toshiba have an app. that I can use which will allow me to use WPA-Enterprise on this laptop.
b) There is any 3rd party software out there that will do the same thing.
I have searched both Toshiba and the internet with no avail!
Thanks all

Hi
Unfortunately, as far as I know Toshiba doesnt offer any additional WLan tools which could enable the WPA-Enterprise.
In my knowledge Toshiba notebooks are delivered either with Atheros Wlan card and/or with Intel WLan cards. If the Atheros WLan card was installed so you can use the Atheros WLan utility. If the Intel WLan card is installed so you can use the Intel utility.
Furthermore if the WLan card doesnt support this encryption so I you will need a new card or WLan USB stick which supports this special encryption.

HP Officejet 6500, Windows XP and 7, wireless LAN security code is not accepted

The security code of my wireless LAN is not accepted by the HP6500A. According to the diagnostic software of HP a code consisting of more than 50 characters is required (the total number of characters can not be identified because the code isgoing on out of the window). The security code of the route consists of 12 characters. Resetting the printer is not solving the problem.
This problem was identified after rinstalling the software after problems with printing: connection with the printer was identified; message: "busy with printing", but no printing result at all.

Security codes can be in ASCII or HEX. I'm guessing that the diagnostics is reporting HEX and the printer entry is in ASCII.
You can try running the diagnostics SW on the Windows 7 computer. It might return the key in ASCII.
A good option is to get the password from somewhere other than the diagnostics. Maybe you stored it somewhere or wrote it down? Once you get it try to enter from the front panel.
Can I get a little information from you?
What router brand model?
What security mode are you using (WEP, WPA, WPA2)?
Which model of the 6500 do you have (6500 or 6500a)?
Please mark the post that solves your problem as "Accepted Solution"
Sometimes it takes several posts back and forth to get to a solution - please be patient.
I am employed by HP

Does WET200 support WPA-Enterprise/TKIP?

I could not connect a WET200 (newly bought) to our WPA-enterprise/TKIP wireless network.
Can anyone tell me what was wrong? Does WET200 support WPA-enterprise? Please help!
Thanks a lot.

B**r!!!
oh well, one can only hope that there'll be an upgrade real soon now
Alex

LaserJet CP1525nw & WPA-enterprise

We bought a LaserJet CP1525nw printer because of its airprint support for printing from our iPads. Our wireless network uses WPA-enterprise security.
We are unable to connect the printer to the wireless due to the enterprise authentication. ipad is unable to find the printer.
We need printing from the iPads, ePrint does not offer. Any help would be much appreciated. Firmware 20110329.

Hello,
If you have not already, I might recommend going here and then looking at the link for iPad printing for ePrint/Airprint or ePrint Home and Biz. Good Luck!
http://h10025.www1.hp.com/ewfrf/wc/document?docname=c02784317&tmp_task=useCategory&cc=us&dlc=en&lang...
I worked for HP but my posts and replies are my own....Thank you!
*Say thanks by clicking the *Kudos!* which is on the left*
*Make it easier for other people to find solutions, by marking my answer with (Accept as Solution) if it solves your issue.*

Extend WPA Enterprise

Does anyone know if there is any way I can connect my Time Capsule to my University wireless network?
I live right opposite my university and if I put my laptop on my window sill I can connect to the wireless, but can't connect from my desk... I was wanting to put my time capsule on my window sill, use that to connect to the Uni wireless and thus extend the connection into my room...
Does anyone know a way to achieve this? My Uni uses WPA Enterprise encryption...
Many thanks.
Andrew.

One possible option, with your existing equipment, would be to reconfigure your Mac as a "software" router by employing OS X's Internet Sharing feature. In this case you would be sharing the Mac's wireless Internet connection through its Ethernet port. Theoretically, you could then connect the TC to the Mac's Ethernet port; reconfigure the TC as a bridge, and then connect clients to the TC.
Personally I haven't tried this to verify that it would work. Mainly because using a Mac as a software router is extremely limited as far as features that this would provide.

Remembering WPA Enterprise Network

At my university, the wireless network is a WPA enterprise network. Each time I want to connect, I have to enter everything in manually. How do I get it to remember the network?

Thank you both for your replies. I am trying iphitus ideia but am having trouble and the wiki doesn't have much info (not related to this issue at least).
ifconfig -a related to the wireless interface:
eth1 Link encap:Ethernet HWaddr 00:19:D2:1A:56:35
inet6 addr: fe80::219:d2ff:fe1a:5635/64 Scope:Link
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:12 dropped:1347 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:38366 (37.4 Kb) TX bytes:3727 (3.6 Kb)
Interrupt:16 Base address:0x4000 Memory:d8000000-d8000fff
lsmod | grep ipw:
ipw3945 200484 0
ieee80211 30664 1 ipw3945
sudo /usr/bin/netcfg-auto-wireless eth1
:: Scanning for networks [DONE]
:: eduroam up - Configuration generation failed: ctrl_interface=/var/run/wpa_supplicant [BUSY]
ctrl_interface_group=0
Passphrase must be 8..63 characters
sudo netcfg2 eduroam
:: eduroam up - Configuration generation failed: ctrl_interface=/var/run/wpa_supplicant [BUSY]
ctrl_interface_group=0
Passphrase must be 8..63 characters
eduroam profile in /etc/network.d/:
CONNECTION="wireless"
INTERFACE=eth1
SCAN="yes"
SECURITY="wpa"
ESSID="eduroam"
KEY=<censored>
IP="dhcp"
TIMEOUT=30
I don't think this information in the profile is enough, doesn't say which WPA protocol uses, nor the user (in the WPA Enterprise case) so I believe the problem might be related to that lack of info in the profile. The wiki didn't have an example for WPA enterprise though
EDIT: Also my wpa_supplicant.conf is like the one on my first post with these aditional lines:
ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
Last edited by Grimn (2008-03-03 09:51:53)

Annoying behaviour on WPA Enterprise wireless LAN

Similar Messages

Maybe you are looking for