topic Just tried again with my in Wireless

CCX/802.11k

Alucidnation — Mon, 05 Jul 2021 11:31:39 GMT

While reading the documentation for using 802.11k, am i correct in assuming that this function will not work if the clients are not CCX compatible?

Most of the clients are iOS devices and are showing on the controller "Home Page" as being CCXv0.

Thanks.

802.11k was specific for

Scott Fella — Sun, 24 Jan 2016 16:09:51 GMT

802.11k was specific for Apple because their devices being sticky. Here is a good read on Apple device support:

https://support.apple.com/en-us/HT203068

-Scott

*** Please rate helpful posts ***

Thanks Scott, that was an

Alucidnation — Sun, 24 Jan 2016 19:39:16 GMT

Thanks Scott, that was an informative read.

So, if i understand correctly, the 802.11k settings will work for ios devices?

I seem to be having trouble with iphones not authenticating that quick and ocassionally getting timed out on the 4 way handshake.

Couple things. 802.1k is

Scott Fella — Sun, 24 Jan 2016 19:46:33 GMT

Couple things. 802.1k is supported on the device listing in the doc. I do recall that Apple changed some things that have broke 802.1k.

Look at the Cisco bug CSCut93712

-Scott

*** Please rate helpful posts ***

Thanks again.

Alucidnation — Sun, 24 Jan 2016 20:34:49 GMT

Thanks again.

It doesn't seem to say either way, however, i have disabled k for now and left r enabled.

Ive also posted on that thread to see if there is any update.

🙂

Ive also just noticed this...

Alucidnation — Sun, 24 Jan 2016 20:42:43 GMT

Ive also just noticed this...

n Cisco Wireless Controller Release 8.1, the 802.11v feature is applicable only on the following Cisco Wireless Controller models:

Cisco 5500 Series Wireless Controllers
Cisco WiSM2
Cisco Flex 7500 Series Wireless Controllers
Cisco 8500 Series Wireless Controllers

So again, do i assume that this function does not work on the 2504 controller anyway?

Correct... If it's not listed

Scott Fella — Sun, 24 Jan 2016 20:52:14 GMT

Correct... If it's not listed, then Cisco doesn't support a feature. The 2504 doesn't have the horsepower as the other platforms and is limited. The box is still a great fit for the small business as long as your not using a feature that is not supported.

-Scott

*** Please rate helpful posts ***

802.11r is a good feature but

Scott Fella — Sun, 24 Jan 2016 20:55:24 GMT

802.11r is a good feature but not adopted largely because of device support. As long as your devices are able to join, that's a sign that it supports 11r. If you have it enabled, don't do FT over DS use FT over the air. Just leave that FT over DS unchecked.

Im assuming your using 802.1x?

-Scott

*** Please rate helpful posts ***

Thats interesting as it is

Alucidnation — Sun, 24 Jan 2016 21:52:54 GMT

Thats interesting as it is fully configurable on the GUI, so i assumed they had implemented it.

I thought that the firmware wouldn't have the option available as it looks like firmware is model specific.

Strange really, especially as other manufacturers have it available on their standalone products.

The firmware for the 2504 is

Scott Fella — Sun, 24 Jan 2016 21:59:47 GMT

The firmware for the 2504 is the same for the 5508. So you will see it in the GUI and CLI, but it will not be supported. Cisco understands that other products have it, but they also have to make sure their hardware can actually do it right.

-Scott

*** Please rate helpful posts ***

Sorry, i must have cross

Alucidnation — Sun, 24 Jan 2016 22:01:33 GMT

Sorry, i must have cross posted!

Yes i have read up on the DS and left it over the air as it seems more reliable.

And no, im using standard wpa+wpa2 with PSK and FT-PSK.

This only in a home environment so i assumed this would be sufficient, however, do you think it would be better to use 802.1X?

I will admit i have no experience of setting up this particular method.

I would use 802.1x if you can

Scott Fella — Sun, 24 Jan 2016 22:04:28 GMT

I would use 802.1x if you can. If you don't have Active directory and or a radius server in your home environment, maybe it's a lab, then use local EAP on the WLC.

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_0110010.html

http://mrncciew.com/2013/04/21/configuring-local-eap-on-wlc/

-Scott

*** Please rate helpful posts ***

Excuse me for asking, but

Alucidnation — Sun, 24 Jan 2016 22:25:08 GMT

Excuse me for asking, but could you explain the benefits on using this method?

Just tried setting this up

Alucidnation — Sun, 24 Jan 2016 23:14:12 GMT

Just tried setting this up and i have followed the instructions on both the links you had kindly provided however...

My iphone showed the certificate, however, it keeps saying username or password is invalid (which i have redone several times and it isnt).

My Macbook connected, but then asked for an account name and password, which, from what i can see on the WLC, there is no option to set this up??

The username and password

Scott Fella — Sun, 24 Jan 2016 23:48:23 GMT

The username and password would be defined on the local net user. You would setup local EAP with PEAP checked. Then on the WLAN under security you specify local EAP and choose your PEAP profile.

Should work unless there is a bug on that with the code your running. I have ran that successfully in some deployments and also in my home lab.

-Scott

*** Please rate helpful posts ***

Just tried again with my

Alucidnation — Mon, 25 Jan 2016 06:55:33 GMT

Just tried again with my iphone, using different local net users and it says "Incorrect username or password for (wifi network name)."

I cannot see a setting for a username etc for the wifi network.

Do i need to set up a server on the security tab?

Might be something off topic but need understanding

niketan sutar — Thu, 13 Feb 2020 04:04:53 GMT

We have a few apple iphone X users in our environment.

however CMX is unable to locate them. the connection properties of client state it is CCXv4 incompatible. i dont understand why, some of the other users that use I Phone x are traceable!!!!