topic Re: M2 MAC Pro WiFi 6e Fails to join when Fast Transition set to ADAPT in Wireless

M2 MAC Pro WiFi 6e Fails to join when Fast Transition set to ADAPTIVE

charles — Fri, 10 Feb 2023 07:55:20 GMT

Latest M2, M2Max, M2Pro, MAC Book Pro WiFi 6E cannot connect to Cisco WiFi when Fast Transition (FT) is set to "Adaptive"

Is anyone else having issues with the Latest M2 Mac Book Pros (with WiFi 6E) not connecting to Cisco AIROS Controller-based Networks if Fast Transition (FT) is set to ADAPTIVE? Tested on the Latest 8.10.183.0 with 9130,3800,3700 Series AP. Also Tested on 8.5.182.2 with 3600 series APs. Other Mac and IOS devices work fine.

No other vendor can support Adaptive mode, it is proprietary to Cisco and Apple. The result is that all non-iOS devices (inc MacOS < v12 ) will connect and roam without FT. But iOS devices can “Adapt” (upscale) their ‘Authentication and Key Management’ suite (AKM) to connect with FT even though the SSID does not support it.

If the SSID FT option is set to ENABLED the M2 WiFi6e device can connect.
If the SSID FT option is set to DISABLED the M2 WiFi6e device can connect.

The devices ASSOCIATES and does 802.1x Auth but then cannot get an IP address and gets self-assigned IP then disconnects. This is all happening on WiFi 5Ghz (no 6Ghz)

from the apple site

802.11r

Wi-Fi network roaming with 802.11k, 802.11r and 802.11v on iOS, iPadOS and macOS – Apple Support (AU)

When your device roams from one AP to another on the same network, 802.11r uses a feature called Fast Basic Service Set Transition (FT) to authenticate more quickly. FT works with both pre-shared key (PSK) and 802.1X authentication methods. iOS 10 and later, iPadOS and macOS 12 include support for adaptive 802.11r on Cisco wireless networks. Adaptive 802.11r offers FT without the need to enable 802.11r on the configured Cisco wireless network. To support adaptive 802.11r, the Cisco network must be using controller code version 8.3 or later.

Re: M2 MAC Pro WiFi 6e Fails to join when Fast Transition set to ADAPT

Mark Elsen — Fri, 10 Feb 2023 08:03:02 GMT

- Try client debugging for those clients who can not connect : https://www.cisco.com/c/en/us/support/docs/wireless/aironet-1200-series/100260-wlc-debug-client.html , you can have debugs analyzed with : https://cway.cisco.com/wireless-debug-analyzer/

Re: M2 MAC Pro WiFi 6e Fails to join when Fast Transition set to ADAPT

charles — Fri, 10 Feb 2023 08:25:03 GMT

Already done that below is when FT set to ADAPTIVE.... (Next is to get a traffic wireless AIR Capture)

Client made new Association to AP/BSSID BSSID AP

WLC recognizes that the client is 802.11r-capable

The WLC/AP has found from client association request Information Element that claims PMKID Caching support

The Reassociation Request from the client comes with 0 PMKID

Client has successfully cleared AP association phase

WLC/AP is sending an Association Response to the client with status code 0 = Successful association

Client will be required to Reauthenticate in 0

seconds

WLC/AP is sending EAP-Identity-Request to the client

RADIUS Server permitted access

Client will be required to Reauthenticate in 0

4-Way PTK Handshake, Sending M1

4-Way PTK Handshake, Received M2