Header Only - DO NOT REMOVE - Extreme Networks

9.21.05 and iOS connectivity issues ?

Userlevel 2
Updated to 9.21.05 a few days ago and seem to be having problems with ios devices accessing the network consistently. Device and controller show connected, but I cannot access the internet or ping the default gateway. Toggle wifi on the device on/off and it immediately picks back up. Or if you wait long enough 10+ minutes, you will eventually get re-authed and things start working. SSID is using 802.1x and the issue is somewhat inconsistent, but seems to occur most often when roaming.

Help ? Anyone see anything similar, hopefully a solution or have to revert back before students return.

8 replies

I have been battling the same thing for months. Will be following this topic.
Userlevel 6
I met similar issue and the cure was disable Radar feature and disable fingerprinting the interference source. Please contact GTAC to get support.
Userlevel 6

First of all there is a lot of information in GTAC knowledge base - https://gtacknowledge.extremenetworks.com/
(Type "Apple" in search)
Also you have to add rule for apple devices


Also you can catch dump traffic from AP which iOS devices connected and analyze it.

Thank you!
Userlevel 4
I have also had this issue with our Apple only clients. The work around stated above works very well and I have seen this issue resolved in 9.15.07 and 9.21.x updates.
Userlevel 2
Which workaround ? Radar is not enabled and I am not sure where disable fingerprinting the interference source is on the controller config ?

From the links, management frame protection and fast transition are both disabled.
Userlevel 4
These two that AlexandrP posted


I checked on our controller and this: https://gtacknowledge.extremenetworks.com/articles/Solution/Apple-IOS-Clients-with-Connection-Issues...
doesn't seem to apply to us as both settings referred to in the article are already disabled. However, disabling RADAR has shown some promising initial results. A user reported that before disabling RADAR it consistently took him 5 - 10 minutes to authenticate on his iPhone and it was instantaneous after disabling RADAR. Liking this workaround so far. Still more testing to do and more sites (VNS's) to check on.

We are on ver
Userlevel 3
are the client installed de profile 802.1x with de correct certificate of radius server?
At university we have 'eduroam' ssid that is 802.1x. All the issues were solved with the profile instalation... there is a idea 😃
Also, if the user has updated de iphone you have to delete de profile and install again to run correctly...
This two things solve my problem.