topic Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how. in Aerohive Migrated Content

We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Thu, 03 Oct 2019 22:12:37 GMT

The application in question is Aristotle Insight. I believe it runs completely over WebRTC. When we test each client involved, each passes some web base tests on WebRTC. We had peer to peer blocked at the APs and one point and the application still seemed to work. Now, it's stopped all together.

I have change the Hive so many times, I am really not sure if I have done something to block this.

Our User profiles have no firewall running. We are indeed using the default user profile.

Any suggestions?

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Fri, 04 Oct 2019 02:58:48 GMT

If there are no firewalls in place, we'd need to see a packet capture taken when a user is trying to use the Aristotle Insight application to get a better idea of what is happening to that traffic.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Sat, 05 Oct 2019 00:09:11 GMT

Here is a packet capture.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Sat, 05 Oct 2019 00:12:49 GMT

Thank you, what was the MAC address of the client used to replicate the issue during the packet capture?

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Sat, 05 Oct 2019 01:58:31 GMT

a81d:1603:032d

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Sat, 05 Oct 2019 01:59:59 GMT

Something we have noticed, is that there is a section in the middle of the log where the client switches from our class A private address to a public IP. I have no idea how that can happen on a chromebook. In general, I don't know how that can happen, but there it is in the log.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Mon, 07 Oct 2019 20:08:59 GMT

Thank you for that plain text packet capture, but I'm more looking for a wireshark capture file. I need to run some filters, and look in to these packets further for you, which I can't do in a plain text capture. With the MAC address you gave me, I can see the IP switching you mentioned, but without a full packet capture file I can't really tell you anything else about those packets or that behavior. Could you send a full wireshark capture file to me at communityhelp@aerohive.com? If you search in Hive Community for Packet Capture, you should see guides on how to do this, depending on your HiveManager platform.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Mon, 07 Oct 2019 22:16:35 GMT

Perhaps this is better.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Tue, 08 Oct 2019 00:00:12 GMT

Thank you for that packet capture. I'm still looking in to some things, but in the mean time to address the IP switching, are you using Radius? If so, can you tell me if you have Change of Authorization (CoA) enabled on your Radius server? That might explain how the IP address was changing.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Tue, 08 Oct 2019 00:04:58 GMT

If you are unsure if CoA is enabled, and can send me tech data from the AP, I can check in there to see if we have that enabled or not.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Tue, 08 Oct 2019 01:18:50 GMT

I know for sure we are not using radius. Tech data on the way.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Tue, 08 Oct 2019 01:21:29 GMT

Here is show tech.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Tue, 08 Oct 2019 23:11:23 GMT

Thank you for your patience, I've been reviewing your data with my colleagues but we haven't found anything so far. I have a meeting tomorrow with our expert team and I'd like to bring this up with them as well. Would you be able to add me as an external admin to your HiveManager with the email address slynn@aerohive.com so I can take a look at your configuration? No changes will be made, I just want to get an idea of the setting we have in place currently.

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

samantha_lynn — Tue, 08 Oct 2019 23:19:42 GMT

Also, we're having a hard time understanding the specs of Aristotle Insight, could you answer any of the following?

What is the IP range of the servers this app uses?

Does it require any specific ports to be opened?

How does the app operate?

How often is data sent from the client devices using the app to it's servers?

What type of traffic would the app generate?

Re: We have Hive Connect, APs are 630s, and an application on our chromebooks will not run over the APs, but WILL run if we connect them, wired, to our network. Clearly the AP is the breaking point, but I don't know how.

netadmin10 — Wed, 09 Oct 2019 02:26:50 GMT

I turned off the DOS settings in the SSID options on the SSID that both clients are using and the application appears to be working now. I really don't want to turn off those settings, but I need to learn more about the magnitude of the values before I go turning them back on.

So maybe we have it fixed, but we have so many things to put back together before we can really say that's true or not.