topic Re: Android maybe don´t have internet connection in ExtremeWireless (IQE)

Android maybe don´t have internet connection

juergen_dannewi — Wed, 14 Jul 2021 14:25:20 GMT

Hi everyone,

I´ve some strange situation with Android Smartphones in our Aerohive/Extreme Network (Mix of AP250 and 305C) environment.
The Android devices itself get´s an valid IP and authenticated to the Wifi but shows the information “maybe don´t have internet connection”.
Actual Workaround: Ping the device. The first 2 packages are lost, but than the device replies and shows connected.
I´ve started this discussion last year, but with Covid-19 the situation stuck.

I´ve also found that we are not the only one with this situation.

I can confirm that DNS port 53 and 853 is open for this dedicated Wifi VLAN on our firewall.
I´ve added the DNS ports for the native VLAN of the APs to this internal DNS server, now.

Does anyone has an idea, if this won´t help, how we could troubleshoot this?

Thankful for every idea!

Re: Android maybe don´t have internet connection

SamPirok — Thu, 15 Jul 2021 21:30:32 GMT

Hi there, I ran this past our XIQ technicians and they requested we open a case for this issue. If you could go to our portal at extremeportal.force.com and open a technical support case, we can help you from there.

Re: Android maybe don´t have internet connection

juergen_dannewi — Thu, 22 Jul 2021 14:30:46 GMT

Hi. I´ve opened a ticket.

Thank you for the response.

Re: Android maybe don´t have internet connection

juergen_dannewi — Mon, 26 Jul 2021 15:13:16 GMT

we get the ticket response that we have a PWP contract (Partner Work Plus).
I´m opening a ticket at our local partner.

Re: Android maybe don´t have internet connection

jackhsweeney1 — Sun, 01 Aug 2021 04:39:23 GMT

Do you have IPV6 in your environment I recently had basically this same issue with Android. I fixed it by downgrading firmware version.

Re: Android maybe don´t have internet connection

juergen_dannewi — Mon, 02 Aug 2021 12:44:51 GMT

Hi. No we don´t using ipv6. I had this situation with the last firmware updates.

Which one are you using that seems to work?

I´ve opened a ticket over our partner. We will see.

Re: Android maybe don´t have internet connection

juergen_dannewi — Tue, 10 Aug 2021 21:43:03 GMT

We upgraded the HiveManager to 21.1.21.11-IQVA and all APs to 10.3r3 without any changes.
The ticket is still running.

Aerohive Remote Package Capture shows

“Radiotap data does past the end of the radiotap header”. (Wireshark)

DNS validated over DNS server debug log. Name resolution and followed firewall log shows the access.

The only data package that is blocked in some cases is UDP-1900 Multicast.
I don´t expect that the Android device is checking his Internet connection over this port.

If it would be only one device, but it´s changing between several Android devices from different developers (Samsung, Huawei, OnePlus,...).
IPhone and Windows running fine.

It´s frustrating.

Re: Android maybe don´t have internet connection

Peter_Chang — Tue, 14 Sep 2021 18:11:20 GMT

Hi @juergen.dannewitz . Are you guys still having this issue?

Re: Android maybe don´t have internet connection

juergen_dannewi — Fri, 22 Apr 2022 15:24:46 GMT

Hi, I´m back with this topic.

It´s been a while since I started this topic and we made some changes in our infrastructure.
We changed the firewall to another developer and also deployed the Aerohive/Extreme APs in a new office, where we are working with Samsung Android devices ONLY.

The situation is still the same: Device gets an IP over DHCP but the Wifi information "mabye don´t have internet connection".

Re: Android maybe don´t have internet connection

juergen_dannewi — Fri, 22 Apr 2022 15:31:38 GMT

Additional information:
Management and native VLAN is the same and untagged as the SSID VLAN has a different ID and is tagged.
Maybe it describes the situation more detailed.

Re: Android maybe don´t have internet connection

SanderD — Mon, 15 Aug 2022 14:49:49 GMT

Hi @juergen.dannewitz

Do you have any workaround/update ?
We have the same behavior with AP305c (10.4.6.0) and AP460c (10.4.5.0).

Best Regards,

Re: Android maybe don´t have internet connection

juergen_dannewi — Mon, 15 Aug 2022 14:58:10 GMT

Hi,

I´ve still have a running ticket in troubleshooting. It´s like that the switch or the AP lost the ARP entry of the Wifi device.
We made several Package traces, send several logs, Tech data, Screenshots, checked DNS, changed to 8.8.8.8 as DNS server, etc.

Last change was to make 6, 12, 24Mbps as basic on all 2,4 and 5Ghz radio profiles, but it doesn´t makes sense to me, because it would also happen on Windows and IOS, which doesn´t.
It happens on AP305C and AP250. Also AX profile was removed and everything is running in g/n or ac.

The only workaround is to ping the device from inside of the network. In most cases, the first 2 packages are lost and than it´s reachable and the device change the mode to "connected".

Do you still have the same situation: Android Device gets an IP from DHCP but no internet?

Re: Android maybe don´t have internet connection

SanderD — Tue, 16 Aug 2022 21:33:21 GMT

Hi @juergen.dannewitz,

We are facing problems with android and some applications : 'Vinted', 'marketplace', 'promopromo', these apps are extremly slow or does not load.
I found another topic about this problem recently on this community and post my question also :
https://community.extremenetworks.com/question/some-apps-on-android-devices-are-not-responding-ap130#9228913e-10c4-4531-8c4a-9e0f608573b3

I have the same result with 2 different ISP's.
Using the ISP internal WiFi it works, using the SSID from the Extreme Ap's the problem is there...

i read about downgrade to an older Firmware but which is the good one ?

I launched a ticket (02491620) - on 16/12/2021 about this problem..., but as you say with COVID... no further response.
I relaunch this ticket, If i know more or find an solution i will keep you inform on this thread.

Best Regards,

Re: Android maybe don´t have internet connection

juergen_dannewi — Wed, 17 Aug 2022 09:13:58 GMT

Hi @Sander Devos,

this issue is longer existing in our company and wasn´t fixed on 10.x firmware.
I´m not sure if 305 has older firmware than 10.x but I doesn´t expect that but was also happens on AP250 with older firmware. I was always hoping that a newer firmware will solve the problem.

Our management is still On-Prem. We get the notice that the On-Prem Management will End this year.
We would need to change to Cloud managed solution.

We´ve invested many time in troubleshooting. I can exclude Switch and Firewall, because it happens in different of our facilities with different firewall- or switch-manufacturers.

I fully understand the other topic you linked.
We changed one SSID in the smallest branch of us to another AP developer -> directly working without any troubles.
That´s the reason we are more focused on the AP environment itself to troubleshoot that.

Did you also experienced the situation that device doesn´t get Def. Gateway and DNS in the "Client Trail"?

Thanks that you answered to this post!

Maybe some other will follow that a solution will be found.

Best regards

Re: Android maybe don´t have internet connection

SanderD — Fri, 19 Aug 2022 00:22:53 GMT

Hi @juergen.dannewitz,

Sorry for the delay.
Maybe this could a stupid question but 'Client Trail' is that a feature that's not included in the free version off the ExtremeCloud IQ?
I don't have a license, i use it free because this is installed in private home and for now we don't need a payed license.

The only thing i can do is creating a report (Report-Client-WiFi).
And I see on the android device many 0.0.0.0 IP's in the list :

In the other post : https://community.extremenetworks.com/question/some-apps-on-android-devices-are-not-responding-ap130#4b47ce53-5215-4c7f-aa34-51d1b157d61a

There has been a firmware downgrade but i don't know the specific version, maybe you have any idea?

Best Regards,

Re: Android maybe don´t have internet connection

juergen_dannewi — Fri, 19 Aug 2022 15:05:45 GMT

Hi,

we are using the Aerohive/Extreme APs in an enterprise environment with a licensed On-Prem management server v21.1.22.1-IQVA.

The newest AP firmware for that management is actually 10.3.r3.

Never seen the free version or Cloud version, but we need to change to the Cloud version because we get the information that the On-Prem is EOS in December 2022.

How is your Home use setup?

AP is connected via patch line to the ISP Router which is used for DHCP, DNS, Firewall and Gateway?

No VLAN etc?

Re: Android maybe don´t have internet connection

SanderD — Fri, 19 Aug 2022 16:05:05 GMT

Hi @juergen.dannewitz,

Setup :

ISP (Proximus or Telenet, I have both now for testing but same result - Belgium).
DHCP, DNS, Firewall and Gateway from the ISP router.

On the ISP Router :
1 Cable connected to a HP Aruba switch 1930 8G POE (also cloud management) as uplink.
1 Cable connected to a HP Aruba switch 1930 24G POE (also cloud management) as uplink.

Switches :
HP 8G - 1x AP 305C
HP 24G - 1x AP460C and 1x AP305C

Security Protecition OFF on the ports for the AP's.

AP's :

1 Management VLAN 1 for all.

So 3 AP's in total in the home enviroment.

I also checkt 2 commands directly on 1 AP with Putty and these where the results :

show version
show interface mgt0

AP0#show version
Copyright (c) 2006-2021 Extreme Networks, Inc.

Version: HiveOS 10.4r6 build-272960
Build time: Wed May 11 01:01:57 UTC 2022
Build cookie: 2205101801-272960
Platform: AP305C
Bootloader ver: v0.0.4.70
TPM ver: v1.2.66.16
Uptime: 0 weeks, 3 days, 16 hours, 43 minutes, 50 seconds

AP0#show interface mgt0
Admin state=enabled; Operational state=up;
DHCP client=enabled;
Default IP subnet=192.168.0.0/255.255.0.0;
IP addr=192.168.0.207; Netmask=255.255.255.0; Default Gateway:192.168.0.1;
IPV6 global addr=2a02:1811:c516:2e00::f6a9/64
IPV6 link local addr=fe80::5a59:c2ff:fea3:9fc0/64
VLAN id=1; Native vlan id=1; Tagging of Native vlan: disabled
MAC addr=5859:c2a3:9fc0; MTU=1500;
Rx packets=1406189; errors=0; dropped=146;
Tx packets= 486732; errors=0; dropped= 0;
Rx bytes=477495816 (455.375 MB); Tx bytes=271604978 (259.023 MB);

As you can see there ar many dropped Rx packets : dropped=146; ?!

Best Regards,

Re: Android maybe don´t have internet connection

juergen_dannewi — Thu, 01 Sep 2022 13:36:22 GMT

Hi,
I´ve maybe found an workaround for that.
We still experience this situation in different locations.
The setup:
Firewall (VLAN as GW, tagged) -> Core switch VLan (Vlan tagged on Port) -> Access switch (Vlan tagged on Port)-> AP (SSID VLAN, tagged)

SSID: VLAN which uses the Firewall as Gateway.
DHCP: relay on Firewall for VLAN subnet
DNS: Google 8.8.8.8
DHCP Lease Time: 30min

What is seen in the logs:
Client gets an IP from DHCP and tries to contact DNS several times.
No more other traffic is generated than DNS.

Workaround:
Clear the ARP-Cache on the Firewall/Routing device.
in our case the command "clear arp-cache".

Re: Android maybe don´t have internet connection

dpanev — Thu, 01 Sep 2022 13:46:58 GMT

set a rssi threshold to -70

disable band steering or load balancing

disable private wlan adress on client

Re: Android maybe don´t have internet connection

juergen_dannewi — Wed, 07 Sep 2022 09:06:48 GMT

Hi,

I want to send an update about this topic.
We found the root cause for our problem, but I´m unsure how to solve it.
The ARP-cache on our firewall which is also the Gateway for our Guest Network seems to get some wrong information from the Aerohive environment.
The Guest Wifi has a short Lease time on DHCP side (5min, increased to 15min now).
The client itself gets the correct IP from DHCP Server (same VLAN/subnet, Windows Server), but the Firewall still get´s the wrong information after a arp-cache clear.
We deleted the "wrong" client in the IQ Management and cleared the ARP-cache once again and the problem was solved for this device.

We found an option in the "Management Options" called "disable Proxy-ARP":
Would it make sense to activate this option in a Wifi environment?
Arp-Caches are written on the Gateway and Switch devices.