This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Help
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

What reasons would there be for a PPSK to stop working on a handful of devices, while it works on others connected to the same AP?

What reasons would there be for a PPSK to stop working on a handful of devices, while it works on others connected to the same AP?

tgmatula
New Contributor

‎10-07-2019 01:00 PM

Our campuses are experiencing chronic connectivity issues with one of the following symptoms:

1) Either the PPSK stops working on their device. 

2) They are able to connect to the SSID and PPSK but no internet connectivity. Cannot ping DNS or Gateway. 

 

Testing:

Rebooting the AP does nothing for the user. Moving closer to the AP or changing the connection preference between 2.4 and 5GHz has no effect.

 

The only solution... so far is to locate which RADSEC(proxy) the AP is connecting to and reboot it...

Oak-AP106#show idm

IDM client: Enabled Per SSID

IDM Proxy IP: 10.31.120.40

IDM proxy: Disabled

RadSec Certificate state: Valid

RadSec Certificate Issued: 2019-01-15 08:25:32 GMT

RadSec Certificate Expires: 2020-01-15 08:25:32 GMT

 

Is the IDM Proxy supposed to show "DIsabled" even though the IP is listed and it is using that particular proxy for PPSK authentication?  

 

Anyone have any permanent solutions for the RADSEC issues???

0 Kudos
7 REPLIES 7

samantha_lynn
Esteemed Contributor III

‎10-07-2019 05:03 PM

Thank you for letting me know. In that case, would you be able to SSH in to the AP, enable auth debugs, replicate the issue, note the MAC address of the device you used to replicate the issue, and send me tech data pulled directly after replicating along with the MAC address used during the test? If you'd like to send that to me directly, my email is communityhelp@aerohive.com.

 

This guide reviews how to enable auth debugs: https://thehivecommunity.aerohive.com/s/article/Authentication-Auth-Debugs

0 Kudos

tgmatula
New Contributor

‎10-07-2019 01:44 PM

I have verified we are using Cloud based PPSK authentication and the RADSEC servers do show enabled.

IDM proxy: Enabled

IDM server: cloud-va-idmauth.aerohive.com

 

0 Kudos

samantha_lynn
Esteemed Contributor III

‎10-07-2019 01:35 PM

Are you using cloud based PPSK credentials or locally stored PPSK credentials (if you're not sure you can see this in the PPSK user group object). If you're using cloud based PPSKs, you'll want the IDM proxy to say Enabled (on the AP that is acting as the IDM proxy).

0 Kudos
GTM-P2G8KFN