Chrome book not connecting to AP 230

  • 1
  • Question
  • Updated 2 years ago
AP 230s in our middle school. Have one classroom where only chromebooks wont connect (Classroom A). All APs are using the same network policy. In classroom A, the teacher laptop connects fine (Acer Windows 7) so does my phone (android). Chromebooks however after selecting the SSID say connecting for about 3 mins then time out. Tried restarting, tried different chromebooks. 

Walk down the hall and can connect a chrome book perfectly. Once it is connected I can walk back into Classroom A and as long as I don't loose connection it works fine. If I disconnect and re-connect it times out again. 


Anything I can look for? The AP reports back good in aerohive and has a white light. 

-Jared
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes

Posted 2 years ago

  • 1
Photo of Mike Kouri

Mike Kouri, Official Rep

  • 1030 Posts
  • 271 Reply Likes
Are all of your access points running the same version of code? Are all of the Chromebooks running the same version of their code? How are your SSIDs configured, Open or secured? If secured, are you using 802.1x authentication? 

This sounds suspiciously like a .1x authentication failure and timeout to me, I am guessing you've got relatively new code on the Chromebooks and old code on the APs. 
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
Same version on APs -Yes 6.5r3
Same version on chromebooks - Yes
SSID is Open
Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
Have you rebooted the troublesome AP?  
What does client monitor tell you about the Chromebook's lost connection?
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
Client Monitor for one chromebook:

2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Basic Rx auth <open> (frame 1, rssi -57dB)2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Basic Tx auth <open> (frame 2, status 0, pwr 9dBm)
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Basic Rx assoc req (rssi -57dB)
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Basic Tx assoc resp <accept> (status 0, pwr 9dBm)
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Info Open auth is starting (at if=wifi0.1)
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Basic Authentication is successfully finished (at if=wifi0.1)
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Info station sent out DHCP DISCOVER message
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:44:32 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:44:37 MsCafeAP20 D854A2259394 Info station sent out DHCP DISCOVER message
2016-01-06 11:44:37 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:44:37 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:44:46 MsCafeAP20 D854A2259394 Info station sent out DHCP DISCOVER message
2016-01-06 11:44:46 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:44:46 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:45:01 MsCafeAP20 D854A2259394 Info station sent out DHCP DISCOVER message
2016-01-06 11:45:01 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:45:01 MsCafeAP20 D854A2259394 Info DHCP server sent out DHCP OFFER message to station
2016-01-06 11:45:02 MsCafeAP20 D854A2259394 Basic Sta(at if=wifi0.1) is de-authenticated because of notification of driver
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
--Update--

This is happening in more than one room. 3 random chromebooks out of 24 will connect at any given time. I turned down the power on all APs to 3 to see if it was an interference problem. That didn't help. I now have 5Ghz on every AP (One in each classroom) and 2.4Ghz on a select few to help with interference.  The AP radios under the Wireless Interface tab reports no interference. 

Also, Is spectrum analyzer in the new NG version?
Photo of Chevy Miller

Chevy Miller

  • 1 Post
  • 0 Reply Likes
Ran into a very similar situation when troubleshooting a new content filter. Found the ARP table on the content filter wasn't updating until we disabled Proxy ARP on the Aerohive APs. Definitely worth giving it a shot. You can find it under your Wireless Policy in Additional Settings --> Service Settings --> Management Options and you'll find a checkbox for disabling Proxy ARP there.
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
Hmm interesting.... wouldn't explain how the chromebooks in the other building with the same Network policy work.. but I will look into it. Thanks.
Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
I am mulling over the settings that I think are most likely to cause the CBs not to respond to the DHCP offer in your scenario.

First, what device is acting as your DHCP server?

Is the time correct on your Chromebooks?  

In the GAFE management console could there be a Chrome network policy that is preventing the Chromebooks from responding to the DHCP offer?

Are there VLANs?
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
A 2008R2 server
Yes
No, there is not
No VLANs
Photo of WilburK

WilburK

  • 7 Posts
  • 1 Reply Like
Could this be A-MPDU related? If you disable "Enable Aggregate MAC Protocol Data Units" in the radio profile under "Radio Settings" and see what happens.

I had sort of the same problem with the AP 230. Clients connected to the 230 lost network connectivity and could not renew DHCP with a similar Client Monitor log as yours. No problem connecting to 121\330 with this setting btw.
Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
I would capture the process of DHCP on the CB and review the DHCP server log to determine why the CB is not sending a DHCP request message.  CB log files can be captured by performing the following steps:

How to access Chromebook logs

To access Chrome logs:

1.     Type chrome:net-internals and select Export in the drop down box.

2.     Open second tab and reproduce the steps that generate the issue.

3.     Go back to the tab running chrome:net-internals, type a description of the issue in the box, and click the button to save the log file. The file will be saved in the downloads folder on the Chromebook.

You can then upload the file to the Google log analyzer.

 

Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
That's interesting. I will definitely keep this in mind as our network grows.  I still wonder why only Chromebooks.  
Photo of Mark Techa

Mark Techa

  • 13 Posts
  • 1 Reply Like
any update to this? Very interested as I hear about this from some of my clients sometimes. But we are not in Chromebooks...
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
Yes, Because of our flat network the APs were seeing lots of multicast traffic. Enough so that the APs would time out and give the client the IP address. The work around was to make every AP a DHCP server. So now every AP is NATing traffic to its own subnet. That seems to have fixed the problem. I don't know why this only affected chromebooks. If you have any questions or this explanation doesn't make sense let me know.

-Jared 
Photo of Arison Mercado

Arison Mercado

  • 113 Posts
  • 8 Reply Likes
jared,

I've been dealing with the same exact issue you have described for over a year now and I get the exact same issues. I'm going to disable proxy arp like it was suggested but I do not have a flat network and I need our chromebooks and school own laptops to connect to our internal WiFi subnet. Did you disable the proxy arp? or did you skip that portion and just created a dhcp server for every AP?
Photo of Arison Mercado

Arison Mercado

  • 113 Posts
  • 8 Reply Likes
No luck on that Proxy ARP fix...... Mind you they're 5 clients connected to the same VLAN and SSID.


01/14/2016 08:36:06 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  BASIC   (95)Rx auth <open> (frame 1, rssi -43dB)
01/14/2016 08:36:06 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  BASIC   (96)Tx auth <open> (frame 2, status 0, pwr 15dBm)
01/14/2016 08:36:06 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  BASIC   (97)Rx assoc req (rssi -43dB)
01/14/2016 08:36:06 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  BASIC   (98)Tx assoc resp <accept> (status 0, pwr 15dBm)
01/14/2016 08:36:06 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (99)IEEE802.1X auth is starting (at if=wifi1.2)
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (100)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=88 length=179,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (101)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=88 length=90
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (102)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=89 length=401,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (103)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=89 length=1590
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (104)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=90 length=197,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (105)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=90 length=1590
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (106)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=91 length=197,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (107)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=91 length=559
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (108)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=92 length=411,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (109)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=92 length=153
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (110)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=93 length=197,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (111)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=93 length=127
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (112)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=94 length=287,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (113)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=94 length=143
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (114)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=95 length=287,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (115)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=95 length=143
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (116)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=96 length=271,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (117)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=96 length=159
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (118)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=97 length=351,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (119)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=97 length=175
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (120)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=98 length=271,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (121)Receive message from RADIUS Server: code=11 (Access-Challenge) identifier=98 length=191
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (122)Send message to RADIUS Server(172.16.1.100): code=1 (Access-Request) identifier=99 length=335,  User-Name=chromebook1@fpsma.net NAS-IP-Address=10.99.51.17 Called-Station-Id=9C-5D-12-80-A9-25:iwa Calling-Station-Id=10-08-B1-C8-B8-AD
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  DETAIL  (123)Receive message from RADIUS Server: code=2 (Access-Accept) identifier=99 length=307 
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (124)Sending 1/4 msg of 4-Way Handshake (at if=wifi1.2)
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (125)Received 2/4 msg of 4-Way Handshake (at if=wifi1.2)
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (126)Sending 3/4 msg of 4-Way Handshake (at if=wifi1.2)
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (127)Received 4/4 msg of 4-Way Handshake (at if=wifi1.2)
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (128)PTK is set (at if=wifi1.2)
01/14/2016 08:36:08 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  BASIC   (129)Authentication is successfully finished (at if=wifi1.2)
01/14/2016 08:36:09 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (130)station sent out DHCP DISCOVER message
01/14/2016 08:36:09 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (131)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:09 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (132)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:09 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (133)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:09 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (134)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:09 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (135)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:13 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (136)station sent out DHCP DISCOVER message
01/14/2016 08:36:13 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (137)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:13 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (138)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:13 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (139)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:13 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (140)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:13 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (141)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:22 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (142)station sent out DHCP DISCOVER message
01/14/2016 08:36:22 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (143)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:22 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (144)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:22 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (145)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:22 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (146)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:22 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (147)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:38 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (148)station sent out DHCP DISCOVER message
01/14/2016 08:36:38 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (149)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:38 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (150)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:38 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (151)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:38 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (152)DHCP server sent out DHCP OFFER message to station
01/14/2016 08:36:38 AM  1008B1C8B8AD  9C5D1280A925  FPS-KS-AH-80a900  INFO    (153)DHCP server sent out DHCP O
Photo of Walt Corbin

Walt Corbin

  • 2 Posts
  • 0 Reply Likes
We ran into a similar issue in our school district.  We upgraded all of our Chromebooks to version 46, and the issues went away.  I have read on other sites that versions less than 46 had similar bugs.  
Photo of Arison Mercado

Arison Mercado

  • 113 Posts
  • 8 Reply Likes
I just checked with my Server admin and all our Chrome books are at 46+. I guess the mystery continues..... =(
Photo of jared

jared

  • 10 Posts
  • 0 Reply Likes
Mystery solved... for me at least. There was a bug in the latest version (6.5r2). They had me roll back to version 6.6r2 ( I know.. not really backwards numerically.. but they assured me it actually was backwards) No issues since then. The bug... from what I understand... caused DHCP to only be given out when the client connected with the fastest bit rate available. If it connected at anything slower than that then it would not get a response.

All this fits inline with the symptoms.. such as how I could only connect about three at a time and how if i walked to a different room it would connect. (Because that AP didn't have any clients connected and therefore a faster rate available. 

This was suppose to only be a bug in the AP230's 
After the downgrade things are working much bettter. 
The network engineer was unsure if the problem was fixed in the new 6.5r3 so I am staying at the current version. 

Thanks to everyone for helping troubleshoot. 

-Jared
Photo of Erik Gunnarsson

Erik Gunnarsson

  • 38 Posts
  • 6 Reply Likes
I had a similar DHCP bug in AP230 with firmware 6.6r1, atleast my problem was patched and fixed in 6.5r3
Photo of Aaron Valente

Aaron Valente

  • 42 Posts
  • 3 Reply Likes
I ran into a similar issue and was never quite sure what was fixed in updating the version number.  Thanks for the info! Mystery solved!