Samsung Galaxy S6 WPA2 Enterprise Connection Issue

  • 2
  • Question
  • Updated 2 years ago
I am just wondering if anybody has an idea with this.  We have users connecting using WPA2 Enterprise from their devices.  We have a number of Samsung Galaxy S6's that when we try to connect...the phones just say 'Connecting' and never connect.  We are able to connect from iPhones, older Samsung's, other devices just fine.  The S6's are able to connect to our WPA2-Personal Guest network just fine also...just not our WPA2 Enterprise Corporate network.

We are using AP230's and AP370's.

Any thoughts?  Sorry...weird problem but we have tried a bunch of things and are getting nowhere with these. 

My only remaining thought is that we are using a 'HiveManager' auto-generated certificate that is sha1.  I started wondering if these new S6's require sha2 certificates. 

Thanks.
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes

Posted 3 years ago

  • 2
Photo of Greg Fitzgerald

Greg Fitzgerald

  • 1 Post
  • 1 Reply Like
I had tbe same issue with AP 121's. I updated to the latest Hive OS for my AP's and was able to connect. Support told me that it was cause of the LogJam virus earlier this year.
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes
Thank you for the idea.  Do you mind me asking...what version did you upgrade to?  We are on 6.4r1d on the AP230's but further back on the AP370's.  I haven't actually tried these on an AP370 yet.

Thank you.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
What are you using as your RADIUS server?
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes
I am using the integrated FreeRadius on the AP.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
You'll want to update to the AP230s to 6.4r1g to resolve this.

A fix for the AP370s won't be available until around mid-November when 6.5r3 releases.

Nick
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes
Thank you. Project for tomorrow night. Do you recommend 6.4r1g or 6.6 personally at this point?

Thank you all for the help.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
It's largely moot as I assume that you'll want to move your AP230s to the golden, long term support branched HiveOS 6.5r3 when this becomes available?

I'd personally move to 6.4r1g as a temporary measure as you're running 6.4r1d at the moment.

When 6.5r3 becomes available in a couple of weeks, consider then putting this on your AP230s and AP370s.
Photo of Hans Matthé

Hans Matthé

  • 131 Posts
  • 28 Reply Likes
Helo
I believe indeed it is a common issue with the latest Android version and 802.1x authentication (also other wireless solutions have the same issue's with this Android version). Upgrade the hive os and the problem will probably be gone.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Hi Hans,

There are two unrelated issues at play here that exhibit the same symptoms to end users in that they cannot get a usable association, weak DH (Logjam) and TLS 1.2 intolerance with RADIUS servers that incorrectly derive session keying material, the MPPE keys.

The latest HiveOS releases fix weak DH issues with the embedded FreeRADIUS.

I commented in the Google tracking issue that is open about the FreeRADIUS versions that exhibit TLS 1.2 intolerance: https://code.google.com/p/android/issues/detail?id=188867#c29

The embedded RADIUS server in HiveOS only supports TLS 1.0 so it is not affected by the introduction of TLS 1.2 for EAP, it is not intolerant.

There are future plans to introduce TLS 1.2 support to HiveOS.

Cheers,

Nick
(Edited)
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes
Thank you all for the help.  I upgraded the AP230's to 6.4r1g which has fixed the immediate problem with the Galaxy S6's.  I will look at 6.5r3 when it is released for my AP370's since they are still on 6.0r2f (sigh).

Thanks again.
Photo of Dan Ware

Dan Ware

  • 14 Posts
  • 2 Reply Likes
I'm having the same issue with newer Galaxy devices that recently received an OTA update.  We're using the built-in radius on HiveOS 6.6r1.  Any suggestions?  Should we downgrade that AP to 6.5r3?
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes
Any idea when HiveOS 6.5r3 will be released? 

When that is released...are you suggesting HiveManager 6.6r3 with HiveOS 6.5r3?  I was going to upgrade my HiveManager to 6.5 when I rolled to 6.5r3 HiveOS but maybe I should roll it to 6.6 instead?

Thanks.
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
HiveManager 6.6r3 is the supporting release for HiveOS 6.5r3.
Photo of Smitty

Smitty

  • 37 Posts
  • 3 Reply Likes
Ahh...ok.  Sorry.  The version numbering is confusing me a bit recently.  Just hoping 6.5r3 comes out soon for I can fix this problem on my AP370's.

Actually...while I am asking.  How does HiveManager 6.6r3 fit into the HiveManager NG migration?  I started looking at NG but since I had AP370's it didn't really matter at the time.

Thanks.
(Edited)
Photo of Dan Ware

Dan Ware

  • 14 Posts
  • 2 Reply Likes
Where do I find updated info about what versions are stable/recommended?  I've just been updating what comes up in HiveManager, but that seems to be arbitrary based on what I've seen here.