Controllerless Networks

 View Only

  • 1.  iOS devices not join hidden SSID MPSK

    Posted Mar 26, 2024 01:07 PM

    hello,  when I hidden the SSID  MPSK  with MPSK groups and device registration, the new devices registered not join the network.

    If the ssid is visible magically the devices connect,

    devices are: Ipad mini (6th generation)  Ios 17.2

    I can't see nothing no client mac address in clearpass and also in the wifi controller logs

    have you already esperienced this?



    ------------------------------
    ACMP ACSP ACCP ACEP ACDP
    ------------------------------


  • 2.  RE: iOS devices not join hidden SSID MPSK

    Posted Mar 26, 2024 03:49 PM

    Don't hide SSIDs.  Some devices, and specifically Apple devices, don't like hidden SSIDs when used in conjunction with DFS channels.  In general, hidden SSIDs just cause problems and complicate roaming.  Don't hide SSIDs.  There is zero benefit.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------

    Original Message


  • 3.  RE: iOS devices not join hidden SSID MPSK

    Posted yesterday

    I love how people answer like they are the smartest person ever without knowing any context.  I am having the same issue where I cannot get an Ipad to join a hidden network.  I purposely hid the network, not for security reasons but because I have 300+ users who would promptly ask me about this network and/or try to join it because they can see it.  It creates a giant time waste and so if they can't see it they don't even bother me about it.  

    Did anyone ever find a way to make this work on iOS devices?

    -------------------------------------------

    Original Message


  • 4.  RE: iOS devices not join hidden SSID MPSK

    Posted yesterday

    Then name the network to something that isn't related to your setup to avoid the questions.

    Hiding SSIDs is causing a lot of issues, and while Carson may sound a bit rigid, I agree with his view.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 5.  RE: iOS devices not join hidden SSID MPSK

    Posted yesterday

    From a technical perspective I totally agree that hiding a network only causes issues.  However I specifically hid this one for many reasons so that the regular user cannot see it or try to connect.  One of the big ones being that it is a security hole that should not exist as it bypasses all inbound/outbound rules that my business and our corporate setup.  People as a general rule seem to have this need to click or touch or try something if they can see it/hear about it or in general know about it, I am unsure if this is just human nature or curiosity or what but if you don't give them the option that they know about then it creates less problems.  As I set up this security hole for specific reasons that are legit I did my best to make it difficulty for someone to stumble into it and do things they are not supposed to.  I stand by what I did and why. 

    My problem is with people who answer and don't take into account there might actually be a legitimate reason for why and then they belittle the person for doing it wrong.  Come tell this to my face – bet they won't answer the same way.  I realize that I am trying to change someone who will not likely do so and it is a much larger issue with the "internet" in general but it doesn't mean that its right.  I believe the answer is trolls will be trolls.  And sometimes I am probably one of them too. 

    I can't count high enough to tell you how many times I tell people that a specific network is for guests and internet only and will not allow internal network access(no access to servers) but yet they still insist on connecting to it just because its there.  I have the correct wifi on their device but yet they will still just connect to another one for reasons I can't explain. This is across 3 different companies in totally different regions of the US so its not specific to a group of users.  While these same users would not have the password to this setup giving them too many options just leads down paths that end with me having to stop my other(generally more important) work and fix something that shouldn't be broken in the first place.  I guess as I have changed roles and gotten older I have become more cynical and trust people in general very little now.  It seems that they are no longer able to think logically about things anymore – seems to be a lost skill for so many people.  Everything is instant answers and if its not right there in front of them its someone elses fault and there is a "big" problem now.  They can't be bothered to take a minute and think about what they could do or what other options might be possible, just freak out and blame IT, blame the wifi, blame the computer, server must be down.  And its not just IT issues – this is across the board for anything.  But of course they know how to use google and that is never wrong.

    Anyway this is one of those times I was that person and I didn't take a minute to remember I went out of my way to lock this network down as much as possible.  I put an extra security in place that doesn't allow new devices unless authorized by me, go figure..  I did get it working now.

     

    Brian Cooper
    		​​​​
    IT Manager
    T:
    		407.292.4400 Ext. 793
    		 
    M:
    		717.747.6868
    		 
    E:
    		brian.cooper@addison-hvac.com
    Addison HVAC
    ​Any technical advice or assistance is given AS-IS, and Addison assumes no obligation or liability for the advice or assistance given or results obtained. This message is intended only for the person or entity to whom it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination ​or other use of, or taking of any action in reliance upon, this information by anyone other than the intended recipient is prohibited. If you received this in error, please contact the ​sender and delete the material from any computer. Internet communication cannot be guaranteed to be timely, secure, error or virus-free, and the sender does not accept liability ​for ​any errors, omissions or damage which may arise as a result.




    Original Message


Related Content