Nick_Parker

@ellsandell, You mentioned you've been using AFW with Airwatch, I've been testing this out for Android devices and have really battled to do any of the following: - Cannot load internal apps (APKs) - I've since discovered this is be design and the only way to do this is to sign up for a developer license on the play store and upload the app and then allow it - have you found a better/easier way? - Bookmarks aren't supported with AFW - I had intended to put links to 2 web apps on the home screen but haven't found a way yet. Any ideas? - Enrolling a device using AFW doesn't seem to active any form of device protection, the phones can be easily factory reset and then they're gone without a trace. Have you found any way of locking down your devices so prevent theft? Any suggestions would be greatly appreciated Nick

@TechMonkey, Well that sucks... Do you know what you changed to get it working for that week?

Hey @TechMonkey, did you ever resolve this issue? Our Ruckus equipment arrived today and I'm having the same issue as you

That is an excellent idea!

So what do you guys reckon, invest in a Mac Mini Server and setup a secondary PaperCut server or $340.00/yr for a Presto license?

Good morning all We currently have a Windows 2008 R2 based Print Server sharing all the print queues running PaperCut MF 15.0. This works perfectly however there is huge pressure to allow iPads to print. I tried FingerPrint (which is now Presto but we haven't upgraded) which kinda of works, sometimes the printer shows up, sometimes it doesn't. I was thinking maybe it's time I give in and buy a mac mini, configure it as a print server and installed PaperCut as a secondary server? Has anybody done this? Is it simple enough to configure? Will there be any clashes running 2 print servers on the same network? Any suggestions or recommendations would be greatly appreciated!

Howdy! I'm having the same issue, I contacted Google Support and they said there is a known issue impacting OAuth authentication that their engineers are busy working on at the moment. They are going to call me regarding the issue as soon as they have more news/updates/ETAs and I'll update this thread

Hey @kestrel1, are you able to send me the link please?

Thanks @MicrodigitUK I'm busy testing a similar solution, I removed the 192.168.0.0 NIC and left the 10.0.0.0 NIC, In smoothwall I then created a Zone Bridge allowing all traffic on the 192.168.0.0 Network bi-directional access to 10.0.0.2 on the 10.0.0.0 network and it *seems* to be working at the moment. Will continue testing and let you know

I've just had a look in the debug.log for the caching server and here is the output: 2015-02-03 07:56:33.763 Caching Server started 2015-02-03 07:56:33.934 Server GUID is 8AF19D1C-80D4-467C-85BB-B25F6189E74A 2015-02-03 07:56:35.316 Cache manager initialized, cache limit = unlimited, current cache size = 14.12 GB 2015-02-03 07:56:35.316 xpcListener should be running 2015-02-03 07:56:35.317 HTTPServer: Started HTTP server on port 50689 2015-02-03 07:56:35.317 Retrieving configuration 2015-02-03 07:56:35.599 Request for configuration from http://suconfig.apple.com/resource/registration/v1/config.plist succeeded 2015-02-03 07:56:36.403 Cleaning cache 2015-02-03 07:56:36.611 Cleanup succeeded. 2015-02-03 07:56:36.611 Registering for notifications 2015-02-03 07:56:36.622 Registering for service 2015-02-03 07:56:40.575 Registering with local address: 192.168.0.65 2015-02-03 07:56:41.349 Request for registration from https://lcdn-registration.apple.com/lcdn/register succeeded 2015-02-03 07:56:41.349 Got back public IP 196.30.x.xxx 2015-02-03 07:56:41.420 Registration succeeded. Resuming server. 2015-02-03 07:56:41.421 This server has 0 peers It looks like it's completely ignoring the 10.0.0.0/19 network even tho it's set to cache for all networks?

Hey all, quick update: I've got the caching server setup with the following settings: Eth0 - IP: 192.168.0.65/255.255.224.0 GW: 192.168.0.25 DNS: 192.168.0.1 Eth0 (VLAN 5) - IP: 10.0.0.3/255.255.224.0 No GW or DNS And within the Caching Server I've got it set to cache to "All Networks". Quite a few staff & students have come to me and said that their apps won't update. As soon as I shutdown the Caching Server, their apps update. What have I done wrong?

Hey @Achandler, how's it going with your roll out so far?

Thanks @kestrel1, please let us know how it goes

Thanks @Achandler The whole system seems to work very well in the afternoons when there are less people here but I don't think it's the points that are the issue. I have a point in my office which only ever has 8 - 10 connections to it so hardly overloaded but I notice the issues even in my office so it has to be coming from somewhere further down the line.

Apologies for the long delay in replying. I took away the encrypted/VLAN/WPA2-Ent network and had everyone connected to the open network without any issues, it was fast and stable and didn't drop connections. This is great because it proves that it's not an issue with the points. However, it does mean the issue has to be something else: Smoothwall's DHCP server Smoothwall's RADIUS server The way the UniFi points are talking to Smoothwall's RADIUS server I've buggered up the VLAN'ing for the encrypted network I've contacted Smoothwall and requested one of their support technicians have a look at the setup but I haven't heard anything back from them yet. I've been watching the SystemD log on smoothwall and I can see the same users logging in and logging out via 802.1X every few seconds which means something somewhere is wrong.

Hey all, I ended up completely removing the VLAN while I test and the wireless network seems to work very well without any VLANs/Radius/Smoothwall DHCP. Now I'm busy slowly putting it all back together piece by piece to try figure out where the trouble starts. I just want to double check that I have the correct understanding for my VLAN'ing: Obviously this is a very simplified version of what's going on They are all either HP or Ubiquiti ToughSwitches, no trunking, Smoothwall is the RADIUS Server & DHCP Server for everything on VLAN 5. VLAN 1 goes through to the Microsoft DHCP Server, Smoothwall uses NTLM authentication for all VLAN1 connections.

Hey @Edu-IT, sorry about the delay, I only saw your reply now. Below is the Google Apps script code, I've set a trigger to run at 9 every day. The script finds the sheet that matches the days date, checks it hasn't been sent already, takes all the contend and emails it to the staff & students then marks the sheet at sent. Daily Notices script.txt

Thanks @Achandler, I'm going to test with some cabled connections now over half term. I very much appreciate all the assistance and suggestions you've been giving me.

The 192.168.x.x addresses are the UniFi AP addresses

Thanks @Achandler. My phone, for example, will connect then a few minutes later it will go back to connecting (like it's waiting for an IP), then connect and then later it will go back into the connecting state. I'll try connecting something directly to the VLAN and see how that goes! I'll also check the cross talk while connected. Original SSID has no RADIUS server. I'm busy testing now and everything seems to be running perfectly, but now there are only 300 or so users connected to the wifi so maybe it is the points after all? I have 48 Unifi APs and PRO units. There is an average of 20 connections to each device although the point in my office where i'm doing most of the testing only has +- 6 or 7 devices connected to it and i'm still having issues. Between classes when the kids are moving around and I imagine all their devices are moving from point to point is when I see a lot of Radius authentication errors on Smoothwall: And once everyone is settled down then all the users that were getting radius authentication errors are suddenly able to authenticate without any issues.

Hey @Achandler, I'm still battling with this whole issue. I've downgraded the firmware on all the UniFi APs from 3.2.1 to 2.4.6 after reading some UniFi Forum posts where users were saying that they were experiencing intermittent connectivity and that downgrading had helped. Unfortunately it doesn't seem to have made any difference. I've created another SSID on the same VLAN without the Radius Authentication and it still seems pretty unstable. Lastly, I tried connecting to the other SSID that's not VLAN'd and has a Server 2008 based DHCP and even that has started dropping. It's beginning to look like it might be the UniFi points that are just unable to handle all the traffic or the network itself. You mentioned that there may be VLAN traffic flooding into the incorrect network, how about I go about checking to see if this is the case?

Thanks @Achandler, I'll try removing the Radius server requirement, I'll need to temporarily allow unauthenticated internet access on the VLAN tho, or I can change the authentication method to an SSL page. The DHCP scope is 255.255.224.0 which gives us over 8000 addresses so the scope is more than big enough. Devices connected are averaging about 700. I've never tried the Ident by IP, I'll read up on it a bit and see how it works.

Hey all, We have 2 wireless networks, DainfernCollege (192.168.x.x) & DFC Internet (10.0.x.x). DainfernCollege is not VLAN'd and is connected to the rest of the network, Server 2008 DHCP server with Smoothwall (192.168.0.25) as the gateway & NTLM Authentication. DFC Internet is VLAN'd (ID: 5) with Smoothwall (10.0.0.1) acting as the DHCP & Radius server, Core Authentication for Smoothwall. The wireless points are UniFi APs (a mix of APs, Pros & outdoor units). The UniFi controller is cloud hosted. I've received a lot of complaints recently about slow connections and delayed logons to the BYOD wireless network. I tested it myself and noticed the same thing: The connection to "DFC Internet" will sometimes drop or not be available, connecting to it is slow and can take 30 seconds. Connecting to "DainfernCollege" seems much more stable and connecting to it takes seconds. Given that both "DFC Internet" & "DainfernCollege" are being broadcast from the same APs, one SSID is stable and the other isn't, I have to assume the fault isn't with the APs. This means that the delays are possibly being caused by the VLAN'ing, Smoothwall's DHCP, Smoothwall's RADIUS server or the UniFi AP's connection to the Radius Server? If the VLAN'ing was incorrect then you wouldn't be able to connect at all so it kinda rules that out? Right? Maybe Smoothwall isn't able to authenticate users fast enough? Or assign them IPs fast enough? Or the UniFi APs aren't able to talk to Smoothwall for Radius authentication fast enough? Or Smoothwall isn't able to speak to AD fast enough for the Radius -> Active Directory link? Has anybody else experienced anything similar or can give me any pointers? Any thoughts or suggestions would be greatly appreciated!

We use Google Docs. We have a Google Spreadsheet with different sheets for everyday of the week with up to a month in advance. Staff have the document shared with them, they open it up, load of the sheet for the day they want the notice to go out and type it into one of the cells. At 9:30AM everyday there is a script that runs and takes all the notices for that day and emails them to the staff & students.

Thanks, will give it a try