Hi there
I'm looking for advice/support on how to proceed with an issue with our ChromeOS Devices.
We are a secondary school in the UK, using a mix of ChromeOS, Windows and iOS devices.
We have recently switched from a Cisco Meraki wifi setup to an HPE Aruba setup using 76 x AP-635 and 2 x AP-675 devices in the new Central dashboard. Our previous Meraki setup worked well, we changed because the devices became EoL and we decided that the Aruba setup gave us more flexibility with various aspects of our setup and how we wanted to use wifi in the school.
At the moment we are using WPA3-Personal keys as our security method. We will change this over time to use some of the captive portals etc. All Windows, Android and iOS devices are connecting to the new Aruba APs fine.
However, we have run into issues with our ChromeOS devices. Due to the volume of devices we have in the school, this is a significant problem for us. It is probably worth pointing out at this stage that we have worked closely with the team who installed and set up the new system, and have a ticket open with TAC, but unfortunately the issue has persisted for around 4-5 months now. It is also worth pointing out that we did not have any of the issues with our ChromeOS devices on the previous Meraki setup.
Essentially, when an AP sees the ChromeOS device for the first time, it connects fine. And the user is able to browse, work etc. without any issues. The problems start when the ChromeOS device is moved to a different location - perhaps the teacher has moved to a different classroom or the student chromebook is now being used in a different lesson. If the AP in the new location has seen the ChromeOS device before, it often refuses the connection. The device throws up errors such as 'Error connecting to network' or 'DHCP Lookup Failed' - however TAC have seen in the logs that the AP is not passing any information on (eg to DHCP servers) because it thinks that the ChromeOS device is 'spoofing' and therefore rejects the connection request or roaming request.
There are a couple of workarounds - you can try connecting to a different SSID which works if you haven't connected to that SSID on that AP before, or we can reboot the AP completely which clears logs and other info etc. from the AP so makes it think it hasn't seen this particular device before. But neither of these workarounds are long term solutions - restarting APs may disconnect clients that are connected without issues, and if you run out of available SSIDs (because you are rejected from all of them) then you just can't connect.
We have already tried a few things. Each SSID has been set to only allow 802.11k roaming. We've disabled 6GHz bands on the SSIDs as well. We've also disabled WiFi 7 on them. We've changed the AP System Profile to make sure that it is only using IPv4. All of these are the suggestion of the team we worked with on the install, or from TAC.
We didn't change any of our ChromeOS config when we moved from Meraki to Aruba, and as there were no connection issues previously I don't believe that the issue lies with ChromeOS (or at least with our network config).
On the whole, lots of schools use ChromeOS devices, and lots of schools will use Aruba APs for their wifi. So we can't be the only school with this setup. Has anybody else seen this problem, or anybody got any suggestions about how we might be able to resolve this issue?
Thanks in advance for taking the time to read the post, and for any support.
Stephen
------------------------------
Stephen
------------------------------