Mobile Phones getting limited connectivity

[KeatonBatman]

We are using radius to connect our devices, and everything seems to work great except our phones. Would there be a reason why laptops and other devices are working fine, but mobile phones like android and iPhone are getting limited connectivity?

I am using our DNS servers, but even when I change them to google, we still have issues getting out. 

[alemabrahao]

What version of MR firmware are your APs on? The 802.11r Is enabled?

Can you share a print screen about your configuration?

[Brash]

What do you mean by limited connectivity? What is the symptom youry seeing?

It shouldn't really matter but one significant difference between phones and laptops is that phones will but default use a randomised MAC address (that doesn't match any vendors address space) rather than their true hardware MAC address.

[alemabrahao]

@Brash,

I think when he's saying " limited connectivity", Is when you can connect on SSID, but has no internet access, you know?

[KeatonBatman]

Yes, I can connect to the Wi-Fi, but I don't have internet access. All the APs are on the new firmware but were using the Meraki AP assigned (NAT Mode), so I don't have an option to use 802.11r

[alemabrahao]

Great, 

Do you have any firewall rules configured? Does this issue occur on a specific access point or on all of them?

Is it a SSID with 802.1x or Open with splash page?

[KeatonBatman]

We have no firewall rules, and it's happening to all my Meraki APs. They're doing SSID with 802.1x no splash page. 

[alemabrahao]

Well, there is no a special configuration for mobile clients and randomized MAC address should not be a problem for this case.

Can you share a print screen about your configuration? 

[KeatonBatman]

I'm new to Meraki. How do I provide a print screen for you?

Apologies.

[alemabrahao]

Here:

I just tested It with NAT mode, and I had no problem.

[KeatonBatman]

I just removed Radius, and I could get internet on my phone. Is it possible something on the radius side is blocking it?

[KeatonBatman · Accepted solution]

I believe I finally resolved the issue and need to enable 801.11w. Once I enabled it, my phone could reach out to the internet. 

[alemabrahao]

Wow, it's the first time I've heard it, most of the time I disable it, because it's usually a problem.