Since updating to v18.0.3 MR-3 and the corresponding AP firmware 11.0.014 we’ve noticed that the Fast Transition behavior has changed. IPhones, iPads, and laptops that once seamlessly moved from one AP to the other are hanging on to their original AP whereas before we would experience seemless transistions in the middle or meetings and calls without a noticeable data loss. Steps to produce the issue. Have an existing Wireless network with Fast Transition enabled (WPA2 Personal with PSK) running v18 MR-1 and AP firmware 11.0.013 (not positive that this the correct version of the AP firmware but it’s what I think it was). Utilize the XG firmware update function to migrate to v18.0.3 MR-3 and reboot to make it active Download patterns to get AP firmware 11.0.014 Update the AP firmware Wait for the APs to reboot No amount of rebooting or enabling and disabling reestablishes Fast Transition behavior.

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Fast Transitions on Sophos XG v18 MR3

Since updating to v18.0.3 MR-3 and the corresponding AP firmware 11.0.014 we’ve noticed that the Fast Transition behavior has changed. IPhones, iPads, and laptops that once seamlessly moved from one AP to the other are hanging on to their original AP whereas before we would experience seemless transistions in the middle or meetings and calls without a noticeable data loss.

Steps to produce the issue.

Have an existing Wireless network with Fast Transition enabled (WPA2 Personal with PSK) running v18 MR-1 and AP firmware 11.0.013 (not positive that this the correct version of the AP firmware but it’s what I think it was).
Utilize the XG firmware update function to migrate to v18.0.3 MR-3 and reboot to make it active
Download patterns to get AP firmware 11.0.014
Update the AP firmware
Wait for the APs to reboot

No amount of rebooting or enabling and disabling reestablishes Fast Transition behavior.

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago
Hi Jean-Michel Florent,

Thank you for reaching out to the community!

Could you please provide the output of the following command from the Console and awed.log from the Advanced Shell?

console> system diagnostics show version-info

Note: Please remove the Serial number and device-id before sharing the output of the command.

Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

0 Jean-Michel Florent over 4 years ago in reply to FormerMember

Appliance Model:                SFVH                                            
Firmware Version:               SFOS 18.0.3 MR-3                                
Firmware Build:                 457                                             
Firmware Loader version:                                                        
HW version:                     SO01                                            
Config DB version:              18.016                                          
Signature DB version:           18.016                                          
Report DB version:                18.016                                        
Webcat Signature version:       0.0.3.115                                       
Web Proxy version:              compiled                                        
SMTP Proxy version:             1.0                                             
POP/IMAP Proxy version:         1.0.0.3.4                                       
Logging Daemon version:         0.0.0.17                                        
AP Firmware:                    11.0.014                                        
ATP:                            1.0.0327                                        
Avira AV:                       1.0.411682                                      
Authentication Clients:         1.0.0019                                        
Geoip ip2country DB:            2.0.002                                         
IPS and Application signatures: 18.17.60                                        
Sophos Connect Clients:         2.0.001                                         
RED Firmware:                   2.0.018                                         
Sophos AV:                      1.0.16265                                       
SSLVPN Clients:                 1.0.008                                         
Hot Fix version:                3

Reply

0 Jean-Michel Florent over 4 years ago in reply to FormerMember

Appliance Model:                SFVH                                            
Firmware Version:               SFOS 18.0.3 MR-3                                
Firmware Build:                 457                                             
Firmware Loader version:                                                        
HW version:                     SO01                                            
Config DB version:              18.016                                          
Signature DB version:           18.016                                          
Report DB version:                18.016                                        
Webcat Signature version:       0.0.3.115                                       
Web Proxy version:              compiled                                        
SMTP Proxy version:             1.0                                             
POP/IMAP Proxy version:         1.0.0.3.4                                       
Logging Daemon version:         0.0.0.17                                        
AP Firmware:                    11.0.014                                        
ATP:                            1.0.0327                                        
Avira AV:                       1.0.411682                                      
Authentication Clients:         1.0.0019                                        
Geoip ip2country DB:            2.0.002                                         
IPS and Application signatures: 18.17.60                                        
Sophos Connect Clients:         2.0.001                                         
RED Firmware:                   2.0.018                                         
Sophos AV:                      1.0.16265                                       
SSLVPN Clients:                 1.0.008                                         
Hot Fix version:                3

Children

0 LuCar Toni over 4 years ago in reply to Jean-Michel Florent

Is it the same behavior as: https://community.sophos.com/utm-firewall/f/management-networking-logging-and-reporting/122596/wlan-wifi---clients-can-not-communicate-after-roaming-twice---openwrt-bug

Could you verify this?
Cancel
Vote Up 0 Vote Down

Cancel
0 Jean-Michel Florent over 4 years ago in reply to LuCar Toni

LuCar Toni, I suspect that the bug is similar. In my case I have a client and three APs (1 AP55 and 2 AP100). What I see is that the devices never roam. They don't let go of the original AP and they don't associate to the closer one the way they used to. As a result, all traffic halts because of the signal strength. This is different from before where the roaming was fast and seamless (I could traverse the building in a Zoom meeting and not see any appreciable drop out).
Cancel
Vote Up 0 Vote Down

Cancel