Huawei phones not connecting to FAP-231F APs

[911]

We recently installed Fortigate APs FAP-231F integrating them with our Fortigate firewalls. We use AD authentication for the cell phones, with Android phones using the following settings:

1. EAP Method = PEAP
2. Identity = Active Directory username
3. Password = Active Directory password
4. CA Certificate = Don’t validate

The only make of Android phone that does not want to connect is some of the Huawei devices. So far the P20 Pro connects, however the P30 Lite, Mate, Y9s & Nova Y60 refuses to connect... 

Anyone experiencing similar issues that they were able to resolve.

In the meantime, we are providing Guest accounts to the users with those phones.. 

Thanks..

[Anonymous]

Hello @911 ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks,

[911]

Thanks Mohit.. appreciate the help!

[911]

To work around the problem, we dropped the security from WPA3 Enterprise to WPA2 Enterprise, in order to disable PMF. Just not entirely sure whether this is the best approach to accommodate Huawei mobiles...

[vpatil]

@911 

1. As the issue is occurring only on Huawei Smartphones, to determine if the cause is FAP-231F radio or authentication related. Please test Huawei Smartphone WiFi connection on a Test Open authentication SSID on FAP-231F

2. If downgrading from WPA3 to WPA2 has resolved Huawei Smartphone WiFi connection issue then please check Huawei Smartphone specs sheet and verify if it supports WPA3 security mode

Please log a new FortiAP Ticket with Fortinet Support if the issue persists on the Test Open SSID on FAP-231F