My friend and I use our MacBooks from a local coffee shop sitting at the same table. My Wifi connection is much worse than hers is. Using option + click on the 🛜 menu, which reveals network information, I see that we are on different channels: - 108 (5 GHz 80 MHz) works fine for my friend - 11 (2.4 GHz 20 MHz) is slow for me I would like to reconnect on chanel 108, to match her configuration. Hopefully this will improve my connection. **Things I've tried** Per [Apple's support forums](https://discussions.apple.com/thread/253936398?sortBy=best) , I tried this command:

sudo /System/Library/PrivateFrameworks/Apple80211.framework/Resources/airport --channel=108

This command has no immediate effect. Repeating the command with the -c flag, which shows the channel number, indicates that it stays at 11. However, if I repeat the command with the -z flag, which disconnects the connection, the channel *does* become 108, but only briefly. When I reconnect to the WiFi, it reverts to channel 11. When I scan all networks with the -s flag, I see two items listed with the same SSID, one at channel 11 and one at 108. So, the channel I want is "right there" and my laptop just isn't using it. Someone else on Stack Exchange [asked a similar question](https://apple.stackexchange.com/questions/100383/wifi-channel-selection) years ago, and was told that the channel simply cannot be changed except at the WAP. Naturally in a coffee shop I don't have access to the WAP. As my friend is able to use the other channel it seems to me it's a matter of configuration in our laptops. How can I change the channel? I am on a MacBook Pro running Sonoma 14.2.1

Currently, we're implementing 802.1X authentication in the company, but having some trouble with getting an IP address when using some Macs (MacBook Pro). I created a profile through Profiler Manager of macOS Server. After the profile installed, I was able to get an IP address by manually clicking "Connect". **PS: We are using the EAP-TLS.** But I have to manually click "Connect" to get an IP address, every time I disconnected the Mac from the LAN cable or reboot the Mac. Q: Is there any way to trigger the 802.1X authentication to get an IP address automatically or is there is any way to click (without interaction or silently in the background, maybe command line or plist files?) the "Connect" button automatically once a user logs in? Any ideas would be appreciated.

I was recommended to seek for assistance here from the Networking/Stack Exchange site towards OS X queries, do hope someone has the answers. Have El Capitan on a testing iMac and deploying 802.11r/k with FT-dot1x from a Cisco WLC showed no issues with wireless connectivity. Though one client showed up with a MacBook with wireless issues. Turns out the OS X version on the Mac is 10.7 "Lion"...that is apparently old and obviously doesn't support 802.11r/k. Found a good page within Mac support for iOS (Wi-Fi network roaming with 802.11k, 802.11r, and 802.11v on iOS) but not a support matrix for OS X. Is there any available support matrix/table/information for listing which versions of OS X hardware and operating system versions towards 802.11r/k support?

I'm trying to logic what the role of 802.1x profiles are. Does the below make sense? 802.11 is a standard for wireless networks with various physical layers and the standard for campus wifi. When an AP sends a connection response to a device, it also sends an authentication framework or profile that the device can use to continue authenticating so that it can connect. We can refer to this framework as a 802.1x profile. 802.1X runs over 802.11 which authenticates mobile stations to the access point by checking the user's identity. The user's identity is determined based on their credentials. When you set up a network, it stores or caches a configuration profile on your device that authenticates via a central authority. You can see the configuration profiles (Wi-Fi or otherwise) that your laptop uses in Settings/System Preferences. Now, when you connect, your device is communicating the profile info to the AP and the AP can confirm it.  So when authentication goes wrong with the user's credentials, it might be that the access point and the device have two different versions of the profile and the device one is outdated or incorrect. So a common troubleshooting technique is to delete and essentially force refresh the profiles, making your device to redo the configuration. It may also help to delete stored information about your credentials (in Keychain access) for similar reasoning! 

Help me understand MacOS roaming behavior According to [Official sources](https://support.apple.com/en-us/HT206207) macOS wifi card will trigger a Roam event when -75dbm is reached. I have couple of this on my log:

Fri Aug  9 16:48:01.868 Driver Event:  _bsd_80211_event_callback: APPLE80211_M_ROAM_START (en0)
Fri Aug  9 16:48:01.868 Info:  Roaming started on interface en0
Fri Aug  9 16:48:01.869 Info:  PRIORITY LOCK ADDED [client=airportd, type=4, interface=en0, priority=5]
Fri Aug  9 16:48:01.869 Info:  -[CWXPCInterfaceContext __setAWDLOperatingMode:interface:error:]: attempting to set AWDL mode to 2
Fri Aug  9 16:48:01.870 Info:  SUSPEND AWDL for interface en0, timeout=10.0s, reason=Roam, token=636
Fri Aug  9 16:48:01.919 Driver Event:  _bsd_80211_event_callback: APPLE80211_M_ROAM_END (en0)
Fri Aug  9 16:48:01.919 Info:  Roaming ended on interface en0
Fri Aug  9 16:48:01.921 Driver Event:  _bsd_80211_event_callback: SCAN_CACHE_UPDATED (en0)
Fri Aug  9 16:48:01.923 Info:  -[CWXPCInterfaceContext setRoamInProgress:reason:]_block_invoke: roam status metric data: CWAWDMetricRoamStatus: status:3 security: 2 profile:3 origin:(-37) target:(-37) latency:0.051313s

I'm pretty sure that it triggered a roaming event but it doesn't changed the BSSID (no BSSID_CHANGED callback was triggered) so it stayed on the same AP(current bssid), the other AP usually has -80dbm from here not feasible to roam, then take a look at this line

Fri Aug  9 16:48:01.923 Info:  -[CWXPCInterfaceContext setRoamInProgress:reason:]_block_invoke: roam status metric data: CWAWDMetricRoamStatus: status:3 security: 2 profile:3 origin:(-37) target:(-37) latency:0.051313s

it also states that the current AP is with -37dbm which is usual and pretty much accurate. So if the trigger is -75dbm why i have so many roaming events like this ? does it take missed beacons or some other factors ? EDIT: i forgot to mention that both AP are on 802.11ac and 80mhz

I'm trying to share my college dorm ethernet connection of my Mac over the WiFi of the laptop with internet sharing in MacOs. Previously, I used a Windows pc and could switch on "Hotspot" in the windows taskbar pretty easily without configuration or error message. Now trying to do it on the Mac and results in the error that __I can't share the connection, because it is protected 802.1x and therefore can't be shared.__ I already read other stackexchange posts which only seem to have the answer that it's not advisable to share it and they give no solution (other than using a vpn). I understand that the admins of the network have their objectives, but why was I able to share it on the Windows PC pretty easily, without configuration but can't do it on the Mac?

Could someone tell me if they have been able to get an iPhone to go into the isExpensive mode when its connected to an 802.11u network? My goal is to have a network that when a iOS13+ device connects to it the iPhone goes into a mode where background iCloud traffic is restricted. I've connected to another iPhone in Personal Hotspot mode network and observed that both isExpensive and isConstrained are set to True and Low Data Mode is ON but the end user can still override this. I would like to find a way to get this to work for an 802.11u network where the user could not override it.

I'm helping a friend with a MacBook Air (13-inch, 2017) with macOS Mojave v 10.14.6, to activate and connect at least 3 Wi-Fi interfaces at the same time. First, a bit of context... We are in Venezuela with a very crappy internet connections, less than 1 Mpbs in AVG, so we are trying to make channel bonding in order to allow us to use multiple Internet connections simultaneously to optimize performance, we are using Speedify for macOS and it works like a charm! **We have:** - 2 Huawei E5573Cs-609 Hotspots with a SIM card with a mobile data plan. - 2 Smartphones with hotspot functionality **Total:** 4 Available Wi-Fi connections. - 2 External USB Wi-Fi Adapters (TL-WL725N - Version 3). - 1 MacBook's built-in Wireless card. We have installed these specific drivers from here . Running the ifconfig command, - en0 stands for the built-in Wireless receiver (WI-FI). - en4 for one TP-Link USB dongle. - en5 for the another TP-Link USB dongle. Thanks to the StatusBarApp (TP-Link's wireless network adaptor APP), located inside of /Library/Application\ Support/WLAN/StatusBarApp.app/ we manage to active en4 and connect it to a network. In theory we can active a "hardwareport" or "interface" running a this command: sudo networksetup -setairportpower en5 on But this is the output: > en5 is not a Wi-Fi interface. > > Turning on the only airport interface found: en0 So this other command won't work: networksetup -setairportnetwork en5 [password] We found wpa_supplicant inside a folder in the /Library/Application\ Support/WLAN/StatusBarApp.app/ directory, but without wpa_passphrase exec. But there is no problem, on my Linux computer I've generated a wpa_supplicant.conf with 4 blocks like this: network={ ssid="My_SSID" #psk="My_Passphrase" psk=psk_generated_here id_str="Network One" } But I'm not sure how to set up en0, en4, en5 to each network... EDIT: ----- As @nohillside requested, here is the output of networksetup -listallhardwareports, ifconfig en4 and ifconfig en5 commands: mba:~ rob$ networksetup -listallhardwareports Hardware Port: 802.11n NIC Device: en5 Ethernet Address: 50:3e:aa:23:dc:d2 Hardware Port: 802.11n NIC Device: en4 Ethernet Address: 50:3e:aa:23:ad:56 Hardware Port: Wi-Fi Device: en0 Ethernet Address: 1c:36:bb:2f:c3:d2 Hardware Port: Bluetooth PAN Device: en2 Ethernet Address: 1c:36:bb:2f:c3:d3 Hardware Port: Thunderbolt 1 Device: en1 Ethernet Address: 9a:00:13:d9:e0:60 Hardware Port: Thunderbolt Bridge Device: bridge0 Ethernet Address: 9a:00:13:d9:e0:60 VLAN Configurations =================== mba:~ rob$ ifconfig en4 en4: flags=8863 mtu 1500 ether 50:3e:aa:23:ad:56 nd6 options=201 media: autoselect () status: inactive mba:~ rob$ ifconfig en5 en5: flags=8863 mtu 1500 ether 50:3e:aa:23:dc:d2 inet6 fe80::815:e1a5:3023:39aa%en5 prefixlen 64 secured scopeid 0xd inet 192.168.8.103 netmask 0xffffff00 broadcast 192.168.8.255 inet 192.168.8.102 netmask 0xffffff00 broadcast 192.168.8.255 nd6 options=201 media: autoselect status: active mba:~ rob$ We have more than 2 days Googling and trying a lot of stuff with no results (having >=3 active and running Wi-Fi connections) in order to merge it with Speedify (which perform its work very well). How can we achieve this? Thanks for reading.

Is there any way to hide particular SSID names from the list of available networks? Below command gives list of wifi networks, /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport -s how can I hide particular SSID from the above list? Below command is only removing from preferred networks list networksetup -removepreferredwirelessnetwork en0 AC_BYOD I don't even want see the same on the wifi window on the MacBook status bar. is it possible to filter SSIDs on OSX?

I am wondering if there is a process that people use here to deploy 802.1x profiles in a Windows AD environment on Apple hardware specifically MacBook Pros? Specifically when the Root CA is renewed and profiles need to be deployed. I have read up on some techniques here: - https://www.reddit.com/r/macsysadmin/comments/9ugsq9/macos_8021x_authentication/ - https://community.cisco.com/t5/identity-services-engine-ise/how-to-automate-process-when-deploying-dot1x-between-ise-and-mac/td-p/3749868 - https://support.apple.com/kb/HT4784 These either mention a third party or the information is outdated. I may be missing something but any help would be greatly appreciated.

In enterprise wireless environments, access point roaming/hopping is very common. There exists a couple protocols/methods for making this seamless. That is, to make re-authentication when hopping to the next AP on an SSID smooth. One is called Opportunistic Key Caching or sometimes called Proactive Key Caching, abbreviated OKC or PKC. [Here is a PDF from Aruba Networks describing OKC/PKC](http://community.arubanetworks.com/aruba/attachments/aruba/115/1097/1/Aruba+OKC+Implementation.pdf) [Here is a Cisco page describing PMK Caching vs OKC vs CCKM](http://intermec.custhelp.com/app/answers/detail/a_id/13488/~/what-is-pmk-caching,-and-how-is-it-different-from-either-opportunistic-key) Windows and various Linux OSes support this protocol. Apple OSX supports a similar thing called Pairwise Master Key ID Validation (PMKID Validation). From the Cisco link, we see that OKC is preferable to PMKID Caching when seamless AP hopping is the number 1 goal. Question 1: - Does current OSX support the OKC/PKC protocol/method? How about current iOS? As of 2011, according to Aruba, Apple does not support OKC/PKC. Question 2: - Is PMKID Caching the same as PMKID Validation?

I have two interfaces: - A physical WLAN interface with 802.1x auth (en0) - A virtual TUN interface with VPN (invisible in Network Settings) (utun1) I have mobiles (both rooted Android and jailbroken iOS) that I want to intercept their HTTP/S traffic, over Bluetooth. My first thought was to do Internet Sharing from WiFi to Bluetooth, OS X did not like this, as the WiFi has 802.1x auth. Then I turned on Bluetooth Tethering without any connection on the Android, connected to it from the Mac (en3) and added the Mac as default route with ip route add default via . Then on the Mac I did:

sysctl -w net.inet.ip.forwarding=1
echo "nat on utun1 from en3:network to any -> (utun1)" >> /etc/pf.conf
pfctl -F all
pfctl -ef /etc/pf.conf

I got no errors but the mobile device is not able to connect to the internet. It pings the mac, the route is fine, but the NAT does not work. How can I share the VPN connection over Bluetooth PAN to the mobile devices? Should I try a different approach? Am I doing something wrong?

**Set-up:** iPad user connects to WiFi via Airport Express. A printer is attached to Airport Express for (Airprint) printing facility. **Problem:** I am using the above set-up with the permission of IT (I am an external staff person who is not on their payroll). Recently IT has reached out to me saying that I need to remove my Airport Express because it is causing interference to their devices and making them slow. Since Airport express broadcasts both on 2.4GHz and 5GHz, I was thinking as a possible solution I configure Airport Express to 5GHz only (less crowded spectrum). I think there is no possibility to restrict Airport Express to broadcast 5GHz network only (it will broadcast both 2.4GHz & 5GHz) therefore I was thinking to get a good value router/WiFi base station which has the capability broadcast only 5Ghz WiFi. I have looked up on internet and couldn't find any good value router which could serve the above purpose. My questions are 1) Will the above proposed solution (5GHz network only) could resolve my interference woes? 2) Please suggest an alternative (with specs) to Airport Express which could be roughly of same value and has the printer attachment capability and could broadcast 5GHz WiFi only. **Caveat:** I have already scanned the WiFi Spectrum 2.4GHz is very crowded therefore changing the channel wouldn't resolve it plus frequencies are overlapping, 5GHz spectrum is less crowded (only 1 more SSID other than mine is residing there, hence I want to broadcast only 5GHz radio frequency so that IT doesn't blame me that my device is interfering/crowding their 2.4 GHz spectrum) Thank you!

My school provides ethernet, which my Macbook can easily connect to. I want to share it with my iPhone, but it indicates that 802.1X protection has forbidden me to do so. Is there a way to surpass the protection? Operating system: OS X 10.10 with iOS 8.4 Thank you!

The problem: I'm connected to eduroam on an iMac, but only via ethernet. After restart/sleep/lock it automatically switches my 802.1x profile to the Wifi instead of the Wired. I have to manually switch it over every time. Is there a way to reorder the profiles so Wired is the default? Or remove the wireless profile from the wired list? There seems to be no way to do this via the GUI interface. OS: 10.10.5 Yosemite

I've bought a 15" MacBook Pro Retina Late 2013 and so far everything works perfectly. Luckily I'm *not* experiencing the "Lose Wifi after sleep" issue. That said, I only rarely connect to high-bandwidth WiFis. I'm currently working with a colleague from his home office. He has a Netgear router capable of 802.11n and his MacBook Pro (also Retina, but not late 2013, so he doesn't have the ac card) connects using 802.11n and 2.4GHz on channel 1 without a problem. My MBP however connects on the same channel using only 802.11g which is pretty slow when we want to transfer files. The WirelessDiagnostics report shows I connected to a 5GHz 802.11n yesterday when we were at the client's office. What can I do to fix or at least diagnose the problem? Is it just Mavericks, or a driver issue with these new ac cards?

I want to share my internet connection(ethernet) to my iPhone, but the network is protected by 802.1x so that I cannot do so. I have already know that I can share the internet connection with my phone using a VPN, but unfortunately the ISP blocks all VPN connections. Is there another way to achieve my target? OS X 10.10 with iOS 8.4 Thank you!

Edimax EW-7811Un, Mac OS X, Snow Leopard, 10.6.8. According to the manual, you can use 802.1X tunneled authentication with Windows (it is mentioned e.g. on page 23, EW-7811Un User Manual ). However, the Wireless Network Utility under OS X (10.6.8) seems to have no option for 802.1X network authentication. Since it's supported on Windows, the card obviously has the capability, so how is it possible to use it under OS X? PS: I'm happy to edit any configuration file by hand and skip the graphical utility entirely, if necessary.

I have been searching for a terminal command line to disconnect or connect 802.1x authentication, but not the network interface. I was searching some help pages and it showed command lines to export and import 802.1x settings/certificates but not disconnecting and connecting.

I have a set of laptops I'm using as a testbed and need a way to remotely configure their networking settings when I install new ones. I'm hoping to avoid a solution that scripts the GUI via AppleScript to simulate mouse/keyboard actions. Is it possible to change 802.1X settings in OS X from the command line?