I am closing in on 100% and can share a few things I've learned.
- Check your network address space. My IOT network was not within the RFC1918 specifications. There may have been an IOT device trying to reach an Internet IP address that was getting caught in my own network. I'm not sure if I accidentally changed the octet or it was chosen automatically when I created the network, but it was outside of RFC1918.
- Don't use 0 as any octet. Cisco started doing this in the 1980s and as far as I'm concerned it should be avoided. Especially when dealing with IOT networks since you're already dealing with poor drivers and such requiring you to be as legacy as possible. There is no reason anyone NEEDS to use 0, so do yourself a favor and avoid it. e.g. 192.168.0.X bad, 192.168.1.X good; 172.16.0.X bad, 172.16.1.X good; 10.0.0.X bad, 10.1.1.X good.
- IOT devices are a problem. Create IOT2 2 GHz and IOT5 SSIDs if your devices don't behave properly on a combination SSID. (Frankly just create separate and save yourself the headache, for IOTs that is.) Use 5 GHz if possible because it's less crowded/handles conflicts better. Upgrade or replace your old tech if possible. I finally gave up my on my two sprinkler controllers after reading all the Reddit comments and getting no acknowledgement from the manufacturer that their WiFi capabilities are awful (Hunter Industries X2 + WAND cartridge and only supports 2 GHz.) One was in the garage where I have an AP25 mounted on the ceiling in line of sight, and the other was outdoors where I have an AP27 in line of sight. My AP27s are Ethernet connected.) I swapped out the garage controller with a Rachio 3 and it's solid. I just put it on IOT5. Today I'm replacing the outdoor one. Unfortunately they're not outdoor rated but Rachio sells an outdoor enclosure that you can hardwire or add a pigtail power cord (which is what I've done).
- If you have multiple APs - I have 5 indoor and 2 outdoor - manually set the radio channels and lock the min/max radio power settings accordingly. I don''t have any information about what HPE does with this to lead me to trust it. I want full control, in absence of any information.
Bullets 1 and 2 alone boosted my health rating several points. I have about 15 CR2032 cell battery water leak detector IOT devices that come and go to conserve battery life. It would be good if the portal had a way to flag IOT devices like this so they don't impact the health scores at all or less. I am confident that after today my health score will be 100% if none of my water leak detectors were recently seen.
I hope this helps!
P.S. Looks like the portal has been updated, the app has been updated, and new firmware is available.
RFC 1918 is an Internet Engineering Task Force (IETF) document that defines a set of private IPv4 address ranges for corporate networks:
- 10.0.0.0/8: 10.0.0.0–10.255.255.255
- 172.16.0.0/12: 172.16.0.0–172.31.255.255
- 192.168.0.0/16: 192.168.0.0–192.168.255.25
These addresses are not publicly routable on the internet and are reserved for private internets. Organizations can use these addresses to meet the needs of even large networks.