Mac OS Network Troubleshooting Guide


Overview


This article contains instructions for self-troubleshooting network connectivity issues on MacOS devices when using UCSD's supported networks (i.e. UCSD-PROTECTED, UCSD-GUEST, RESNET-PROTECTED, RESNET-GUEST-DEVICE). Following the steps will reset wireless configurations and settings, and typically will fix most connectivity issues on Mac devices.
 

Critical Concepts


Steps to follow:

  1. Verify Network Configuration
  2. Forget Networks
  3. Flush DNS
  4. Delete Certificates
  5. Disable IPv6
  6. Delete PLists
  7. Make MacOS roam to strongest Wi-Fi signal
  8. Uninstall and Reinstall Cisco's AnyConnect VPN Client (for M1/M2 MacBooks only)
  9. Turn off AWDL Interface (for M1/M2 MacBooks only)

Important comment:
If you have an open ticket with us—or plan to create one via our website or email— keep a list of the steps you were able to complete while following this article. This list will help our technicians understand your progress.

When submitting your ticket or replying to one of our techs, include the list in your message. Additionally, we recommend that you add your MAC (physical) address, IP address, and network speeds in your description. Providing this information helps our technicians identify your device, understand the network environment, and expedite the troubleshooting process. 

 

Steps to Take


Basic Troubleshooting Steps to Do Beforehand:

  1. Note your network speeds (download and upload) prior to troubleshooting by either searching on Google "speed test" or using a site such as speedtest.net or fast.com. Download speeds below 20mbps are not ideal. Run another test after troubleshooting to see if a significant change has been made.
  2. Note your current operating system version by clicking the Apple icon on the top left and selecting "System Preferences". It will say the device's macOS release version (macOS Sequoia, Sonoma, Ventura, Monterey, etc.) and the version number (Version 15.4, 12.3.1, etc.). If possible, please update to the latest version by clicking System Preferences > Software Update.
  3. Get your public IP address by going on a site such as whatismyipaddress.com, and confirm you are not border blocked using our site amiblocked.ucsd.edu. If you are blocked, contact us using the methods above and make sure to provide your IP address when communicating with the tech.

 

1. Verify Network Configuration

  1. On the top right, click the Wi-Fi icon and select "Network Preferences..." (macOS <13) or "Wi-Fi Settings..." (macOS 13+).

    macOS (macOS <13)
    macOS Ventura (macOS 13+)

    Screenshot of "Network Preferences..." highlighted on the Wifi menu

    Screenshot of "Wi-Fi Settings..." highlighted on the Wifi menu

  2.  Remove unnecessary interfaces:

    macOS (macOS <13)
    macOS Ventura (macOS 13+)

    Screenshot of network settings - minus icon is circled at the interface's list bottom

    1. On macOS <13, look at the left sidebar and see what interfaces are shown.
    2. Remove any unused VPNs or apps using the minus sign located on the bottom left
    3. Then uninstall the corresponding application by going to the Applications folder and dragging it into the Trash.

    Screenshot of network settings

    1. On macOS 13 or later versions, click Network in the left sidebar
    2. Under "Other Services". Click on any unused apps and mark them inactive by selecting Make Inactive.
    3. Click on "VPN" (or "Filters") to find the unwanted interfaces. You can remove any filters/proxies by selecting them from the list and clicking the minus sign.
  3. Click on "Advanced..." on the bottom right.
    1. On MacOS 13 or later versions, select "Wi-Fi" first and then "Details..."
  4. Click on the "TCP/IP" option.
    1. Ensure "Configure IPv4" is set to "Using DHCP", "Configure IPv6" is set to "Automatically"
    2. Click on the button "Renew DHCP Lease"

      macOS (macOS <13)macOS Ventura (macOS 13+)

      Screenshot of TCP/IP tab in Wi-Fi settings

      Screenshot of TCP/IP tab in Wi-Fi settings

  5. Click on the "Proxies" option and ensure all protocols are unchecked.

    macOS (macOS <13)macOS Ventura (macOS 13+)

    Screenshot of proxies tab on Wi-Fi settings before MacOS 13

    Screenshot of proxies tab on Wi-Fi settings on MacOS 13

  6. Click "OK", click "Apply" on the bottom right, and then close it.

 

2. Forget Networks

  1. On the top right, click the Wi-Fi icon and select "Network Preferences..." (macOS <13) or "Wi-Fi Settings..." (macOS 13 or later versions).
  2. Look in "Preferred Networks" and delete any UCSD networks (e.g. UCSD-PROTECTED, UCSD-GUEST, RESNET-PROTECTED, RESNET-GUEST-DEVICE) by clicking on them, then clicking the minus (-) icon, and then restarting the device (important to ensure that they are fully deleted). 
    1. RESNET-GUEST-DEVICE and UCSD-GUEST can cause issues in particular when they are remembered at the same time as RESNET-PROTECTED and UCSD-PROTECTED, so it is strongly suggested to only connect to the PROTECTED networks.
  3. Having too many WiFi network profiles can cause issues connecting to campus Wi-Fi (and the VPN). Forget networks you aren't using - ideally getting down to 3-5 networks.
  4. Click "OK" or "Done"

    macOS (macOS <13)macOS Ventura (macOS 13+)
    List of wifi networks and the minus button to remove them on the wifi settings before MacOS 13Arrow pointing at the circle icon with dots and another pointing at "Remove From List"
  5. Check if you are able to connect to any of our networks now

 

3. Flush DNS

  1. Flushing your DNS cache will remove your local DNS records and stored IP addresses. Clearing your DNS cache is perfectly safe and can solve your connection issue.
  2. Open the Terminal and enter the command:

    sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

 

4. Delete Certificates

  1. Open the Keychain Access application by searching for "Keychain Access" on either the top right search icon or with command (⌘) + space bar
  2. Ensure the side bar is set to "login" and the tabs at the top is set to "Certificates"
  3. If there is more than 1 certificate named "auth.ucsd.edu," or any other certificates with a name involving UCSD such as "UC San Diego Certificate Service", delete all of them by holding down control (^) while clicking on them, and selecting "Delete"
    • There should be only ONE auth.ucsd.edu certificate; if this isn't correct, delete all certificates, so the device can request a new SSL certificate 
    • Note the times they expire as well

      Screenshot of Keychain Access menu - auth.ucsd.edu is highlighted

  4. Restart the device
  5. Click on the Wi-Fi symbol on the top right and connect to a UCSD network
  6. It should prompt you to authenticate with a certificate. Select "Show Certificate"

    Screenshot of Prompt to authenticate to network "RESNET-PROTECTED"

  7. Click on "Trust" and ensure all the settings are set to "Always Trust

    Trust certificate settings for auth.ucsd.edu

  8.  Click "Continue" and see if you are experiencing any issues connecting

 

5. Disable IPv6

  1. Disable IPv6 by typing the following command into Terminal:
    networksetup -setv6off “Wi-Fi”

 

6. Delete PLists

  1. As a warning, deleting the following PList files will clear all saved network preferences and configurations 
  2. Open the "Finder" application
  3. Click on "Go" on the top menu bar, select "Go to Folder," and type "/Library/Preferences/SystemConfiguration"
    • Delete the following files by dragging them to the Trash: 
      1. CaptiveNetworkSupport, com.apple.network.eapolclient.configuration, com.apple.airport.preferences.plist, preferences.plist, NetworkInterfaces.plist

        SystemConfiguration folder showing a list of plists

  4. Restart your Mac device

 

7. Make MacOS roam to strongest Wi-Fi signal

  1. Open the Terminal application by searching for "Terminal" with either the top right search icon or with command (⌘) + space bar

    Mac terminal window

  2. Type in the following command: 
    sudo /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport prefs joinMode=Strongest
  3. Press enter. You will need to enter your system password and press enter again for the change to take effect. It might not look like you are typing anything because your password is hidden.
  4. Restart your computer.

 

8. Uninstall and Reinstall Cisco's AnyConnect VPN Client (for M1/M2 MacBooks only)

  1. If you already have the Cisco AnyConnect VPN client installed and are using an M1 or M2 MacBook (click Apple icon , Chip will be Apple M1 or M2), uninstall it to see if the WiFi issue is resolved:
    • Open Finder application, open "Applications" folder, open "Cisco" folder, and run "Uninstall AnyConnect" application

      Applications folder to use the Uninstall AnyConnect app

  2. Check if you are able to successfully connect to our networks and maintain a stable connection
  3. Reinstall the "Cisco Secure Client" from the App Store using this link: Cisco Secure Client
    • Note, this installation only works for M1/M2 MacBooks

 

9. Turn off AWDL Interface (for M1/M2 MacBooks only)

  1. If you are experiencing connectivity issues on your M1 or M2 MacBook specifically (Click Apple icon, Chip will be Apple M1 or M2), this may be caused by the AWDL interface (a Wi-Fi mesh peer-to-peer network used in AirDrop and AirPlay). For more information, see the following articles by Meter and UCLA respectively: Recent Apple updates leading to WiFi issues & an interim solutionIntermittent Connectivity for Wireless Networks. To resolve this, there are a few steps you may take:
    1. Update the MacBook to macOS Ventura 13.1+. Wi-Fi issues are supposedly resolved in this version.
      1. Open "System Settings" or "System Preferences" > General > Software Update
      2. If there are any updates available, please update the device.
    2. If you are unable to update the device, there are some interim steps you may take that might resolve the issue.
      1. Open Finder. Click Go > AirDrop from the drop down menu. At the bottom of the window, click where it says, "Allow me to be discovered by:" and select "No One" from the drop-down menu.

        Airdrop window
    1. You may disable the AWDL interface from running manually.
      1. First, on your terminal run the command:
        sudo ifconfig awdl0 down
        . This temporarily disables the interface, and if Wi-Fi connectivity improves, you may continue with next steps.
      2. Run a script to disable AWDL automatically using a Launch Daemon. Code is available here.
        1. Open the Terminal app
        2. Run:
          curl -sL https://www.meter.com/awdl-daemon.sh | bas

If you still have questions or need additional assistance, please contact the ITS Service Desk. You can call us at (858) 246-4357, email us at support@ucsd.edu, or submit a ticket at support.ucsd.edu.