the laptop has another NIC connected to the LAN that is working fine (no "unauthenticated" message)
and another wifi connection (the production wifi connection) that is also good.
So I'm leaning toward Paccer's solution of a review of dhcp/dns config.
I'll keep your suggestion in my back pocket for now, thanks!