Lead Network Technician Network Technician Positions Available
State University of New York at Oswego Network Positions Campus Technology Services at the State University of New York at Oswego is seeking qualified individuals for two positions to assist in the support and maintenance of its campus network. The Network Technicians will report to the CTS Network Manager and will be expected to work with a team of technical support professionals and provide assistance in the following areas: • Provide day-to-day maintenance and support of networking systems. • Conduct routine network diagnostics and monitoring. • Cisco network configuration and support • Maintenance for layers 1-3 of the OSI Model. • Field contact for data wiring, equipment installation and service. • Troubleshoot end user connectivity issues. • Assist in the assignment of network numbers and names. • Maintain records in network management and help desk software. • Assist with implementation and management of IP phone infrastructure. • Support for the telecommunications rooms, fiber backbone connections, and other communications equipment through maintenance, labeling, and regular cleaning. • This position will require some evening and weekend work. Lead Network Technician Required Qualifications: • Bachelor’s degree • 2 years of work experience in Network or Computer Technology • CCENT or equivalent Network Certifications • Excellent interpersonal and communication skills • Ability to prioritize multiple tasks and work interactively as well as independently • Knowledge of various operating systems including: Windows and Linux • Familiarization with wireless technologies and protocols (i.e. 802.11g/n) Preferred Qualifications: • Hands-on-experience in diagnosing network hardware and troubleshooting software • Experience working with Cisco VoIP Network Technician Required Qualifications: • Associate’s Degree • Excellent interpersonal and communication skills • Ability to prioritize multiple tasks and work interactively as well as independently • Knowledge of various operating systems including: Windows and Linux • Familiarization with wireless technologies and protocols (i.e. 802.11g/n) Preferred Qualifications: • 2 years of work experience in Network or Computer Technology • Hands-on-experience in diagnosing network hardware and troubleshooting software • CCENT or equivalent Network Certifications • Experience working with Cisco VoIP To Apply: Submit a letter of application addressing qualifications, a copy of transcripts, curriculum vitae/resume, and the names of three references with contact information electronically to the link provided on our website, www.oswego.edu/vacancies. Review of applications will begin in January and continue until the position is filled. Official transcripts are required prior to appointment. Salary is DOE. Description of SUNY Oswego: Founded in 1861, SUNY Oswego is a public comprehensive college located in central New York on the beautiful shores of Lake Ontario, 45 minutes from Syracuse. Named one of Top Up-and-Coming Schools in U.S. News America’s Best Colleges 2010 and a Best Northeastern College by Princeton Review, Oswego offers its 8300 undergraduate and graduate students outstanding educational experiences with attention to liberal arts and sciences foundations, practical applications, interdisciplinary approaches, independent scholarly and creative work, and skills for living in multicultural and global communities. SUNY Oswego is in a time of wonderful opportunities with extensive facilities construction and renovation, a forward-looking sesquicentennial strategic plan, and expanded outreach to regional, national, and international communities. Additional information about SUNY Oswego can be found at www.oswego.edu. SUNY Oswego is committed to enhancing its diversity. SUNY Oswego is an Affirmative Action Employer and encourages applications from professionals of color, women, individuals with disabilities, and veterans. In accordance with INS regulations, successful applicants must be legally able to work in the United States, per the Immigration Reform and Control Act of 1986. Requests for reasonable accommodations of a disability during the application and/or interview process should be made to the Human Resources Office. Gregory A. Fuller - CCNP, CCNA Security Network Manager State University of New York at Oswego Phone: (315) 312-5750 http://www.oswego.edu/~gfuller ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] Cisco Wireless Interface Groups
We've been using interface groups for some time and like most people on here you'll notice that the same mac address will show up in dhcp table. We initially setup our dhcp (linux) for 8 hour leases and then quickly realized that we would exhaust the scopes. We tuned them down to 1 hour and seems to be good now. I talked with a Cisco wireless employee and he feels very comfortable using 20 minute lease times for most wlans. Also there is a command on the wlc that allows you to view which interfaces are dirty and won't allow dhcp requests for 30 minutes I believe. Craig Eyre Network Analyst IT Services Department Mount Royal University 4825 Mount Royal Gate SW Calgary AB T2P 3T5 P. 403.440.5199 E. ce...@mtroyal.ca The difference between a successful person and others is not a lack of strength, not a lack of knowledge, but rather in a lack of will. Vincent T. Lombardi From: Vikki Cutrone vicutr...@vassar.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU, Date: 02/15/2013 12:13 PM Subject:[WIRELESS-LAN] Cisco Wireless Interface Groups Sent by:The EDUCAUSE Wireless Issues Constituent Group Listserv WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Hello All, I recently configured multiple /24 subnets into a wireless interface group on my controllers, in an effort to cut down on multicast as well as increase the IP address space. It seems to be working but DHCP addresses are still being consumed at an alarming rate. Is anyone else using the interface group feature? and if so is it working as expected? Thank you in advance! -- Vikki Cutrone Network Administrator Vassar College, Box 13 124 Raymond Ave Poughkeepsie, NY 12604-0013 845-437-7231 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.__ This communication is intended for the use of the recipient to which it is addressed, and may contain confidential, personal, and or privileged information. Please contact the sender immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communication received in error, or subsequent reply, should be deleted or destroyed. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. inline: graycol.gif
RE: [WIRELESS-LAN] Cisco Wireless Interface Groups
Hi Vikki We have used interface groups for a while with great success on our WiSM2. We have a DHCP lease time of 20mins and we have an interface group that consist of 20 x /15 private IP subnets so that we have the IP capacity to cope. Thanks Bryn Bryn Jones ISS Network Development Rm 8.01e Computing Block EC Stoner Building University of Leeds UK LS2 9JT 0113 343 7055 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Vikki Cutrone Sent: 15 February 2013 19:13 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Cisco Wireless Interface Groups Hello All, I recently configured multiple /24 subnets into a wireless interface group on my controllers, in an effort to cut down on multicast as well as increase the IP address space. It seems to be working but DHCP addresses are still being consumed at an alarming rate. Is anyone else using the interface group feature? and if so is it working as expected? Thank you in advance! -- Vikki Cutrone Network Administrator Vassar College, Box 13 124 Raymond Ave Poughkeepsie, NY 12604-0013 845-437-7231 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: About the eduroam configuration on Freeradius
I have a question for those of you that are using EDUROAM as your only SSID. How do you handle Windows machine authentication? Our domain computers do 802.1X machine authentication when there is not a user logged in. This allows the computer to authenticate the user and get their profile. It is also useful for remote management when a user is not logged in. Thanks, all Bruce Osborne Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Tristan Gulyas [mailto:tristan.gul...@monash.edu] Sent: Saturday, February 16, 2013 8:21 AM Subject: Re: About the eduroam configuration on Freeradius Hi, We have been using eduroam as our primary SSID for a number of years; users can simply select the network and enter their username and password, accept the certificate and they're good to go. One thing we've found to be successful for us is to accept both just the username and username@domain to enhance usability but the drawback is that we will have a few eduroam configured devices that won't work at other institutions. We have RADIATOR perform a lookup via LDAP to determine the class of user (student, staff, high school user (as we have a high school as part of our University campus) and return the appropriate Tunnel Group ID for AAA override. If there is no attribute in LDAP, we place them on the guest VLAN by default, however, the guest VLAN and student VLANs are identical in terms of access control. Tristan --- Tristan Gulyas tristan.gul...@monash.edumailto:tristan.gul...@monash.edu Wireless Network Engineer M: +61 403224484 eSolutions divisionP: +61 3 9902 9092 Building 205 Monash University 3800 Australia On 16/02/2013, at 8:55 AM, Johnson, Neil M neil-john...@uiowa.edumailto:neil-john...@uiowa.edu wrote: We have been using eduroam as our primary SSID since the fall. We could put non @uiowa.eduhttp://uiowa.edu users in a separate VLAN that appears outside our border, but the acutual number of non iowa users on campus is so small that it wasn't deemed worth the effort to setup and maintain. Implementing eduroam as our primary SSID happened to happily conicide with campus encoraging users to useuse...@uiowa.edumailto:use...@uiowa.edu as their default username in order for them to access cloud services being implemented in the near future. -Neil From: The EDUCAUSE Wireless Issues Constituent Group Listserv [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Steve Bohrer [skboh...@simons-rock.edumailto:skboh...@simons-rock.edu] Sent: Friday, February 15, 2013 3:13 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius On Feb 15, 2013, at 3:24 PM, Linchuan Yang linchuan.y...@concordia.camailto:linchuan.y...@concordia.ca wrote: Dear All Do you use different radius servers for your local SSID and eduroam SSID? Currently, we are using the same radius servers for both of SSID, and we found that some of our local users login with eduroam SSID inside our campus. We want to block our local users (both user...@concordia.camailto:user...@concordia.ca and user123)to login with eduroam SSID, could you please explain how to modify the proxy.conf or other configuration files on Freeradius (Linux version)? We take a different approach, and use eduroam as our primary SSID campus-wide. That is, all of our local users always connect to eduroam, even when they are not roaming. Our radius server knows they are local because they have our realm in their username, and we can use their other local LDAP attributes to put them into the proper VLAN. Our radius server also puts non-Simon's Rock eduroam users in to an eduroam guest VLAN. (We have an open SSID with instructions for connecting to eduroam, and some special case guest VLANs, but no other SSID for our local users). The benefit is that our users only ever need to do one wifi config, and eduroam just works when they travel to other federation campuses or to EDU conventions and such, because it is exactly the same wifi config that they use every day on campus. Steve Bohrer Network Admin, ITS Bard College at Simon's Rock 413-528-7645 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found athttp://www.educause.edu/groups/. --- Tristan Gulyas tristan.gul...@monash.edumailto:tristan.gul...@monash.edu Wireless Network Engineer M: +61 403224484 eSolutions divisionP: +61 3 9902 9092 Building 205 Monash University 3800 Australia ** Participation and subscription information for
Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius
We currently don't do machine authentication as we would prefer to track down issues to an individual user, rather than workstation. However we have had issues using Windows 7 SSO and are looking into options. They are: 1. A hidden SSID for machines to authenticate to. 2. Customizing our RADIUS server (RADIATOR) to recognize machine logins (HOST/workstation-name) and authenticate them separately to the eduroam SSID. I'd be curious as to what other sites are doing, as well. Thanks. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Osborne, Bruce W bosbo...@liberty.edumailto:bosbo...@liberty.edu Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Date: Monday, February 18, 2013 9:13 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius I have a question for those of you that are using EDUROAM as your only SSID. How do you handle Windows machine authentication? Our domain computers do 802.1X machine authentication when there is not a user logged in. This allows the computer to authenticate the user and get their profile. It is also useful for remote management when a user is not logged in. Thanks, all Bruce Osborne Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Tristan Gulyas [mailto:tristan.gul...@monash.edu] Sent: Saturday, February 16, 2013 8:21 AM Subject: Re: About the eduroam configuration on Freeradius Hi, We have been using eduroam as our primary SSID for a number of years; users can simply select the network and enter their username and password, accept the certificate and they're good to go. One thing we've found to be successful for us is to accept both just the username and username@domain to enhance usability but the drawback is that we will have a few eduroam configured devices that won't work at other institutions. We have RADIATOR perform a lookup via LDAP to determine the class of user (student, staff, high school user (as we have a high school as part of our University campus) and return the appropriate Tunnel Group ID for AAA override. If there is no attribute in LDAP, we place them on the guest VLAN by default, however, the guest VLAN and student VLANs are identical in terms of access control. Tristan --- Tristan Gulyas tristan.gul...@monash.edumailto:tristan.gul...@monash.edu Wireless Network Engineer M: +61 403224484 eSolutions divisionP: +61 3 9902 9092 Building 205 Monash University 3800 Australia On 16/02/2013, at 8:55 AM, Johnson, Neil M neil-john...@uiowa.edumailto:neil-john...@uiowa.edu wrote: We have been using eduroam as our primary SSID since the fall. We could put non @uiowa.eduhttp://uiowa.edu users in a separate VLAN that appears outside our border, but the acutual number of non iowa users on campus is so small that it wasn't deemed worth the effort to setup and maintain. Implementing eduroam as our primary SSID happened to happily conicide with campus encoraging users to useuse...@uiowa.edumailto:use...@uiowa.edu as their default username in order for them to access cloud services being implemented in the near future. -Neil From: The EDUCAUSE Wireless Issues Constituent Group Listserv [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Steve Bohrer [skboh...@simons-rock.edumailto:skboh...@simons-rock.edu] Sent: Friday, February 15, 2013 3:13 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius On Feb 15, 2013, at 3:24 PM, Linchuan Yang linchuan.y...@concordia.camailto:linchuan.y...@concordia.ca wrote: Dear All Do you use different radius servers for your local SSID and eduroam SSID? Currently, we are using the same radius servers for both of SSID, and we found that some of our local users login with eduroam SSID inside our campus. We want to block our local users (both user...@concordia.camailto:user...@concordia.ca and user123)to login with eduroam SSID, could you please explain how to modify the proxy.conf or other configuration files on Freeradius (Linux version)? We take a different approach, and use eduroam as our primary SSID campus-wide. That is, all of our local users always connect to eduroam, even when they are not roaming. Our radius server knows they are local because they have our realm in their username, and we can use their other local LDAP attributes to put them into the proper VLAN. Our radius server also puts non-Simon's
Prime Infrastructure 1.3
All, Just a heads-up, Prime Infrastructure 1.3 was released today. This is the version that supports the 7.4 controller code. Andy -- Andy Page Network Design Professional University of Notre Dame 574.631.6592 Go Irish! ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.