Lead Network Technician Network Technician Positions Available

2013-02-18 Thread Gregory Fuller
State University of New York at Oswego
Network Positions

Campus Technology Services at the State University of New York at
Oswego is seeking qualified individuals for two positions to assist in
the support and maintenance of its campus network. The Network
Technicians will report to the CTS Network Manager and will be
expected to work with a team of technical support professionals and
provide assistance in the following areas:

•   Provide day-to-day maintenance and support of networking systems.
•   Conduct routine network diagnostics and monitoring.
•   Cisco network configuration and support
•   Maintenance for layers 1-3 of the OSI Model.
•   Field contact for data wiring, equipment installation and service.
•   Troubleshoot end user connectivity issues.
•   Assist in the assignment of network numbers and names.
•   Maintain records in network management and help desk software.
•   Assist with implementation and management of IP phone
infrastructure.
•   Support for the telecommunications rooms, fiber backbone
connections, and other communications equipment through maintenance,
labeling, and regular cleaning.
•   This position will require some evening and weekend work.


Lead Network Technician

Required Qualifications:
•   Bachelor’s degree
•   2 years of work experience in Network or Computer Technology
•   CCENT or equivalent Network Certifications
•   Excellent interpersonal and communication skills
•   Ability to prioritize multiple tasks and work interactively as well
as independently
•   Knowledge of various operating systems including:  Windows and Linux
•   Familiarization with wireless technologies and protocols (i.e.
802.11g/n)

Preferred Qualifications:
•   Hands-on-experience in diagnosing network hardware and
troubleshooting software
•   Experience working with Cisco VoIP



Network Technician

Required Qualifications:
•   Associate’s Degree
•   Excellent interpersonal and communication skills
•   Ability to prioritize multiple tasks and work interactively as well
as independently
•   Knowledge of various operating systems including:  Windows and Linux
•   Familiarization with wireless technologies and protocols (i.e.
802.11g/n)

Preferred Qualifications:
•   2 years of work experience in Network or Computer Technology
•   Hands-on-experience in diagnosing network hardware and
troubleshooting software
•   CCENT or equivalent Network Certifications
•   Experience working with Cisco VoIP

To Apply: Submit a letter of application addressing qualifications, a
copy of transcripts, curriculum vitae/resume, and the names of three
references with contact information electronically to the link
provided on our website, www.oswego.edu/vacancies.

Review of applications will begin in January and continue until the
position is filled.  Official transcripts are required prior to
appointment.

Salary is DOE.

Description of SUNY Oswego:  Founded in 1861, SUNY Oswego is a public
comprehensive college located in central New York on the beautiful
shores of Lake Ontario, 45 minutes from Syracuse.  Named one of Top
Up-and-Coming Schools in U.S. News America’s Best Colleges 2010 and a
Best Northeastern College by Princeton Review, Oswego offers its
8300 undergraduate and graduate students outstanding educational
experiences with attention to liberal arts and sciences foundations,
practical applications, interdisciplinary approaches, independent
scholarly and creative work, and skills for living in multicultural
and global communities.  SUNY Oswego is in a time of wonderful
opportunities with extensive facilities construction and renovation, a
forward-looking sesquicentennial strategic plan, and expanded outreach
to regional, national, and international communities.  Additional
information about SUNY Oswego can be found at www.oswego.edu.

SUNY Oswego is committed to enhancing its diversity.  SUNY Oswego is
an Affirmative Action Employer and encourages applications from
professionals of color, women, individuals with disabilities, and
veterans.  In accordance with INS regulations, successful applicants
must be legally able to work in the United States, per the Immigration
Reform and Control Act of 1986.

Requests for reasonable accommodations of a disability during the
application and/or interview process should be made to the Human
Resources Office.


Gregory A. Fuller - CCNP, CCNA Security
Network Manager
State University of New York at Oswego
Phone: (315) 312-5750
http://www.oswego.edu/~gfuller

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] Cisco Wireless Interface Groups

2013-02-18 Thread Craig Eyre

We've been using interface groups for some time and like most people on
here you'll notice that the same mac address will show up in dhcp table. We
initially setup our dhcp (linux) for 8 hour leases and then quickly
realized that we would exhaust the scopes. We tuned them down to 1 hour and
seems to be good now. I talked with a Cisco wireless employee and he feels
very comfortable using 20 minute lease times for most wlans.

Also there is a command on the wlc that allows you to view which interfaces
are dirty and won't allow dhcp requests for 30 minutes I believe.


Craig Eyre
Network Analyst
IT Services Department
Mount Royal University
4825 Mount Royal Gate SW
Calgary AB T2P 3T5

P. 403.440.5199
E. ce...@mtroyal.ca

The difference between a successful person and others is not a lack of
strength, not a lack of knowledge, but rather in a lack of will.  Vincent
T. Lombardi




From:   Vikki Cutrone vicutr...@vassar.edu
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU,
Date:   02/15/2013 12:13 PM
Subject:[WIRELESS-LAN] Cisco Wireless Interface Groups
Sent by:The EDUCAUSE Wireless Issues Constituent Group Listserv
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU



Hello All,

I recently configured multiple /24 subnets into a wireless interface group
on my controllers, in an effort to cut down on multicast as well as
increase the IP address space.  It seems to be working but DHCP addresses
are still being consumed at an alarming rate.  Is anyone else using the
interface group feature? and if so is it working as expected?

Thank you in advance!

--
Vikki Cutrone
Network Administrator
Vassar College, Box 13
124 Raymond Ave
Poughkeepsie, NY 12604-0013

845-437-7231
** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.__
This communication is intended for the use of the recipient to which it is 
addressed, and may contain confidential, personal, and or privileged 
information. Please contact the sender immediately if you are not the intended 
recipient of this communication, and do not copy, distribute, or take action 
relying on it. Any communication received in error, or subsequent reply, should 
be deleted or destroyed.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

inline: graycol.gif

RE: [WIRELESS-LAN] Cisco Wireless Interface Groups

2013-02-18 Thread Bryn Jones
Hi Vikki

We have used interface groups for a while with great success on our WiSM2. We 
have a DHCP lease time of 20mins and we have an interface group that consist of 
20 x /15 private IP subnets so that we have the IP capacity to cope.

Thanks

Bryn


Bryn Jones
ISS Network Development
Rm 8.01e Computing Block
EC Stoner Building
University of Leeds
UK
LS2 9JT

0113 343 7055


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Vikki Cutrone
Sent: 15 February 2013 19:13
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco Wireless Interface Groups

Hello All,

I recently configured multiple /24 subnets into a wireless interface group on 
my controllers, in an effort to cut down on multicast as well as increase the 
IP address space.  It seems to be working but DHCP addresses are still being 
consumed at an alarming rate.  Is anyone else using the interface group 
feature? and if so is it working as expected?

Thank you in advance!

--
Vikki Cutrone
Network Administrator
Vassar College, Box 13
124 Raymond Ave
Poughkeepsie, NY 12604-0013

845-437-7231
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: About the eduroam configuration on Freeradius

2013-02-18 Thread Osborne, Bruce W

I have a question for those of you that are using EDUROAM as your only SSID. 
How do you handle Windows machine authentication?

Our domain computers do 802.1X machine authentication when there is not a user 
logged in. This allows the computer to authenticate the user and get their 
profile. It is also useful for remote management when a user is not logged in.

Thanks, all

Bruce Osborne
Network Engineer
IT Network Services

(434) 592-4229

LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Tristan Gulyas [mailto:tristan.gul...@monash.edu]
Sent: Saturday, February 16, 2013 8:21 AM
Subject: Re: About the eduroam configuration on Freeradius

Hi,

We have been using eduroam as our primary SSID for a number of years; users can 
simply select the network and enter their username and password, accept the 
certificate and they're good to go.  One thing we've found to be successful for 
us is to accept both just the username and username@domain to enhance usability 
but the drawback is that we will have a few eduroam configured devices that 
won't work at other institutions.

We have RADIATOR perform a lookup via LDAP to determine the class of user 
(student, staff, high school user (as we have a high school as part of our 
University campus) and return the appropriate Tunnel Group ID for AAA override.

If there is no attribute in LDAP, we place them on the guest VLAN by default, 
however, the guest VLAN and student VLANs are identical in terms of access 
control.

Tristan
---
Tristan Gulyas  
tristan.gul...@monash.edumailto:tristan.gul...@monash.edu
Wireless Network Engineer   M:  +61 403224484
eSolutions divisionP:  +61 3 9902 9092
Building 205  Monash University   3800   Australia

On 16/02/2013, at 8:55 AM, Johnson, Neil M 
neil-john...@uiowa.edumailto:neil-john...@uiowa.edu wrote:


We have been using eduroam as our primary SSID since the fall. We could put non 
@uiowa.eduhttp://uiowa.edu users in a separate VLAN that appears outside 
our border, but the acutual number of non iowa users on campus is so small that 
it wasn't deemed worth the effort to setup and maintain.


Implementing eduroam as our primary SSID happened to happily conicide with 
campus encoraging users to useuse...@uiowa.edumailto:use...@uiowa.edu as 
their default username in order for them to access cloud services being 
implemented in the near future.


-Neil

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] 
on behalf of Steve Bohrer 
[skboh...@simons-rock.edumailto:skboh...@simons-rock.edu]
Sent: Friday, February 15, 2013 3:13 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius
On Feb 15, 2013, at 3:24 PM, Linchuan Yang 
linchuan.y...@concordia.camailto:linchuan.y...@concordia.ca wrote:


Dear All

Do you use different  radius servers for your local SSID and eduroam SSID?

Currently, we are using the same radius servers for both of SSID, and we found 
that some of our local users login with eduroam SSID inside our campus.

We want to block our local users (both 
user...@concordia.camailto:user...@concordia.ca and user123)to login with 
eduroam SSID, could you please explain how to modify the proxy.conf or other 
configuration files on Freeradius (Linux version)?


We take a different approach, and use eduroam as our primary SSID 
campus-wide. That is, all of our local users always connect to eduroam, even 
when they are not roaming. Our radius server knows they are local because they 
have our realm in their username, and we can use their other local LDAP 
attributes to put them into the proper VLAN. Our radius server also puts 
non-Simon's Rock eduroam users in to an eduroam guest VLAN. (We have an open 
SSID with instructions for connecting to eduroam, and some special case guest 
VLANs, but no other SSID for our local users).

The benefit is that our users only ever need to do one wifi config, and eduroam 
just works when they travel to other federation campuses or to EDU 
conventions and such, because it is exactly the same wifi config that they use 
every day on campus.

Steve Bohrer
Network Admin, ITS
Bard College at Simon's Rock
413-528-7645
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found 
athttp://www.educause.edu/groups/.


---
Tristan Gulyas  
tristan.gul...@monash.edumailto:tristan.gul...@monash.edu
Wireless Network Engineer   M:  +61 403224484
eSolutions divisionP:  +61 3 9902 9092
Building 205  Monash University   3800   Australia

** Participation and subscription information for 

Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius

2013-02-18 Thread Johnson, Neil M
We currently don't do machine authentication as we would prefer to track down 
issues to an individual user, rather than workstation.

However we have had issues using Windows 7 SSO and are looking  into options. 
They are:

  1.  A hidden SSID for machines to authenticate to.
  2.  Customizing our RADIUS server (RADIATOR) to recognize machine logins 
(HOST/workstation-name) and authenticate them separately to the eduroam SSID.

I'd be curious as to what other sites are doing, as well.

Thanks.

-Neil

--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-john...@uiowa.edu


From: Osborne, Bruce W bosbo...@liberty.edumailto:bosbo...@liberty.edu
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Date: Monday, February 18, 2013 9:13 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius


I have a question for those of you that are using EDUROAM as your only SSID. 
How do you handle Windows machine authentication?

Our domain computers do 802.1X machine authentication when there is not a user 
logged in. This allows the computer to authenticate the user and get their 
profile. It is also useful for remote management when a user is not logged in.

Thanks, all

Bruce Osborne
Network Engineer
IT Network Services

(434) 592-4229

LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Tristan Gulyas [mailto:tristan.gul...@monash.edu]
Sent: Saturday, February 16, 2013 8:21 AM
Subject: Re: About the eduroam configuration on Freeradius

Hi,

We have been using eduroam as our primary SSID for a number of years; users can 
simply select the network and enter their username and password, accept the 
certificate and they're good to go.  One thing we've found to be successful for 
us is to accept both just the username and username@domain to enhance usability 
but the drawback is that we will have a few eduroam configured devices that 
won't work at other institutions.

We have RADIATOR perform a lookup via LDAP to determine the class of user 
(student, staff, high school user (as we have a high school as part of our 
University campus) and return the appropriate Tunnel Group ID for AAA override.

If there is no attribute in LDAP, we place them on the guest VLAN by default, 
however, the guest VLAN and student VLANs are identical in terms of access 
control.

Tristan
---
Tristan Gulyas  
tristan.gul...@monash.edumailto:tristan.gul...@monash.edu
Wireless Network Engineer   M:  +61 403224484
eSolutions divisionP:  +61 3 9902 9092
Building 205  Monash University   3800   Australia

On 16/02/2013, at 8:55 AM, Johnson, Neil M 
neil-john...@uiowa.edumailto:neil-john...@uiowa.edu wrote:


We have been using eduroam as our primary SSID since the fall. We could put non 
@uiowa.eduhttp://uiowa.edu users in a separate VLAN that appears outside 
our border, but the acutual number of non iowa users on campus is so small that 
it wasn't deemed worth the effort to setup and maintain.


Implementing eduroam as our primary SSID happened to happily conicide with 
campus encoraging users to useuse...@uiowa.edumailto:use...@uiowa.edu as 
their default username in order for them to access cloud services being 
implemented in the near future.


-Neil

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] 
on behalf of Steve Bohrer 
[skboh...@simons-rock.edumailto:skboh...@simons-rock.edu]
Sent: Friday, February 15, 2013 3:13 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius
On Feb 15, 2013, at 3:24 PM, Linchuan Yang 
linchuan.y...@concordia.camailto:linchuan.y...@concordia.ca wrote:


Dear All

Do you use different  radius servers for your local SSID and eduroam SSID?

Currently, we are using the same radius servers for both of SSID, and we found 
that some of our local users login with eduroam SSID inside our campus.

We want to block our local users (both 
user...@concordia.camailto:user...@concordia.ca and user123)to login with 
eduroam SSID, could you please explain how to modify the proxy.conf or other 
configuration files on Freeradius (Linux version)?


We take a different approach, and use eduroam as our primary SSID 
campus-wide. That is, all of our local users always connect to eduroam, even 
when they are not roaming. Our radius server knows they are local because they 
have our realm in their username, and we can use their other local LDAP 
attributes to put them into the proper VLAN. Our radius server also puts 
non-Simon's 

Prime Infrastructure 1.3

2013-02-18 Thread Andy Page
All,

Just a heads-up, Prime Infrastructure 1.3 was released today. This is the 
version that supports the 7.4 controller code.

Andy

--
Andy Page
Network Design Professional
University of Notre Dame
574.631.6592

Go Irish!


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.