Re: [WIRELESS-LAN] Annual Exercise in Frustration: Printers that do wireless 1x?

2015-02-15 Thread Tristan Gulyas
Hi all,

This particular issue in general (devices that don’t do enterprise 802.1X) is 
starting to cause is pain with residential customers (on-campus accommodation) 
and students wishing to use practically any device they bring on campus with 
our network.  We’re starting to see other Internet of Things devices that only 
talk WiFi (eg, washing machines, other smart connected devices).

I have made it very clear to our wireless vendor that we need a solution for 
this (per-device / per-group PSK would be perfect) as we do not wish to create 
a dozen SSIDs just for this purpose.

What are other organisations doing to tackle this?  MAC auth plus PSK is still 
not secure enough for our tastes.

Cheers,
Tristan


 
Tristan Gulyas
Senior Network Engineer (Wireless)
Network Operations
eSolutions | Monash University
738 Blackburn Road Clayton 3800
www.monash.edu http://www.monash.edu/ | tristan.gul...@monash.edu 
mailto:tristan.gul...@monash.edu
 



 On 13 Feb 2015, at 6:00 am, Lee H Badman lhbad...@syr.edu wrote:
 
 This is a good for a yearly laugh, so let me throw it out there:
  
 Has anyone found- and confirmed through actual use- any enterprise 
 WLAN-capable printers or print servers that work with 802.1x WLAN security?
  
 Thanks-
  
 Lee Badman
  
 Lee Badman
 Wireless/Network Architect
 ITS, Syracuse University
 315.443.3003
 (Blog: http://wirednot.wordpress.com http://wirednot.wordpress.com/) 
  
  
  
 ** Participation and subscription information for this EDUCAUSE 
 Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/ http://www.educause.edu/groups/.

 
**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] Annual Exercise in Frustration: Printers that do wireless 1x?

2015-02-15 Thread Hunter Fuller
MAC auth, PSK, and extremely restrictive network access (i.e., no access to
campus resources) here... Doesn't seem like there's much else to be done.
What else is there to key on...?

Definitely not an ideal situation...

-- 
Hunter Fuller
OIT

Sent from my phone.
On Feb 15, 2015 9:41 PM, Tristan Gulyas tristan.gul...@monash.edu wrote:

 Hi all,

 This particular issue in general (devices that don’t do enterprise 802.1X)
 is starting to cause is pain with residential customers (on-campus
 accommodation) and students wishing to use practically any device they
 bring on campus with our network.  We’re starting to see other Internet of
 Things devices that only talk WiFi (eg, washing machines, other smart
 connected devices).

 I have made it *very clear* to our wireless vendor that we need a
 solution for this (per-device / per-group PSK would be perfect) as we do
 not wish to create a dozen SSIDs just for this purpose.

 What are other organisations doing to tackle this?  MAC auth plus PSK is
 still not secure enough for our tastes.

 Cheers,
 Tristan



 *Tristan Gulyas*
 Senior Network Engineer (Wireless)
 Network Operations
 eSolutions | Monash University
 738 Blackburn Road Clayton 3800
 www.monash.edu | tristan.gul...@monash.edu





 On 13 Feb 2015, at 6:00 am, Lee H Badman lhbad...@syr.edu wrote:

 This is a good for a yearly laugh, so let me throw it out there:

 Has anyone found- and confirmed through actual use- any enterprise
 WLAN-capable printers or print servers that work with 802.1x WLAN security?

 Thanks-

 Lee Badman

 Lee Badman
 Wireless/Network Architect
 ITS, Syracuse University
 315.443.3003
 (Blog: *http://wirednot.wordpress.com* http://wirednot.wordpress.com/)



 ** Participation and subscription information for this EDUCAUSE
 Constituent Group discussion list can be found at
 http://www.educause.edu/groups/.



 ** Participation and subscription information for this EDUCAUSE
 Constituent Group discussion list can be found at
 http://www.educause.edu/groups/.



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.