RE: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Danny Eaton
Is anyone doing any of these for wired, using 802.1X?  

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan
Sent: Wednesday, June 24, 2015 3:22 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Network Authentication question

 

I went with the Extreme Netsight product at my last shop and found it to be
excellent.  I could assign policy to an end user pretty much on any criteria
I could think of.  I was hard pressed to find something I could not do.

 

The nice thing about Extreme is that it is a fully integrated system across
wired and wireless and you can apply the exact same policy to a user no
matter how or where they connect.  Naturally it works best if you have
Extreme for both wired and wireless but it is not necessary.

 

John

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barber, Matt
Sent: Wednesday, June 24, 2015 1:46 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [BULK] Re: [WIRELESS-LAN] Network Authentication question
Importance: Low

 

Hi Matthew,

 

We are currently deploying a new Aruba network with ClearPass after
evaluating both them and Extreme pretty heavily. ClearPass was one of the
major deciding factors in us ending up with Aruba. As Frank and Russ
mentioned, it is very full-featured. We are using the RADIUS functionality
for our main WPA2-Enterprise network and using their guest and registration
features for everything else. We are very impressed so far.

 

I would be happy to talk specifics if you are interested.

 

Take care,

 

Matt Barber '06

Network and Systems Manager

Morrisville State College

315-684-6053

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Williams, Matthew
Sent: Wednesday, June 24, 2015 10:44 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Network Authentication question

 

We're looking into a few RADIUS solutions and I was wondering if any of you
had any experience with the following products and what your thoughts are on
them:

 

Cisco ISE

Aruba ClearPass

Extreme NetSight

Cloudpath XPressConnect ES

 

Any input would be appreciated.  Thanks.

 

Respectfully, 

 

Matthew Williams

IT Manager, Wireless

Kent State University

Office: (330) 672-7246

Mobile: (330) 469-0445 

 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

!DSPAM:911,558b11734371431181996! 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Network Authentication question

2015-06-24 Thread Russ Leathe


smime.p7m
Description: S/MIME encrypted message


Network Authentication question

2015-06-24 Thread Williams, Matthew
We're looking into a few RADIUS solutions and I was wondering if any of you had 
any experience with the following products and what your thoughts are on them:

Cisco ISE
Aruba ClearPass
Extreme NetSight
Cloudpath XPressConnect ES

Any input would be appreciated.  Thanks.

Respectfully,

Matthew Williams
IT Manager, Wireless
Kent State University
Office: (330) 672-7246
Mobile: (330) 469-0445


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Frank Sweetser
We're in the early stages of doing Aruba ClearPass.  It's a very flexible 
RADIUS system at it's core, which means that a) it appears to be able to 
handle every use case we've thrown at it, including integrating with home-brew 
backend systems, and b) there's a lot of initial setup work to accommodate all 
of that flexibility.  Guest network access is also a very strong point, and is 
also where we're initially deploying it (More specifically, we're using it to 
handle multi-vendor guest wireless networks while we transition from Juniper 
to Aruba).  It also includes onboarding and MDM functionality, but we haven't 
looked into them yet.


Cloudpath is an excellent onboarding system - we've been using it for about 
three years now.  Their RADIUS side is fairly new, and has a pretty targeted 
use case - authenticating cert based users, and handling a MAC RADIUS style 
registration database for non 1x capable devices.  That might be good enough 
for you, but if you do anything fancy like require registration in an IPAM 
system, you're probably going to run into limitations in a hurry.


Feel free to let me know if you have any follow up questions, or I'd be happy 
to chat via phone.


Frank Sweetser fs at wpi.edu|  For every problem, there is a solution that
Manager of Network Operations   |  is simple, elegant, and wrong.
Worcester Polytechnic Institute |   - HL Mencken

On 06/24/2015 10:44 AM, Williams, Matthew wrote:

We’re looking into a few RADIUS solutions and I was wondering if any of you
had any experience with the following products and what your thoughts are on 
them:

Cisco ISE

Aruba ClearPass

Extreme NetSight

Cloudpath XPressConnect ES

Any input would be appreciated.  Thanks.

Respectfully,

Matthew Williams

IT Manager, Wireless

Kent State University

Office: (330) 672-7246

Mobile: (330) 469-0445

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Jason Cook
We are using freeradius and it works very well. It's linux and CLI based though 
so would recommend having a good solid base of those skills in the team that's 
supporting it. It's been reliable and flexible.

Another +1 for Cloudpath onboarding, we've been on XC for quite some time and 
are currently moving to ES. We won't be using their internal radius at this 
point but will look into it later. We mainly use PEAP for auth but have 
introduced EAP-TLS with Cloudpath, it's gone well and we expect to be going 
live with that soon

We don't run wired dot1x but did get a pilot up and running about 18 months ago 
with Cisco 3750 series switches. We had it all up and running with Windows, 
Apple  Linux devices able to auth. Over time we noticed some issues but with 
no project to head down this path it was all spare time work. As such it got 
dropped, we don't know where the issues were but the initial setup was easy so 
we are confident it would all be good providing we have the time to implement 
properly.

--
Jason Cook
The University of Adelaide, AUSTRALIA 5005
Ph: +61 8 8313 4800

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Danny Eaton
Sent: Thursday, 25 June 2015 5:56 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Network Authentication question

Is anyone doing any of these for wired, using 802.1X?

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan
Sent: Wednesday, June 24, 2015 3:22 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Network Authentication question

I went with the Extreme Netsight product at my last shop and found it to be 
excellent.  I could assign policy to an end user pretty much on any criteria I 
could think of.  I was hard pressed to find something I could not do.

The nice thing about Extreme is that it is a fully integrated system across 
wired and wireless and you can apply the exact same policy to a user no matter 
how or where they connect.  Naturally it works best if you have Extreme for 
both wired and wireless but it is not necessary.

John

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barber, Matt
Sent: Wednesday, June 24, 2015 1:46 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [BULK] Re: [WIRELESS-LAN] Network Authentication question
Importance: Low

Hi Matthew,

We are currently deploying a new Aruba network with ClearPass after evaluating 
both them and Extreme pretty heavily. ClearPass was one of the major deciding 
factors in us ending up with Aruba. As Frank and Russ mentioned, it is very 
full-featured. We are using the RADIUS functionality for our main 
WPA2-Enterprise network and using their guest and registration features for 
everything else. We are very impressed so far.

I would be happy to talk specifics if you are interested.

Take care,

Matt Barber '06
Network and Systems Manager
Morrisville State College
315-684-6053

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Williams, Matthew
Sent: Wednesday, June 24, 2015 10:44 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Network Authentication question

We're looking into a few RADIUS solutions and I was wondering if any of you had 
any experience with the following products and what your thoughts are on them:

Cisco ISE
Aruba ClearPass
Extreme NetSight
Cloudpath XPressConnect ES

Any input would be appreciated.  Thanks.

Respectfully,

Matthew Williams
IT Manager, Wireless
Kent State University
Office: (330) 672-7246
Mobile: (330) 469-0445

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
!DSPAM:911,558b11734371431181996!
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Jerry Bucklaew

On 06/24/2015 10:56 AM, Russ Leathe wrote:


Aruba clearpass allows us to recover loss/stolen devices if they are 
inrange of an ap.




We are just deploying clearpass and it indeed seems to be a very 
flexible system.
How exactly do you do the tracking/recovery?  I assume you need to have 
a interface to track stolen lost/stolen and then you set it up to report 
when seen?


*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Williams, 
Matthew

*Sent:* Wednesday, June 24, 2015 10:44 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* [WIRELESS-LAN] Network Authentication question

We’re looking into a few RADIUS solutions and I was wondering if any 
of you had any experience with the following products and what your 
thoughts are on them:


Cisco ISE

Aruba ClearPass

Extreme NetSight

Cloudpath XPressConnect ES

Any input would be appreciated.  Thanks.

Respectfully,

Matthew Williams

IT Manager, Wireless

Kent State University

Office: (330) 672-7246

Mobile: (330) 469-0445

** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.





**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Favourite Wifi Dongles

2015-06-24 Thread Jason Cook
Just putting out a question to see if anyone has preferences when it comes to 
USB dongles. We typically like to have a number available and they have helped 
out of few times over the years to deal with broken internal cards, 2.4ghz only 
cards and temporary setups etc. We've often purchased a couple of varieties, 
tested them and stocked up on our favourite. Considering things like  
performance, stability, included drivers in OS, supporting multiple OS's.

Our most recent was a few years ago now Edimax AC1200 (EW-7822UAC) but have 
also been pretty happy with Linksys.
The edimax performs pretty well and supports Windows, Mac and Linux.

But it's time to get a few more.


--
Jason Cook
Technology Services
The University of Adelaide, AUSTRALIA 5005
Ph: +61 8 8313 4800
JabberCall 
Mehttps://ts-plaza-guest-exp-e.voip.net.adelaide.edu.au:9443/call/jason.c...@adelaide.edu.au

browser-based video chat

e-mail: 
jason.c...@adelaide.edu.aumailto:jason.c...@adelaide.edu.aumailto:jason.c...@adelaide.edu.au%3cmailto:jason.c...@adelaide.edu.au

CRICOS Provider Number 00123M
---
This email message is intended only for the addressee(s) and contains 
information which may be confidential and/or copyright.  If you are not the 
intended recipient please do not read, save, forward, disclose, or copy the 
contents of this email. If this email has been sent to you in error, please 
notify the sender by reply email and delete this email and any copies or links 
to this email completely and immediately from your system.  No representation 
is made that this email is free of viruses.  Virus scanning is recommended and 
is the responsibility of the recipient.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Curtis K. Larsen
Plus 1 for Cloudpath.  Very Flexible, customizable, intuitive product.  You can 
run it on premise or in the cloud.  I've seen competing products with way too 
many bells and whistles but neglecting the basic features that everyone needs.

Curtis Larsen
University of Utah
Sr. Network Engineer


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Steven D. Veron 
[sve...@lamar.edu]
Sent: Wednesday, June 24, 2015 11:06 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Network Authentication question

I don't remember who said it to give them credit, but give me Cloudpath or give 
me death. So far the only issues have been device issues that no vendor can 
overcome.


Steven D Veron
Senior Network Analyst
Lamar University
Office- 409-880-2386
Cell- 409-351-5961
steven.ve...@lamar.edu





From: Frank Sweetser f...@wpi.edu
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Sent: Wednesday, June 24, 2015 9:56:03 AM
Subject: Re: [WIRELESS-LAN] Network Authentication question

We're in the early stages of doing Aruba ClearPass.  It's a very flexible
RADIUS system at it's core, which means that a) it appears to be able to
handle every use case we've thrown at it, including integrating with home-brew
backend systems, and b) there's a lot of initial setup work to accommodate all
of that flexibility.  Guest network access is also a very strong point, and is
also where we're initially deploying it (More specifically, we're using it to
handle multi-vendor guest wireless networks while we transition from Juniper
to Aruba).  It also includes onboarding and MDM functionality, but we haven't
looked into them yet.

Cloudpath is an excellent onboarding system - we've been using it for about
three years now.  Their RADIUS side is fairly new, and has a pretty targeted
use case - authenticating cert based users, and handling a MAC RADIUS style
registration database for non 1x capable devices.  That might be good enough
for you, but if you do anything fancy like require registration in an IPAM
system, you're probably going to run into limitations in a hurry.

Feel free to let me know if you have any follow up questions, or I'd be happy
to chat via phone.

Frank Sweetser fs at wpi.edu|  For every problem, there is a solution that
Manager of Network Operations   |  is simple, elegant, and wrong.
Worcester Polytechnic Institute |   - HL Mencken

On 06/24/2015 10:44 AM, Williams, Matthew wrote:
 We’re looking into a few RADIUS solutions and I was wondering if any of you
 had any experience with the following products and what your thoughts are on 
 them:

 Cisco ISE

 Aruba ClearPass

 Extreme NetSight

 Cloudpath XPressConnect ES

 Any input would be appreciated.  Thanks.

 Respectfully,

 Matthew Williams

 IT Manager, Wireless

 Kent State University

 Office: (330) 672-7246

 Mobile: (330) 469-0445

 ** Participation and subscription information for this EDUCAUSE
 Constituent Group discussion list can be found at
 http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


CONFIDENTIALITY: Any information contained in this e-mail
(including attachments) is the property of The State of Texas and
unauthorized disclosure or use is prohibited. Sending, receiving or
forwarding of confidential, proprietary and privileged information is
prohibited under Lamar Policy. If you received this e-mail in error,
please notify the sender and delete this e-mail from your system.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Re: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Steven D. Veron
I don't remember who said it to give them credit, but give me Cloudpath or give 
me death. So far the only issues have been device issues that no vendor can 
overcome. 



Steven D Veron 
Senior Network Analyst 
Lamar University 
Office- 409-880-2386 
Cell- 409-351-5961 
steven.ve...@lamar.edu 




- Original Message -

From: Frank Sweetser f...@wpi.edu 
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Sent: Wednesday, June 24, 2015 9:56:03 AM 
Subject: Re: [WIRELESS-LAN] Network Authentication question 

We're in the early stages of doing Aruba ClearPass. It's a very flexible 
RADIUS system at it's core, which means that a) it appears to be able to 
handle every use case we've thrown at it, including integrating with home-brew 
backend systems, and b) there's a lot of initial setup work to accommodate all 
of that flexibility. Guest network access is also a very strong point, and is 
also where we're initially deploying it (More specifically, we're using it to 
handle multi-vendor guest wireless networks while we transition from Juniper 
to Aruba). It also includes onboarding and MDM functionality, but we haven't 
looked into them yet. 

Cloudpath is an excellent onboarding system - we've been using it for about 
three years now. Their RADIUS side is fairly new, and has a pretty targeted 
use case - authenticating cert based users, and handling a MAC RADIUS style 
registration database for non 1x capable devices. That might be good enough 
for you, but if you do anything fancy like require registration in an IPAM 
system, you're probably going to run into limitations in a hurry. 

Feel free to let me know if you have any follow up questions, or I'd be happy 
to chat via phone. 

Frank Sweetser fs at wpi.edu | For every problem, there is a solution that 
Manager of Network Operations | is simple, elegant, and wrong. 
Worcester Polytechnic Institute | - HL Mencken 

On 06/24/2015 10:44 AM, Williams, Matthew wrote: 
 We’re looking into a few RADIUS solutions and I was wondering if any of you 
 had any experience with the following products and what your thoughts are on 
 them: 
 
 Cisco ISE 
 
 Aruba ClearPass 
 
 Extreme NetSight 
 
 Cloudpath XPressConnect ES 
 
 Any input would be appreciated. Thanks. 
 
 Respectfully, 
 
 Matthew Williams 
 
 IT Manager, Wireless 
 
 Kent State University 
 
 Office: (330) 672-7246 
 
 Mobile: (330) 469-0445 
 
 ** Participation and subscription information for this EDUCAUSE 
 Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/. 
 

** 
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/. 





CONFIDENTIALITY: Any information contained in this e-mail 
(including attachments) is the property of The State of Texas and 
unauthorized disclosure or use is prohibited. Sending, receiving or 
forwarding of confidential, proprietary and privileged information is 
prohibited under Lamar Policy. If you received this e-mail in error, 
please notify the sender and delete this e-mail from your system.


RE: Network Authentication question

2015-06-24 Thread Barber, Matt
Hi Matthew,

We are currently deploying a new Aruba network with ClearPass after evaluating 
both them and Extreme pretty heavily. ClearPass was one of the major deciding 
factors in us ending up with Aruba. As Frank and Russ mentioned, it is very 
full-featured. We are using the RADIUS functionality for our main 
WPA2-Enterprise network and using their guest and registration features for 
everything else. We are very impressed so far.

I would be happy to talk specifics if you are interested.

Take care,

Matt Barber '06
Network and Systems Manager
Morrisville State College
315-684-6053

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Williams, Matthew
Sent: Wednesday, June 24, 2015 10:44 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Network Authentication question

We're looking into a few RADIUS solutions and I was wondering if any of you had 
any experience with the following products and what your thoughts are on them:

Cisco ISE
Aruba ClearPass
Extreme NetSight
Cloudpath XPressConnect ES

Any input would be appreciated.  Thanks.

Respectfully,

Matthew Williams
IT Manager, Wireless
Kent State University
Office: (330) 672-7246
Mobile: (330) 469-0445

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Network Authentication question

2015-06-24 Thread Lee H Badman
On that same point (also a Cloudpath customer), as I look at ClearPass and ISE 
onboarders, I find they don't go far enough- can't check firewalls, disable 
IPv6, etc. If the vendors put a little more development in to their own 
onboarders, they'd give Cloudpath a run for their money.

Lee Badman
Wireless/Network Architect
ITS, Syracuse University
315.443.3003

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen
Sent: Wednesday, June 24, 2015 2:15 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Network Authentication question

Plus 1 for Cloudpath.  Very Flexible, customizable, intuitive product.  You can 
run it on premise or in the cloud.  I've seen competing products with way too 
many bells and whistles but neglecting the basic features that everyone needs.

Curtis Larsen
University of Utah
Sr. Network Engineer

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Steven D. Veron 
[sve...@lamar.edu]
Sent: Wednesday, June 24, 2015 11:06 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Network Authentication question
I don't remember who said it to give them credit, but give me Cloudpath or give 
me death. So far the only issues have been device issues that no vendor can 
overcome.

Steven D Veron
Senior Network Analyst
Lamar University
Office- 409-880-2386
Cell- 409-351-5961
steven.ve...@lamar.edumailto:steven.ve...@lamar.edu





From: Frank Sweetser f...@wpi.edumailto:f...@wpi.edu
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Sent: Wednesday, June 24, 2015 9:56:03 AM
Subject: Re: [WIRELESS-LAN] Network Authentication question

We're in the early stages of doing Aruba ClearPass.  It's a very flexible
RADIUS system at it's core, which means that a) it appears to be able to
handle every use case we've thrown at it, including integrating with home-brew
backend systems, and b) there's a lot of initial setup work to accommodate all
of that flexibility.  Guest network access is also a very strong point, and is
also where we're initially deploying it (More specifically, we're using it to
handle multi-vendor guest wireless networks while we transition from Juniper
to Aruba).  It also includes onboarding and MDM functionality, but we haven't
looked into them yet.

Cloudpath is an excellent onboarding system - we've been using it for about
three years now.  Their RADIUS side is fairly new, and has a pretty targeted
use case - authenticating cert based users, and handling a MAC RADIUS style
registration database for non 1x capable devices.  That might be good enough
for you, but if you do anything fancy like require registration in an IPAM
system, you're probably going to run into limitations in a hurry.

Feel free to let me know if you have any follow up questions, or I'd be happy
to chat via phone.

Frank Sweetser fs at wpi.edu|  For every problem, there is a solution that
Manager of Network Operations   |  is simple, elegant, and wrong.
Worcester Polytechnic Institute |   - HL Mencken

On 06/24/2015 10:44 AM, Williams, Matthew wrote:
 We're looking into a few RADIUS solutions and I was wondering if any of you
 had any experience with the following products and what your thoughts are on 
 them:

 Cisco ISE

 Aruba ClearPass

 Extreme NetSight

 Cloudpath XPressConnect ES

 Any input would be appreciated.  Thanks.

 Respectfully,

 Matthew Williams

 IT Manager, Wireless

 Kent State University

 Office: (330) 672-7246

 Mobile: (330) 469-0445

 ** Participation and subscription information for this EDUCAUSE
 Constituent Group discussion list can be found at
 http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


CONFIDENTIALITY: Any information contained in this e-mail
(including attachments) is the property of The State of Texas and
unauthorized disclosure or use is prohibited. Sending, receiving or
forwarding of confidential, proprietary and privileged information is
prohibited under Lamar Policy. If you received this e-mail in error,
please notify the sender and delete this e-mail from your system.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Network Authentication question

2015-06-24 Thread John Kaftan
I went with the Extreme Netsight product at my last shop and found it to be 
excellent.  I could assign policy to an end user pretty much on any criteria I 
could think of.  I was hard pressed to find something I could not do.

The nice thing about Extreme is that it is a fully integrated system across 
wired and wireless and you can apply the exact same policy to a user no matter 
how or where they connect.  Naturally it works best if you have Extreme for 
both wired and wireless but it is not necessary.

John

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barber, Matt
Sent: Wednesday, June 24, 2015 1:46 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [BULK] Re: [WIRELESS-LAN] Network Authentication question
Importance: Low

Hi Matthew,

We are currently deploying a new Aruba network with ClearPass after evaluating 
both them and Extreme pretty heavily. ClearPass was one of the major deciding 
factors in us ending up with Aruba. As Frank and Russ mentioned, it is very 
full-featured. We are using the RADIUS functionality for our main 
WPA2-Enterprise network and using their guest and registration features for 
everything else. We are very impressed so far.

I would be happy to talk specifics if you are interested.

Take care,

Matt Barber '06
Network and Systems Manager
Morrisville State College
315-684-6053

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Williams, Matthew
Sent: Wednesday, June 24, 2015 10:44 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Network Authentication question

We're looking into a few RADIUS solutions and I was wondering if any of you had 
any experience with the following products and what your thoughts are on them:

Cisco ISE
Aruba ClearPass
Extreme NetSight
Cloudpath XPressConnect ES

Any input would be appreciated.  Thanks.

Respectfully,

Matthew Williams
IT Manager, Wireless
Kent State University
Office: (330) 672-7246
Mobile: (330) 469-0445

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.