Re: [WIRELESS-LAN] Anybody not using WPA2+AES for eduroam customers?

[Francisco J. Medina Jimenez]

Hi Tristan,

According to eduroam Compliance Statement:

B.3. eduroam SPs IEEE 802.11 wireless networks MUST support WPA2+AES, 
and MAY additionally support WPA/TKIP as a courtesy to users of legacy 
hardware. Exceptionally, an SP established before January 1, 2012, MAY 
support only WPA/TKIP but not longer than January 1, 2013


https://www.eduroam.org/wp-content/uploads/2016/05/eduroam_Compliance_Statement_v1_0.pdf

For example, eduroam Configuration Assistant Tool (CAT) don't support 
WPA/TKIP from that dates.


Regards.

El 10/01/2017 a las 6:29, Tristan Gulyas escribió:

Hi all,

We currently support WPA+TKIP for legacy clients as well as WPA2+AES
which is almost every device on the network.

We also include Windows profiles in our SOE to connect to eduroam using
WPA+TKIP should WPA2+AES not be supported.

Most of these configurations are legacy.

Are we at a stage where we can safely assume that every institution will
be doing WPA2+AES now, so we can do away with the others?

Cheers,
Tristan

--

*TRISTAN GULYAS*
Senior Network Engineer

*Infrastructure Services, eSolutions*
Monash University
738 Blackburn Road
Clayton 3168
Australia

T: +61 3 9902 9092
E: tristan.gul...@monash.edu 
monash.edu 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/discuss.



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Anybody not using WPA2+AES for eduroam customers?

[Tristan Gulyas]

Hi all,

We currently support WPA+TKIP for legacy clients as well as WPA2+AES which is 
almost every device on the network.

We also include Windows profiles in our SOE to connect to eduroam using 
WPA+TKIP should WPA2+AES not be supported.

Most of these configurations are legacy.

Are we at a stage where we can safely assume that every institution will be 
doing WPA2+AES now, so we can do away with the others?

Cheers,
Tristan
-- 
TRISTAN GULYAS
Senior Network Engineer

Infrastructure Services, eSolutions
Monash University
738 Blackburn Road
Clayton 3168
Australia

T: +61 3 9902 9092  
E: tristan.gul...@monash.edu
monash.edu 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Cloudpath ACL for Cisco

[William Doyle]

Good Day,

I'm configuring the ACL for a Cloudpath enrollment wlan on a Cisco WLC.

If someone had an current ACL they would be willing to share, it would 
be much appreciated.


I have a dated one, which I believe appeared on this list, but am hoping 
to get the most current.


Thank You,

Bill Doyle
International House
UC Berkeley

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.