RE: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13)

[Rob Harris]

For those of you who have experienced this, what was your user load and how 
were your clusters operating (balancing, active/standby) ?

I wonder if there’s a threshold..

Thx!

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Smith, Nayef
Sent: Thursday, September 2, 2021 10:20 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)




"I’m also noticing that there are much fewer clients on this controller, and 
that ratio doesn’t seem to be improving."

To this point, the action we took that seemed to help the most was adjusting 
our active client load balancing threshold.  We dropped it significantly to 
force clients to balance across controllers.  Once we got below ~5000 active 
clients per controller, we stopped seeing the mass client connection issues.

We still have a controller that hasn't taken significant load, but now that 
we've been running without major issues for the past few days, we're reluctant 
to touch the setting again.


Nayef Z. Smith | Network Services | Voice: 404-727-6019


[cid:image001.png@01D79FE9.A97E6BF0]


From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Davis, Jonathan Alan mailto:jonath...@unc.edu>>
Sent: Thursday, September 2, 2021 9:27 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

Lee, don’t you bring your bad Cisco-juju to this conversation! :-)

Now that Lee has been properly handled, this is probably a great opportunity to 
say ‘hello’ to the greater list.


Hello!

Last night, we (UNC) restarted the controller used to test the firewall policy. 
Despite Aruba’s advisory, we’ve been led to believe that restarting STM may not 
be enough, and restarting the whole controller may be required to resolve high 
STM CPU utilization.

This morning we are keeping a close eye on that controller. While STM is 
surging well past 100%, it seems to be averaging much closer to 95%.

However…
We also only have about 7,000 users connected across the cluster. It will be 
interesting to see what happens as the day progresses and students wake up and 
migrate from the ResNET cluster to the Campus cluster.
I’m also noticing that there are much fewer clients on this controller, and 
that ratio doesn’t seem to be improving.

I’ll update as we progress through this.


JD

--

Jonathan Davis

Wireless Architect

The University of North Carolina at Chapel Hill

jonath...@unc.edu<mailto:jonath...@unc.edu>

+1 336 279 3355 (Mobile)


From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Lee H Badman mailto:lhbad...@syr.edu>>
Sent: Thursday, September 2, 2021 9:06:33 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

But you tested in your lab, right? I love that one… put new code on a couple of 
APs, or even a few dozen. That’s supposed to somehow indicate what will happen 
at bigger load… and also maybe implies the vendor didn’t do their own “similar 
lab testing”…

“You should have tested before upgrading the whole environment…” how do you 
REALLY do that? And should you really have to? Just pondering the general state 
of things.

> On Sep 2, 2021, at 08:59, Enfield, Chuck 
> mailto:cae...@psu.edu>> wrote:
>
> That's been my experience for years.  The network works great when there are 
> no students around.  My working theory is that students emit RF interference, 
> but research ethics won’t let me run the tests, so we'll never know for sure.
>
> -Original Message-
> From: The EDUCAUSE Wireless Issues Community Group Listserv 
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
>  On Behalf Of Patrick McEvilly
> Sent: Thursday, September 2, 2021 8:56 AM
> To: 
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
> any issues in the fall with large classrooms and delayed connection times 
> (Aruba 8.5.0.13)
>
> Speaking from experience, I would be very concerned.  We had no issues until 
> students returned and we went downhill from there.
>
>
> 

RE: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing any issues in the fall with large classrooms and delayed connection times (Aruba 8.5.0.13)

[Rob Harris]

Has anyone seen any details regarding what they consider "Large" environments? 
We upgraded during the break, but both before and after versions are affected. 
We didn't notice this happening before, should we be concerned now?

The "dropped" is 0 and the stm cpu usage is in single digits, but client count 
is really low (they come back this weekend as well), could we be in the clear?

(asked the SE team and opened a tac call, same questions to them)

thx

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jason Healy
Sent: Thursday, September 2, 2021 8:45 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Anyone else seeing 
any issues in the fall with large classrooms and delayed connection times 
(Aruba 8.5.0.13)

CAUTION: This email originated from outside The Culinary Institute of America. 
Do not click links or open attachments unless you recognize the sender and know 
the content is safe.

FWIW, Aruba just posted an advisory regarding this issue:

Aruba Support Advisory ARUBA-SA-20210901-PLVL04, "Wi-Fi Client Connectivity 
Failures in Large Client Environments"

Good luck to those of you hit by this. My students start coming back this 
weekend so I'll be watching this closely!

Jason
**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunitydata=04%7C01%7CRobert.Harris%40CULINARY.EDU%7C9624098759e143958e1708d96e0f8742%7C91b9485d8b6d4e2da3caf432e56721bd%7C0%7C0%7C637661835282336222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=%2Bram23JxP8FS6%2BUruT13pfiX%2F5z8mYsT5yywvQeWTTo%3Dreserved=0

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Aruba 8.7 issues

[Rob Harris]

The "conservative" branch is considered stable for everyone. We don't go beyond 
conservative in production unless there's a really compelling reason to.

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Tim Tyler
Sent: Thursday, May 20, 2021 9:37 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Aruba 8.7 issues

James,
  Does Aruba state what is the last stable version?  I am seriously wondering 
if going backwards is an option because I am currently seeing some issues as 
well, but I just upgraded a little over a week ago to 8.7.1.3.  We use 325's 
and 225's predominately.  I haven't opened a ticket yet.  I was hoping to get 
through the semester first and then address it.  I wonder I others are stable 
on the latest Aruba version?
 Tim

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of James Andrewartha
Sent: Tuesday, May 18, 2021 11:40 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Aruba 8.7 issues

On 19/5/21 5:07 am, Johnson, Christopher wrote:
> So how's the ArubaOS 8.7 code train treating everyone these days?
> We're looking at doing some maintenance here shortly and moving from
> 8.5.0.11 to 8.6 code train for some mini OS enhancements - and looking 
> at a couple AP-575 APs (which of course requires 8.7 minimum) - from 
> this thread I'm getting a strong "Do Not Engage" vibe. But interested 
> in everyone's thoughts given the additional few months that have 
> passed since then?

We run mostly 515s (~150) with a ~10 503Hs (which are the reason we went from 
8.5.0.11 to 8.7.1.1, now on 8.7.1.3). Since upgrading there's multiple AP 
crashes per day on both 515 and 503H platforms. There's not a common crash 
signature, but reading between the lines I think there's some sort of memory 
leak that is affecting them. TAC have said they have had to go to Broadcom for 
a fix. Honestly it's not actually too bad since they reboot and come back into 
service automatically. But I still wouldn't recommend it if you have either 
model.

Also on 8.7.1.1 I had a weird problem with the 515s where they would randomly 
start getting 50% packet loss, which would clear after a reboot. I haven't seen 
that since going to 8.7.1.3 40 days ago so I think it's fixed.
This one was more of a problem since clients would try to connect and fail and 
not try another AP, so it actually caused ongoing outages.

We also have a 375 and 377 but they've been fine.

Thanks,

--
James Andrewartha
Network & Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunitydata=04%7C01%7CRobert.Harris%40CULINARY.EDU%7Ce5b7bf5d1d62433f38fd08d91b94654f%7C91b9485d8b6d4e2da3caf432e56721bd%7C0%7C0%7C637571146437877600%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=8KAYrcvzPrK3vYTrs23SBjCuXxTXDUYRrjSmiT01mBQ%3Dreserved=0

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunitydata=04%7C01%7CRobert.Harris%40CULINARY.EDU%7Ce5b7bf5d1d62433f38fd08d91b94654f%7C91b9485d8b6d4e2da3caf432e56721bd%7C0%7C0%7C637571146437882581%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=FAcuaBHmraK%2F3N2fPaOuwJFgG6kfZpPIyoZMLZ1sLPg%3Dreserved=0

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Aruba User Experience Insight (UXI)

[Rob Harris]

We have remote sites that don't have full, dedicated IT staff, so these are 
very useful for basic "it's up and running" and "these sites / services are 
reachable" verification.

The tests are flexible and the support team is very responsive.


[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Martin MacLeod-Brown
Sent: Friday, April 23, 2021 3:50 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Aruba User Experience Insight (UXI)

Hi Everyone

Im reaching out to the wider community to see if anyone is using any Aruba UXI 
sensors to monitor their users Wi-Fi experience?
If you are running them...

How useful are you finding them

What are you testing?

How flexible are their tests, I could test the availability of core teaching 
sites, but can I test our sites that require authentication? Im thinking 
particularly O365 services

Any other opinions would be very useful if you have any

Thanks

Martin




**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] protecting AP's in a gym?

[Rob Harris]

There’s a company called oberon https://oberoninc.com/ that makes a variety of 
enclosure styles, very high quality and reasonably priced. They work with the 
vendors so the hardware doesn’t interfere (or does as little as possible).. We 
use them and are very happy with them..

[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Tim Tyler
Sent: Thursday, January 28, 2021 11:21 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] protecting AP's in a gym?

Wireless managers,
  We have some Aruba 325 AP’s in a gym and I am wondering what some of you use 
to protect them from physical damage such as a softball ball, etc?  Do you use 
some sort of a cage?  If so what?  If it uses metal, does it interfere with 
your signal strength?



Tim Tyler
Network Engineer
Beloit College


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Wireless Segmentation and NAC

[Rob Harris]

We're controller based, but we also use central for small sites, either would 
be a good option. Also, arubaOS10 merges them and would address these issues 
talk to your rep if it's something you would be interested in.

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu<http://www.ciachef.edu/>
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Enfield, Chuck
Sent: Friday, January 22, 2021 11:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC

Just curious, but for the respondents recommending Aruba, would that be the 
controller-based flavor or the Instant/Central flavor?  We have over 80K 
simultaneous clients in the normal times (I think.  The normal times seem so 
very long ago.) so we still need controllers for traffic aggregation, but if my 
school was the size of Moody I wouldn't want to manage controllers.  Is Instant 
a good option for a network that size?

Chuck

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Sneed, Billy (Staff)
Sent: Friday, January 22, 2021 11:11 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC

Sounds like a fun project!
Agreed that Aruba and ClearPass are solid. They're both working well for us and 
have for a long time.

If I were to investigate a new system for wireless service and network access 
control, I'd take a very thorough look at Mist.
https://www.juniper.net/us/en/solutions/wired-wireless-access/<https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.juniper.net%2Fus%2Fen%2Fsolutions%2Fwired-wireless-access%2F=04%7C01%7Ccae104%40PSU.EDU%7C271f698d464c45eac16808d8bef1acd3%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637469292487787155%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=2X%2FjiWVSoiswiYrZozzERRmFXXW12FGdMYWbkGRcr8E%3D=0>

Regards,
Billy

--
Billy Sneed
Enterprise Architect
Information Technology Services
Middlebury College
wsn...@middlebury.edu<mailto:wsn...@middlebury.edu>
802.443.5769

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Rob Harris 
mailto:robert.har...@culinary.edu>>
Sent: Friday, January 22, 2021 10:12
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC

This isn't a very deep answer, but aruba with clearpass should do everything 
you're asking about.


Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ciachef.edu%2Fdata=04%7C01%7Cwsneed%40MIDDLEBURY.EDU%7Cfae82d67e4c2447ae16708d8bee82f58%7Ca1bb0a191576421dbe93b3a7d4b6dcaa%7C1%7C0%7C637469251726447721%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000sdata=DdlBMNqSVNLYRgiE2Wi9ba%2FS0N5tEDj4zrjIRoGr1YU%3Dreserved=0<https://nam10.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ciachef.edu%2F=04%7C01%7Ccae104%40PSU.EDU%7C271f698d464c45eac16808d8bef1acd3%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637469292487787155%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=cc0Rd%2FcJYgwdVd2ZZg4ZWsHxhJZLgq5%2BPgEJrR6nWqA%3D=0>
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Joseph Runkles
Sent: Friday, January 22, 2021 9:36 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] Wireless Segmentation and NAC

Hi,

We are in the middle of conversations with vendors for a wireless overhaul as a 
relatively small school (we will end up with 1000-1200 AP's).  We are moving 
away from Cisco Aironet and currently talking with Ruckus, Extreme(aerohive), 
Juniper(Mist) and Aruba.  To further complicate things we are also going to 
replace our NAC at the same time (currently using FortiNAC/Bradford) and have 
been looking at XMC, A3, ClearPass, Cloudpath.

As we consider a re-design of the network I would love to ask some questions 
and maybe even pick some peoples brains offline.

*   What are you currently doing for network segmentation for wireless?
o  

RE: [WIRELESS-LAN] Wireless Segmentation and NAC

[Rob Harris]

This isn't a very deep answer, but aruba with clearpass should do everything 
you're asking about.


Robert Harris
Manager – Telecom, Networks, & AV Services 
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu 
Food is Life
Create and Savor Yours.™
 
Please consider the environment before printing this e-mail.

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Joseph Runkles
Sent: Friday, January 22, 2021 9:36 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless Segmentation and NAC

Hi,

We are in the middle of conversations with vendors for a wireless overhaul as a 
relatively small school (we will end up with 1000-1200 AP’s).  We are moving 
away from Cisco Aironet and currently talking with Ruckus, Extreme(aerohive), 
Juniper(Mist) and Aruba.  To further complicate things we are also going to 
replace our NAC at the same time (currently using FortiNAC/Bradford) and have 
been looking at XMC, A3, ClearPass, Cloudpath. 

As we consider a re-design of the network I would love to ask some questions 
and maybe even pick some peoples brains offline. 

•   What are you currently doing for network segmentation for wireless?  
o   Separate vlans for staff/faculty/students/iot/gaming/guest?  Flat 
networks for each or divided up by buildings?
o   Do you terminate these vlans on the your core or distribution routers 
with ACLs in between or back on your firewalls with more granular rulesets?
o   Do you allow Byod devices by either staff or students on your 
admin/production network? 
o   Do you do any posture checks (Antivirus, OS, Patches) on devices (byod 
or domain joined) before dropping them on the network.  

•   AAA (pardon my ignorance) 
o   What are you doing for IoT/gaming devices?  PPSK? Mac auth? 
o   Are you using RADIUS?  Your own server or the vendors controller/cloud? 
Is your RADIUS providing more than Authentication?  Do you pass vlan info or 
other attributes from RADIUS?
o   Are you using AD groups or attributes to delineate 
Students/staff/faculty/Part time student employee/ect…?  Passing that along to 
your NAC or Controller to apply an access profile for that particular user?

I realize that I am unloading a bunch of questions, and there are more.  
However, I would love to see or hear what other people are doing in production. 
 If things are meeting your needs, what would you change if you could do a 
re-design.  Just trying to see things from a different perspective and consider 
alternate possibilities as we work through this re-design.   If anyone has some 
time, I would love to connect and chat for a few minutes about these questions 
and your wireless environment. 

Thanks for reading.

Joey



 

Joseph Runkles
Network Engineer | Moody Bible Institute
(312) 329-4142

820 N. LaSalle Blvd., Chicago, IL 60610
Moodybible.org

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

[Rob Harris]

We went from 8.5.0.9 to .11 over the holiday, no issues so far.

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Johnson, Christopher
Sent: Thursday, December 17, 2020 3:50 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

We're considering doing some pre-emptive maintenance before winter-break ends 
to resolve a couple issues, and was curious if anyone is running ArubaOS 
8.5.0.11 or 8.6.0.6 (200/220 and 270 Series APs) and what their experiences 
have been?
Christopher Johnson
Wireless Network Engineer
Office of Technology Solutions | Illinois State University
(309) 438-8444

Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook and 
Twitter


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass

[Rob Harris]

This is the way you want to do it, each user can only see things registered to 
them. You’ll need clearpass guest for this.

Once it’s up and running, people love it, and it’s easy to manage. We’ve even 
set up a highly restricted account for student helpdesk to be able to update 
device fingerprints to help out, but that’s all they can see or do.

Clearpass is an amazing , flexible platform. You won’t regret going with it.


[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Michael Davis
Sent: Wednesday, March 4, 2020 10:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass

If you setup your SSIDs not to allow client-to-client communication and pass
all mDNS,etc. traffic through CPPM, then the users can register devices and
only those they designate to share to (clients, APs, ap-groups, etc.) can see
the device.

Our primary SSID (eduroam) has a username@domain that users can share
mDNS devices to and any authenticated devices on eduroam can access
the mDNS device.

On 3/4/20 10:19 AM, Craig D Rice wrote:
We are an Aruba shop and are evaluating AirGroup + ClearPass to provide 
students a more home-like experience in their residence halls. That is, we 
would like students to be able to register and see only their registered 
devices.

If a user registers a device in ClearPass, is that device visible to 
non-registered devices (or devices registered to another user) -- even if the 
devices are associated with the same AP?

We have received conflicting answers from our Aruba SEs, account exec, and TAC, 
so we are hoping to learn how to limit device visibility from others who are 
using ClearPass.

Thanks for your advice!
Craig
--

Craig D. Rice
Director of Enterprise Infrastructure | IT
[St. Olaf College]
Office: +1-507-786-3631
1510 St. Olaf Avenue Northfield, MN 55057-1097  USA
stolaf.edu



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community




--

 Mike Davis

 IT - University of Delaware  - 302.831.8756

 Newark, DE  19716 Email da...@udel.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Who has transitioned away from Aruba, and why?

[Rob Harris]

This was a very active thread that really got a lot of attention. To the OP and 
main contributors, how is everything now? Anyone willing to drop an update?

(We're still happy with our 315s, we're running 8.5.0.5 and it's basically 
stable. Any issues we encountered they were very quick to help us resolve)..

Thanks!

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Turner, Ryan H
Sent: Thursday, January 9, 2020 11:16 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

All:

We've been an Aruba shop for a very long time and have around 10,000 access 
points.  While every relationship with vendors have their ups and downs, my 
frustration with the Aruba is finally peaking to the point that I am 
considering making the enormous move to choose a different vendor.  The biggest 
reason is with the 8.X code train, and bugs that we just don't consider 
appropriate to use in production.  It has been one thing after the other, and 
my extremely talented and qualified Network Architect (Keith Miller) might as 
well be on the Aruba payroll as much work as he has been doing for them to 
solve bugs.  Just when we think we have one fixed, another one crops up.

The big one as of late is with 515s running 8.5 code train.  We have them 
deployed in one of our IT buildings.  Periodically, people that are connected 
to these APs in the 5G band will stop working.  To the user, they are browsing 
a site, then it becomes unresponsive.  If they are on their phone, they will 
disconnect from wifi and everything works fine on cell.  Nothing makes an 
802.11 network look worse than switching to cell and seeing a problem resolve.  
Normally, if the users disconnect then reconnect, their problems will go ahead 
(but I think they end up connecting in the 2.4G band).   We've been working on 
this problem with them for months.  It always seems as though we have to prove 
there is a real issue.  I'm fed up with it.  We are a sophisticated shop.  If 
we have a problem, 9 times out of 10 when we bring it to the vendor, it is a 
real problem.  I'm extra frustrated that due to issues we've seen in ResNet on 
the 8.3X train that we don't want to abandon our 6 train on main campus.  To 
Aruba's credit, we purchased around 1,000 515s last year (I think around 
February).  When they could not get good code to support them on, Aruba bought 
back half of them.  I asked for them to buy back half because I thought for 
sure with the 315s that we would have instead, the issues would be fixed by the 
time the 315s ran out.  Not looking to be the case.

So, with that rant over, we are seriously considering looking to move away from 
Aruba (unless they get their act together really soon).  There are other bugs 
I'm not even mentioning here.  For those of you that made the switch to another 
vendor, I would be curious how long the honeymoon lasted, what were your 
motivators, and were you happy with the overall results?  Of course, this is a 
great opportunity to plug your vendor.  As I see it, we have 3 choices  
Something from Cisco (we had Cisco long ago and dumped them for bugs), 
something from Extreme (we are a huge Extreme shop so this makes sense), 
something from Juniper (Mist).

Thanks,
Ryan Turner
Head of Networking
The University of North Carolina at Chapel Hill
+1 919 445 0113 Office
+1 919 274 7926 Mobile
r...@unc.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Implementing registration based Guest Wi-Fi

[Rob Harris]

May I ask what your goals are in this change?

(to echo the other responses, Aruba Clearpass is a great choice for this, we 
use it and it does everything we need it to).


[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Mangaiah Chowdary Garikapati
Sent: Monday, February 24, 2020 11:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

Hello,

At NIU, we are currently undergoing a project to move away from open access 
Guest Wireless to a registration based Guest Wireless using Cisco ISE and we 
are having following issues and any help or suggestions on these are much 
appreciated.


  1.  In the new system, devices are not able to see each other for casting 
purposes, is there any option we need to select to enable various casting and 
mirroring capabilities in the new registration based Guest Wireless?
  2.  We are also using 'Mydevices' portal to add devices which doesn't have 
capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this 
is looking like a hit and miss where some devices connect immediately and some 
take at least an hour to two to be recognized and allowed to connect to the AP. 
Any suggestions why this could be happening?

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

[Rob Harris]

What flavor of AP are you running? What are you doing for POE?

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jason Healy
Sent: Friday, January 10, 2020 2:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

I glanced away from my email and suddenly there are 50+ messages in this 
thread!  Late to the party but...

We're an Aruba shop now, having just gone through a vendor cage match last year 
for a full system replacement and installing over the summer.  While there have 
been some frustrations on the backend, they fortunately are not affecting the 
end user experience.

If I knew then what I did now I might have made a different choice.  However, I 
also believe that if I had selected another vendor I might have had a different 
set of issues that weren't foreseen during testing.  I've been through this so 
many vendors (not just Aruba) that I just don't have faith that a good 
experience can ever be counted on.

To give you an idea, here are the vendors that we were considering.  All came 
with positive recommendations from other schools, and all claimed that they 
were the best thing ever:

 - Meraki
 - Mist
 - Aerohive
 - Alcatel-Lucent
 - Ruckus
 - Aruba

Of those above, 2 didn't support IPv6-native deployment (e.g., IPv4 was 
required to install and manage the platform, which violated one of our 
requirements), an additional 2 didn't support IPv6 *at all* (as in, couldn't 
filter or ID client v6 traffic) and were disqualified.  2 had serious 
performance issues (throughput rates below 50% of other vendors).  Several had 
severe degradation using 802.3af PoE (we're not upgraded to 802.3at in most of 
our buildings).  In the end, all "cloud" solutions were disqualified due to 
cost, performance, or features.  If we hadn't tested vigorously I'd probably be 
here complaining about one of those vendors instead of Aruba because we might 
have gone with them.

Anyone who is curious on details for a particular vendor are welcome to email 
me off-list.  I got some great insights from people on this list when we were 
doing our evaluation and I'm happy to pay that forward.

Our specific Aruba issues were:

IPv6 deployment turned out not to work when clustered (we had only tested on a 
single controller), and GRE tunnels from the AP to the controller over v6 
caused a severe performance degradation (MTU would drop to 200 bytes in some 
instances).

We also have issues with their virtual controller not being compatible with our 
KVM environment.  I fully recognize that this may be a quirk in our 
environment, but TAC's final response was essentially "if you aren't running 
the EXACT flavor of linux (centos), kernel version, KVM version, and base 
hardware specs, we won't help you".  That's a lot different than the sales 
promise of "of course it will work on your KVM environment".

HP is "working with us" and I've finally gotten a little sympathy from the 
account manager, but other than that I'm not aware of any steps to resolve 
these issues (for example, they won't open an official case to track the IPv6 
problems).  We're a very small shop, so I feel like we don't have much clout, 
but at the same time it sounds like even the big schools have problems.

Jason
**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Who has transitioned away from Aruba, and why?

[Rob Harris]

I've been an Aruba customer for a long time now and while I'm still happy, I 
see what you're saying. In my opinion, a lot of issues started here;

https://community.arubanetworks.com/t5/Wireless-Access/Updates-to-Aruba-Release-Naming-Replacing-ED-and-GA/td-p/279651

When they changed how the software was classified, "stable" and "be careful" 
got very blurry.
Then the rush to get 8 out and in peoples hands made it a lot worse.
I sympathize, they're trying to support 2 families of code now (8 and 
everything else).
There's too much still on 6 to really kill it, and they need 8 to be adopted to 
get the testing to really make it stable.
The last couple years have seen a very fast paced code release pace and I worry 
that they're getting too deep in the mud. It feels like 8.x and the 5xx 
hardware were rushed, or under-tested.

While it's frustrating and can cause some issues, I still trust them to get it 
worked out, I just hope their reputation isn't too badly hurt while they sort 
everything.

If you're considering them, I would still recommend their products, and once 
8.x is really stable, things will get boring (stable) again :). My experience 
with their support and sales teams have not suffered at all, and I'm looking 
forward to what comes next.

Good luck!


[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Turner, Ryan H
Sent: Thursday, January 9, 2020 11:16 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

All:

We've been an Aruba shop for a very long time and have around 10,000 access 
points.  While every relationship with vendors have their ups and downs, my 
frustration with the Aruba is finally peaking to the point that I am 
considering making the enormous move to choose a different vendor.  The biggest 
reason is with the 8.X code train, and bugs that we just don't consider 
appropriate to use in production.  It has been one thing after the other, and 
my extremely talented and qualified Network Architect (Keith Miller) might as 
well be on the Aruba payroll as much work as he has been doing for them to 
solve bugs.  Just when we think we have one fixed, another one crops up.

The big one as of late is with 515s running 8.5 code train.  We have them 
deployed in one of our IT buildings.  Periodically, people that are connected 
to these APs in the 5G band will stop working.  To the user, they are browsing 
a site, then it becomes unresponsive.  If they are on their phone, they will 
disconnect from wifi and everything works fine on cell.  Nothing makes an 
802.11 network look worse than switching to cell and seeing a problem resolve.  
Normally, if the users disconnect then reconnect, their problems will go ahead 
(but I think they end up connecting in the 2.4G band).   We've been working on 
this problem with them for months.  It always seems as though we have to prove 
there is a real issue.  I'm fed up with it.  We are a sophisticated shop.  If 
we have a problem, 9 times out of 10 when we bring it to the vendor, it is a 
real problem.  I'm extra frustrated that due to issues we've seen in ResNet on 
the 8.3X train that we don't want to abandon our 6 train on main campus.  To 
Aruba's credit, we purchased around 1,000 515s last year (I think around 
February).  When they could not get good code to support them on, Aruba bought 
back half of them.  I asked for them to buy back half because I thought for 
sure with the 315s that we would have instead, the issues would be fixed by the 
time the 315s ran out.  Not looking to be the case.

So, with that rant over, we are seriously considering looking to move away from 
Aruba (unless they get their act together really soon).  There are other bugs 
I'm not even mentioning here.  For those of you that made the switch to another 
vendor, I would be curious how long the honeymoon lasted, what were your 
motivators, and were you happy with the overall results?  Of course, this is a 
great opportunity to plug your vendor.  As I see it, we have 3 choices  
Something from Cisco (we had Cisco long ago and dumped them for bugs), 
something from Extreme (we are a huge Extreme shop so this makes sense), 
something from Juniper (Mist).

Thanks,
Ryan Turner
Head of Networking
The University of North Carolina at Chapel Hill
+1 919 445 0113 Office
+1 919 274 7926 Mobile
r...@unc.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and 

RE: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access points

[Rob Harris]

We’re not on 8.x yet, but we’ve ton a lot of research. Here’s what I understand 
(correct me if I’m wrong);

You can only use airmatch when there is a MM present

Arm and airmatch are not an either/or choice, arm will still do the job it 
normally does in real time, while airmatch will pool that data daily and make 
recommendations that will effect arm settings and thresholds (“raise this lower 
limit, lower this higher limit, allow these 2.4 radios to turn off” etc..).

Last I heard, airmatch doesn’t actually make changes unless you approve them, 
that’s a roadmap choice where you can allow it ranges of change and you’ll get 
a report daily.

Good luck!

[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Lionel Shigemura
Sent: Thursday, June 28, 2018 10:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access 
points

I'm in the same boat.  Looking at a Summer upgrade to MM from 6.5.3.x.  I have 
inquired about moving from ARM to Airmatch for intermittent rogue events.  An 
optimized RF plan that's pushed out off-hours is a nice improvement over the 
limited ARM individual AP reactive options.  But, I can't get details on how 
Airmatch addresses anomalies immediately.  Are there any variables involved in 
an immediate radio config change other than DFS radar detection.

Moving to high density and dedicated APs per classroom has helped alleviate 
many problems.  I'm assuming using MM with Airmatch is preferred over ARM, 
generally speaking, but in real world situations, how does it address 
intermittent issues that move around Campus as they occur each day.

Overall, I'm very pleased with 6.5.x.x and AP-3xx.  Especially the re-designed 
AP-27x series.

Lionel Shigemura
UH - Leeward Community College
Information Technology Group - Networking
(808) 455-0486

CONFIDENTIALITY NOTICE: The contents of this email message and any attachments 
are intended solely for the addressee(s) and may contain confidential and/or 
privileged information and may be legally protected from disclosure. If you are 
not the intended recipient of this message or their agent, or if this message 
has been addressed to you in error, please immediately alert the sender by 
reply email and then delete this message and any attachments. If you are not 
the intended recipient, you are hereby notified that any use, dissemination, 
copying, or storage of this message or its attachments is strictly prohibited.

On Thu, Jun 28, 2018 at 11:46 AM, Harvard Townsend 
mailto:harvard.towns...@wheaton.edu>> wrote:
For those of you with Aruba wireless infrastructure, what are your experiences 
with running ArubaOS version 8.X plus the Mobility Master architecture with 
AP-115 access points? HPE/Aruba is telling us that model is supported 
(confirmed in the ArubaOS 8.2.0.0 release notes) and they are not aware of any 
issues. However, I heard from an Aruba reseller that a number of their 
customers, both commercial and higher ed, had significant issues when they 
upgraded to 8.X and moved to the mobility master architecture.  We purchased 
the MM license and want to make the jump to 8.2.1.1 from 6.5.3.4 this summer, 
but are hesitant given the rumor.  Have any of you experienced problems with 
AP-115s and Mobility Master?
Thanks,
--
Harvard Townsend
Director of Infrastructure & Security
Academic & Institutional Technology
Wheaton College, IL
Office:630.752.5528
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access points

[Rob Harris]

We're moving to 8.x this summer as well, we have a lot of 105s so I hope there 
isn't an issue. Keep us up to date, thanks!

please excuse typos and brevity, sent from a mobile device, thank you!


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Harvard Townsend 

Sent: Thursday, June 28, 2018 5:46:34 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access 
points

For those of you with Aruba wireless infrastructure, what are your experiences 
with running ArubaOS version 8.X plus the Mobility Master architecture with 
AP-115 access points? HPE/Aruba is telling us that model is supported 
(confirmed in the ArubaOS 8.2.0.0 release notes) and they are not aware of any 
issues. However, I heard from an Aruba reseller that a number of their 
customers, both commercial and higher ed, had significant issues when they 
upgraded to 8.X and moved to the mobility master architecture.  We purchased 
the MM license and want to make the jump to 8.2.1.1 from 6.5.3.4 this summer, 
but are hesitant given the rumor.  Have any of you experienced problems with 
AP-115s and Mobility Master?
Thanks,
--
Harvard Townsend
Director of Infrastructure & Security
Academic & Institutional Technology
Wheaton College, IL
Office:630.752.5528
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Recommendations for wireless site surveyor in Australia

[Rob Harris]

If you're on twitter, take a look at @ANZWiFi , that's a good spot to start.

There are many fantastic engineers on social media who travel the world doing 
exactly these types of jobs.

Good luck!

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Tariq Adnan
Sent: Sunday, June 3, 2018 6:38 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Recommendations for wireless site surveyor in Australia

Hello everyone,

Could you please recommend someone who could site survey some sites here at 
University of Sydney?

We do perform site surveys ourselves but at times we get too busy with other 
project works hence outsource this work to third parties.

We have worked with several parties in past but were not happy with the quality 
of their work.

At this stage I am preparing RFQ and would like to send to multiple parties and 
then review their responses for grant of works.

Thanks,


-
Cheers,

Kind regards,
Tariq Adnan  |  Senior Network Engineer
THE UNIVERSITY OF SYDNEY

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: ClearPass - not so clear anymore

[Rob Harris]

Did you talk to your reps (direct, not partner) prior to the upgrade? They’ve 
always helped us when things like that happened and made sure we had what we 
needed.

[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Hector J Rios
Sent: Monday, April 2, 2018 5:23 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ClearPass - not so clear anymore

I’ve got two complaints about this product. One, it seems like with every patch 
or upgrade, this solution is getting worse and worse. This is disappointing 
because when we bought this solution two years ago it was rock solid. Second, 
due to the new licensing scheme, we are now exceeding our licensing capacity. 
How convenient for Aruba, right? As some of you might know, the new licensing 
scheme is based on concurrency. When we purchased the solution the licensing 
scheme was based on rolling averages. Yes, the new licensing scheme is 
attempting to make things simpler, but at a higher cost. Ask your rep how much 
a 25K server costs and you’ll see what I’m talking about.

Hector Rios
Louisiana State University
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] devices not connecting to open network

[Rob Harris]

Yes, these types of devices tend to be more sensitive to any networks that 
aren't your standard out of the box, home router config.

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Tuesday, January 16, 2018 12:21 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] devices not connecting to open network

Do you all- regardless of vendor affinity- generally feel that game console 
success is a matter of supported data rates (where network design and coverage 
are sound)?

Lee Badman | Network Architect 

Certified Wireless Network Expert (#200) Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w its.syr.edu SYRACUSE 
UNIVERSITY syr.edu


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Richard Nedwich
Sent: Tuesday, January 16, 2018 12:06 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] devices not connecting to open network

Hi Bruce,

I am glad to hear your reshall network is working well.  Note: Aruba's 
residence hall VRD also recommends using an AP with integrated four-port, 
managed Ethernet switch to connect wired devices, such as an Ethernet-enabled 
HDTV, gaming device, VoIP phone, or any wired device.  I do believe most 
enterprise WLAN vendors will agree on this.  But to answer your question, we 
have many happy Ruckus customers using ceiling or wall mounted APs, rather than 
wall-plate AP in the residence halls, too.  I guess in my view, it's an option 
which some use and others choose not to use based on their particular design 
preference or the specific set of needs.

Hopefully having another tool in the tool belt is a good thing :)

Best,
Rich

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: devices not connecting to open network

[Rob Harris]

Have you modified the rf at all on those SSIDs? Are you advertising and 
supporting the standard rates? I've heard that if you limit the lower rates or 
don't advertise them, some of those devices may have issues.

Good luck!

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tufts, Mark
Sent: Wednesday, January 10, 2018 11:19 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] devices not connecting to open network

Hi,

We have some wireless devices, WiiU, Nintendo Switch, PS4 etc. not connecting 
to our open guest network.  Laptops, phones no issue at all.  The devices above 
will sometime connect first try but then upon additional testing on a reconnect 
just will not pull a DHPC address. We are an Aruba wireless shop AP 225 and 315 
fails on both.

Anyone else experience this issue?

Thanks,

Mark
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: upgrade from 802.11n to 802.11ac

[Rob Harris]

Sorry,

As we upgraded, we did a 1 for 1 swap as we went, making sure to do whole areas 
at a time wherever we could.

After an upgrade, we did surveys to verify coverage and tuning.

Since we're an Aruba shop, we do have arm enabled which helps with channel 
assignment.

Good luck!

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu<http://www.ciachef.edu/>
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ying Zhang
Sent: Wednesday, December 6, 2017 12:44 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] upgrade from 802.11n to 802.11ac

Thanks Robert. We are going to do a proper site survey and RF design for sure. 
Right now just looking for an approximate number for budgeting purpose.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Rob Harris
Sent: Wednesday, December 06, 2017 1:38 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] upgrade from 802.11n to 802.11ac

You're really going to want to have a survey done and a proper design built.

I recommend Aruba networks, their products have worked very well for us and 
their support is top shelf.

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu<http://www.ciachef.edu/>
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ying Zhang
Sent: Wednesday, December 6, 2017 12:34 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] upgrade from 802.11n to 802.11ac

Hi,

We are looking at a campus wide wireless upgrade from 802.11n to 802.11ac. Just 
wondering for anyone out there who has done this before, do you have an 
approximate number (in percentage) with regards to # of additional APs in a 
mainly coverage-based design.

Thanks in advance.

Ying

University of New Brunswick
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: upgrade from 802.11n to 802.11ac

[Rob Harris]

You're really going to want to have a survey done and a proper design built.

I recommend Aruba networks, their products have worked very well for us and 
their support is top shelf.

[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ying Zhang
Sent: Wednesday, December 6, 2017 12:34 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] upgrade from 802.11n to 802.11ac

Hi,

We are looking at a campus wide wireless upgrade from 802.11n to 802.11ac. Just 
wondering for anyone out there who has done this before, do you have an 
approximate number (in percentage) with regards to # of additional APs in a 
mainly coverage-based design.

Thanks in advance.

Ying

University of New Brunswick
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Two RF Questions

[Rob Harris]

While there are performance gains to be sure (by going to 40, or 80), there are 
other concerns as well. We use 20 in our dorms because of the density of APs 
and users, we need those additional channels (even with dfs in use). We use 40 
in our public spaces when there’s adequate capacity for it, and 80 in our 
theater area since we designed for it.

[The Culinary Institute of America]
Robert Harris
Manager of Network Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jeffrey D. Sessler
Sent: Tuesday, September 26, 2017 10:20 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Two RF Questions

It’s surprising to me that anyone would purchase a Lamborghini, then disconnect 
ten of the twelve cylinders and drive it at 25 mph on the autobahn.

When I see static 20 MHz channels, or using 40 MHz in only limited areas, I 
wonder what’s behind the purposeful neutering of the system. If you are a Cisco 
customer running 8.1 or above, and not using DBS (Dynamic Bandwidth Selection), 
then it’s the equivalent of the Lamborghini above running on only two cylinders.

Don’t miss out on the significant advancements in bandwidth management. Free 
those resources spent doing point-in-time simulation and surveys for something 
the software doesn’t already do far better at. I promise, DBS won’t hurt a bit 
and your users will thank you a hundred times over.

Jeff


From: 
"wireless-lan@listserv.educause.edu" 
> 
on behalf of "Street, Chad A" >
Reply-To: 
"wireless-lan@listserv.educause.edu" 
>
Date: Tuesday, September 26, 2017 at 6:59 AM
To: 
"wireless-lan@listserv.educause.edu" 
>
Subject: Re: [WIRELESS-LAN] Two RF Questions

What is your reasoning behind not wanting 40 megahertz channels if you have 
plenty of overhead with your channel utilization?  People saying you should or 
should not do something without Gathering any type of metric worry me.

On Sep 25, 2017 3:28 PM, Chuck Enfield > 
wrote:

1.  Enable it in places to check for radar events.  If you get few, then 
yes.  Client devices are almost fully capable now.  Hidden SSID’s are the only 
issue.  Some clients don’t probe on DFS channels, and will only respond to 
beacons.  Make sure 2.4 is usable for the small number of incompatible devices.

2.  No.  Don’t even consider 40MHz unless you’re using almost all the DFS 
channels, but even then you’ll probably have to disable it in some high density 
areas.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of David Blahut
Sent: Monday, September 25, 2017 3:17 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Two RF Questions



Greetings,

I have two hopefully simple RF related questions:

1.  Should I enable the extended UNII-2 channels campus wide?

2.  Should I enable 40Mhz channel width campus wide?

In other words what are you doing on your campus and what is the "best practice?



Our wireless infrastructure:



3 Cisco 5508s running 8.2.141.0



20 - 3800 APs

368 - 3700 APs

414 - 3600 APs

8 - 3500 APs

7 - 1810 APs

32 - 1142 APs



Prime 3.1.0



Thanks for your input.

David

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.




This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and