RE: Network Authentication question

2015-06-24 Thread Russ Leathe


smime.p7m
Description: S/MIME encrypted message


RE: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

2014-09-08 Thread Russ Leathe
I agree with the outline below

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Danny Eaton
Sent: Monday, September 08, 2014 4:10 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

We keep telling folks if it has a power brick, and plugs into the wall, it 
should use an Ethernet port and plug into the wall.

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Dennis Xu
Sent: Monday, September 08, 2014 3:07 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

It sounds great. But I still have concerns about the interference. We have been 
educating people not to cause interference to campus WiFi network and then 
encouraging people to use Bluetooth for ATV just sounds like self-contradicting 
to me. Is it just me having this concern?

---
Dennis Xu
Analyst 3, Network Infrastructure
Computing and Communications Services(CCS) University of Guelph

519-824-4120 Ext 56217
d...@uoguelph.ca
www.uoguelph.ca/ccs

- Original Message -
From: Jeffry Legge jgle...@radford.edu
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Sent: Monday, September 8, 2014 3:09:38 PM
Subject: Re: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

We are using Bluetooth to discover apple tvs that are on a wired connection.. 
We also have some connected wirelessly using WPA2 

Jeff Legge
Network Services
Radford University
(540)-831-7727

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jason Heffner
Sent: Monday, September 08, 2014 1:57 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

We found the BT discovery does work ok with wired LAN. A few of the network 
guys weren’t too happy about the inability to disable the Apple Sleep Proxy 
Service. It can cause a little bit of bonjour hell, as they called it, if 
bonjour is enabled on the LAN. The BT discovery we found was a bit unreliable. 
It would work most of the time, but when testing we found there are times that 
we couldn’t get an iPad to find the AppleTV till it was rebooted and we were 
concerned with distance. IMO it works better for conference rooms and possibly 
smaller classrooms if you don’t mind it broadcasting. We are still using our 
Mirror App though.

Yosemite still doesn’t have support for BT discovery yet, though I’d assume 
that is coming. I wonder if AirServer/Reflector will add it at some point too. 
I’ve been watching the iOS betas for the new features coming that will utilize 
WiFi-direct.

Jason

 On Sep 8, 2014, at 1:38 PM, Michael Dickson mdick...@nic.umass.edu wrote:
 
 Thanks Lee. Yes I believe you are correct. No ATV discovery over BLE 
 yet for MacOSX. I misspoke about that earlier. Maybe this will be 
 announced tomorrow and we'll forget all about the lack of iWatch 
 announcement! ;-)
 
 Mike
 
 Michael Dickson
 Network Analyst
 Office of Information Technologies
 University of Massachusetts Amherst
 Voice 413.545.9639
 
 On Sep 8, 2014, at 1:30 PM, Lee H Badman lhbad...@syr.edu wrote:
 
 This is exactly what we're doing, and so far our biggest Appleheads are 
 happy. But... only works from iOS so far, no BTE pairing from OSX yet 
 (unless something changed very recently).
 
 -Lee Badman
 
 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael 
 Dickson
 Sent: Monday, September 08, 2014 1:26 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] Apple TV BLE discovery when connected via 
 wired
 
 Apple TV discovery over Bluetooth Low Energy  is a welcome workaround for 
 enterprises which block mDNS on their wireless networks. I see plenty of 
 discussion about ATV discovery using BLE over wireless. What about when the 
 ATV is connected to the wire?
 
 I'm curious if anyone has successfully used ATV BLE discovery when the Apple 
 TV is connected to a wired Ethernet jack instead of wirelessly. In this 
 scenario, the MacBook or iPad would be connected wirelessly, just not the 
 ATV. The iPad would discover the ATV using BLE then the partnership would be 
 handed off would be via IP. Seems this should be ok if all done via layer 3 
 post-discovery.
 
 We have an opportunity to add a dedicated wired jack for some ATV's going in 
 classrooms and I'm in the camp of wired when you can, wireless when you 
 must for these types of end points. 
 
 Thanks,
 Mike
 
 Michael Dickson
 Network Analyst
 Office of Information Technologies
 University of Massachusetts Amherst
 Voice 413.545.9639
 
 **
 Participation and subscription information for 

RE: [WIRELESS-LAN] Major WLAN/mobile projectcs coming online for Fall '13? Just wondering...

2013-08-21 Thread Russ Leathe
As far as .11ac, I don't see us involved for another year at least.  Waiting 
for .11ac laptops/tablets/smartphones to sell the inbedded chipset first.

MDM is key, looking for a product that protects mobile as well as laptop/tablets

Malware policies for users.  Handle this via our NAC.

We are using mDNS via our wireless WLAN.  Students register their own device(s) 
and  depending on which one, they get pushed to production or  secondary VLAN(s)

Nutshell version,

russ

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of j...@nww.com
Sent: Monday, August 19, 2013 9:20 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Major WLAN/mobile projectcs coming online for Fall '13? 
Just wondering...

It would be interesting - to me at least! - to see if there are any 
commonalities in Education IT priorities for the new academic year.

11ac exploration?
Improved mobile device management?
New user policies?
Bonjour/Apple TV etc?

In keeping with the Listserv policies, this query is NOT for a story that I 
plan to write. For me as a reporter, it's food for thought, which could 
eventually generate a story idea.

Regards,
John Cox
Senior Editor

Network World
492 Old Connecticut Path
Framingham, MA 01701
USA
Direct: 978-834-0554
HQ reception: 508-766-5301
john_...@nww.commailto:john_...@nww.com
www.networkworld.comhttp://www.networkworld.com/

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] iPhone 5 wireless issues

2013-04-22 Thread Russ Leathe
We had an issue with OS 10.x machines dropping off our wifi.  Ended up being an 
IPv6/bonjour issue.  We had to disable it on the client end.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Westacott
Sent: Monday, April 22, 2013 3:50 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iPhone 5 wireless issues

Thomas, Keith:

I am interested in the details, I have 532's.  (and a lot of 432)  I have not 
had reports as yet.  What version of MSS are you running, what EAP, and radius ?
We are running mostly 7.6.2  MsChapV2 and Radiator.  InCommon-Comodo certs.
anything that I can look for in my logs ?
/daniel/



On Mon, Apr 22, 2013 at 2:01 PM, Thomas Carter 
tcar...@austincollege.edumailto:tcar...@austincollege.edu wrote:
We have started noticing an issue with iPhone 5 phones occasionally failing to 
connect to our wireless network. I haven't dug too deep into the issue yet, but 
was wondering if anyone has seen this issue. Everything else works just fine - 
other iPhones, iPads, Androids, Windows  Mac laptops, etc. We're using Juniper 
wireless gear with a RADIUS-based access control system. The access control is 
responding immediately and doesn't seem to be the problem. Unfortunately 
iPhones don't have a lot of ways of troubleshooting wireless.

Thomas Carter
Network and Operations Manager
Austin College
903-813-2564tel:903-813-2564
[AusColl_Logo_Email]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

inline: image001.gif

RE: [WIRELESS-LAN] Wireless and health issues

2013-01-07 Thread Russ Leathe
Check-out the following on the wi-fi alliance website.  Nice article on the WHO.

http://www.wi-fi.org/knowledge-center/articles/wi-fi-and-health

I have been asked about health concerns numerous times, it’s great having these 
resources.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Robert Mathews (OSIA)
Sent: Monday, January 07, 2013 4:17 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wireless and health issues




I recently had a staff member ask for a report or document stating how 
dangerous wireless is to their health. Has anyone else been asked this before 
and can you direct me or send me the info that you provided to that person or 
department?

Thanks for any help or info on this subject.

Craig, and other interested parties...

I shall take this opportunity to point you to the following resources..

Brain tumour risk in relation to mobile telephone use: results of the 
INTERPHONE international case–control 
studyhttp://ije.oxfordjournals.org/content/39/3/675.full.pdf+html
International Journal of Epidemiology 2010;39:675–694  [ 
http://ije.oxfordjournals.org/content/39/3/675.full.pdf+html ]

US National Academy of Science Report - Identification of Research Needs 
Relating to Potential Biological or Adverse Health Effects of Wireless 
Communication Devices,http://www.nap.edu/catalog.php?record_id=12036 at:  
http://www.nap.edu/catalog.php?record_id=12036

International Commission on Non-Ionizing Radiation 
Protectionhttp://www.icnirp.de/PubEMF.htm  (ICNIRP)  [ 
http://www.icnirp.de/PubEMF.htm ]

WHO - Electromagnetic fields and public health: Base stations and wireless 
technologieshttp://www.who.int/mediacentre/factsheets/fs304/en/index.htmlhttp://www.who.int/mediacentre/factsheets/fs304/en/index.html
 [Fact sheet N°304], May 2006
http://www.who.int/mediacentre/factsheets/fs304/en/index.html
FROM WHO: EMF Project Scientific Articles
in chronological order  
(http://www.who.int/peh-emf/publications/sci_journal/en/index.html)

  *   Repacholi MH, Cardis E (1997) Criteria for EMF health risk assessment. 
Radiation Protection Dosimetry, 72:305-312.
  *   Repacholi MH (ed) (1998) Low-level exposure to radiofrequency 
electromagnetic fields: health effects and research needs. Bioelectromagnetics, 
19:1-19.
  *   McKinlay AF and Repacholi MH (eds) (1999) Exposure metrics and dosimetry 
for EMF epidemiology. Radiation Protection Dosimetry, 83(1-2):194.
  *   Repacholi MH and Greenebaum B (eds) (1999) Interaction of static and 
extremely low frequency electric and magnetic fields with living systems: 
Health effects and research needs. Bioelectromagnetics, 20:133-160.
  *   Foster KH, Vecchia P, Repacholi MH (2000) Science and the precautionary 
policy. Science, 288:979-981.
  *   Kheifets L (2001) Electric and magnetic field exposure and brain cancer. 
Bioelectromagnetics 5: S120-S131.
  *   Kheifets L (2001) Electric and Magnetic Fields and Occupational Health. 
Patty's Industrial Hygiene and Toxicology, Fifth Edition 100: 141-198.
  *   Kheifets L, Greenberg R, Neutra R, Hester G, Poole C, Rall D, Banerjee G 
(2001) From epidemiology to policy: An EMF case study. American Journal of 
Epidemiology 154(12): S50-59.
  *   Kheifets L, Hester G, Banerjee G (2001) The Precautionary Principle and 
EMF: Implementation and Evaluation. Journal of Risk Research 4(2): 113-125.
  *   Mezei G, Kheifets L (2001) Is There any Evidence for Differential 
Misclassification or Bias Away from the Null in the Swedish Childhood Cancer 
Study? Letter to the Editor, Epidemiology 12(6):750.
  *   Repacholi MH (2001) Health risks from the use of mobile phones. 
Toxicology Letters 120: 323-331.
  *   Foster KR, Osepchuk JM, and Repacholi MH (2002) Environmental impacts of 
electromagnetic fields from major electrical technologies. Environmental Health 
Perspectives
  *   Goldstein LS, Kheifets L, van Deventer TE, Repacholi MH (2002) Comments 
on the paper Long-term exposure of Em -Pim1 transgenic mice to 898.4 MHz 
microwaves does not increase lymphoma incidence Radiation Research. Radiation 
Research 158: 357-364.
  *   Goldstein LS, Kheifets L, van Deventer TE, Repacholi MH (2002) Further 
comments on Long-term Exposure of Emgr;-Pim1 Transgenic Mice to 898.4 MHz 
Microwaves Does Not Increase Lymphoma Incidence by Utteridge et al., Radiation 
Research 158, 357-364 (2002)
  *   Kheifets L, Thrall N (2002) Electromagnetic Fields and Health. 
Macmillians Guide to Pollution
  *   Litvak E, Foster KR, and Repacholi MH (2002) Health and safety 
implications of exposure to electromagnetic fields in the frequency range 300 
Hz to 10 MHz., Bioelectromagnetics, 23(1):68-82.
  *   Mezei G, Kheifets L (2002) Clues to the possible viral etiology of 
childhood leukemia. Technology 9: 3-14.
  *   Repacholi MH (2002) Assessment of the Health Effects of EMF Exposure. The 
Radio Science Bulletin 301: 14-24.
  *   Sahl J, Mezei G, Kavet R, 

RE: wireless as network standard?

2012-12-01 Thread Russ Leathe
Staff and Faculty have wired because they are tethered to a VOIP phone, though 
wireless is available in all floor/buildings.



classrooms have wired at the podium, wireless in the room too.



These folks still need access to a 4-didit extension, students typically use 
their cell only.






From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Voll, Toivo [to...@usf.edu]
Sent: Thursday, November 29, 2012 11:14 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] wireless as network standard?

That has been one of our concerns as well. People increasingly (due to some 
internal budget / property accounting rule changes) are getting laptops and 
devices they can take off-campus, and our desktop management group has been 
starting to look at solutions which “phone home” for patches and upgrades and 
inventory control – those would at least somewhat ameliorate the lack of WoL.

Residence halls are almost all wireless, even if wired is available. Faculty 
and staff offices are still all wired to PCs. Imaging and backups and all the 
virtualized applications and cloud based computing works better when users are 
on Gigabit instead of contending for airtime, but this of course again depends 
heavily on your users. Faculty and staff doing video editing is completely 
different from a professor that only ever uses email and downloads the 
occasional article.

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John York
Sent: Thursday, November 29, 2012 9:48 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] wireless as network standard?

Our main problem with wireless-only was not having a good wake on LAN so we 
could push patches and upgrades.
Thanks
John

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ashfield, Matt (NBCC)
Sent: Thursday, November 29, 2012 9:40 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] wireless as network standard?

Just curious if anyone has taken the leap and decided to only run wires where 
needed (ie, labs, servers, printers) and go wireless as the standard for the 
majority of their users.
From the perspective of having old buildings, with aging/out-of-date wiring 
and hardware, it certainly seems like a viable option. Obviously wired 
connections will always have a place in the network, but since all our 
students use wifi as their primary connection method, why not the staff?

Thoughts/input appreciated.

Thanks


Matt
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: wireless as network standard?

2012-11-29 Thread Russ Leathe
Our model use to be port per pillow.  Now it's, AP per room. We found that 
the newer models of AP, have wired ports and POE pass-through.  It requires two 
Ethernet runs to take full advantage.  Plus you still have to have POE at the 
switch (IDF) level. However, the cost of running 4 wires compared to 2 

This has served us well in older buildings and newer with tons of metal and 
concrete.

The speeds will only get better for AP's.

Students use wifi over wired anyway. Having 'wired' ports allows us to provide 
1GB for IPTV, gaming consoles (that lack wifi), and VOIP phones.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ashfield, Matt (NBCC)
Sent: Thursday, November 29, 2012 9:40 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] wireless as network standard?

Just curious if anyone has taken the leap and decided to only run wires where 
needed (ie, labs, servers, printers) and go wireless as the standard for the 
majority of their users.
From the perspective of having old buildings, with aging/out-of-date wiring 
and hardware, it certainly seems like a viable option. Obviously wired 
connections will always have a place in the network, but since all our 
students use wifi as their primary connection method, why not the staff?

Thoughts/input appreciated.

Thanks


Matt
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] MAcbooks dropping off wireless network

2012-10-26 Thread Russ Leathe
Disabling IPv6 on both the client and eliminating the ACL on the controller.  
Also mDNS is an issue with MAC clients.  We disabled mDNS at the controller 
level as well.

At the controller CMD what's the result of 'Show ip igmp group'? also run 'show 
datapath utilization' and make sure your CPU's are close to zero.



-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jason Healy
Sent: Friday, October 26, 2012 11:45 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] MAcbooks dropping off wireless network

On Oct 26, 2012, at 10:30 AM, Lee H Badman lhbad...@syr.edu wrote:

 Though it can come across as a cop-out, have you disabled IPv6 on the 
 clients? 

No, but we might try that.  The issue happens only some of the time, and only 
to some clients.  From our observation it appeared to be caused by load (the 
more students on at a time, the more likely to happen). We thought maybe it was 
a broadcast/multicast problem, but traffic graphs show that the MC rate is very 
low overall, and doesn't spike when the issues occur.

Even when the issue occurs, it only affects some clients, and the clients it 
affects can vary from one day to the next.

So I'll try disabling v6, but that seems a little too deterministic...  ;-)

As a side note, we also have an issue with our Aruba controller where it won't 
pass v6 traffic at all, so I doubt this is the case (as soon as we say ipv6 
firewall enable, all v6 traffic gets dropped, even if the ACL is any any any 
permit).

Jason

--
Jason Healy|jhe...@logn.net|   http://www.logn.net/

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Building map creation company?

2012-10-22 Thread Russ Leathe
We went through this exercise.  Our Architect and Engineering firm performed 
this service and created as builts for us.  For starters - The plans should 
be on record at the local DPW.  You may request a copy.
They provided AutoCad and PDF's for us. 
The Architect made any modifications for us and provided those formats as well.




-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Nathan Hay
Sent: Monday, October 22, 2012 11:34 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Building map creation company?

Does anyone know of a company that will visit buildings and create drawings of 
them?  Not a wireless site survey, just floor plan creation so someone else can 
do wireless layouts using the generated floor plans.

Deliverables would include floor-by-floor maps at a minimum and possibly 
pictures or a video walk-through.

This is not an invitation for companies to contact me.

Thanks,

Nathan Hay
Network Engineer | NOC
WinWholesale Inc.


*
This email message and any attachments is for use only by the named 
addressee(s) and may contain confidential, privileged and/or proprietary 
information.  If you have received this message in error, please immediately 
notify the sender and delete and destroy the message and all copies.  All 
unauthorized direct or indirect use or disclosure of this message is strictly 
prohibited.  No right to confidentiality or privilege is waived or lost by any 
error in transmission. 
*

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: High Number of Disconnections - Mac 10.5 and up

2012-09-19 Thread Russ Leathe
Hey Steve,

Great to hear from you!

Yes, we have seen significant improvement disabling IPv6 on both MAC's and 
Window machines.  Oddly, on some MAC's, even though we disabled IPv6, though 
improve performance, they still experience some disconnects.
Mainly, Mountain Lion.  I've researched this issue, and the solution to the 
problem is to downgrade the tcp/ip stackfor ML clients.


russ
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Stephen F. Hess
Sent: Tuesday, September 18, 2012 4:20 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

So you found success fixing the issue by disabling IPv6 on the Mac clients?

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Russ Leathe
Sent: Tuesday, September 18, 2012 4:10 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

Yes, indeed.  We found that IPv6 was on by default.  The theory is, it would 
try to get  an IPv6  DHCP first, timeout, grab an IPv4, then retry IPv6. In 
doing so, disconnect.

From Terminal,

networksetup  -setv6off Wi-Fi

Disconnects are a major problem with OSX 10.5 and above...just read the forums 
on Apples site.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Londono, Hernan
Sent: Tuesday, September 18, 2012 3:44 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

I would like to know if anyone is having an issue with a lot of disconnection 
for Mac computers with OS versions 10.5 and up. We are an Aruba deployment (M3 
controllers and AP-105s/125s). For the past 3 weeks we have seen a high amount 
of disconnections where about 90% have been tracked Apple notebooks with the 
latest OS versions. I'd be grateful to hear if anyone one is having, of has had 
the same issue recently, and any possible recommendations to address the issues.


HERNAN LONDONO
Associate CIO
Barry University


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: High Number of Disconnections - Mac 10.5 and up

2012-09-19 Thread Russ Leathe
We also tried..it will go into sleep mode while some tasks are still running, 
thus disconnects, run the command alone  to keep it awake no matter what.  See 
if this helps the disconnect issue you are having.

caffeinate -u -t 3600

3600 in the above command is the number of seconds to keep the system awake. 
What's interesting is that you can effectively set your Mac to shut down at a 
specific time (that is, the built-in sleep mechanism will start counting when 
that time runs out). You can also run the command alone to keep your Mac awake 
until you stop it by pressing Control-C.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Stephen F. Hess
Sent: Tuesday, September 18, 2012 4:20 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

So you found success fixing the issue by disabling IPv6 on the Mac clients?

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Russ Leathe
Sent: Tuesday, September 18, 2012 4:10 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

Yes, indeed.  We found that IPv6 was on by default.  The theory is, it would 
try to get  an IPv6  DHCP first, timeout, grab an IPv4, then retry IPv6. In 
doing so, disconnect.

From Terminal,

networksetup  -setv6off Wi-Fi

Disconnects are a major problem with OSX 10.5 and above...just read the forums 
on Apples site.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Londono, Hernan
Sent: Tuesday, September 18, 2012 3:44 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

I would like to know if anyone is having an issue with a lot of disconnection 
for Mac computers with OS versions 10.5 and up. We are an Aruba deployment (M3 
controllers and AP-105s/125s). For the past 3 weeks we have seen a high amount 
of disconnections where about 90% have been tracked Apple notebooks with the 
latest OS versions. I'd be grateful to hear if anyone one is having, of has had 
the same issue recently, and any possible recommendations to address the issues.


HERNAN LONDONO
Associate CIO
Barry University


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: High Number of Disconnections - Mac 10.5 and up

2012-09-18 Thread Russ Leathe
Yes, indeed.  We found that IPv6 was on by default.  The theory is, it would 
try to get  an IPv6  DHCP first, timeout, grab an IPv4, then retry IPv6. In 
doing so, disconnect.

From Terminal,

networksetup  -setv6off Wi-Fi

Disconnects are a major problem with OSX 10.5 and above...just read the forums 
on Apples site.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Londono, Hernan
Sent: Tuesday, September 18, 2012 3:44 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

I would like to know if anyone is having an issue with a lot of disconnection 
for Mac computers with OS versions 10.5 and up. We are an Aruba deployment (M3 
controllers and AP-105s/125s). For the past 3 weeks we have seen a high amount 
of disconnections where about 90% have been tracked Apple notebooks with the 
latest OS versions. I'd be grateful to hear if anyone one is having, of has had 
the same issue recently, and any possible recommendations to address the issues.


HERNAN LONDONO
Associate CIO
Barry University


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Tablets with 802.11a/n

2012-09-12 Thread Russ Leathe
I use three APPS,

Wifi Analyzer
FING
SWIFIS

They do a pretty good job.  Swifis gives me enough info to start.  I use WIFi 
Analyzer to confirm dBm and FING if I need to verify any clients.

I hope this is helpful.

russ

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Rick Brown
Sent: Tuesday, September 11, 2012 12:11 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Tablets with 802.11a/n

Thanks! Great info to know!

Sent from my iPhone

On Sep 11, 2012, at 11:56 AM, Russ Leathe 
russ.lea...@gordon.edumailto:russ.lea...@gordon.edu wrote:
I use the Galaxy Tab 10.1 with a free app analyzer with much success.

I also use my Kindle Fire as well though the Galaxy performs much nicer.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Rick Brown
Sent: Tuesday, September 11, 2012 9:47 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Tablets with 802.11a/n

Does anyone have any recommendations for a tablet that supports 802.11a/b/g/n?  
Preferably Android based since there are no wi-fi analyzer apps for the iPad.

Thanks!

Rick
--
image001.png
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Tablets with 802.11a/n

2012-09-11 Thread Russ Leathe
I use the Galaxy Tab 10.1 with a free app analyzer with much success.

I also use my Kindle Fire as well though the Galaxy performs much nicer.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Rick Brown
Sent: Tuesday, September 11, 2012 9:47 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Tablets with 802.11a/n

Does anyone have any recommendations for a tablet that supports 802.11a/b/g/n?  
Preferably Android based since there are no wi-fi analyzer apps for the iPad.

Thanks!

Rick
--
[cid:image001.png@01CD9014.708C7010]
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

inline: image001.png

RE: gaming consoles

2012-05-17 Thread Russ Leathe
Our goal was to support game consoles, but keep the traffic off of our 
production WAN.  Also, we had a flood of LG070 VOIP phones as well.  Here's 
what we did...


1.)Create a separate WAN for game consoles and VOIP phones (specifically 
the LG070).

2.)Create a separate SSID (hidden) for this purpose

3.)Gamers must contact us and register their MAC

4.)We enter their MAC as username and password in the internal DB. - for 
authentication, we zero this out each year so students need to re-register.

Alcatel/Aruba shop with 6000 and M3, AP105's

Hope this helps

russ

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kellogg, Brian D.
Sent: Thursday, May 17, 2012 2:35 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] gaming consoles

We'll be moving to an Aruba wireless solution this summer which will give us a 
lot of capabilities we haven't had.  One of the objectives is to allow gaming 
consoles on the wireless network in order to eventually remove wired ports from 
the dorms.

Has anyone put together some information on what is needed to get the consoles 
on the WLAN that would be will to share it?  I believe the Wii may require 
1Mbps and 2Mbps (which obviously sucks for dense deployments).  Wondering if 
this is true and what other caveats there may be with other consoles that 
others have come across.

Thanks,
Brian
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Blocking Chatty protocols

2012-03-13 Thread Russ Leathe
SSDP is used for SOHO when no DNS/DHCP server is present.  There are two 
exploits in XP that use SSDP.  Can't remember what they are but I believe it 
had to do with multicast and a DOS issue.

We block it by default.  No issue to date.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Brian David
Sent: Tuesday, March 13, 2012 8:31 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Blocking Chatty protocols

We were wondering what other schools are doing with these protocol...(SSDP, 
NetBIOS, mDNS, etc.)
I need to make the case for blocking some of these for Faculty/Staff and 
Students...I was wondering about SSDP for example..
What does it break when blocked? Any feedback would be appreciated.

Brian J David
Network Systems Engineer
Boston College

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Wireless only dorms, advice?

2012-01-18 Thread Russ Leathe
We just finished rolling out wifi to all dorms.  Each dorm is uniquely 
different in terms of age and/or construction materials.  I used a variety of 
tools to determine placement of ap's.  However, the first thing I did was place 
one or two AP's in area's that I thought would be strategic.  I used Air Magnet 
to determine if the heat map would provide adequate coverage.  I did a total of 
16 dorms like this and ended up adding 12 additional AP's in area's that had 
little coverage.  We installed a total of 424 Ap's and we added 12 more, not 
bad.

That said, I still have a small percentage of users with 'wire only' devices.  
Not to mention the game consoles that are still wire only.  That said, we will 
be building a new dorm next year.  I plan on wifi only but will include wired 
ports as well.
Granted, not the port per pillow we have been use to, but maybe port per 
room.   I haven't made a decision yet.
Wireless is still half duplex and the best I can get out of 802.11n is 300mps.  
So, applications like IPTV, Digital Signage still require a wire. Not to 
mentioned fire alarms, HVAC. Phones, emergency notification...all things that 
we need to run a building,  still require a wire.

I have had as many as 20 clients on one AP, with no issues.  However, as more 
bandwidth intensive apps are available (not to mention the increase in 
devices), I suspect I will have to limit this.  So far, there has not been a 
need.

I hope this is helpful to you!

Russ
Gordon College
r...@gordon.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Laird, Sara M
Sent: Wednesday, January 18, 2012 1:05 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless only dorms, advice?

Hello,

I am looking for anyone who has moved to wireless only dorms.  We have fast 
track dorm construction project that is starting and our CIO would like to make 
it wireless only.  I am wondering if anyone has done this and if so what kind 
of advice or comments can you share.  We will be using Cisco waps.  Also I am 
wondering what kind of ratio you based your access points on, how many devises 
per person.

Best Regards,

Sara

Sara M. Laird
Network Administrator
Mount Saint Mary's University
301.447.5014
Faith * Discovery * Leadership * Community
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Turning off TKIP to enable N

2011-09-28 Thread Russ Leathe
We changed from TKIP to AES over the past 6 months.  We offered two SSID's and 
then went AES only before this year's Orientation.  So far so good. No 
complaints.
 Alcatel/Aruba 6000, 5.x.



-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Nick Kartsioukas
Sent: Tuesday, September 27, 2011 7:14 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Turning off TKIP to enable N

All these graphs showing everyone's N clients is making me feel way behind the 
times.  We still have TKIP allowed on WPA.  Has anyone else recently gone 
through the transition of disabling TKIP in order to enable N?  If so, what 
issues did you run into with older equipment (both student and institution 
owned)?
We're a Cisco wireless shop, I've got WCS installed but haven't had time to set 
up any kind of reporting on it yet.  I know the few times I've remembered to 
check there haven't been any TKIP clients, but I'll need more than just a few 
slices in time to be sure.
--
Nick Kartsioukas
Cuesta College Computer Services
805-546-3248

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: selectively disabling wireless in classrooms

2011-09-23 Thread Russ Leathe
We see this as a security issue.  That is, if we disable 802.11x in the 
classroom (and most classrooms have no  cell coverage), and we need to alert 
the campus (via SMS or e-mail), then



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barber, Matt
Sent: Friday, September 23, 2011 8:38 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] selectively disabling wireless in classrooms

Hi Jim,

I also get this question/request a couple times a year. I flat-out refuse to do 
it. There are so many issues (coverage of other spaces, the students have 
cellular connectivity too, managing the changes, etc.) but those play a very 
small part in us not doing it.

We simply don't do it on principle. I don't feel that it is our responsibility 
to help manage the attention of the students in the classroom. Luckily I have 
support from the appropriate people on campus for that stance.

I will say that very few faculty members have asked overall. Most of our 
faculty are happy to include online video, Blackboard, and now iPads in their 
instruction.

Good luck!

Matt Barber
Network and Systems Manager
Morrisville State College
315-684-6053

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gogan, James P
Sent: Friday, September 23, 2011 8:22 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] selectively disabling wireless in classrooms

Well, it's that time of year again 

the time when we get calls from a handful of faculty who want the ability to 
disable the wireless access point that covers their classroom during specific 
class periods (they also want cellular coverage disabled during those times -- 
yeah, right ..).When I point out that the AP that covers their 
classroom may also provide coverage for the one next door, or that with a 
controller-based architecture, shutting off one access point would likely just 
increase the signal coverage area of adjacent APs, the response I usually get 
back is well, I KNOW that other universities are doing it, so  FIX IT.

So, let me ask my biennial question: what ARE other universities doing in this 
regard?I was specifically given U of Michigan as an example.Anyone know 
what they're doing? Any successful implementation details from anyone 
dealing with this issue are welcome.And yes, I am biting my tongue to not 
say teach more engagingly.

Thanks in advance!

-- Jim Gogan / Univ of North Carolina
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Android 2.2 disappointing on the secure WLAN- is it just us?

2011-03-23 Thread Russ Leathe
Thanks!

We upgraded to 5.0.3.1 over the weekend.  It solved our memory leak problem.  
There was also a catch all acl in validuser for udp 68 that once removed our 
Androids worked.

However, we have had a few mac users complain about poor connection.  I'm going 
to give this a try.



 

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Osborne, Bruce W
Sent: Wednesday, March 23, 2011 8:02 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Android 2.2 disappointing on the secure WLAN- is it 
just us?

Sorry to resurrect an old thread, but there was no clear solution at the time. 
Since then, I have been working with setting up 802.1X WPA2-Enterprise in our 
Aruba wireless environment. 

I believe that I have found a reasonable solution. By default, Aruba enables 
Opportunistic Key Caching (OKC) that enables a cached pairwise master key (PMK) 
to be used when roaming to a new AP, enabling faster roaming. In Aruba systems, 
if opp-key-caching is enabled, validate-pmkid (disabled by default) tells the 
controller to check the PMK ID sent by the client. The client must send the 
PMKID to indicate that it supports PKC. Otherwise, a full 802.1X authentication 
takes place.

I was personally seeing similar issues to those discussed in this thread. After 
I enabled the validate-pmkid setting, the issues vanished. This change should 
have no impact on clients that properly use OKC.

People with other vendor's systems likely have similar configuration options.


Bruce Osborne
Wireless Network Engineer
IT Network Services
 
(434) 592-4229
 
LIBERTY UNIVERSITY
40 Years of Training Champions for Christ: 1971-2011

-Original Message-
From: Daniel Bidwell [mailto:bidw...@andrews.edu] 
Sent: Wednesday, September 29, 2010 2:00 PM
Subject: Re: Android 2.2 disappointing on the secure WLAN- is it just us?

On Wed, 2010-09-29 at 13:55 -0400, Lee H Badman wrote:
 We have three cases of Droid smartphones that worked wonderfully on 
 our 802.1x/WPA2 WLAN on Android 2.1 operating system. Since going to
 2.2 with the devices, getting them to connect to the secure wireless 
 network is almost impossible. Open networks are OK.
 
  
 
 Anyone else seeing this?
 
We have the same there here.  We can get the to connect for a short time
(2-30 minutes) and then they drop the connection and mark it as disabled.  I 
was hoping that 2.2.1 would fix it, but alas, no such luck.
  
 
 -Lee Badman
 
 ** Participation and subscription information for this 
 EDUCAUSE Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/.
 

-- 
Daniel R. Bidwell   |   bidw...@andrews.edu
Andrews University  |   Information Technology Services
If two always agree, one of them is unnecessary Friends don't let friends do 
DOS
In theory, theory and practice are the same.
In practice, however, they are not.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Android and WPA2?

2011-02-16 Thread Russ Leathe
Aruba 5.0.3
Impulse Safeconnect

We started to have a problem with all Androids on our Aruba Wireless Network.

We connect, obtain an IP using WPA2.  However, no data is passed.  I have 
tickets open with both vendors, but I just wanted to reach out and ask if you 
have experienced this with the Android, and if there are any 'fixes'.

I'm running wireshark now to see if anything stands out.

Thanks

Russ
**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Android and WPA2?

2011-02-16 Thread Russ Leathe
Thanks for the info

I create a /24 and had the same issue.

funny, I connect to the WPA2 SSID and then it stalls on a browser link.  I then 
go to my wireless laptop and ping the IP of the device and it starts working.  
oddly, I tried this on multiple Androids and it worked.

must be blocking something internal.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Holland, Ryan C. 
[holland@osu.edu]
Sent: Wednesday, February 16, 2011 10:05 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Android and WPA2?

Interesting, Peter. We were using /24s and the phone consistently used a /16 
(255.255.0.0) mask. We have three class B networks on campus, so basically if 
the user tried to go to a third of our address space (DNS servers included), it 
would ARP for it and fail.

==
Ryan Holland
Network Engineer, Wireless
Office of the Chief Information Officer
The Ohio State University
614-292-9906   holland@osu.edumailto:holland@osu.edu

On Feb 16, 2011, at 9:59 AM, Methven, Peter J wrote:

Russ/ Ryan, we found the issue that Ryan reported is an issue with all the 
versions of Android we have tested (but we haven’t tested 2.3 yet), but I 
thought it was something unique to our environment and we broke our /20 
wireless network subnet into multiple /24 subnets based on location to solve 
the issues. This has worked ok for everything apart from Apple devices...

Essentially we found regardless of which mask was provided via DHCP the Android 
device will always use a 255.255.255.0 class c mask. So obviously if you are 
using a /22 or /20 mask etc. the device will function with no problems if it is 
lucky and is assigned an IP Address within the same class c segment as the 
gateway. Otherwise it will be unable to reach the gateway,  and as Ryan says 
will send out unusual ARP traffic etc.

Many Thanks
Peter

Mr Peter Methven, Network Specialist
Information Technology (IT)
Allen McTernan Building, Edinburgh Campus
Tel:  0131 451 3516

For IT support queries or requests, please email 
ith...@hw.ac.ukmailto:ith...@hw.ac.uk or phone ext 4045, with full details of 
your query or request and your contact details.

http://www.hw.ac.uk/it


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Holland, Ryan C.
Sent: 16 February 2011 14:32
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Android and WPA2?

Russ,

I encountered a Samsung Captivate that was using an incorrect subnet mask, 
i.e., ignoring the mask received in the DHCPOFFER. This resulted in the device 
ARPing for addresses outside of its subnet, which in turn, it did not receive 
responses for. The user symptom was that DHCP succeeded, but no traffic beyond 
that passed. If you're looking at pcaps, look for excessive or questionable ARP 
traffic.

==
Ryan Holland
Network Engineer, Wireless
Office of the Chief Information Officer
The Ohio State University
614-292-9906   holland@osu.edumailto:holland@osu.edu


On Feb 16, 2011, at 9:14 AM, Russ Leathe wrote:


Aruba 5.0.3
Impulse Safeconnect

We started to have a problem with all Androids on our Aruba Wireless Network.

We connect, obtain an IP using WPA2.  However, no data is passed.  I have 
tickets open with both vendors, but I just wanted to reach out and ask if you 
have experienced this with the Android, and if there are any 'fixes'.

I'm running wireshark now to see if anything stands out.

Thanks

Russ
**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


--
BEGIN-ANTISPAM-VOTING-LINKS
--

Teach CanIt if this mail (ID 1156435022) is spam:
Spam:about:blank
Not spam:about:blank
Forget vote: about:blank
--
END-ANTISPAM-VOTING-LINKS

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


Spamhttps://antispam.osu.edu/b.php?i=1156461852m=5960d893a06bc=s
Not spamhttps://antispam.osu.edu/b.php?i=1156461852m=5960d893a06bc=n
Forget previous 
votehttps://antispam.osu.edu/b.php?i=1156461852m=5960d893a06bc=f


Heriot-Watt University is a Scottish charity registered under charity number 
SC000278.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information

RE: WiFi blockers in classrooms

2010-11-18 Thread Russ Leathe
We can push out different SSID's with ACL's that limit what an authenticated 
user can access.

However, our AP heatmap shows leakage from AP's above and below the floors 
where the classroom are.

So, in a nutshell, it wasn't worth it (blocking that is).  Especially true once 
you incorporate emergency notification via 802.11x.

I would agree with other colleagues comments, it's an 
academic/classroom/Professor issue.

Northeastern, I believe, did not roll out 802.11x in the classrooms, because 
the Professors did not want it.
The idea behind this decision was you don't need wifi to take notes.

I hope this is helpful,

Russ



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Luis Fernando Valverde
Sent: Thursday, November 18, 2010 2:31 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] WiFi blockers in classrooms

Hello,

Has anybody used jammer WiFi blockers to block to block wireless network access 
in classrooms in order to help students to concentrate on course instruction?   
 I would like to know which blockers are being used with success to do this?   
Can somebody tell me which is the best and cheaper solution (something so easy 
as turn a switch on/off)?

Thanks,
Luis Fernando

---
Luis Fernando Valverde
Director de Tecnología de Información
INCAE Business School
Tel: +506 24 37 2338
Fax: +506 24 33 9101
fernando.valve...@incae.edumailto:fernando.valve...@incae.edu
www.incae.eduhttp://www.incae.edu/
---
[cid:972451819@20052008-09B2] El medio ambiente es del interés de todos.   
Evitemos imprimir correos innecesarios.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

inline: image001.jpg

Windows 7 and WPA WPA2?

2010-11-17 Thread Russ Leathe
We just started having issues with Windows 7 clients trying to connect to our 
network via WPA or WPA2 - TKIP and AES. The Win 7 default config no longer 
works and I have to manually set authentication.

This is a work-around but I would like to know if any other Campus started to 
experience issues.

We are an Aruba installation ( 5.0.2) SUP III.

Thanks

Russ

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Android OS 2.2

2010-10-23 Thread Russ Leathe
we have a 6000 controller running 5.x

1.) enable
2.) configure terminal
3) config) firewall  prohibit-arp-spoofing 




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[wireless-...@listserv.educause.edu] on behalf of Osborne, Bruce W 
[bosbo...@liberty.edu]
Sent: Saturday, October 23, 2010 7:25 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Android OS 2.2

Jay,

Many Aruba customers have been watching this thread. Where id you disable ARP 
spoofing?

Is Aruba planning a patch to allow these clienst, even with Prohibit ARP 
Spoofing enabled?


Thanks,
Bruce Osborne
Liberty University

From: McNealy, Justin S [mcne...@musc.edu]
Sent: Friday, October 22, 2010 7:17 AM
Subject: Re: Android OS 2.2

We experienced a similar issue where we have Aruba installed. When I did some 
debugs on the controller it looked like the controller thought the devices were 
spoofing there mac address. I don't know much about Meru,  but Aruba has a 
feature,  Prohibit ARP Spoofing, that we disabled and we have not had an 
issue since.


Jay McNealy
Network engineer II
Medical University Of South Carolina
mcne...@musc.edu

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Caroline Owens
Sent: Wednesday, October 20, 2010 11:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Android OS 2.2

Hi folks,

This message will be a repeat for anyone on the Meru listserv, but I wanted to 
see if anyone had anything to add on an issue I'm having with Droids running OS 
2.2.

I've seen a lot of reports online about issues after upgrading to 2.2 from 2.1. 
 We are just getting these new (We happen to have the X and the 2) and they are 
coming installed with 2.2 so I'm not sure what the performance would be at 2.1. 
 The issue is that they may or may not connect at all and then, once connected, 
will drop and then not be able to connect again.  They do seem to work better 
on an open security network, but we use WPA2/Enterprise here and they are 
unusable on our primary WLAN.

Has anyone had any experiences with this or even (crossing my fingers here), a 
work around?  I've gotten in touch with our Verizon rep but I don't know how 
much he'll be able to do if the problem is in the OS.
I've seen some reports that setting your APs to G-only or putting the droids in 
Airplane mode (i know, i know - so you trade getting wifi with not getting 
phone calls - too funny!) will give you a stable connection but neither of 
those options are practical for us.

thanks for any input!
Caroline Owens
Networking and Telecommunications
Saint Joseph's University
(610) 660-1613

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.
**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.
**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Apple and wireless connectivity issues?

2010-10-07 Thread Russ Leathe
We started disabling IPv6 (during Freshman Orientation)  on both platforms due 
to the issues it causes with wifi and certain applications.

Russ Leathe
Gordon College 


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Reynolds, Walter
Sent: Thursday, October 07, 2010 11:00 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Apple and wireless connectivity issues?

We have found that many of these are fixed by disabling IPv6 on the Airport 
interface for the client.

---
Walter Reynolds
Principal Systems Security Development Engineer
ITS Communications Systems and Data Centers 
University of Michigan
(734) 615-9438


 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 [mailto:wireless-...@listserv.educause.edu] On Behalf Of Johnson,
 Neil M
 Sent: Thursday, October 07, 2010 10:33 AM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: [WIRELESS-LAN] Apple and wireless connectivity issues?
 
 We also see lots of problems with Macs being unable to obtain DHCP addresses
 properly eventually ending up with a self-assigned IP address.
 
 Attempts to engage Apple have not been helpful.
 
 
 
 -Neil
 
 --
 Neil Johnson
 Network Engineer
 Information Technology Services
 The University of Iowa
 Work: 319 384-0938
 Mobile: 319 540-2081
 Fax: 319 355-2618
 E-mail: neil-john...@uiowa.edu
 
 
  -Original Message-
  From: The EDUCAUSE Wireless Issues Constituent Group Listserv
  [mailto:wireless-...@listserv.educause.edu] On Behalf Of Chris
 Brezil
  Sent: Thursday, October 07, 2010 8:28 AM
  To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
  Subject: [WIRELESS-LAN] Apple and wireless connectivity issues?
 
  Over the summer we upgraded our wireless infrastructure from all
  autonomous Cisco access points to a managed Aruba wireless environment.
  Since the start of the semester we have had issues come up that we have
  been addressing, but we are now encountering something that we never
  faced before - it seems more and more that the majority of new issues
  we are dealing come from Apple laptops and mobile devices. We have
  heard of some of the larger reported issues about Apple, such as the
  DHCP issues with the original iPad iOS. We have also done some of our
  own research on this and see Apple mentioned numerous times in regards
  to wireless connectivity issues, but we don't know if we are seeing
  this because this is what we are looking for or if because it is the
  reality of the situation.
 
  An example of this type of issue is that a student applied Apple
  updates to her computer last Friday and then could not get an IP
  address afterwards on our wireless network, though she could still use
  her wireless router at home. Calling Apple about this resulted in them
  telling us that if the computer can connect in one place but not
  another that it is our problem and not an issue with the laptop, even
  though many other Apple computers with the same version of the OS could
  connect to our network.
 
  We continue to troubleshoot and look to see if there is something that
  is about our wireless network configuration that is causing problems.
  However, we would like to see if others have experienced similar types
  of issues on their campuses. Do you see a preponderance of wireless
  issues over time relating to Apple products? If this has been the case
  for you, were you successfully able to address issues with Apple? Did
  you have to go back to your wireless vendor to fix these issues? Does
  this sound like something unique to our experience here? We look
  forward to hearing what others have experienced.
 
  Regards,
  Chris Brezil
  Assistant Vice President/IT
  The New School
 
  **
  Participation and subscription information for this EDUCAUSE
  Constituent Group discussion list can be found at
  http://www.educause.edu/groups/.
 
 **
 Participation and subscription information for this EDUCAUSE Constituent Group
 discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: LG070 (MyLGNet) phones on campus wireless network?

2010-09-07 Thread Russ Leathe
Sure,

We have four ISP's.  Once of which is Comcast (100MB).  The default route on 
the VLAN that the myLG's are on route's to the Comcast connection.  Work rather 
nicely since this does not interfere with our production network.

I hope this is helpful,

Russ


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Tuesday, September 07, 2010 8:53 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] LG070 (MyLGNet) phones on campus wireless network?

Russ,

Can you explain what you mean by routing out a different carrier?

Thanks-

Lee




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Russ Leathe
Sent: Friday, September 03, 2010 2:43 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] LG070 (MyLGNet) phones on campus wireless network?

We wrote a mac rule that assigns the port to a different VLAN which routes out 
a different carrier.

To date, we have had 8 of these phones. All but one works. The one that doesn't 
work is a clone of the myLG series.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Friday, September 03, 2010 1:54 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] LG070 (MyLGNet) phones on campus wireless network?

In case anyone is interested. We're finding that the LG070 VoIP phone that we 
have to work with is trying to get to these destinations, using these ports:

IPs it tries to talk to :

IP: 203.252.0.211
Protocol: TIME
Port: Src - 1025, Dst - 37

IP: 58.148.106.230
Protocol: TCP
Port: Src - 1024, Dst - 80

IP: 122.35.0.160
Protocol: TCP
Port: Src - 55003, Dst - 443

IP: 112.223.24.78
Protocol: SIP
Port: Src - 5060, Dst - 5060

IP: 112.223.24.149
Protocol: RTP
Port: Src - 30002, Dst - 50024

We do not block any of these IP addresses- trace route gets you to Korea, but 
then the last two show unreachable. We're checking our edge configs to see if 
we block the non-80/443 protocols.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Thursday, September 02, 2010 9:47 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] LG070 (MyLGNet) phones on campus wireless network?

Please reference 
http://kb.mit.edu/confluence/pages/viewpage.action?pageId=5898281 where MIT did 
a nice job summarizing how they support the Korean LG070 phones that students 
bring to the dorms. We are attempting to go down this road, but so far have 
only found one student to work with (there are plenty of others, we just 
haven't  made contact yet) and it's not going so well yet with our one test 
case.

We have an open network, high quality signal, and what seems like proper phone 
settings, yet we keep seeing the leaving service area message come up 
frequently.

Given that what little supporting docs we can find so far are all in Korean, 
we're not getting real far yet in identifying ports and protocols as we cant' 
get our hands on the one test case phone long enough to do any real analysis 
yet.

Has anyone else invested any time in trying to support these phones, and 
learned anything about them that can be shared?

Thanks-

Lee Badman

Lee H. Badman
Wireless/Network Engineer
Information Technology and Services
Adjunct Instructor, iSchool
Syracuse University
315 443-3003



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: LG070 (MyLGNet) phones on campus wireless network?

2010-09-03 Thread Russ Leathe
We wrote a mac rule that assigns the port to a different VLAN which routes out 
a different carrier.

To date, we have had 8 of these phones. All but one works. The one that doesn't 
work is a clone of the myLG series.



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Friday, September 03, 2010 1:54 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] LG070 (MyLGNet) phones on campus wireless network?

In case anyone is interested. We're finding that the LG070 VoIP phone that we 
have to work with is trying to get to these destinations, using these ports:

IPs it tries to talk to :

IP: 203.252.0.211
Protocol: TIME
Port: Src - 1025, Dst - 37

IP: 58.148.106.230
Protocol: TCP
Port: Src - 1024, Dst - 80

IP: 122.35.0.160
Protocol: TCP
Port: Src - 55003, Dst - 443

IP: 112.223.24.78
Protocol: SIP
Port: Src - 5060, Dst - 5060

IP: 112.223.24.149
Protocol: RTP
Port: Src - 30002, Dst - 50024

We do not block any of these IP addresses- trace route gets you to Korea, but 
then the last two show unreachable. We're checking our edge configs to see if 
we block the non-80/443 protocols.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Thursday, September 02, 2010 9:47 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] LG070 (MyLGNet) phones on campus wireless network?

Please reference 
http://kb.mit.edu/confluence/pages/viewpage.action?pageId=5898281 where MIT did 
a nice job summarizing how they support the Korean LG070 phones that students 
bring to the dorms. We are attempting to go down this road, but so far have 
only found one student to work with (there are plenty of others, we just 
haven't  made contact yet) and it's not going so well yet with our one test 
case.

We have an open network, high quality signal, and what seems like proper phone 
settings, yet we keep seeing the leaving service area message come up 
frequently.

Given that what little supporting docs we can find so far are all in Korean, 
we're not getting real far yet in identifying ports and protocols as we cant' 
get our hands on the one test case phone long enough to do any real analysis 
yet.

Has anyone else invested any time in trying to support these phones, and 
learned anything about them that can be shared?

Thanks-

Lee Badman

Lee H. Badman
Wireless/Network Engineer
Information Technology and Services
Adjunct Instructor, iSchool
Syracuse University
315 443-3003



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Guest Wireless Questions

2010-07-02 Thread Russ Leathe
Gordon College Answers

We are in the middle (POC) of using Captive Portal.  It's the same idea used in 
hotels.  Credentials will be available via our excellent Support Staff and Aux. 
Services. In other words, you must come to us if you need to use our guest 
network.

The SSID only allows forward facing traffic and never touches our internal net. 
 We have a CALEA identifier/logger on our NetEQ box.

Russ Leathe
Gordon College

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Neiss, Tom
Sent: Friday, July 02, 2010 8:02 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Guest Wireless Questions

Are you providing free guest wireless access on your campus?
How are you dealing with CALEA if you are?
Do you use your edu address?
Thanks,

Thomas R. Neiss
Director of ITS Telecommunications
University at Albany
1400 Washington Ave
Albany, NY 1
(518) 437-3803



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] 802.11n Draft 2.0

2007-11-13 Thread Russ Leathe
Carnegie Mellon just went through an extensive N evalthey chose
Aruba.

 

http://biz.yahoo.com/iw/071112/0324644.html

 

 

 

From: Lee Weers [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, November 13, 2007 3:25 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 802.11n Draft 2.0

 

We are looking at a campus wide wireless deployment, and my supervisor
is pushing for a complete Cisco 1252 with N draft 2.0 capability.  We
would have about a total of 250 to 300 AP's in full deployment.  Our
wired infrastructure is currently 100% Procurve with about 90% of it
being 10/100 switched.  I'd like to know what other schools are doing
with 802.11n.

Thank you, 
  
Lee Weers 
Assistant Director for Network Services 
Central College IT Services 
(641) 628-7675 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] 802.1x and iPhone

2007-07-11 Thread Russ Leathe
no, but take a look at the list of items it lacks...
 
http://www.infoworld.com/article/07/07/10/28TCiphoneproscons_1.html?source=NLC-PLATFORMScgd=2007-07-11
 
Russ



From: Peter Morrissey [mailto:[EMAIL PROTECTED]
Sent: Wed 7/11/2007 2:04 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 802.1x and iPhone



It looks like the iPhone doesn't support 1x. We plan to be all 1x by next 
semester.

We are also apparently already getting calls about wireless support for the 
iPhone and anticipate that a lot of students will come in with them.

Does anyone know if Apple has any plans to support 802.1x?

 

Pete Morrissey

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] 'Clustering' and 'failover' in the context of Aruba

2007-05-23 Thread Russ Leathe
Hi John,

We just went through the same scenario.  We now have an Aruba/Alcatel
6000 with dual controllers...200 AP's as well.   

I concluded the following.

1.) Two controllers (same box) side A  B, A-side is active, B-side is
redundant.  A-side fails, B-side takes over
2.) Major/minor upgrade - Upgrade B-side, swap, everything looks good,
do a copy/synch to the A-Side
3.) Major/minor upgrade - Upgrade B-side, swap, upgrade fails, revert
back to A-side 
4.) Minor hardware failure - 1 controller fails, still operational
5.) Major hardware failure -  backplane failure = tons of phone calls

Item #5 is my weakest link.  However, because the 6000 has
dual-everything (except the chassis), I felt my exposure was minimal.
I could not justify the cost of an additional 6000 for 100% redundancy.
I looked at the smaller boxes with decentralized distribution...but the
smaller boxes couldn't handle all 200 AP's simultaneouslyPlus it
just adds complexity to our already overworked staff (troubleshooting
would be more complicated).

I hope this is helpful.  

Russ



-Original Message-
From: John Rodkey [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 22, 2007 7:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 'Clustering' and 'failover' in the context of
Aruba

We are currently considering expanding our existing wireless environment
to cover additional dorms.
By doing so, we will exceed the capacity of our current controller, and
can either add an additional controller
card or for a slight incremental cost, add another controller.  We
planned to add the additional controller, with
the idea that the controller would allow redundancy/failover/clustering
to  happen, so that if one controller
were to go down, for instance, the other would take over.

We were subsequently told that this was a faulty understanding of the
failover function.
So we thought we might be able to try another approach:  every other WAP
would be controlled by alternating controllers.
That way, if controller A, with waps 1,3,5,7,9... on it were to go down,
the coverage in any given building would be halved, because controller
B, with waps 2,4,6,8 ... would continue to run.
Nope, that is a bad idea, says the contact: each controller will
maintain its own heat map and routing info, etc. and as a result, there
would be nowhere to look for a unified picture of the wireless network.

So I'm confused: what is the exact nature of controller clustering or
failover under Aruba?
Given somewhere in the neighborhood of 200 APs, how should one configure
the controllers

John

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re : microcell vs virtual cell

2007-04-12 Thread Russ Leathe
Hi Everyone,
 
Just wanted to weigh in on this conversation.
 
We went through this same process at Gordon College about 4 years ago.
We looked at Meru, Trapeze, AirSpace and Aruba.  During this process,
there were no independent studies or analysis of anyone's product.
 
Gordon College pilot's any new technology.  Our pilots run between 30-60
days.  
 
We also rely on analysis by Network Computing, Gartner and Tolly.
Typically, they do a very good, non-bias, review of products and
technology.
 
Next we look at the company and the amount of $$ they spend on RD,
patent ownership and whether or not them have engineers or a presence on
standards committee's. It's the standards that really catch my eye.
Hopefully, if they conform, than I have positioned myself and the
institution for the future.  If not, then the trouble begins.
 
Needless to say, we chose Alcatel/Aruba.  They conform to standards.  So
far, we have rolled out WifiVOIP, Multicast (video/audio), wifi VPN,
seamless roaming.  It all works.  
 
I read the article regarding Network Computing analysis of CISCO vs.
Meru.  Honestly, they did a very thorough job.   What I got out of the
article was that indeed Meru was/is tweaking the 802.11 duration value.
To me, this is a red flag.  This means they are not conforming to
standards.  Has Meru responded to Network World or their customers?
Seems to me if this wasn't true, there would be lawsuits or at least a
rebuttal.  Here's one of the engineers e-mail address, [EMAIL PROTECTED]
I would contact him and ask the question.
 
Anyway, let's get back to testing or piloting technology.
 
By virtual cell vs traditional micro-cell WiFi I assume you are talking
about having multiple access points advertise the same BSSID on the same
channel. Virtual cell appears to clients as a single access point. In
this definition virtual cell would result in more clients contending for
the given channel within a larger coverage area.

Contention in WiFi is generally managed by CSMA/CA (collision
avoidance). CA is used instead of CD (collision detection) because
clients are sometimes not within range of other clients. You can create
virtual-contention to go with the virtual-cells by tweaking access point
timers to be shorter than client timers, but the single channel or
access point bandwidth is fixed. 

You raise a very good question about the data/analysis since the number
of vendors promoting such concepts is very limited. 

Place 3 micro-cell access points on 3 different channels in a coverage
area. Associate 3 clients 1 per access point. Measure. Place 3
virtual-cell access points on same channel in same coverage area.

Associate 3 clients. Measure. 

Be sure to take bi-directional measurements with simultaneous TX/RX to
experience the half-duplex nature of WiFi radio. I am confident you will
push more packets over 3 channels than 1. Be sure to power-off the
system you are not testing. Shorting timers or counters by one system
can adversely impact other client and access point devices even with
only background traffic.

There is 3rd party vendor/bake-off documenting the results but you have
indicated that you do not consider it. 

All the best

 

Russ Leathe

Director of Networking

Gordon College

Wenham, MA

 

 

 

 
 
 
 
 
 ~ Russ
 
 
 
 
 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


signature2.gif
Description: signature2.gif