RE: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-12 Thread Brian Helman 
These reports are fantastic.  There was vocal opposition to using eduroam here 
– that it would not be useful or popular.  This report shows what all of us 
here (on this list) knew already.  The adoption/usage far exceeds what I 
expected, without even advertising the service.

-Brian

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Philippe Hanset
Sent: Friday, July 06, 2018 12:37 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report

Ok, Stephanie is already on it  :)

As a last request, please update your Contact Info at 
www.eduroam.us<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eduroam.us=02%7C01%7Cbhelman%40SALEMSTATE.EDU%7C6d8957cb4ccc4b78fa9908d5e35f0660%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C0%7C636664919636665558=TlkUwQGDIUGpOdvvrI%2BPvpdpR4T85WeXuT2qxbqls5A%3D=0>.
 Our main task this last week has been
to chase many of the eduroam peers and beg them to update their info (s 
many bounced email addresses)

Thanks,

Philippe





On Jul 6, 2018, at 12:24 PM, Philippe Hanset 
<005cd62f91b7-dmarc-requ...@listserv.educause.edu<mailto:005cd62f91b7-dmarc-requ...@listserv.educause.edu>>
 wrote:

Jerry,

Thanks for the feedback.
We have been digesting these reports for about a year now and rejects per MAC 
was on our agenda.

We had two issues with that one:
-Storing failed authentications is really overwhelming for our Top Level 
Servers (we might have storage issues .. there is a lot of nasty stuff in those 
failed attempts :)
-Calling-Station-ID (MAC address) is not always reliable…some of you don't send 
it, and some have different formats for the same MAC address (if you have two 
Wi-Fi vendors on campus)

But, with all the feedback we will look into it again.

As a request to all of you, please make sure that you send Calling-Station-ID 
(it is actually required).

Thanks,

Philippe


Philippe Hanset, CEO


On Jul 6, 2018, at 11:47 AM, Bucklaew, Jerry 
mailto:j...@buffalo.edu>> wrote:

Philippe,

   I like the reports, but as people have pointed out the errors are 
concerning.  It might be good to quantify the errors to unique macs instead of 
just failures.  You have unique users authenticated and then authenticated 
percentage.  But is that the percentage of total request vs total failures or 
unique macs that have succeeded vs unique mac that have failed?  If our guess 
is correct, the failure percentage will be high (ours is around 20% for our 
users and 30% for guest)  for total request vs failures, but should be 
relatively low for total unique request vs unique failures.  Maybe that would 
be a stat worth adding?



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Philippe Hanset
Sent: Friday, July 6, 2018 11:34 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report

All,

When we designed the reports we had two main goals in mind:
1)  Quantitative data (how many, and where), both as SP and IDP
2) Qualitative data (is my service ok), both as IDP and SP

Many of you like the reports and also many have asked to have comparisons with 
other schools especially for “rejects”.

We cannot reveal other schools’ data without their consent,
but I have asked Stephanie(our data specialist) to work on graphs showing the 
distribution of errors (eg: 7 schools are at 0% success rate, 10 at 10%, etc…) 
also integrating into the stats the size of schools.
She will be brainstorming some of this in the coming weeks  and post it on the 
eduroam.us<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Feduroam.us%2F=02%7C01%7Cbhelman%40SALEMSTATE.EDU%7C6d8957cb4ccc4b78fa9908d5e35f0660%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C0%7C636664919636675568=r%2B2O%2FmUa6WMNpLhE%2BNHoCvf3P%2F074pYG7F1Dv9EH540%3D=0>
 website

Just looking roughly at data as an IDP and SP you should be around 60+ %
Bear in mind that you cannot control poorly configured users coming to your 
campus as an SP.
As an IDP you can definitely check your stats and optimize your user’s 
configuration (to a point!).

In summary as an SP you have very little control, as an IDP you have a lot more!

Philippe

Philippe Hanset, CEO
www.anyroam.net<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.anyroam.net%2F=02%7C01%7Cbhelman%40SALEMSTATE.EDU%7C6d8957cb4ccc4b78fa9908d5e35f0660%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C0%7C636664919636675568=DXXYs7l2GxbjLG6VM8ZotaHzFBHovlIhXgjV3LKTllg%3D=0>
www.eduroam.us<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eduroam.us%2F=02%7C01%7Cbhelman%40SALEMSTATE.EDU%7C6d8957cb4ccc4b78fa9908d5e35f0660%7C70d32b73b45749d1950c4f78aeffc21b%7C0%7C0%7C636664919636685581=Z70NPKQwaeR2RJMXG35%2FEgAdilMAdOs8BnPOeu6Ttuw%3D=0>
+1 (865) 236-0770
GPG key id

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Philippe Hanset 
Ok, Stephanie is already on it  :)

As a last request, please update your Contact Info at www.eduroam.us 
<http://www.eduroam.us/>. Our main task this last week has been
to chase many of the eduroam peers and beg them to update their info (s 
many bounced email addresses)

Thanks,

Philippe




> On Jul 6, 2018, at 12:24 PM, Philippe Hanset 
> <005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote:
> 
> Jerry,
> 
> Thanks for the feedback. 
> We have been digesting these reports for about a year now and rejects per MAC 
> was on our agenda.
> 
> We had two issues with that one: 
> -Storing failed authentications is really overwhelming for our Top Level 
> Servers (we might have storage issues .. there is a lot of nasty stuff in 
> those failed attempts :)
> -Calling-Station-ID (MAC address) is not always reliable…some of you don't 
> send it, and some have different formats for the same MAC address (if you 
> have two Wi-Fi vendors on campus)
> 
> But, with all the feedback we will look into it again.
> 
> As a request to all of you, please make sure that you send Calling-Station-ID 
> (it is actually required).
> 
> Thanks,
> 
> Philippe
> 
> 
> Philippe Hanset, CEO
> 
>> On Jul 6, 2018, at 11:47 AM, Bucklaew, Jerry > <mailto:j...@buffalo.edu>> wrote:
>> 
>> Philippe,
>>  
>>I like the reports, but as people have pointed out the errors are 
>> concerning.  It might be good to quantify the errors to unique macs instead 
>> of just failures.  You have unique users authenticated and then 
>> authenticated percentage.  But is that the percentage of total request vs 
>> total failures or unique macs that have succeeded vs unique mac that have 
>> failed?  If our guess is correct, the failure percentage will be high (ours 
>> is around 20% for our users and 30% for guest)  for total request vs 
>> failures, but should be relatively low for total unique request vs unique 
>> failures.  Maybe that would be a stat worth adding?
>>  
>>  
>>  
>> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>> > <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Philippe Hanset
>> Sent: Friday, July 6, 2018 11:34 AM
>> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
>> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
>> Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
>>  
>> All,
>>  
>> When we designed the reports we had two main goals in mind:
>> 1)  Quantitative data (how many, and where), both as SP and IDP
>> 2) Qualitative data (is my service ok), both as IDP and SP
>>  
>> Many of you like the reports and also many have asked to have comparisons 
>> with other schools especially for “rejects”.
>>  
>> We cannot reveal other schools’ data without their consent,
>> but I have asked Stephanie(our data specialist) to work on graphs showing 
>> the distribution of errors (eg: 7 schools are at 0% success rate, 10 at 10%, 
>> etc…) also integrating into the stats the size of schools.
>> She will be brainstorming some of this in the coming weeks  and post it on 
>> the eduroam.us <http://eduroam.us/> website
>>  
>> Just looking roughly at data as an IDP and SP you should be around 60+ % 
>> Bear in mind that you cannot control poorly configured users coming to your 
>> campus as an SP.
>> As an IDP you can definitely check your stats and optimize your user’s 
>> configuration (to a point!).
>>  
>> In summary as an SP you have very little control, as an IDP you have a lot 
>> more!
>>  
>> Philippe
>>  
>> Philippe Hanset, CEO
>> www.anyroam.net <http://www.anyroam.net/>
>> www.eduroam.us <http://www.eduroam.us/>
>> +1 (865) 236-0770
>> 
>> GPG key id: 0xF2636F9C
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> On Jul 6, 2018, at 11:00 AM, Mike Atkins > <mailto:matk...@nd.edu>> wrote:
>>  
>> Our identity group typically manages the eduroam configuration.  I was 
>> recently added to troubleshoot some very specific issues.  Things I found 
>> useful are/were access to eduroam radius logs, realm testing tool, reports 
>> going back to January 2018, and a dashboard that has data going back to 
>> 2012.  I do not think there is read only access but it might be worth 
>> inquiring with your admin if you do any sort of regular radius 
>> troubleshooting.  (remote for your users or locally for guests)  I see a 
>> timeouts (frequent no response even though packet captures show our server 
>> responded) and on our six month

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Philippe Hanset 
Jerry,

Jerry,

Thanks for the feedback. 
We have been digesting these reports for about a year now and rejects per MAC 
was on our agenda.

We had two issues with that one: 
-Storing failed authentications is really overwhelming for our Top Level 
Servers (we might have storage issues .. there is a lot of nasty stuff in those 
failed attempts :)
-Calling-Station-ID (MAC address) is not always reliable…some of you don't send 
it, and some have different formats for the same MAC address (if you have two 
Wi-Fi vendors on campus)

But, with all the feedback we will look into it again.

As a request to all of you, please make sure that you send Calling-Station-ID 
(it is actually required).

Thanks,

Philippe


Philippe Hanset, CEO

> On Jul 6, 2018, at 11:47 AM, Bucklaew, Jerry  wrote:
> 
> Philippe,
>  
>I like the reports, but as people have pointed out the errors are 
> concerning.  It might be good to quantify the errors to unique macs instead 
> of just failures.  You have unique users authenticated and then authenticated 
> percentage.  But is that the percentage of total request vs total failures or 
> unique macs that have succeeded vs unique mac that have failed?  If our guess 
> is correct, the failure percentage will be high (ours is around 20% for our 
> users and 30% for guest)  for total request vs failures, but should be 
> relatively low for total unique request vs unique failures.  Maybe that would 
> be a stat worth adding?
>  
>  
>  
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>  <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Philippe Hanset
> Sent: Friday, July 6, 2018 11:34 AM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
>  
> All,
>  
> When we designed the reports we had two main goals in mind:
> 1)  Quantitative data (how many, and where), both as SP and IDP
> 2) Qualitative data (is my service ok), both as IDP and SP
>  
> Many of you like the reports and also many have asked to have comparisons 
> with other schools especially for “rejects”.
>  
> We cannot reveal other schools’ data without their consent,
> but I have asked Stephanie(our data specialist) to work on graphs showing the 
> distribution of errors (eg: 7 schools are at 0% success rate, 10 at 10%, 
> etc…) also integrating into the stats the size of schools.
> She will be brainstorming some of this in the coming weeks  and post it on 
> the eduroam.us <http://eduroam.us/> website
>  
> Just looking roughly at data as an IDP and SP you should be around 60+ % 
> Bear in mind that you cannot control poorly configured users coming to your 
> campus as an SP.
> As an IDP you can definitely check your stats and optimize your user’s 
> configuration (to a point!).
>  
> In summary as an SP you have very little control, as an IDP you have a lot 
> more!
>  
> Philippe
>  
> Philippe Hanset, CEO
> www.anyroam.net <http://www.anyroam.net/>
> www.eduroam.us <http://www.eduroam.us/>
> +1 (865) 236-0770
> 
> GPG key id: 0xF2636F9C
> 
> 
> 
> 
> 
> 
> 
> On Jul 6, 2018, at 11:00 AM, Mike Atkins  <mailto:matk...@nd.edu>> wrote:
>  
> Our identity group typically manages the eduroam configuration.  I was 
> recently added to troubleshoot some very specific issues.  Things I found 
> useful are/were access to eduroam radius logs, realm testing tool, reports 
> going back to January 2018, and a dashboard that has data going back to 2012. 
>  I do not think there is read only access but it might be worth inquiring 
> with your admin if you do any sort of regular radius troubleshooting.  
> (remote for your users or locally for guests)  I see a timeouts (frequent no 
> response even though packet captures show our server responded) and on our 
> six month eduroam success rate is 69.7%  I am still in the process of 
> troubleshooting but the information is very helpful.  E-mail me off list and 
> I’ll send you our reports if you want to compare sites.
>  
>  
>  
>  
>  
> Mike Atkins 
> Network Engineer
> Office of Information Technology
> University of Notre Dame
>  
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Patrick McEvilly
> Sent: Friday, July 06, 2018 8:08 AM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
>  
> As the admin contact I was getting them but asked if we could add some 
> internal mailing lists.  In your eduro

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Michael Dickson 
It would be interesting to know how many devices are responsible for the
total rejection rate. If there is a perpetually misconfigured device on
the campus I assume this would skew the error rate. I've seen exchange
students who are here for a year with rejected credentials on their
smartphone constantly failing day in and day out. Likewise, we've had
former users from our campus who are abroad constantly being rejected
because they no longer have an account or have an expired password and
don't resolve it. It's interesting how long some users will just switch
to LTE and not try to resolve their supplicant issue on their smartphone.

Mike

Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu<mailto:michael.dick...@umass.edu>
PGP: 0x16777D39



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Hunter Fuller 
Sent: Friday, July 6, 2018 11:54:12 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report

Shouldn't the errors be concerning? That is, don't they indicate an actual 
problem in the authentication flow?

I don't know of a client that sits there and hammers the wrong credentials, 
usually they'll disable or back off of the SSID. Of course, wrong password will 
cause failures but not like 40-50% in our experience. We see closer to 10% 
failures.

On Fri, Jul 6, 2018 at 10:47 Bucklaew, Jerry 
mailto:j...@buffalo.edu>> wrote:
Philippe,

   I like the reports, but as people have pointed out the errors are 
concerning.  It might be good to quantify the errors to unique macs instead of 
just failures.  You have unique users authenticated and then authenticated 
percentage.  But is that the percentage of total request vs total failures or 
unique macs that have succeeded vs unique mac that have failed?  If our guess 
is correct, the failure percentage will be high (ours is around 20% for our 
users and 30% for guest)  for total request vs failures, but should be 
relatively low for total unique request vs unique failures.  Maybe that would 
be a stat worth adding?



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Philippe Hanset
Sent: Friday, July 6, 2018 11:34 AM

To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report

All,

When we designed the reports we had two main goals in mind:
1)  Quantitative data (how many, and where), both as SP and IDP
2) Qualitative data (is my service ok), both as IDP and SP

Many of you like the reports and also many have asked to have comparisons with 
other schools especially for “rejects”.

We cannot reveal other schools’ data without their consent,
but I have asked Stephanie(our data specialist) to work on graphs showing the 
distribution of errors (eg: 7 schools are at 0% success rate, 10 at 10%, etc…) 
also integrating into the stats the size of schools.
She will be brainstorming some of this in the coming weeks  and post it on the 
eduroam.us<http://eduroam.us> website

Just looking roughly at data as an IDP and SP you should be around 60+ %
Bear in mind that you cannot control poorly configured users coming to your 
campus as an SP.
As an IDP you can definitely check your stats and optimize your user’s 
configuration (to a point!).

In summary as an SP you have very little control, as an IDP you have a lot more!

Philippe

Philippe Hanset, CEO
www.anyroam.net<http://www.anyroam.net>
www.eduroam.us<http://www.eduroam.us>
+1 (865) 236-0770
GPG key id: 0xF2636F9C






On Jul 6, 2018, at 11:00 AM, Mike Atkins 
mailto:matk...@nd.edu>> wrote:

Our identity group typically manages the eduroam configuration.  I was recently 
added to troubleshoot some very specific issues.  Things I found useful 
are/were access to eduroam radius logs, realm testing tool, reports going back 
to January 2018, and a dashboard that has data going back to 2012.  I do not 
think there is read only access but it might be worth inquiring with your admin 
if you do any sort of regular radius troubleshooting.  (remote for your users 
or locally for guests)  I see a timeouts (frequent no response even though 
packet captures show our server responded) and on our six month eduroam success 
rate is 69.7%  I am still in the process of troubleshooting but the information 
is very helpful.  E-mail me off list and I’ll send you our reports if you want 
to compare sites.





Mike Atkins
Network Engineer
Office of Information Technology
University of Notre Dame

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>]
 On Behalf Of Patrick McEvilly
Sent: Friday, July 06, 2018 8:08 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU&

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Hunter Fuller 
Shouldn't the errors be concerning? That is, don't they indicate an actual
problem in the authentication flow?

I don't know of a client that sits there and hammers the wrong credentials,
usually they'll disable or back off of the SSID. Of course, wrong password
will cause failures but not like 40-50% in our experience. We see closer to
10% failures.

On Fri, Jul 6, 2018 at 10:47 Bucklaew, Jerry  wrote:

> Philippe,
>
>
>
>I like the reports, but as people have pointed out the errors are
> concerning.  It might be good to quantify the errors to unique macs instead
> of just failures.  You have unique users authenticated and then
> authenticated percentage.  But is that the percentage of total request vs
> total failures or unique macs that have succeeded vs unique mac that have
> failed?  If our guess is correct, the failure percentage will be high (ours
> is around 20% for our users and 30% for guest)  for total request vs
> failures, but should be relatively low for total unique request vs unique
> failures.  Maybe that would be a stat worth adding?
>
>
>
>
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Philippe Hanset
> *Sent:* Friday, July 6, 2018 11:34 AM
>
>
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Your eduroam semi-annual report
>
>
>
> All,
>
>
>
> When we designed the reports we had two main goals in mind:
>
> 1)  Quantitative data (how many, and where), both as SP and IDP
>
> 2) Qualitative data (is my service ok), both as IDP and SP
>
>
>
> Many of you like the reports and also many have asked to have comparisons
> with other schools especially for “rejects”.
>
>
>
> We cannot reveal other schools’ data without their consent,
>
> but I have asked Stephanie(our data specialist) to work on graphs showing
> the distribution of errors (eg: 7 schools are at 0% success rate, 10 at
> 10%, etc…) also integrating into the stats the size of schools.
>
> She will be brainstorming some of this in the coming weeks  and post it on
> the eduroam.us website
>
>
>
> Just looking roughly at data as an IDP and SP you should be around 60+ %
>
> Bear in mind that you cannot control poorly configured users coming to
> your campus as an SP.
>
> As an IDP you can definitely check your stats and optimize your user’s
> configuration (to a point!).
>
>
>
> In summary as an SP you have very little control, as an IDP you have a lot
> more!
>
>
>
> Philippe
>
>
>
> Philippe Hanset, CEO
> www.anyroam.net
> www.eduroam.us
> +1 (865) 236-0770
>
> GPG key id: 0xF2636F9C
>
>
>
>
>
>
> On Jul 6, 2018, at 11:00 AM, Mike Atkins  wrote:
>
>
>
> Our identity group typically manages the eduroam configuration.  I was
> recently added to troubleshoot some very specific issues.  Things I found
> useful are/were access to eduroam radius logs, realm testing tool, reports
> going back to January 2018, and a dashboard that has data going back to
> 2012.  I do not think there is read only access but it might be worth
> inquiring with your admin if you do any sort of regular radius
> troubleshooting.  (remote for your users or locally for guests)  I see a
> timeouts (frequent no response even though packet captures show our server
> responded) and on our six month eduroam success rate is 69.7%  I am still
> in the process of troubleshooting but the information is very helpful.
> E-mail me off list and I’ll send you our reports if you want to compare
> sites.
>
>
>
>
>
>
>
>
>
>
>
> *Mike Atkins *
>
> Network Engineer
>
> Office of Information Technology
>
> University of Notre Dame
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Patrick McEvilly
> *Sent:* Friday, July 06, 2018 8:08 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Your eduroam semi-annual report
>
>
>
> As the admin contact I was getting them but asked if we could add some
> internal mailing lists.  In your eduroam profile they have added a “report
> contact” option which is working well.
>
>
>
> Patrick
>
>
>
>
>
> *From: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of "Watters, John" <
> john.watt...@ua.edu>
> *Reply-To: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> *Date: *Friday, July 6, 2018 at 8:01 AM
> *To: *"WIRELESS-LAN@LISTSERV.

RE: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Bucklaew, Jerry 
Philippe,

   I like the reports, but as people have pointed out the errors are 
concerning.  It might be good to quantify the errors to unique macs instead of 
just failures.  You have unique users authenticated and then authenticated 
percentage.  But is that the percentage of total request vs total failures or 
unique macs that have succeeded vs unique mac that have failed?  If our guess 
is correct, the failure percentage will be high (ours is around 20% for our 
users and 30% for guest)  for total request vs failures, but should be 
relatively low for total unique request vs unique failures.  Maybe that would 
be a stat worth adding?



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Philippe Hanset
Sent: Friday, July 6, 2018 11:34 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report

All,

When we designed the reports we had two main goals in mind:
1)  Quantitative data (how many, and where), both as SP and IDP
2) Qualitative data (is my service ok), both as IDP and SP

Many of you like the reports and also many have asked to have comparisons with 
other schools especially for “rejects”.

We cannot reveal other schools’ data without their consent,
but I have asked Stephanie(our data specialist) to work on graphs showing the 
distribution of errors (eg: 7 schools are at 0% success rate, 10 at 10%, etc…) 
also integrating into the stats the size of schools.
She will be brainstorming some of this in the coming weeks  and post it on the 
eduroam.us<http://eduroam.us> website

Just looking roughly at data as an IDP and SP you should be around 60+ %
Bear in mind that you cannot control poorly configured users coming to your 
campus as an SP.
As an IDP you can definitely check your stats and optimize your user’s 
configuration (to a point!).

In summary as an SP you have very little control, as an IDP you have a lot more!

Philippe

Philippe Hanset, CEO
www.anyroam.net<http://www.anyroam.net>
www.eduroam.us<http://www.eduroam.us>
+1 (865) 236-0770
GPG key id: 0xF2636F9C






On Jul 6, 2018, at 11:00 AM, Mike Atkins 
mailto:matk...@nd.edu>> wrote:

Our identity group typically manages the eduroam configuration.  I was recently 
added to troubleshoot some very specific issues.  Things I found useful 
are/were access to eduroam radius logs, realm testing tool, reports going back 
to January 2018, and a dashboard that has data going back to 2012.  I do not 
think there is read only access but it might be worth inquiring with your admin 
if you do any sort of regular radius troubleshooting.  (remote for your users 
or locally for guests)  I see a timeouts (frequent no response even though 
packet captures show our server responded) and on our six month eduroam success 
rate is 69.7%  I am still in the process of troubleshooting but the information 
is very helpful.  E-mail me off list and I’ll send you our reports if you want 
to compare sites.





Mike Atkins
Network Engineer
Office of Information Technology
University of Notre Dame

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>]
 On Behalf Of Patrick McEvilly
Sent: Friday, July 06, 2018 8:08 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report

As the admin contact I was getting them but asked if we could add some internal 
mailing lists.  In your eduroam profile they have added a “report contact” 
option which is working well.

Patrick


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of "Watters, John" mailto:john.watt...@ua.edu>>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Friday, July 6, 2018 at 8:01 AM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
Resent-From: Patrick McEvilly 
mailto:patrick_mcevi...@harvard.edu>>

What person at a school receives them? I want to see ours.

Thanks.

Sent from my iPhone

On Jul 6, 2018, at 6:40 AM, Philippe Hanset 
<005cd62f91b7-dmarc-requ...@listserv.educause.edu<mailto:005cd62f91b7-dmarc-requ...@listserv.educause.edu>>
 wrote:
Yahya,

These reports are provided to all IdPs
and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2 has 
built those reports based on the US top level RADIUS logs.

Philippe
Philippe Hanset, CEO
ANYROAM LLC
www.anyroam.net<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.anyroam.net=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7e0QP6NFQUP_IE0Xafm5WM3RjJzkZd3U=X

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Philippe Hanset 
All,

When we designed the reports we had two main goals in mind:
1)  Quantitative data (how many, and where), both as SP and IDP
2) Qualitative data (is my service ok), both as IDP and SP

Many of you like the reports and also many have asked to have comparisons with 
other schools especially for “rejects”.

We cannot reveal other schools’ data without their consent,
but I have asked Stephanie(our data specialist) to work on graphs showing the 
distribution of errors (eg: 7 schools are at 0% success rate, 10 at 10%, etc…) 
also integrating into the stats the size of schools.
She will be brainstorming some of this in the coming weeks  and post it on the 
eduroam.us <http://eduroam.us/> website

Just looking roughly at data as an IDP and SP you should be around 60+ % 
Bear in mind that you cannot control poorly configured users coming to your 
campus as an SP.
As an IDP you can definitely check your stats and optimize your user’s 
configuration (to a point!).

In summary as an SP you have very little control, as an IDP you have a lot more!

Philippe

Philippe Hanset, CEO
www.anyroam.net
www.eduroam.us
+1 (865) 236-0770

GPG key id: 0xF2636F9C






> On Jul 6, 2018, at 11:00 AM, Mike Atkins  wrote:
> 
> Our identity group typically manages the eduroam configuration.  I was 
> recently added to troubleshoot some very specific issues.  Things I found 
> useful are/were access to eduroam radius logs, realm testing tool, reports 
> going back to January 2018, and a dashboard that has data going back to 2012. 
>  I do not think there is read only access but it might be worth inquiring 
> with your admin if you do any sort of regular radius troubleshooting.  
> (remote for your users or locally for guests)  I see a timeouts (frequent no 
> response even though packet captures show our server responded) and on our 
> six month eduroam success rate is 69.7%  I am still in the process of 
> troubleshooting but the information is very helpful.  E-mail me off list and 
> I’ll send you our reports if you want to compare sites.
>  
>  
>  
>  
>  
> Mike Atkins 
> Network Engineer
> Office of Information Technology
> University of Notre Dame
>  
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Patrick McEvilly
> Sent: Friday, July 06, 2018 8:08 AM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
>  
> As the admin contact I was getting them but asked if we could add some 
> internal mailing lists.  In your eduroam profile they have added a “report 
> contact” option which is working well.
>  
> Patrick
>  
>  
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>  <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of "Watters, John" 
> mailto:john.watt...@ua.edu>>
> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>  <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
> Date: Friday, July 6, 2018 at 8:01 AM
> To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
> <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" 
>  <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
> Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
> Resent-From: Patrick McEvilly  <mailto:patrick_mcevi...@harvard.edu>>
>  
> What person at a school receives them? I want to see ours. 
>  
> Thanks. 
> 
> Sent from my iPhone
> 
> On Jul 6, 2018, at 6:40 AM, Philippe Hanset 
> <005cd62f91b7-dmarc-requ...@listserv.educause.edu 
> <mailto:005cd62f91b7-dmarc-requ...@listserv.educause.edu>> wrote:
> 
> Yahya,
>  
> These reports are provided to all IdPs
> and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2 
> has built those reports based on the US top level RADIUS logs. 
>  
> Philippe 
> 
> Philippe Hanset, CEO
> ANYROAM LLC
> www.anyroam.net 
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.anyroam.net=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7e0QP6NFQUP_IE0Xafm5WM3RjJzkZd3U=XSVDB6hUKN7nYCKHPRaOeBwzf5x7sKWBSgkqwF8O2yA=>
> www.eduroam.us 
> <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.eduroam.us=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7e0QP6NFQUP_IE0Xafm5WM3RjJzkZd3U=nBExgSVb3S72y2W1z9jcHvCQu1bWmus2HEI8f-6ee_M=>
> 
> On Jul 6, 2018, at 6:17 AM, Yahya M. Jaber  <mailto:yahya.ja...@kaust.edu.sa>> wrote:
> 
> Is this only for Idp’s who has it as primary network? Eduroam is a secondary 
> one for us here.
>  
>  
> Be

RE: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Mike Atkins 
Our identity group typically manages the eduroam configuration.  I was
recently added to troubleshoot some very specific issues.  Things I found
useful are/were access to eduroam radius logs, realm testing tool, reports
going back to January 2018, and a dashboard that has data going back to
2012.  I do not think there is read only access but it might be worth
inquiring with your admin if you do any sort of regular radius
troubleshooting.  (remote for your users or locally for guests)  I see a
timeouts (frequent no response even though packet captures show our server
responded) and on our six month eduroam success rate is 69.7%  I am still
in the process of troubleshooting but the information is very helpful.
E-mail me off list and I’ll send you our reports if you want to compare
sites.











*Mike Atkins *

Network Engineer

Office of Information Technology

University of Notre Dame



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Patrick McEvilly
*Sent:* Friday, July 06, 2018 8:08 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] Your eduroam semi-annual report



As the admin contact I was getting them but asked if we could add some
internal mailing lists.  In your eduroam profile they have added a “report
contact” option which is working well.



Patrick





*From: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of "Watters, John" <
john.watt...@ua.edu>
*Reply-To: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
*Date: *Friday, July 6, 2018 at 8:01 AM
*To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
*Subject: *Re: [WIRELESS-LAN] Your eduroam semi-annual report
*Resent-From: *Patrick McEvilly 



What person at a school receives them? I want to see ours.



Thanks.

Sent from my iPhone


On Jul 6, 2018, at 6:40 AM, Philippe Hanset <
005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote:

Yahya,



These reports are provided to all IdPs

and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2
has built those reports based on the US top level RADIUS logs.



Philippe

Philippe Hanset, CEO

ANYROAM LLC

www.anyroam.net
<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.anyroam.net=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7e0QP6NFQUP_IE0Xafm5WM3RjJzkZd3U=XSVDB6hUKN7nYCKHPRaOeBwzf5x7sKWBSgkqwF8O2yA=>

www.eduroam.us
<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.eduroam.us=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7e0QP6NFQUP_IE0Xafm5WM3RjJzkZd3U=nBExgSVb3S72y2W1z9jcHvCQu1bWmus2HEI8f-6ee_M=>


On Jul 6, 2018, at 6:17 AM, Yahya M. Jaber  wrote:

Is this only for Idp’s who has it as primary network? Eduroam is a
secondary one for us here.





Best Regards,



*Yahya Jaber*

Sr. Wireless Engineer

IT Network & Communications – Engineering



Email yahya.ja...@kaust.edu.sa

Office +966 (0) 12 8081237

Mobile +966 (0) 558697555



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
] *On Behalf Of *Turner, Ryan H
*Sent:* Friday, July 6, 2018 4:03 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* [WIRELESS-LAN] Fwd: Your eduroam semi-annual report



All:



We have run eduroam as our primary SSID for several years.  For those
institutions that do not, but wonder what it might look like for those that
do, I’ve included our semi annual report.

Ryan Turner

Senior Manager of Networking, ITS

The University of North Carolina at Chapel Hill

+1 919 274 7926 Mobile

+1 919 445 0113 Office


Begin forwarded message:



** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/discuss
<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_discuss=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7e0QP6NFQUP_IE0Xafm5WM3RjJzkZd3U=KgccghEwWcmyoYQF9PJhISDZh12GnlsSwyjUCpC69Rw=>.



--

This message and its contents including attachments are intended solely for
the original recipient. If you are not the intended recipient or have
received this message in error, please notify me immediately and delete
this message from your computer system. Any unauthorized use or
distribution is prohibited. Please consider the environment before printing
this email.
** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/discuss
<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_discuss=DwMGaQ=WO-RGvefibhHBZq3fL85hQ=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM=PXBR2nrMAcW7

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Patrick McEvilly 
As the admin contact I was getting them but asked if we could add some internal 
mailing lists.  In your eduroam profile they have added a “report contact” 
option which is working well.

 

Patrick

 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of "Watters, John" 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Friday, July 6, 2018 at 8:01 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Your eduroam semi-annual report
Resent-From: Patrick McEvilly 

 

What person at a school receives them? I want to see ours. 

 

Thanks. 

Sent from my iPhone


On Jul 6, 2018, at 6:40 AM, Philippe Hanset 
<005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote:

Yahya, 

 

These reports are provided to all IdPs

and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2 has 
built those reports based on the US top level RADIUS logs. 

 

Philippe 

Philippe Hanset, CEO 

ANYROAM LLC

www.anyroam.net

www.eduroam.us


On Jul 6, 2018, at 6:17 AM, Yahya M. Jaber  wrote:

Is this only for Idp’s who has it as primary network? Eduroam is a secondary 
one for us here.

 

 

Best Regards,

 

Yahya Jaber  

Sr. Wireless Engineer

IT Network & Communications – Engineering

 

Email yahya.ja...@kaust.edu.sa

Office +966 (0) 12 8081237

Mobile +966 (0) 558697555

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Friday, July 6, 2018 4:03 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Fwd: Your eduroam semi-annual report

 

All: 

 

We have run eduroam as our primary SSID for several years.  For those 
institutions that do not, but wonder what it might look like for those that do, 
I’ve included our semi annual report. 

Ryan Turner 

Senior Manager of Networking, ITS

The University of North Carolina at Chapel Hill

+1 919 274 7926 Mobile

+1 919 445 0113 Office


Begin forwarded message:

 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

 

This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss. 


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Watters, John 
What person at a school receives them? I want to see ours.

Thanks.

Sent from my iPhone

On Jul 6, 2018, at 6:40 AM, Philippe Hanset 
<005cd62f91b7-dmarc-requ...@listserv.educause.edu>
 wrote:

Yahya,

These reports are provided to all IdPs
and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2 has 
built those reports based on the US top level RADIUS logs.

Philippe

Philippe Hanset, CEO
ANYROAM LLC
www.anyroam.net
www.eduroam.us

On Jul 6, 2018, at 6:17 AM, Yahya M. Jaber 
mailto:yahya.ja...@kaust.edu.sa>> wrote:

Is this only for Idp’s who has it as primary network? Eduroam is a secondary 
one for us here.


Best Regards,

Yahya Jaber
Sr. Wireless Engineer
IT Network & Communications – Engineering

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Friday, July 6, 2018 4:03 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Fwd: Your eduroam semi-annual report

All:

We have run eduroam as our primary SSID for several years.  For those 
institutions that do not, but wonder what it might look like for those that do, 
I’ve included our semi annual report.
Ryan Turner
Senior Manager of Networking, ITS
The University of North Carolina at Chapel Hill
+1 919 274 7926 Mobile
+1 919 445 0113 Office

Begin forwarded message:

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-06 Thread Philippe Hanset 
Yahya,

These reports are provided to all IdPs
and SPs in the US. ANYROAM, the operator of eduroam on behalf of Internet2 has 
built those reports based on the US top level RADIUS logs. 

Philippe 

Philippe Hanset, CEO
ANYROAM LLC
www.anyroam.net
www.eduroam.us

> On Jul 6, 2018, at 6:17 AM, Yahya M. Jaber  wrote:
> 
> Is this only for Idp’s who has it as primary network? Eduroam is a secondary 
> one for us here.
>  
>  
> Best Regards,
>  
> Yahya Jaber 
> Sr. Wireless Engineer
> IT Network & Communications – Engineering
>  
> Email yahya.ja...@kaust.edu.sa
> Office +966 (0) 12 8081237
> Mobile +966 (0) 558697555
>  
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
> Sent: Friday, July 6, 2018 4:03 AM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> Subject: [WIRELESS-LAN] Fwd: Your eduroam semi-annual report
>  
> All:
>  
> We have run eduroam as our primary SSID for several years.  For those 
> institutions that do not, but wonder what it might look like for those that 
> do, I’ve included our semi annual report. 
> 
> Ryan Turner
> Senior Manager of Networking, ITS
> The University of North Carolina at Chapel Hill
> +1 919 274 7926 Mobile
> +1 919 445 0113 Office
> 
> Begin forwarded message:
>  
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion list can be found at 
> http://www.educause.edu/discuss.
> 
> This message and its contents including attachments are intended solely for 
> the original recipient. If you are not the intended recipient or have 
> received this message in error, please notify me immediately and delete this 
> message from your computer system. Any unauthorized use or distribution is 
> prohibited. Please consider the environment before printing this email.
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion list can be found at 
> http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-05 Thread Turner, Ryan H 
I am guessing the failures are expired credentials/certs.

Ryan Turner
Senior Manager of Networking, ITS
The University of North Carolina at Chapel Hill
+1 919 274 7926 Mobile
+1 919 445 0113 Office

On Jul 5, 2018, at 9:55 PM, Julian Y Koh 
mailto:kohs...@northwestern.edu>> wrote:

On Jul 5, 2018, at 20:40, Turner, Ryan H 
mailto:rhtur...@email.unc.edu>> wrote:

They created it for us.  I think we started getting them a few weeks ago.

Yeah, we started getting them as well - I think they are very interesting.  Our 
immediate question was whether information was aggregated somewhere or could 
somehow be compared with other institutions like ours, but the response was 
that the types of institutions are very disparate and that it might be 
something they look into for the future.

One thing that I’m really curious about is the authentication success rates.  I 
haven’t seen our semi-annual report that covers all of January-June, but just 
looking at the monthly reports, we’re around 68% success for the NU users who 
are traveling elsewhere (but June had a big dropoff to 55% down from 65% the 
month before) and ~51% for the guests who are visiting our institution.  We 
don’t use eduroam as our primary SSID.

--
Julian Y. Koh
Associate Director, Telecommunications and Network Services
Northwestern Information Technology

2020 Ridge Avenue #331
Evanston, IL 60208
+1-847-467-5780
Northwestern IT Web Site: 
PGP Public Key: 

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-05 Thread Sweetser, Frank E 
I saw some similar rates on the success levels.  My guess is that it's because 
devices that succeed then proceed to go about their business until they have to 
reauthenticate for some legitimate reason, while ones that don't have correct 
credentials just continue to hammer away.


Frank Sweetser
Director of Network Operations
Worcester Polytechnic Institute
"For every problem, there is a solution that is simple, elegant, and wrong." - 
HL Mencken



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Julian Y Koh 

Sent: Thursday, July 5, 2018 9:55 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [SPF:Probably_Forged] Re: [WIRELESS-LAN] Your eduroam semi-annual 
report

On Jul 5, 2018, at 20:40, Turner, Ryan H 
mailto:rhtur...@email.unc.edu>> wrote:

They created it for us.  I think we started getting them a few weeks ago.

Yeah, we started getting them as well - I think they are very interesting.  Our 
immediate question was whether information was aggregated somewhere or could 
somehow be compared with other institutions like ours, but the response was 
that the types of institutions are very disparate and that it might be 
something they look into for the future.

One thing that I’m really curious about is the authentication success rates.  I 
haven’t seen our semi-annual report that covers all of January-June, but just 
looking at the monthly reports, we’re around 68% success for the NU users who 
are traveling elsewhere (but June had a big dropoff to 55% down from 65% the 
month before) and ~51% for the guests who are visiting our institution.  We 
don’t use eduroam as our primary SSID.

--
Julian Y. Koh
Associate Director, Telecommunications and Network Services
Northwestern Information Technology

2020 Ridge Avenue #331
Evanston, IL 60208
+1-847-467-5780
Northwestern IT Web Site: <http://www.it.northwestern.edu/>
PGP Public Key: <https://bt.ittns.northwestern.edu/julian/pgppubkey.html>

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Your eduroam semi-annual report

2018-07-05 Thread Julian Y Koh 
On Jul 5, 2018, at 20:40, Turner, Ryan H 
mailto:rhtur...@email.unc.edu>> wrote:

They created it for us.  I think we started getting them a few weeks ago.

Yeah, we started getting them as well - I think they are very interesting.  Our 
immediate question was whether information was aggregated somewhere or could 
somehow be compared with other institutions like ours, but the response was 
that the types of institutions are very disparate and that it might be 
something they look into for the future.

One thing that I’m really curious about is the authentication success rates.  I 
haven’t seen our semi-annual report that covers all of January-June, but just 
looking at the monthly reports, we’re around 68% success for the NU users who 
are traveling elsewhere (but June had a big dropoff to 55% down from 65% the 
month before) and ~51% for the guests who are visiting our institution.  We 
don’t use eduroam as our primary SSID.

--
Julian Y. Koh
Associate Director, Telecommunications and Network Services
Northwestern Information Technology

2020 Ridge Avenue #331
Evanston, IL 60208
+1-847-467-5780
Northwestern IT Web Site: 
PGP Public Key: 


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.