Re: [WIRELESS-LAN] 802.11n WPA2/AES requirement

2008-03-17 Thread Mike King 
Tim..
WPA2/AES for XP has been available for awhile, albeit not on windows update
for automatic update.

http://support.microsoft.com/kb/917021

This update also fixes the broadcast policies and the adhoc behavior.

On Mon, Mar 17, 2008 at 9:41 AM, Winders, Timothy A <
[EMAIL PROTECTED]> wrote:

>  We're looking at the same thing.  The only problem, is the native Windows
> XP supplicant does not support WPA2/AES.  XP SP3 adds this compatibility.
> So, for now, we have added a new SSID which is not broadcast and is
> WPA2/AES.  We are manually setting up clients to connect to that to test N
> and A/B/G interoperability.  So far, things seem to be working well.  I
> expect to leave our configuration in this mode for at least another year,
> then we'll flip/flop the SSIDs for the WPA2/AES is broadcast and the
> WPA/TKIP is not.  Then after another year, I expect to phase out the
> WPA/TKIP SSID completely.
>
>
>
>
>
> *Tim Winders | Associate Dean of Information Technology | South Plains
> College*
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> [EMAIL PROTECTED] *On Behalf Of *Nathan Hay
> *Sent:* Monday, March 17, 2008 7:10 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] 802.11n WPA2/AES requirement
>
>
>
> From my testing and from the systems engineer of the vendor's equipment
> that I was testing, an 802.11n client with WPA2/AES can connect at 
> 802.11nrates, but if that same
> 802.11n client connects using WPA/TKIP, it gets a/b/g rates even though
> client and AP are both 802.11n.  So yes, an N client can connect to an
> N AP with WPA/TKIP or WPA2/AES, but the max data rate will be different
> (54 vs. 300).  Based on this, we plan to migrate to WPA2/AES on our current
> a/b/g network to prepare for the mixed environment we will have next school
> year.  We plan to deploy 802.11n in a new building that opens next school
> year and maybe in one or two other buildings, but the majority of our
> buildings (including all dorms) will be a/b/g.
>
>
>
> Hope that helps,
>
>
>
> Nathan
>
>
>
>
>
>
>
> Nathan P. Hay
> Network Engineer
> Computer Services
> Cedarville University
> www.cedarville.edu
>
> >>> Keith Moores <[EMAIL PROTECTED]> 3/16/2008 4:04 PM >>>
> Just wondering what encryption type those of you that have started
> moving to (testing with) 802.11n APs are using?
>
> I'm trying to confirm that N clients connecting to N APs must use WPA2/
> AES to connect with encryption.
>
> If an N AP accepts both WPA/TKIP and WPA2/AES can an N client connect
> set to either albeit only at 802.11n HT rates when using WPA2/AES?
>
>
> -Keith
>
> 
> Keith Moores <mailto:[EMAIL PROTECTED]>
> Network S! ystems Senior Engineer
> ITC-Communications and Systems Division
> University of Virginia, ITC-2015 Ivy RdPhone  (434) 924-0621
> Box 400324, Charlottesville, VA 22904-4324 Fax(434) 982-4715
>
> **
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at 
> http://www.educause.edu/groups/.<http://www.educause.edu/groups/>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/groups/.
>  ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] 802.11n WPA2/AES requirement

2008-03-17 Thread Winders, Timothy A 
We're looking at the same thing.  The only problem, is the native
Windows XP supplicant does not support WPA2/AES.  XP SP3 adds this
compatibility.   So, for now, we have added a new SSID which is not
broadcast and is WPA2/AES.  We are manually setting up clients to
connect to that to test N and A/B/G interoperability.  So far, things
seem to be working well.  I expect to leave our configuration in this
mode for at least another year, then we'll flip/flop the SSIDs for the
WPA2/AES is broadcast and the WPA/TKIP is not.  Then after another year,
I expect to phase out the WPA/TKIP SSID completely.

 

 

Tim Winders | Associate Dean of Information Technology | South Plains
College

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:[EMAIL PROTECTED] On Behalf Of Nathan Hay
Sent: Monday, March 17, 2008 7:10 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 802.11n WPA2/AES requirement

 

>From my testing and from the systems engineer of the vendor's equipment
that I was testing, an 802.11n client with WPA2/AES can connect at
802.11n rates, but if that same 802.11n client connects using WPA/TKIP,
it gets a/b/g rates even though client and AP are both 802.11n.  So yes,
an N client can connect to an N AP with WPA/TKIP or WPA2/AES, but the
max data rate will be different (54 vs. 300).  Based on this, we plan to
migrate to WPA2/AES on our current a/b/g network to prepare for the
mixed environment we will have next school year.  We plan to deploy
802.11n in a new building that opens next school year and maybe in one
or two other buildings, but the majority of our buildings (including all
dorms) will be a/b/g.

 

Hope that helps,

 

Nathan

 

 

 

Nathan P. Hay
Network Engineer
Computer Services
Cedarville University
www.cedarville.edu <http://www.cedarville.edu/>  

>>> Keith Moores <[EMAIL PROTECTED]> 3/16/2008 4:04 PM >>>
Just wondering what encryption type those of you that have started  
moving to (testing with) 802.11n APs are using?

I'm trying to confirm that N clients connecting to N APs must use WPA2/ 
AES to connect with encryption.

If an N AP accepts both WPA/TKIP and WPA2/AES can an N client connect  
set to either albeit only at 802.11n HT rates when using WPA2/AES?


-Keith


Keith Moores <mailto:[EMAIL PROTECTED]>
Network S! ystems Senior Engineer
ITC-Communications and Systems Division
University of Virginia, ITC-2015 Ivy RdPhone  (434) 924-0621
Box 400324, Charlottesville, VA 22904-4324 Fax(434) 982-4715

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.
<http://www.educause.edu/groups/> 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] 802.11n WPA2/AES requirement

2008-03-17 Thread Barber, Matt 
Hi Keith,

In my experience, you are correct.  Per Draft 2.0 (I believe), 11n
clients must use either clear or WPA2/AES to operate at HT rates.  My
11n clients here will connect at WPA, but only at 11a/g rates.  

Something to be aware of for sure, especially if you want to support
older devices that can't do WPA2.  Running separate SSIDs may be the
only way to get all clients on and still provide HT rates for 11n
clients.

Take care,

Matt Barber
Network Analyst / PC Support
Morrisville State College
315-684-6053


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Moores
Sent: Sunday, March 16, 2008 4:05 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 802.11n WPA2/AES requirement

Just wondering what encryption type those of you that have started  
moving to (testing with) 802.11n APs are using?

I'm trying to confirm that N clients connecting to N APs must use WPA2/ 
AES to connect with encryption.

If an N AP accepts both WPA/TKIP and WPA2/AES can an N client connect  
set to either albeit only at 802.11n HT rates when using WPA2/AES?


-Keith


Keith Moores 
Network Systems Senior Engineer
ITC-Communications and Systems Division
University of Virginia, ITC-2015 Ivy RdPhone  (434) 924-0621
Box 400324, Charlottesville, VA 22904-4324 Fax(434) 982-4715

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.