RE: Strange Apple 802.1x Client Names

2012-02-01 Thread Reynolds, Walter
In the last two days I have found one occurrence of com.apple.systemdefault We run both Meru and Cisco going through Freeradius. It was coming from a Cisco controller and was a Stop accounting record. I was unable to find a corresponding Start record yet. We have not noticed this before, but

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Mike Goebel
If you don't have LAG set up, you get MAC flapping on the switch - check the log on the switch perhaps. I'd have to check the manual, but from what I recall, it's required. I've run multiple 5508s and WiSMs, but always did LAG. Mike On 1/31/2012 7:39 PM, Jeffrey Sessler wrote: Are the AP's

RE: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Lee H Badman
We have seen this to varying degrees, off and on since early 2006 code. The one TAC case I did open a while back focused on AP switchport configs, spanning tree, CDP, and stuff like that. Wasn't particularly conclusive, and we have always used LAGs to our controllers whether they are WiSM or

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
TAC was quick to suspect LAG as well but our settings were already at the recommended when I opened the case. Just to rule it out, I dropped one of our controllers from an 8 port channel down to 1. Unfortunately we still see the drops at the same rate.

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
Interesting theory. We do use DHCP, although we're using DHCP across the entire campus so if this was the case, I would think we'd see more of it, not just in the dense student areas. Thanks, -dan Dan Brisson Network Engineer University of Vermont (Ph) 802.656.8111 dbris...@uvm.edu On

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
Good to know. The trunks are actually all 10Gig links, or 90% of them are, so utilization is most likely not the case, which I'm able to verify from Cacti graphs. The APs are connected to 3560Xs PoE switches that then uplink into either a 3560E-12D or directly into a 4900M where the 5508s

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Craig Eyre
Dan, Do your admin ap's also connect to 3560 switches or another model? I know you mentioned that the uptime was good but the capwap session was restarted. I've read that when enough power isn't given that certain features may not work correctly, may want to look in that direction as it seems

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Jeff Kell
How large are your wireless subnets? Are you doing any broadcast/multicast limiting? You might also check for laptop loops -- anything with wired and wireless interfaces with both of them connected at the same time. Just takes one kid with ICS or Bridging turned on... Jeff **

RE: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Garry Peirce
I think you have some of us all getting curious! ;-) Could you put a historically stable admin AP onto the 5508 and vice-versa to see if behaviors change? Do we assume that all switchports in the path are showing they're running clean? Any QoS config in place on the switches? -Original

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
Craig, Interesting. The admin APs are connected to a wide variety of 3550/3560 models. A good number of them use power injectors due to one department at a time wanting wireless in their area. When we've done larger projects we'll use PoE. I'm somewhat familiar with the power limiting

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Craig Eyre
Dan, That is correct, it usually limits the power to the radio but I'll see if I can find the doc about what I mentioned. I'd assume that most or some of your admin ap's are NOT 3502's as you are running 3550 switches and they don't support the recommended power. Did you happen to enable data

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
It does seem as though I've grabbed some folks attention. I sure hope it turns out to not be something simple. :) I could certainly try moving the APs around...easy enough to do, although from what we've seen, the pattern of AP drops is so totally random, hard to

Re: Strange Apple 802.1x Client Names

2012-02-01 Thread Jason Healy
On Jan 31, 2012, at 12:55 PM, Lee H Badman wrote: Wild and weird- anyone been here before? Yes. We're all-Apple here and saw those showing up. Never got to the bottom of why those usernames were coming through from the clients (as you suspect, we figured it was some weird keychain issue).

RE: [WIRELESS-LAN] SSIDs, devices and guests

2012-02-01 Thread Hurt,Trenton William
Our current guest access is via web portal and sponsored accounts. We are looking at doing away with the need for sponsoring accounts and open it up with port/bandwidth restrictions and AUP. Our security folks are concerned with Calea, and how to handle DMCA notices. For the folks that are

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Mike Goebel
Dan, have you tried logging into the AP itself and checking the logs by chance? Mike On 2/1/2012 10:03 AM, Dan Brisson wrote: It does seem as though I've grabbed some folks attention. I sure hope it turns out to not be something simple. :) I could certainly try moving the APs around...easy

Re: WIRELESS-LAN - Cisco APs losing CAPWAP session

2012-02-01 Thread Earl Barfield
Date:Tue, 31 Jan 2012 08:29:57 -0500 From:Dan Brissondbris...@uvm.edu Subject: Cisco APs losing CAPWAP session I'm curious if any Cisco users out there are experiencing or have experienced what we're seeing on our campus. This past summer we installed 3502i's in all of our residence

old Bluesocket devices

2012-02-01 Thread Jamie Savage
Hi, We're looking for some stop gap captive portal equipment. Has anyone retired any Bluesocket 5000s or 5200s (preferably) that they would be willing to part with. Please contact me directly. ..thanks in advance..Jamie Jamie Savage | Senior Communications

RE: [WIRELESS-LAN] Strange Apple 802.1x Client Names

2012-02-01 Thread Danny Eaton
Here at Rice, we've got over 7,000 wireless users a day (All Cisco LWAPP's); and as of right now, only 1 entry for com.apple. as a Client User Name. It's on our Visitor (no auth) network. From: The EDUCAUSE Wireless Issues Constituent Group Listserv

Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Zachary McGibbon, Mr
Last year there was some discussion on this list as per setting up Wifi on Inter-Campus shuttle buses and here at McGill we were in the middle of doing our tests for our 4 shuttle buses between our downtown and remote campus. As of January this year, we now have Wifi on all four of the buses.

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
This what we see on the AP at the time the AP disjoins: *Feb 1 14:16:25.174: %DTLS-5-SEND_ALERT: Send FATAL : Close notify Alert to 10.246.207.214:5246 *Feb 1 14:16:25.227: %WIDS-5-DISABLED: IDS Signature is removed and disabled. *Feb 1 14:16:25.227: %CAPWAP-5-CHANGED: CAPWAP changed state

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
Ok, thanks for validating. It also seemed a bit strange to me and yes, I checked a bunch APs that haven't dropped recently and they all showed 10-12ms. One thing that occurred to me is we are doing DHCP snooping and Dynamic Arp Inspection on the 3560Xs. That is

RE: Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Lee H Badman
This sounds fun. On our end, we found that the bus provider wasn't real interested, and then they ended up doing it themselves. Go figure. What about leveraging the USB port on the modem, for the likes of the USGLOBALSAT or Garmin GPS that connect via USB? I don't know that it could be done,

Re: [WIRELESS-LAN] old Bluesocket devices

2012-02-01 Thread Timothy J. Fairlie
Hi Jamie, We've got four BSC-5200's that were retired in September On 2/1/2012 11:15 AM, Jamie Savage wrote: Hi, We're looking for some stop gap captive portal equipment. Has anyone retired any Bluesocket 5000s or 5200s (preferably) that they would be willing to part with. Please

Re: [WIRELESS-LAN] old Bluesocket devices

2012-02-01 Thread Timothy J. Fairlie
My apologies for sending my last message to the list.. didn't pay attention to the reply-to field On 2/1/2012 11:15 AM, Jamie Savage wrote: Hi, We're looking for some stop gap captive portal equipment. Has anyone retired any Bluesocket 5000s or 5200s (preferably) that they would be

RE: Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Brandon Abell
My first instinct would be to try to do this with old iphones. They have GPS and WiFi. It would be easy enough to wire them to 12v with a cigarette lighter charger. And if none of the apps on the appstore will work for tracking, it shouldn't be too hard to roll your own. B.

RE: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Ian McDonald
Stupid it may be as a question, but are your two (or more) DHCP servers handing out the same length leases? You may also need to tweak the DAI settings. I know we had to change the default thresholds when we first deployed it. -- Ian From: The EDUCAUSE Wireless Issues Constituent Group

Re: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Mike King
I haven't followed this in awhile, but the geograhics lab at Bridgewater State University looks like there still doing this: http://geolabvirtualmaps.com/ I they were using custom built equipment to do this, but were thinking of transitioning to off the shelf stuff the last time I talked to

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Craig Eyre
Dan, What time is your controller showing? From your log messages it looks like its 2:16pm there? AP's have issues when the time is off between the controller and the ap's. Craig Eyre Network Analyst IT Services Department Mount Royal University 4825 Mount Royal Gate SW Calgary AB T2P 3T5 P.

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Mike King
Ooooh... DAI? I have some bad experiences with DAI and some crappy low end printers. (to the point where they go in they're own VLAN without DAI) (And some very expensive video conferencing units) My switch vendor also had a bug with DAI (over 2 years ago now) that got resolved pretty quickly

Re: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Lynne Meeks
You could always contact Blirpit, which was developed here at UVM (where is it also very cold in the winter!) To fine-tune your time managment skills you can use the Bus Line Information Retrieval Program, or Blurpit https://uvm.blirpit.com/, a locally invented transportation-tracking service

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dan Brisson
Good question. Turns out the APs use UTC time, which appears to be correct: AP#sh clock *17:29:03.737 UTC Wed Feb 1 2012 -dan Dan Brisson Network Engineer University of Vermont (Ph) 802.656.8111 dbris...@uvm.edu On 2/1/2012 12:11 PM, Craig Eyre wrote: Dan, What time is your controller

RE: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Garry Peirce
Dale beat me to it, as I was thinking of the exact same thing. With perhaps the downside being adding support complexity should it have an issue. -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Dale

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dennis Xu
Dan, Do you have the APs in public subnets or private subnets? Occasionally we see this problem happening in our environment as well. Currently we put APs in public subnets. I worked with Cisco TAC on this and we could not find anything. Finally TAC suggested we move APs to private subnets and

RE: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Lee H Badman
Private management space has not helped us at all. If there is no reason given for the suggestion that you move to private space, it sounds like straws are being grasped at. We have been on private space for quite while for AP management, switch management, and another of other uses where the

RE: Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Peter P Morrissey
Sweet! It seems like one challenge would be the devices would constantly be resetting every time the bus stops running if you are powered directly off the alternator? Has that caused any issues? On top of that it seems like you would be dealing with some environmental extremes that you

Re: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Jeff Kell
On 2/1/2012 1:11 PM, Peter P Morrissey wrote: Sweet! It seems like one challenge would be the devices would constantly be resetting every time the bus stops running if you are powered directly off the alternator? Has that caused any issues? On top of that it seems like you would be

Re: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread John Rodkey
Well, at least you found out that the mitigation worked as advertised! :) On Wed, Feb 1, 2012 at 10:26 AM, Jeff Kell jeff-k...@utc.edu wrote: On 2/1/2012 1:11 PM, Peter P Morrissey wrote: Sweet! It seems like one challenge would be the devices would constantly be resetting every time the

Cisco Access Point Power Adaptors

2012-02-01 Thread Mike King
Anyone have 40 to 50 Cisco AP power adapters for Cisco 1131 Access points they don't want. The AP shipped with the AIR-PWR-A, which has been replaced with the AIR-PWR-B. We're getting ready to trial out doing Office Extend with some older AP's we've pulled out and replaced with N access points.

RE: [WIRELESS-LAN] SSIDs, devices and guests

2012-02-01 Thread Brian Helman
Philippe, I love that idea, but does that work in reverse? If someone accidentally uses the Guest Network first, will they get closed out of the real network when they try to join? -Brian -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv

RE: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread David Gillett
One of my old college buddies worked on a system like this, years ago now, in the Toronto area. Their biggest recurring issue was with the vehicle maintenance manuals, which typically would begin each procedure with an instruction to the mechanic to disconnect all electronic devices and end