Re: [WIRELESS-LAN] FreeRADIUS server scaling for 802.1x

2016-07-22 Thread Curtis K. Larsen
Yes we do. -Curtis On Fri, July 22, 2016 8:20 am, Frans Panken wrote: > Hi Curtis, Eriks, > > A bit off-topic but I plucked up the courage to aks you anyway: do you > also use this solution to place clients who misbehave (or likely have > viruses, malware) in quarantaine? > > -Frans > > > Op

Re: [WIRELESS-LAN] Guest Wireless Public DNS or Internal DNS

2016-07-22 Thread Jeremy Mooney
We recently went the other way. Primarily because while firewalling off things like AD and fileservers worked, the client behavior if they also can't look up the name is improved. The simplest solution to give the guest network an "outside" view of DNS was just to point them outside. Our existing

Re: [WIRELESS-LAN] Cisco AP Groups and other cool stuff...

2016-07-22 Thread Matthew Newton
On Fri, Jul 22, 2016 at 03:41:17PM +0100, Paul Seward wrote: > On 22 July 2016 at 15:24, Matthew Newton wrote: > > > > We've been using an in-house perl module[0] to manage the APs with > > SNMP and do this for all new APs without any issue. > > That looks significantly

RE: [WIRELESS-LAN] Cisco AP Groups and other cool stuff...

2016-07-22 Thread Hector J Rios
Thank you Matthew. SNMP sounds like a great alternative too! -H From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Paul Seward Sent: Friday, July 22, 2016 9:41 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re:

Re: [WIRELESS-LAN] Cisco AP Groups and other cool stuff...

2016-07-22 Thread Matthew Newton
On Fri, Jul 22, 2016 at 02:07:22PM +, Hector J Rios wrote: > But moving an AP to a new group requires a reboot. Interestingly, if you change AP group with SNMP, it just moves over without a reboot of the AP being required. We've been using an in-house perl module[0] to manage the APs with

Re: [WIRELESS-LAN] FreeRADIUS server scaling for 802.1x

2016-07-22 Thread Frans Panken
Hi Curtis, Eriks, A bit off-topic but I plucked up the courage to aks you anyway: do you also use this solution to place clients who misbehave (or likely have viruses, malware) in quarantaine? -Frans Op 19/07/16 om 17:09 schreef Curtis K. Larsen: > Nice slides. This is pretty similar to what

Cisco AP Groups and other cool stuff...

2016-07-22 Thread Hector J Rios
I just wanted to share information that I feel might be relevant to some of you. In the Cisco wireless solution, it has always bothered me the fact that newly installed APs get associated to the default-group AP group. This, by default, will announce the first 16 WLANs in your controller. It is

RE: ClearPass and IPv6

2016-07-22 Thread Hector J Rios
Thank you Bruce! That’s very disappointing to hear. Jerry did show me records that show the IPv6 address, and I’ve been able to find some (very few) that contain the IPv6 address, but it is very inconsistent. For IPv4, I have not seen any issues. All of my records correctly map a user to a v4