Re: [WIRELESS-LAN] 802.1x certificate authentication

2016-09-21 Thread Bruce Curtis
We have offered 802.1x EAP-TLS since the fall of 2009. Cert installation did require more than 3 steps so it was deemed painful, so after some number of painful years we started using CloudPath XpressConnect which reduced the pain. EAP-TLS works on most devices but there are some devices

Re: 802.1x certificate authentication

2016-09-21 Thread Curtis K. Larsen
The Android experience is still good in my opinion, just weaker than iOS when you incorporate the Play Store. (I think ISE links to the Play Store too). Luckily, Cloudpath has the option of directly downloading the certs instead of requiring the app from the Play Store. Of course, a profile

RE: 802.1x certificate authentication

2016-09-21 Thread Turner, Ryan H
Android is definitely 'the' problem. In our stats, you can see that they are only 10% of the clients we onboard, but are closer to 90% of the trouble tickets. We were a Cloudpath customer and made the switch to SecureW2 (the android experience was a big reason). Ryan -Original

Re: 802.1x certificate authentication

2016-09-21 Thread Curtis K. Larsen
We've been offering EAP-TLS for about 2 years. It's been the only supported option for BYOD for just over a year. Personally, I think the user experience is pretty good across all devices (Android is weaker but still not bad). I've heard rumblings that Android might be changing to a profile

RE: Planning a WISM2 to 8540 migration

2016-09-21 Thread Lee H Badman
At this point, I can't recommend using the AVC feature on 85xx platforms. Lee Badman | Network Architect (CWDP, CWNA, CWSP, Mobility+) Information Technology Services 206 Machinery Hall 120 Smith Drive Syracuse, New York 13244 t 315.443.3003 f 315.443.4325 e

Re: Cisco 8540s, and 8.3.102 Code

2016-09-21 Thread Earl Barfield
On 09/21/16 00:00, WIRELESS-LAN automatic digest system wrote: Date:Tue, 20 Sep 2016 10:25:06 -0600 From:Luke Jenkins Subject: Re: Cisco 8540s, and 8.3.102 Code Have you gotten bug IDs for the FRA and 11k issues? No, not yet. I'm not convinced that its related

802.1x certificate authentication

2016-09-21 Thread Muraca, Peppino P.
Hello all, I was wondering who or if anyone is using 802.1x cert auth for all wireless devices, and if you are, what is the experience with student devices ? We are currently 802.1x username password , and have been thinking about the going the cer route. I feel the cert auth is still a