Re: [WIRELESS-LAN] requests for open, unauthenticated, no portal WiFi

2014-05-20 Thread Jeff Kell
We use essentially the eduroam services guidelines (https://www.eduroam.us/node/69) but we have bandwidth restrictions on guest WiFi that are not applied to actual eduroam traffic. Jeff On 5/20/2014 1:31 PM, Heath Barnhart wrote: I'm using a simple ACL to restrict traffic. For VPN access we are

Re: [WIRELESS-LAN] 11ac migration question

2014-03-17 Thread Jeff Kell
On 3/17/2014 5:12 PM, Kitri Waterman wrote: Thomas, We're looking at the same antenna for an auditorium space as well, so glad to hear it's worked out for you. Considering this universal mount or similar: http://www.terra-wave.com/shop/universal-articulating-mount-p-672.html Does this work

Re: [WIRELESS-LAN] 11ac migration question

2014-03-17 Thread Jeff Kell
... Frank Sweetser fs at wpi.edu| For every problem, there is a solution that Manager of Network Operations | is simple, elegant, and wrong. Worcester Polytechnic Institute | - HL Mencken On 3/16/2014 1:04 AM, Jeff Kell wrote: Have seen similar results with Dell laptop locking

Re: [WIRELESS-LAN] 11ac migration question

2014-03-17 Thread Jeff Kell
I sort of missed my conclusion... so my apologies, let me add that part... On 3/17/2014 11:04 PM, Jeff Kell wrote: Well, some client drivers will let you tweak the advanced settings. I know I can prefer 5Ghz and I can prefer N on my aging laptop (yeah, it was my Dell below, trying to track

Re: [WIRELESS-LAN] 11ac migration question

2014-03-15 Thread Jeff Kell
Have seen similar results with Dell laptop locking onto 802.11n at a distance and ignoring same room a/b/g. We are trying to avoid mixed deployments, and sounds like the same concerns extend to 11ac as well. Jeff On 3/15/2014 11:12 PM, Alok Vimawala wrote: Hi Frank, We just had an

Re: [WIRELESS-LAN] How many drops 802.11ac phase 2

2014-02-07 Thread Jeff Kell
On 2/7/2014 7:11 PM, Green, William C wrote: We pull one 6a also. That makes enough of us to drink together comfortably at the next Educause party. Most of our APs are one 5e. As well discussed, I also expect GE to be sufficient for a number of years, but I never bet against more

Re: [WIRELESS-LAN] Guest Network Access Policy

2014-01-16 Thread Jeff Kell
On 1/16/2014 4:55 PM, Alexander, David wrote: 1) Do you allow guests on your wireless network? Yes. a. If you allow guests, what steps do they need to take to gain access to the network (eg. sponsorship, MAC registration, open network)? We provide 'eduroam' for participating

Re: [WIRELESS-LAN] Game consoles?

2013-12-23 Thread Jeff Kell
On 12/23/2013 4:43 PM, Danny Eaton wrote: There seems to be a growing demand, and with the holiday season upon us, I'm expecting more than a few requests when we all come back. Is anyone allowing residential students to register game consoles on a wireless SSID? If so, how? WPA2-PSK? MAC

Re: [WIRELESS-LAN] 802.11AC Future Infrastructure

2013-12-18 Thread Jeff Kell
That was a standard across the AMP jacks... you could get one Cat5 100Mbps, or two 10Mb split cable jacks. It was a matter of which insert you plugged into the socket. It wasn't my decision, and I cringe everytime I see one, but they're still around in our older campus buildings. Jeff On

Re: [WIRELESS-LAN] WiFi planning

2013-12-12 Thread Jeff Kell
On 12/12/2013 5:11 PM, Ian McDonald wrote: It seems to me to be completely impractical from a planning and budgetary perspective to be increasing the density of AP's on an annual basis due to poor client design, whether low transmit power, antenna deficiency, or insufficiently well designed

Re: [WIRELESS-LAN] Eapol-Rate-Optimization

2013-12-03 Thread Jeff Kell
On 12/3/2013 9:34 PM, Wright, Don wrote: Just curious, have any Aruba shops tried enabling EAPOL rate optimization to try helping with the Apple roaming/dropping issue? It's a new setting in 6.1 and while it didn't help in my testing, I've heard others have had success with it. Would

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Jeff Kell
On 11/19/2013 4:05 PM, Peter P Morrissey wrote: Can anyone name an application that does not have strong encryption? I'm not arguing against 802.1x, because it works very well for us as users don't have to authenticate constantly on a portal, and we seem to do a very good job getting them

Re: [WIRELESS-LAN] FW: Outsourcing WiFi to Apogee

2013-10-31 Thread Jeff Kell
On 10/31/2013 6:53 PM, Andy Page wrote: We are able to put APs in rooms if we wanted, but opted to put them in hallways to limit the amount we would need to deploy, as well as making replacements easier. We will occasionally put an access point in a room if we have to, but it not typically

Re: [WIRELESS-LAN] For those of you on Cisco code 7.5, supporting Bonjour, etc...

2013-10-10 Thread Jeff Kell
If you bridge wireless to wired, we have issues as most of our buildings are routed (distributed model) and it breaks down the mobility/roaming flexibility we get by backhauling our APs to central controllers and using common network infrastructure across campus. There are pros and cons to each,

Reducing unnecessary interference...

2013-09-15 Thread Jeff Kell
This is our first real production year on having wireless coverage in our residence halls. We had VERY limited availability before, typically some commons areas, but we finally obtained funding to go all-out. There have been some early complaints of weak spots or coverage holes. In

Re: [WIRELESS-LAN] XpressConnect...

2013-08-01 Thread Jeff Kell
On 8/1/2013 9:16 PM, Jason Cook wrote: We haven't had any reports of it showing up as malware. While by default most OS's these days work very well, we still find inconsistencies within each OS and there's always a percentage of Windows/Mac OS machines particularly that don't just work with

Re: [WIRELESS-LAN] WLC 7.4.100.60(Beta Version)

2013-07-25 Thread Jeff Kell
On 7/25/2013 5:42 PM, Sharon Luciw wrote: :-) Ah those were the days with Apple talk cabling hanging from the celling all around us. And right along side Thick Ethernet cabling! Ahh, Appletalk over PhoneNET, StarNET, Farralon, and Gator boxes... gee thanks, that should disturb my sleep for

Wireless administrator position opening at UTC

2013-07-17 Thread Jeff Kell
UTC has an opening for a wireless administrator (any experience above and beyond certainly welcome, we're a small shop and we all wear several hats :) ). See https://ut.taleo.net/careersection/ut_chattanooga/joblist.ftl and search down for Wireless Network Administrator, Network Services. HR

Re: [WIRELESS-LAN] Non-802.1x devices on wireless...

2013-07-05 Thread Jeff Kell
On 7/5/2013 2:12 PM, Brian Helman wrote: There are two distinct items here. I disagree that there is no difference between wired and wireless. A user with a strong connection hitting Netflix could easily kill users with marginal connection-speeds. In that case, whose experience are you

Re: [WIRELESS-LAN] NAT recording

2013-06-20 Thread Jeff Kell
Our NAT is performed by our firewalls (Cisco ASAs) at the last hop before the border router. Everything inside (packet shaping, IPS/IDS, etc) is dealing with the internal addresses, the only use of the external IPs is when we receive external reports. We have adequate NAT pools to do 1-to-1

Re: [WIRELESS-LAN] Non-802.1x devices on wireless...

2013-06-04 Thread Jeff Kell
On 6/4/2013 8:20 PM, Tim Cappalli wrote: We restrict some services on open. Also, as part of the registration process, their device will be configured for eduroam and the open SSID will be removed from their network list. They could hop back on if they want. It's their choice. If you have an

Re: [WIRELESS-LAN] Wow vision veos

2013-05-24 Thread Jeff Kell
I guess the $64K question is... Is this more viable than Bonjour/AppleTV ? We're desperately seeking an alternative to the growing tide that wants just that... Jeff On 5/24/2013 10:18 PM, Walter Reynolds wrote: We talked to a re-seller today and were underwhelmed by this. There is no

Re: [WIRELESS-LAN] Wow vision veos: Will products using Miracast be an alternative?

2013-05-24 Thread Jeff Kell
On 5/24/2013 10:45 PM, Barron Hulver wrote: Will products using Miracast take hold and be an alternative? http://www.wi-fi.org/wi-fi-certified-miracast%E2%84%A2 In their FAQ... 7. How is Miracast related to Wi-Fi Direct? Wi-Fi Direct allows devices to connect directly to each other,

Re: [WIRELESS-LAN] Residence Hall Wireless survey

2013-02-24 Thread Jeff Kell
On 2/24/2013 7:45 PM, Bob Williamson wrote: What is considered to be too many clients per AP? We have 30 APs and 450 K-12 students (100 of which are dorm students). We also have a number of carts containing 15+ laptops the move around the school, carts with 15+ Ipads moving around the

Re: [WIRELESS-LAN] eduroam question(s)

2012-11-12 Thread Jeff Kell
Hey Julian, We recently went through this after cranking up eduroam officially this past fall. We have similar points of confusion, plus a bonus. Our email addresses are first-l...@utc.edu unless there are conflicts, in which case we use a middle initial or a suffix. Our official UTCid is a

Re: [WIRELESS-LAN] eduroam question(s)

2012-11-12 Thread Jeff Kell
On 11/12/2012 6:39 PM, Lee H Badman wrote: Does anyone keep stats on how much your Eduroam efforts get used? Like, other than just being in the club, is it really providing benefits that an easy-to-use guest network wouldn't? Not being snarky, but genuinely wondering. Well, again, I have a

Re: [WIRELESS-LAN] eduroam question(s)

2012-11-12 Thread Jeff Kell
On 11/12/2012 9:41 PM, Lee H Badman wrote: Also... Does anyone get a bit turned off about having yet another SSID in the air, or debranding your own in favor of pushing Eduroam as your SSID? Again, just wondering. Let's task Phillipe with figuring out a way to make the Eduroam underpinnings

Client location / tracking...

2012-09-21 Thread Jeff Kell
I was wondering what other folks are doing for client location in cases where you have a problem with a client, random interference, trying to locate a stolen device, etc. We are an Aruba shop and have Airwave, which will get you in the general vicinity; but in crowded or multi-floor buildings

Re: [WIRELESS-LAN] Client location / tracking...

2012-09-21 Thread Jeff Kell
On 9/21/2012 2:37 PM, Cappalli, Tim G @ LSC-OIT wrote: I've used the AirWave Management Client on a laptop before which can help you hunt down a device. You can download it from inside the AirWave GUI under Documentation. But as far as I can tell, it only locates APs, not clients.

Re: [WIRELESS-LAN] Xbox Interferers

2012-09-03 Thread Jeff Kell
On 9/3/2012 1:04 PM, Legge, Jeffry wrote: Now that I have Cisco CleanAir I am seeing a lot of Xbox interferers in dormitories. What if anything do you do about Xbox wireless? XBoxes, wireless printers, wireless BluRays, the interference just keeps on rolling in :( Jeff **

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-07-05 Thread Jeff Kell
On 7/5/2012 11:11 AM, Peter P Morrissey wrote: I doubt that Apple has any clue that Educause even exists. Pete Morrissey It doesn't show up in Bonjour, and doesn't answer multicast DNS requests, so no, it can't possibly exist :) Jeff ** Participation and subscription information

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-07-04 Thread Jeff Kell
On 7/4/2012 2:48 PM, Frank Bulk wrote: Ok, I'm confused. If you turn the AP's radios off, how do the wireless clients participate in Airplay? Most Apple TVs can do wired ethernet, which is a good thing. Many MacOS/iOS devices they want to use to project to them can not do wired ethernet.

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Jeff Kell
On 2/22/2012 10:07 AM, Fred Mowchan wrote: Loved the comment on ATK, IPX, Neteui. Like Yogi Berra said this is like deja vu all over again! Yes, routing breaks traditional AT, IPX, NetBEUI, etc. So what clown woke up and said Hey! Let's just multicast it, that's routable... Jeff

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Jeff Kell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/22/2012 3:38 PM, Julian Y Koh wrote: On Wed Feb 22 2012 09:24:46 Central Time, Jeff Kell wrote: Yes, routing breaks traditional AT, IPX, NetBEUI, etc. AppleTalk and IPX at least are totally routable protocols. :) Well, you and I know

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Jeff Kell
On 2/22/2012 9:21 PM, Joel Coehoorn wrote: I just heard an interesting solution for this. Since AppleTV is already consumer tech and does not need Internet (their classroom use is pretty much just AirPlay), the person went out and bought a cheap $30 wireless router off the shelf at Walmart for

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Jeff Kell
How large are your wireless subnets? Are you doing any broadcast/multicast limiting? You might also check for laptop loops -- anything with wired and wireless interfaces with both of them connected at the same time. Just takes one kid with ICS or Bridging turned on... Jeff **

Re: [WIRELESS-LAN] Inter-Campus Wifi GPS Tracking

2012-02-01 Thread Jeff Kell
On 2/1/2012 1:11 PM, Peter P Morrissey wrote: Sweet! It seems like one challenge would be the devices would constantly be resetting every time the bus stops running if you are powered directly off the alternator? Has that caused any issues? On top of that it seems like you would be

Re: [WIRELESS-LAN] Cisco vs. Aruba vs. Meru

2012-01-18 Thread Jeff Kell
On 1/18/2012 7:30 PM, Scott Smith wrote: I've seen many times on this list people discuss the differences between Cisco, Aruba, and Meru. I know there are pros and cons of each, but I'm wanting to get feedback from people who have either done a bake off or at least tested between them, and

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2011-12-16 Thread Jeff Kell
We have had similar requests / queries about this in particular, as well as other general wireless server roles for devices (e.g., printers, projectors). We also suppress multicast/broadcast, and are not equipped for wireless servers. I shudder to think if Airplay was default open, just how

Re: [WIRELESS-LAN] Odd issue with Aruba wireless...

2011-12-08 Thread Jeff Kell
: The EDUCAUSE Wireless Issues Constituent Group Listserv [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Jeff Kell [jeff-k...@utc.edu] Sent: Wednesday, December 07, 2011 2:36 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Odd issue with Aruba wireless... Having

Re: [WIRELESS-LAN] College deals with wireless issues

2011-11-10 Thread Jeff Kell
On 11/10/2011 8:24 PM, Harry Rauch wrote: We have in our internet docs for students that rogue wireless devices that interferes with the dorm's internet usage will be requested to shutdown or the student will lose internet rights for 30 days. Students seem to be more than willing to shut off

Re: [WIRELESS-LAN] Android 2.3.4 wifi connectivity issue

2011-10-28 Thread Jeff Kell
On 10/28/2011 9:58 AM, Christina Klam wrote: Funny that you mention the issues with the HTC… I have spent the last two days trying to figure out why some Droid phones/tablets can get a DHCP address and others cannot. Moreover, if they do get an IP address, some lose their IP address after

Re: [WIRELESS-LAN] Problems in the Dorms

2011-10-27 Thread Jeff Kell
On 10/27/2011 9:49 PM, Mike King wrote: Not exactly too surprising. I've have a few enterprising students broadcasting some stuff from there dorm rooms via multicast (Wired for us). I can imagine if it worked, they'd use it. Yes, then there is that wonderful Dropbox LAN Sync broadcast

Re: [WIRELESS-LAN] Ticket Master Wireless Scanners- Campus sporting Venues, Campus Wireless

2011-09-22 Thread Jeff Kell
We use Alvarado scanners, tied in with 3rd-party ticketing (NeuLion I think...). They run on a non-broadcast SSID with mac authentication over our Aruba infrastructure (special AP groups carrying the SSID). Jeff ** Participation and subscription information for this EDUCAUSE

Re: [WIRELESS-LAN] Rogue Device detection. (was [WIRELESS-LAN]Wireless in dorms)

2011-09-20 Thread Jeff Kell
On 9/20/2011 11:52 AM, David Gillett wrote: We'll be replacing our switches over the next 6-18 months, and I'm hoping the new ones may include this capability. Just be a bit cautious... our city buses offer free WiFi on board. We were deauth-ing / dropping users on the buses when they

Re: [WIRELESS-LAN] Public IP to nat/pat

2011-08-22 Thread Jeff Kell
On 8/22/2011 7:31 PM, Hurt,Trenton William wrote: We have recently deployed wireless in all are residence halls and are in the process of completing a ubiquitous wireless deployment across our entire campus. We currently use public ips for the wireless address space to serve client devices.

Droids and portal environment...

2011-08-05 Thread Jeff Kell
We are in the midst of testing a setup portal for admission to our dot1X SSID. It is a typical portal setup, with a captive DNS that points the web browser at the portal web page, with explanations of how to connect and items to download (evaluating XpressConnect now for this). It works fine

Re: [WIRELESS-LAN] Eduroam questions

2011-07-29 Thread Jeff Kell
On 7/29/2011 6:34 PM, James J J Hooper wrote: On 29/07/2011 20:35, Hanset, Philippe C wrote: Also, if you don't mind the initial investment (will save you money in the long run)... get Xpressconnect ... or SU1X (free, but Windows only): http://sourceforge.net/projects/su1x/ and you can

Aruba roles / vlan pooling...

2011-07-26 Thread Jeff Kell
Quick question... Can you have a pool of vlans for an Aruba role? or is pooling restricted to the default connection vlan list to the VAP? Jeff ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at

Re: [WIRELESS-LAN] WPA2 / PEAP / EAP-TTLS / etc - valid 3rd party certificates?

2011-07-25 Thread Jeff Kell
On 7/25/2011 3:02 PM, Travis Schick wrote: The problem as I understand it - is that without having a network connection - you are unable to verify the server presenting the certificate to you - you need to trust it first - and for win7/macosx the default is to prompt the user. If the

WPA2 / PEAP / EAP-TTLS / etc - valid 3rd party certificates?

2011-07-21 Thread Jeff Kell
We are finally planning a WPA2 rollout after years of procrastination (or more truthfully, finally having some time to devote to the task...) We have Aruba, passing through Bradford, with Radius supplied by Radiator, and authenticating NTLM to Active Directory (Win2K8). With just a self-signed