RE: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Martin MacLeod-Brown
Infrastructure Engineer | Information Technology [cid:image002.jpg@01D6F0EC.B6F3D6F0] From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of John Pertalion Sent: 22 January 2021 16:45 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN

RE: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Rob Harris
p Listserv On Behalf Of Enfield, Chuck Sent: Friday, January 22, 2021 11:32 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC Just curious, but for the respondents recommending Aruba, would that be the controller-based flavor or the Instant/Central f

Re: [External] Re: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread John Pertalion
(Staff) > *Sent:* Friday, January 22, 2021 11:11 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Wireless Segmentation and NAC > > > > Sounds like a fun project! > > Agreed that Aruba and ClearPass are solid. They're both working well for > us and

Re: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Sneed, Billy (Staff)
. Billy From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Enfield, Chuck Sent: Friday, January 22, 2021 11:31 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC Just curious

RE: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Enfield, Chuck
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC Sounds like a fun project! Agreed that Aruba and ClearPass are solid. They're both working well for us and have for a long time. If I were to investigate a new system for wireless service and network access control, I'd

Re: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Sneed, Billy (Staff)
, January 22, 2021 10:12 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Wireless Segmentation and NAC This isn't a very deep answer, but aruba with clearpass should do everything you're asking about. Robert Harris Manager – Telecom, Networks, & AV Services Culinary Insti

Re: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Aaron Smith
Hi Joey, That is a big project and those are all good questions. Here is a data point for you. We use Aruba for wireless and guest portal, Impluse's Safeconnect for our NAC, Windows for Radius against our AD. ~1400 APs Three SSIDs [eduroam, IOT, and guest] Radius for local accounts returns a

RE: [WIRELESS-LAN] Wireless Segmentation and NAC

2021-01-22 Thread Rob Harris
This isn't a very deep answer, but aruba with clearpass should do everything you're asking about. Robert Harris Manager – Telecom, Networks, & AV Services Culinary Institute of America 1946 Campus Drive Hyde Park, NY 845-451-1681 www.ciachef.edu Food is Life Create and Savor Yours.™   Please

Re: [WIRELESS-LAN] Latest Gen Cisco WLAN Experiences?

2021-01-21 Thread Gruenhagen, Tim
I am reposting Lee Badman's inquiry from last September since Miami U is looking at making the jump to a DNAC/9800/802.11ac Cisco environment. Please respond to me at gruen...@miamioh.edu and I'll summarize to this list. Thanks for being such a great resource! Tim On Wed, Sep 16, 2020 at 8:36 AM

Re: [WIRELESS-LAN] Wi-Fi 6E Branding Rant

2021-01-20 Thread Carlo Terminiello
: [WIRELESS-LAN] Wi-Fi 6E Branding Rant I concur - it's a messy situation, and one that's not made any better by the likes of AT (5Ge anyone?). If I had a nickel for everyone that thought that 5Ge was 5G and/or that Wi-Fi 6 was 6GHz, I'd have a whole ton of nickels... I'm not sure that Wi-Fi 7

Re: [WIRELESS-LAN] Wi-Fi 6E Branding Rant

2021-01-20 Thread Samuel Clements
I concur - it's a messy situation, and one that's not made any better by the likes of AT (5Ge anyone?). If I had a nickel for everyone that thought that 5Ge was 5G and/or that Wi-Fi 6 was 6GHz, I'd have a whole ton of nickels... I'm not sure that Wi-Fi 7 representing 6GHz would have been much

Re: [WIRELESS-LAN] Wi-Fi 6E Branding Rant

2021-01-20 Thread Lee H Badman
This is what the Wi-Fi Alliance spends their time doing, rather than testing actual interoperability and doing anything to harmonize the very fragmented, hyper-proprietary client space. Pffft. Lee Badman (mobile) On Jan 20, 2021, at 9:38 AM, Jennifer Minella wrote:  LOL. You’re not wrong…

Re: [WIRELESS-LAN] Clover flex/ clover mini

2021-01-20 Thread Daniel Wurst
At Denison University we have continued to have them connect to the Cellular network. On Wed, Jan 20, 2021 at 8:57 AM Hurt,Trenton W. wrote: > Just curious how many edu are putting these onto wifi vs forcing them to > continue to use cellular? > > Trent Hurt > > University of Louisville > >

Re: [WIRELESS-LAN] Large Venue Wireless

2021-01-19 Thread Julian Y Koh
On Jan 19, 2021, at 16:45, Evans, Mr. Chad mailto:cev...@tarleton.edu>> wrote: We are researching options to provide Wi-Fi at our University Football Stadium. The request is to utilize the University's central IT Enterprise Network for connectivity. Due to limited resources and security

Re: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-17 Thread Tim Cappalli
Community Group Listserv on behalf of Enfield, Chuck Sent: Sunday, January 17, 2021 1:48:11 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification James, So far this has been a largely technical discussion

RE: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-17 Thread Enfield, Chuck
uary 16, 2021 9:31 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification I’m arguing on behalf of the many poorly-resourced environments where NPS has a marginal cost of zero, and that enabling TOFU would be a simple t

Re: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
Andrewartha Date: Saturday, January 16, 2021 at 21:31 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification I’m arguing on behalf of the many poorly-resourced environments where NPS has a marginal cost of zero

RE: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
a Ph. (08) 9442 1757 Mob. 0424 160 877 From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Turpin, Max Sent: Sunday, 17 January 2021 7:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification You do

Re: [EXTERNAL] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2021-01-16 Thread Turpin, Max
I am running I got his MTU issue right now. But we also do not have CPSec enabled and are going to be enabling it. The MTU should be 1200 with CPSec enabled. Are you saying this bug is fixed in 8.5.0.11? Many thanks. On Jan 15, 2021, at 6:16 PM, Johnson, Christopher wrote:  Thank to

Re: [EXTERNAL] Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Turpin, Max
-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of James Andrewartha mailto:jandrewar...@ccgs.wa.edu.au>> Sent: Saturday, January 16, 2021 10:31:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: R

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
bedded into a profile in a web-based enrollment flow. tim From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Tim Cappalli <0194c9ecac40-dmarc-requ...@listserv.educause.edu> Date: Saturday, January 16, 2021 at 11:12 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Certificate enrolment sucks for BYOD though, there’s no ongoing posture checking, and you have to maintain a CA and CRL. SSH uses TOFU and is more comparable to RADIUS in that you only connect to a limited number

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
nity Group Listserv On Behalf Of Tim Cappalli Sent: Saturday, 16 January 2021 11:33 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification EAP-TLS is modern, strong authentication. And enrollment can even use passwordless. Imagine of browsers oper

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
, 2021 10:31:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification I disagree, but OWE or SAE with a captive portal then? At least I can use modern authentication methods like hardware keys and TOTP with a browser. -- James Andrewartha Network

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
877 From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Tim Cappalli Sent: Saturday, 16 January 2021 11:24 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Because trust on first use is almost as bad as not trusting at

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread Tim Cappalli
Listserv on behalf of James Andrewartha Sent: Saturday, January 16, 2021 10:11:00 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Why couldn’t Google add trust-on-first-use to Android like Apple has with iOS and macOS, and Microsoft has

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-16 Thread James Andrewartha
less Issues Community Group Listserv On Behalf Of Tim Cappalli Sent: Saturday, 16 January 2021 6:28 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification > "many colleges provided instructions as such." This is one of the many reasons th

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-15 Thread Tim Cappalli
ues Community Group Listserv on behalf of Angelo Santabarbara Date: Friday, January 15, 2021 at 17:25 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification Correct Tim. I failed to clarify that you can no longer setup eduroam profiles manually with

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Floyd, Brad
Thanks for the clarification Tim. That's why you're the man! Brad From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Tim Cappalli Sent: Thursday, January 14, 2021 5:02 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Tim Cappalli
Please see my previous response. No part of that statement is accurate. tim From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Floyd, Brad Date: Thursday, January 14, 2021 at 18:00 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Floyd, Brad
, 2021 4:58 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification [EXTERNAL SENDER] We are instructing our users to use the eduroam CAT tool (https://cat.eduroam.org/) that we configured to deploy a certificate. Best we could do now that Android

RE: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Floyd, Brad
. Thanks, Brad Original message From: "Glinsky, Eric" Date: 1/14/21 4:13 PM (GMT-06:00) To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification [EXTERNAL SENDER] Is anyone starting to get complaints of not being able to connect

RE: Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Kyle Nielsen
Allendale , MI 49401 niels...@gvsu.edu<mailto:%7B%20props.email%20%7D> From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Glinsky, Eric Sent: Thursday, January 14, 2021 5:14 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Android 11 an

Re: [WIRELESS-LAN] Android 11 and Cert Verification

2021-01-14 Thread Glinsky, Eric
pts/wa.exe?LOGON=A3%3Dind2010%26L%3DWIRELESS-LAN%26E%3Dbase64%26P%3D3243690%26B%3D--_000_DM6PR00MB06206AA8A2FA52AD73DA431995041DM6PR00MB0620namp_%26T%3Dtext%252Fhtml%3B%2520charset%3Dutf-8%26pending%3D>> Subject: Re: [WIRELESS-LAN] Android 11 and Cert Verification I too am also interested

Re: [Ext] Re: [WIRELESS-LAN] Wireless Upgrade Project

2021-01-04 Thread Biggs, Nathanael
I've been watching this discussion with interest, because we came up against many of these same decisions over the past few years. We are about a third of the way through phasing out Fortinet (Meru) Controllers and APs, and moving to Aruba's Central cloud offering. We have about 1400 APs in total

RE: [WIRELESS-LAN] Wireless Upgrade Project

2020-12-31 Thread Luis Quispe
I’m also curious if any Aerohive/Extreme customers have any comments on the wireless solution. Luis From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Norman Elton Sent: Thursday, December 31, 2020 8:16 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN

Re: [WIRELESS-LAN] Wireless Upgrade Project

2020-12-31 Thread Norman Elton
>> Ian J Lyons >> Senior Network Engineer - Rollins College >> 401.413.1661 Cell >> 407.628.6396 Desk >> >> >> >> -- >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.

Re: [WIRELESS-LAN] Wireless Upgrade Project

2020-12-31 Thread Nadim El-Khoury
t; > Cheers > Ian J Lyons > Senior Network Engineer - Rollins College > 401.413.1661 Cell > 407.628.6396 Desk > > > > -- > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on be

Re: [WIRELESS-LAN] Wireless Upgrade Project

2020-12-31 Thread Lee H Badman
From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Rand Hall Sent: Thursday, December 31, 2020 10:01 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Wireless Upgrade Project * External Email * After 9 years of Meraki's cloud controlle

Re: [WIRELESS-LAN] Wireless Upgrade Project

2020-12-31 Thread Ian Lyons
things have evolved. Cheers Ian J Lyons Senior Network Engineer - Rollins College 401.413.1661 Cell 407.628.6396 Desk From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Rand Hall Sent: Thursday, December 31, 2020 10:01 To: WIRELESS-LAN@LISTS

Re: [WIRELESS-LAN] Wireless Upgrade Project

2020-12-31 Thread Rand Hall
After 9 years of Meraki's cloud controller I couldn't imagine going back. (And I was a huge cloud skeptic...and still am to an extent). On Wed, Dec 30, 2020 at 10:22 AM Luis Quispe wrote: > Hello everyone, > > > > Hope you’re all having a relaxing time off before getting back into the > new

Re: [WIRELESS-LAN] Aruba 8.7 issues

2020-12-29 Thread Jason Lavoie
Rob, When we were troubleshooting an issue last summer, I recall Aruba TAC mentioning problems without out-order-packets. As a troubleshooting step we removed all ECMP and reduced LACP bundles to one member between AP and controller to eliminate this possibility. Just a thought… -j --

RE: [WIRELESS-LAN] Aruba 8.7 issues

2020-12-29 Thread Bucklaew, Jerry
] On Behalf Of Robert Spellman Sent: Tuesday, December 29, 2020 11:08 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Aruba 8.7 issues Hi Jerry. Juniper, huh? We are a Juniper shop too. Odd thing is, we haven't made any hardware or configuration changes this month. We have been

Re: [WIRELESS-LAN] Aruba 8.7 issues

2020-12-29 Thread Robert Spellman
Hi Jerry. Juniper, huh? We are a Juniper shop too. Odd thing is, we haven't made any hardware or configuration changes this month. We have been building new switches for our top of rack, but until Sunday, I hadn't moved the aruba controllers off of the old layer 2 switches. Once the problem

Re: [WIRELESS-LAN] [EXTERNAL] [WIRELESS-LAN] Aruba 8.7 issues

2020-12-29 Thread Robert Spellman
aruba-master is set in dns, and resolves to the vrrp ip address shared by the three controllers. As for setting the LMS-IP, I looked in the system-profile default, which is what we are using, and no LMS-IP is set. I don't think we use provisioning profiles. We did look at the license usage, and

RE: [WIRELESS-LAN] Aruba 8.7 issues

2020-12-29 Thread Bucklaew, Jerry
Robert, We had a similar issue and it turned out to be the Ap’s had communication issues with the controllers and they were constantly re-bootstrapping. The controller showed them down but you could ping them. It was a juniper/backbone thing. But I guess the point is, if the primary or

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Dan Oachs
every problem, there is a solution that is simple, elegant, and >> wrong." - HL Mencken >> >> >> >> *From:* The EDUCAUSE Wireless Issues Community Group Listserv < >> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Lee H Badman >> *Se

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Kevin Schoenfeld
DUCAUSE Wireless Issues Community Group Listserv Date: Friday, December 18, 2020 at 12:20 PM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? We upgraded from ArubaOS 8.5.0.9 to 8.6.0.6 last Sunday

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Michael Davis
From:* The EDUCAUSE Wireless Issues Community Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> *On Behalf Of *Lee H Badman *Sent:* Friday, December 18, 2020 8:54 AM *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *Subjec

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Christopher H Ressel
Listserv on behalf of "Scott R. Bradley" Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv Date: Friday, December 18, 2020 at 9:19 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Exper

RE: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Derek M. Rice
-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? We just upgraded to 8.6.0.6 last night from 8.5.x. Too soon to tell how everything will behave, but testing last night looked good and of the 2700 APs upgraded (103s, 205s

RE: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Scott R. Bradley
Issues Community Group Listserv On Behalf Of Christopher H Ressel Sent: Friday, December 18, 2020 11:44 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? We just upgraded to 8.6.0.6 last night from 8.5.x. Too soon

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Christopher H Ressel
Community Group Listserv on behalf of "Miller, Keith C" Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv Date: Friday, December 18, 2020 at 7:57 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Miller, Keith C
partition houses the newly upgraded image. Regards, Keith From: The EDUCAUSE Wireless Issues Community Group Listserv Date: Friday, December 18, 2020 at 10:32 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences

Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Dan Oachs
UCAUSE Wireless Issues Community Group Listserv < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Lee H Badman > *Sent:* Friday, December 18, 2020 8:54 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 > or 8.6

RE: [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Sweetser, Frank E.
cken From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Lee H Badman Sent: Friday, December 18, 2020 8:54 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? I really struggle with the noti

RE: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Nick Rauer
We're scheduled to upgrade our 7220 Cluster from 8.5.0.9 to 8.5.0.11 per HP/Aruba's recommendation to patch some CVEs. https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbnw04072en_ us We have not been happy with 8.5.0.9 since our upgrade to it this past fall. I am

Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Dan Oachs
To: WIRELESS-LAN@listserv.educause.edu > Sent: 12/18/2020 7:58:46 AM > Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? > > Hi Jason, > > > > I’m glad things seem to be going well for your upgrade, I would never wish > or hope that someone experi

Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Michael Davis
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU *Subject:* Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? It's not so rare, it's been happening to our 515s since 8.4. The AP will upgrade successfully, but the apboot> environment variable that selects which partition to boot, never gets chan

RE: [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Lee H Badman
. Sent: Friday, December 18, 2020 8:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences? I recently performed an upgrade that included about 90 505s, and strongly suspect I hit the same bug on the entire batch -

RE: [EXT] Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Sweetser, Frank E.
"For every problem, there is a solution that is simple, elegant, and wrong." - HL Mencken From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Miller, Keith C Sent: Friday, December 18, 2020 6:33 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [EXT] Re: [WIRELESS-LA

Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-18 Thread Miller, Keith C
mobile device so please excuse any typos. From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Michael Davis Sent: Thursday, December 17, 2020 10:22:13 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.11

Re: [WIRELESS-LAN] ArubaOS 8.5.0.11 or 8.6.0.6 Experiences?

2020-12-17 Thread Michael Davis
It's not so rare, it's been happening to our 515s since 8.4. The AP will upgrade successfully, but the apboot> environment variable that selects which partition to boot, never gets changed so it reboots to the old partition and rinse and repeat. On 12/17/20 9:03 PM, Miller, Keith C wrote:

RE: [WIRELESS-LAN] The star is wireless

2020-12-15 Thread Swenson, Chris
Subject: Re: [WIRELESS-LAN] The star is wireless If only it had AOL CDs it would perfect. Though it is pretty awesome already. Walter Reynolds Network Architect Information and Technology Services University of Michigan (734) 615-9438 On Mon, Dec 14, 2020, 4:33 PM Philippe

Re: [WIRELESS-LAN] Cisco WLC 9800 Gotchas

2020-12-15 Thread Ethan Grinnell
I spent some time tinkering with a 9105AXW in AireOS recently. It's definitely not quite right and behaves differently than the 1810W/1815W. I hope it just has buggy software that will be fixed in the future. I haven't tried the wired ports in c9800 yet, I know that was the actual question. I'll

Re: [WIRELESS-LAN] Cisco WLC 9800 Gotchas

2020-12-14 Thread Ciesinski, Nick
t; action 500 cli command "ap name $ap_name lan port-id 3 enable" action 550 end Nick From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Jesse Thomas Sent: Friday, December 11, 2020 8:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAU

Re: [WIRELESS-LAN] The star is wireless

2020-12-14 Thread Ricardo Stella
This one is more appropriate... https://images.techhive.com/images/article/2015/12/121615blog-cisco-ap-christmas-tree-100633648-orig.jpg On Mon, Dec 14, 2020 at 6:50 PM Rios, Hector J < hector.r...@austin.utexas.edu> wrote: > Very creative Philippe! I want to see it with all the lights on. >

RE: [WIRELESS-LAN] The star is wireless

2020-12-14 Thread Anderson, Chuck
Where is the root bridge? It seems to be upside down? -- Chuck Anderson Network Architect, ITS Northeastern University From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Philippe Hanset Sent: Monday, December 14, 2020 2:56 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

RE: [WIRELESS-LAN] The star is wireless

2020-12-14 Thread Rios, Hector J
Very creative Philippe! I want to see it with all the lights on. Greetings, Hector Rios, Wireless Network Architect The University of Texas at Austin | ITS From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Philippe Hanset Sent: Monday, December 14, 2020 1:56 PM To:

Re: [WIRELESS-LAN] [EXT]: [WIRELESS-LAN] The star is wireless

2020-12-14 Thread Nadim El-Khoury
a tree topology? > > > > > > Cheers, > > Jeff > > > > *From:* The EDUCAUSE Wireless Issues Community Group Listserv < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *On Behalf Of *Tufts, Mark > *Sent:* December 14, 2020 12:58 PM > *To:* WIRELESS-LAN@LISTSERV

Re: [WIRELESS-LAN] Cisco WLC 9800 Gotchas

2020-12-11 Thread Jesse Thomas
Hi Eric and Nick, I do not believe the traditional templates work for APs on the 9800 platform (we make heavy use of them for our AireOS hardware). I did give it a try and it returns a status of "Not Applicable", and the settings for the LAN ports are not changed. That said, the behavior we are

Re: [WIRELESS-LAN] Cisco WLC 9800 Gotchas

2020-12-10 Thread Ciesinski, Nick
Are you talking about enabling the LAN ports from Prime or on the WLC itself? On the WLC itself the LAN ports are configured via the policy tag configuration in the RLAN-POLICY map section where you assign a RLAN to each port. That policy tag then needs to be applied to the APs. For applying

RE: [WIRELESS-LAN] Clover Flex - eduroam

2020-12-10 Thread Price, Jamie G
Hi Aaron, Reach out to me directly and I'll chat with you about our experience. Best, Jamie "Two Access Points in (the) same area with CCI, have the capacity of one." -Keith Parsons In other words, two APs in the same area, same channel- have the capacity of one. Jamie Price Wireless

RE: [WIRELESS-LAN] Cisco WLC 9800 Gotchas

2020-12-10 Thread Glinsky, Eric
Hi Jesse, Good to know about activating LAN ports on the 9105s, thanks. We’ll be facing that issue soon when we start testing them. I do see a way to enable and specify VLANs for LAN ports in Prime. Your mileage may vary; this doesn’t seem to work with an 1815W, probably only did on 702W, but

Re: [WIRELESS-LAN] ISE version

2020-12-10 Thread Christina Klam
Lynn" To: "The EDUCAUSE Wireless Issues Community Group Listserv" Sent: Thursday, December 10, 2020 1:27:21 PM Subject: Re: [WIRELESS-LAN] ISE version Wait for 2.7 patch 3 at least. There’s a few major bugs that are being fixed. It’s “supposed” to be released in December…but we’re 10 days in

Re: [WIRELESS-LAN] ISE version

2020-12-10 Thread Heavrin, Lynn
Issues Community Group Listserv Date: Thursday, December 10, 2020 at 11:53 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: Re: [WIRELESS-LAN] ISE version ISE 3.0 is a major licensing change so I'd talk to your SE for the details. I believe your current base licenses "

Re: [WIRELESS-LAN] ISE version

2020-12-10 Thread Craig Eyre
ISE 3.0 is a major licensing change so I'd talk to your SE for the details. I believe your current base licenses "which are owned" will expire after a certain period of time and you are forced to buy new ones. I'd stick with 2.7 for the awhile as it seems to be stable Craig On Thu, Dec 10, 2020

Re: [WIRELESS-LAN] ISE version

2020-12-10 Thread Christina Klam
ssues Community Group Listserv" Sent: Thursday, December 10, 2020 12:27:08 PM Subject: Re: [WIRELESS-LAN] ISE version I asked one of our Cisco reps if he had any idea when we should consider upgrading to 3.0. He'd been told that 2.7 is supposed to be a long lived release. I

Re: [WIRELESS-LAN] ISE version

2020-12-10 Thread Ethan Grinnell
I asked one of our Cisco reps if he had any idea when we should consider upgrading to 3.0. He'd been told that 2.7 is supposed to be a long lived release. I think we'll be safe there for a while. He also said that they like to only have 3 release trains in development. I havent tried 3.0 yet, but

Re: [WIRELESS-LAN] Clover Flex - eduroam

2020-12-09 Thread Julian Y Koh
I'm not a PCI QSA, nor do I play one on TV, but if the Clover Flex does P2PE (Point to Point Encryption), that should prevent the underlying network from being in PCI scope. -- Julian Y. Koh kohs...@northwestern.edu On 12/9/20, 15:00, "The EDUCAUSE Wireless Issues Community Group

RE: [WIRELESS-LAN] Clover Flex - eduroam

2020-12-09 Thread Lee H Badman
Wouldn't this put your whole Eduroam environment in PCI scope? Lee Badman | Network Architect (CWNE#200) Information Technology Services (NDD Group) 206 Machinery Hall 120 Smith Drive Syracuse, New York 13244 t 315.443.3003   e lhbad...@syr.edu w its.syr.edu Campus Wireless Policy:

RE: [WIRELESS-LAN] 8540 Code version- holiday work

2020-12-09 Thread Kyle Nielsen
: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Carlo Terminiello Sent: Wednesday, December 9, 2020 4:33 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 8540 Code version- holiday work Michael, We had similar issues earlier in the year with 8.8 code

Re: [WIRELESS-LAN] 8540 Code version- holiday work

2020-12-09 Thread Carlo Terminiello
Michael, We had similar issues earlier in the year with 8.8 code on AireOS controllers specifically with MacOS and IOS clients and had to do a lot of digging into arp on the AP and locally conncted switch, it seems the Apple devices were poisoning arp but sending out responses on behalf of the

Re: [WIRELESS-LAN] Cisco ISE radius proxy service for eduroam?

2020-12-08 Thread Christina Klam
.educause.edu> To: "The EDUCAUSE Wireless Issues Community Group Listserv" Sent: Tuesday, December 8, 2020 4:58:10 PM Subject: Re: [WIRELESS-LAN] Cisco ISE radius proxy service for eduroam? On Dec 8, 2020, at 07:20, Drew Ratliff < [ mailto:djrat...@unca.edu | djrat...@un

Re: [WIRELESS-LAN] Cisco ISE radius proxy service for eduroam?

2020-12-08 Thread Madden, James
On Dec 8, 2020, at 07:20, Drew Ratliff mailto:djrat...@unca.edu>> wrote: Hello all! Here at UNCA we just received and starting using Cisco ISE for our tacacs and radius services. However, we started running into issues using ISE as a radius proxy service for Eduroam. Currently, our

Re: [WIRELESS-LAN] Cisco ISE radius proxy service for eduroam?

2020-12-08 Thread Tim Cappalli
Why not just terminate EAP in ISE instead of proxying?  From: The EDUCAUSE Wireless Issues Community Group Listserv on behalf of Drew Ratliff Date: Tuesday, December 8, 2020 at 10:30To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Cisco ISE radius proxy service for eduroam?Hello

RE: [WIRELESS-LAN] Fast transition roaming

2020-12-04 Thread Rios, Hector J
: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Brady J. Ballstadt Sent: Friday, December 4, 2020 8:46 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Fast transition roaming +1 for the list JJ sent. That is also what I use to try to track down client

Re: [WIRELESS-LAN] Fast transition roaming

2020-12-04 Thread Brady J. Ballstadt
+1 for the list JJ sent. That is also what I use to try to track down client support. I do agree having an r and k column would be nice, but there are also pcaps there if you want to get into a specific one and look. It's the best list I know of so if anyone has another I'd also be

RE: [WIRELESS-LAN] Fast transition roaming

2020-12-03 Thread Glinsky, Eric
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Fast transition roaming *Message sent from a system outside of UConn.* Clear To Send podcast had several episodes/posts covering these (and v): https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cleartosend.net%2F802-11k-802-11v

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Weak Security

2020-12-03 Thread Jesse Thomas
ehalf of Enfield, Chuck < > cae...@psu.edu> > *Sent:* Tuesday, December 1, 2020 7:33 PM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > *Subject:* [External] Re: [WIRELESS-LAN] Weak Security > > > We stopped supporting TKIP years a

Re: [External] Re: [WIRELESS-LAN] Weak Security

2020-12-03 Thread Smith, Nayef
: Tuesday, December 1, 2020 7:33 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [External] Re: [WIRELESS-LAN] Weak Security We stopped supporting TKIP years ago. No issues that I’m aware of. Chuck Enfield Manager, Wireless & Cellular Penn State IT 814-863-8715 From: The EDUCAUSE Wire

Re: [WIRELESS-LAN] Fast transition roaming

2020-12-03 Thread Jethro R Binks
Clear To Send podcast had several episodes/posts covering these (and v): https://www.cleartosend.net/802-11k-802-11v/ https://www.cleartosend.net/cts-206-a-look-into-802-11k/ https://www.cleartosend.net/cts-211-a-look-into-802-11v/

Re: [WIRELESS-LAN] Weak Security

2020-12-02 Thread Jonathan Waldrep
It is worth noting that WPA2 requires AES/CCMP support, where TKIP is optional. To give an idea of clients that support it, WPA2 support was added in Windows XP SP3 (2008), possibly with a hotfix before that. On 02/12/2020 10:39, James Helzerman wrote: Hi. Our first roll out for 802.1x used

Re: [WIRELESS-LAN] Weak Security

2020-12-02 Thread James Helzerman
Hi. Our first roll out for 802.1x used WPA2 AES and we have had zero issues. All clients these days (and for many years) support it. -Jimmy -- James Helzerman Wireless Network Engineer University of Michigan - ITS On Tue, Dec 1, 2020 at 9:56 PM Entwistle, Bruce <

RE: [WIRELESS-LAN] 8540 Code version- holiday work

2020-11-20 Thread Kyle Nielsen
-9104 niels...@gvsu.edu<mailto:%7B%20props.email%20%7D> From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Matthew Craig Sent: Friday, November 20, 2020 12:59 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 8540 Code version- holiday work Lee,

Re: [WIRELESS-LAN] 8540 Code version- holiday work

2020-11-20 Thread Slone, Kelly
-696-3200 slon...@marshall.edu<mailto:slon...@marshall.edu> From: The EDUCAUSE Wireless Issues Community Group Listserv Date: Friday, November 20, 2020 at 1:30 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 8540 Code version- holiday work We have been running 8.8

RE: [WIRELESS-LAN] 8540 Code version- holiday work

2020-11-20 Thread Dennis Xu
: Friday, November 20, 2020 1:15 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 8540 Code version- holiday work CAUTION: This email originated from outside of the University of Guelph. Do not click links or open attachments unless you recognize the sender and know the content

RE: [WIRELESS-LAN] 8540 Code version- holiday work

2020-11-20 Thread Catania, Michael
On Behalf Of Glinsky, Eric Sent: Friday, November 20, 2020 12:09 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 8540 Code version- holiday work Avoid 8.5.161.0 if you have 2800/3800s. 8.5.161.6 has been working better for us, though our campus population is sparse

Re: [WIRELESS-LAN] 8540 Code version- holiday work

2020-11-20 Thread Glinsky, Eric
@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 8540 Code version- holiday work *Message sent from a system outside of UConn.* Lee, We’re currently running 8.5.135.0, and its been running fine for us for a long time, despite multiple comments on this list of problems with that code. However just

Re: [WIRELESS-LAN] 8540 Code version- holiday work

2020-11-20 Thread Matthew Craig
Lee, We’re currently running 8.5.135.0, and its been running fine for us for a long time, despite multiple comments on this list of problems with that code. However just within in last couple of months or so we’ve been chasing problems with clients in dorms connecting to 702w (but dorms with

<    1   2   3   4   5   6   7   8   9   10   >