Re: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Philippe Hanset
Lee, Based on your timeframe you might also want to consider the new development that is done in Europe called “geteduroam”. https://www.geteduroam.app It is App based and will feed from CAT but it is based on EAP-TLS or on EAP-TTLS/PEAP if preferred. So you could start with CAT and

Re: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Lee H Badman
Thanks, Philippe. I didn’t realize CAT would accommodate non-eduroam SSIDs. That’s huge. Lee Badman (mobile) On Apr 7, 2021, at 10:55 AM, Philippe Hanset <005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote:  Lee, Based on your timeframe you might also want to consider the new

RE: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Lee H Badman
Thanks much, Curtis. And everyone responding. Lee Badman | Network Architect (CWNE#200) Information Technology Services (NDD Group) 206 Machinery Hall 120 Smith Drive Syracuse, New York 13244 t 315.443.3003 e lhbad...@syr.edu w its.syr.edu Campus Wireless Policy:

Re: [EXT] [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Sweetser, Frank E.
We are using EAP-TLS. For university owned machines that are joined to Active Directory, we have the domain generate machine and user certificates that are trusted by our RADIUS infrastructure. For other devices, including personally owned, we are using SecureW2. Overall it's been pretty

Re: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Felix Windt
At Dartmouth, we use the free eduroam tool to onboard our PEAP/MS-CHAPv2 eduroam SSID, which is our only 802.1x WLAN. It works really well for us. Occasionally I argue for switching to EAP-TLS, at that point we’d switch to a tool that does the certificate provisioning. thx, felix From: The

WLAN onboarding

2021-04-07 Thread Lee H Badman
Hello everyone, hope your semesters are going along smoothly and that you are all staying healthy. As always- this message is not an invite for vendors to contact me. Looking out down our short timeline, we need to make a number of decisions about various aspects of our WLAN operations. One of

Re: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Curtis K. Larsen
Hi Lee, We have used the Cloudpath Enrollment System (Ruckus now) since it's release (2009?) for EAP-TLS onboarding, and they added PEAP capabilities a few years back. I think it has been very versatile and amazingly simple to maintain. The only drawbacks have been a lag of a few weeks

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Norman Elton
We are SecureW2 for EAP-TLS. In addition to working well, and handling the recent Android changes fairly well, I’ll commend their excellent support staff. They are always quick to respond and extremely knowledgeable about all things CA related. A word to those looking to go EAP-TLS, whether

RE: [EXT] [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Johnston, Ryan
Lee, We are using SecureW2 for both EAP-PEAP (when necessary) and EAP-TLS (our default and preferred) configuration. SecureW2 is also our PKI for EAP-TLS. We've been a user for multiple years so we do not have experience with other tools although we did look at the CAT tool and considered

RE: [External] Re: [WIRELESS-LAN] WLAN onboarding

2021-04-07 Thread Adam T. Ferrero
I love the geteduroam app! It is awesome, easy, pretty, and simple. We are planning to leverage it for more of our onboarding. We are open SSID with Aruba Clearpass captive portal, SMS texted credentials for self service guests (via Twilio), and switch to WPA2 enterprise for actual

RE: Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Floyd, Brad
Trent, >From your wireless PCAPs, any data rates that you have trimmed out, but they >require? I can send you the wireshark filters if that would help. Thanks, Brad From: The EDUCAUSE Wireless Issues Community Group Listserv On Behalf Of Hurt,Trenton W. Sent: Wednesday, April 7, 2021 5:31 PM

RE: Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Floyd, Brad
Trent, Likely so. I've had the issue several times where Windows will tell me that the wireless drivers are up to date, but when I look at the driver date that's installed, it will be one, two, or even three years old. I go out to the chip / card manufacturer's website and usually find a driver

Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Hurt,Trenton W.
Curious if any schools have any of these machines from this company installed and working ok on their enterprise wlan systems regardless of vendor https://eliteform.com/about/ They have tp link archer t6e cards installed in them. Tp link support suggests only using channel 36 to get them to

Re: Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Hurt,Trenton W.
No data rates are good and some will connect to 5ghz ok some others don’t and some connect to 5ghz but are unstable and shift to 2.4. I’m hoping it’s just driver and going to try that tomorrow based off the link. I also was just told that not all these machines have same card majority are the

Re: Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Hurt,Trenton W.
That’s the problem tp link isn’t like intel or other manufacturers and has drivers that say 2020 but when I look at the ini file for the driver package it’s actually 2015 drivers for win8 they are just repurposed for win10. Hopefully the other drivers that are for the broadcom chipset that

Re: Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Hurt,Trenton W.
And yes I know I could and may still do 5ghz only ssid and force them to connect only to that but just hoping there might be another solution before I do that Sent from my mobile device. Trent Hurt 5028521513 University of Louisville From: The EDUCAUSE

Re: Elite form WiFi workout machines using tp link archer t6e cards

2021-04-07 Thread Hurt,Trenton W.
Really think it’s just some weird tp link driver win10 issue. The cards are Broadcom BCM4360 chipset so may try some other drivers not tp link to see if I can figure it out Sent from my mobile device. Trent Hurt 5028521513 University of Louisville