Re: [WIRELESS-LAN] Proxim APs and 802.1X RADIUS VLAN assignment

2011-07-08 Thread Jethro R Binks
On Thu, 7 Jul 2011, John Kaftan wrote: I have fantasized about doing this but have feared the VLAN change would not prompt the clients to ask for a new IP. Looks like you have a different issue but do you know, if you get the VLAN switching working, how the clients will realize they need

RE: Separate SSID for 5GHz band

2011-07-08 Thread Osborne, Bruce W
Chris, On Wi-Fi, Multicast is transmitted at the lowest connected rate. This means that you only get 6mbps maximum by using 5GHz Multicast. Here at Liberty University, we are using Aruba's Dynamic Multicast Optimization that converts most multicast to unicast for our IPTV deployment on

RE: Proxim APs and 802.1X RADIUS VLAN assignment

2011-07-08 Thread Osborne, Bruce W
The 802.1X authentication and VLAN assignment occurs before the client even get an ip address. We are implementing 802.1X with Aruba this summer. Bruce Osborne Wireless Network Engineer IT Network Services   (434) 592-4229   LIBERTY UNIVERSITY 40 Years of Training Champions for Christ:

RE: Proxim APs and 802.1X RADIUS VLAN assignment

2011-07-08 Thread Osborne, Bruce W
Dave, If you use Aruba's user roles named the same as the Filter-Id, you can use one rule Filter-ID value-of set role to set the user role to the Filter-Id value. This is very useful if you are using many Filter-Id values. Bruce Osborne Wireless Network Engineer IT Network Services   (434)

Re: [WIRELESS-LAN] Separate SSID for 5GHz band

2011-07-08 Thread Johnson, Neil M
Thanks for all the feedback. Our proposed plan would be to leave our campus wide SSID enabled on both bands with band steering enabled, then just enable a 5GHz only SSID in the dorms. We figured we would call the SSID UI-Wireless-5GHz rather than Fast or High Speed because that might set

RE: [WIRELESS-LAN] Proxim APs and 802.1X RADIUS VLAN assignment

2011-07-08 Thread John Kaftan
Yeah that makes sense. Thanks. The last time I looked at this I was thinking about having them switch VLANs after authenticating via the captive portal not 802.1x. John -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv

RE: Proxim APs and 802.1X RADIUS VLAN assignment

2011-07-08 Thread Dave Barr
That's a good idea too, we just haven't developed a requirement for more than two conditions so far.I suppose you could have a Filter-ID returned for network-quarantine for systems that are discovered to have malware and place the client in a walled garden role until repaired. -djb