Re: [WIRELESS-LAN] Force Windows to send UPN

2013-11-19 Thread Johnson, Neil M
Correct. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: +1 319 384-0938tel:+13193840938 Fax: +1 319 335-2951tel:+13193352951 E-Mail: neil-john...@uiowa.edumailto:neil-john...@uiowa.edu Lync: neil-john...@uiowa.edusip:neil-john...@uiowa.edu From: Tim Cappalli

802.1x vs web-portal

2013-11-19 Thread Ashfield, Matt (NBCC)
Just wondering what people's thoughts are here regarding using the Web Portal authentication vs 802.1x auth in your wifi networks. Obviously one big pro for 802.1x is dynamic vlan assignment based on the users's credentials, but certainly for web-portal the big pro is simplicity for the user.

RE: 802.1x vs web-portal

2013-11-19 Thread Lee H Badman
Portal net is unencrypted, or encrypted? -Lee Badman From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ashfield, Matt (NBCC) Sent: Tuesday, November 19, 2013 3:29 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject:

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Ken LeCompte
One major consideration is that the use of https for more and more webpages is resulting in more confused users not getting redirected to captive portal login pages. There is also the more obvious issue that client data is not encrypted over the air, although you could argue that more and more

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Peter P Morrissey
Can anyone name an application that does not have strong encryption? I'm not arguing against 802.1x, because it works very well for us as users don't have to authenticate constantly on a portal, and we seem to do a very good job getting them on initially, but I am having a hard time

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Jeff Kell
On 11/19/2013 4:05 PM, Peter P Morrissey wrote: Can anyone name an application that does not have strong encryption? I'm not arguing against 802.1x, because it works very well for us as users don't have to authenticate constantly on a portal, and we seem to do a very good job getting them

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Turner, Ryan H
I've been very surprised to find applications on campus that don't encrypt data. We've found recently even in credit card processing devices that were not properly configured, and sent information in the clear. Given the vast amount of applications out there, and the absolute zero control

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Julian Y Koh
On Nov 19, 2013, at 15:05 , Peter P Morrissey ppmor...@syr.edu wrote: Can anyone name an application that does not have strong encryption? Does not have strong encryption != Strong encryption is in use by default DNS springs to mind. Heck, just leave tcpdump running when you wake a

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Curtis, Bruce
On Nov 19, 2013, at 3:05 PM, Peter P Morrissey ppmor...@syr.edu wrote: Can anyone name an application that does not have strong encryption? Search engines such as Google and Bing only encrypt data if you log into the service. Even when logged into YouTube the video stream does not appear

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Hanset, Philippe C
from the top of my head... ###What's bad for the user: -Captive portal: no encryption over the air, pesky re-authentication and timeouts, no authentication of the infrastructure (yes, when you accept that SSL Cert from RADIUS you actually authenticate the infrastructure) -802.1X: finicky

802.11k

2013-11-19 Thread mike . albano
Curious if others have enabled 802.11k and if doing so has resulted in any client connectivity issues for clients that do not support it. Also, for the Cisco shops, the same question for "non-802.11k assisted roaming"ie"config wlan assisted-roaming prediction {enable | disable} wlan-id"Mike

Re: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread John Kaftan
We use 802.1x to do machine auth on equipment that we own and that is in the domain. We use Group Policy to push all of the settings. We have auth type set to 'user or computer' once the user logs on it flips to user auth. Its really cool because NAC will give the computer a 'Computer' policy

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Jason Cook
List seems to sum it up pretty well. I think user wise dot1x is better ... once setup. So while it may be more of a pain to configure for some users, once configured the experience is much better as they walk on to campus and are connected. Having a captive portal is probably a good