Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Jake Snyder
We've been playing with the Assa Abloy locks. Currently we have them connected all the time to facilitate lockdown, and leverage a power jump to keep them powered all the time. Batteries are only in play if the power jump is without power. Different group dealing with that, but sounds

Re: [WIRELESS-LAN] 802.11r

2015-07-02 Thread Kevin McCormick
In 8.0 Cisco added 802.11r mixed mode support. Removes the restriction of creating a separate SSID for 802.11r support. Non-802.11r clients with updated drivers can join 802.11r-enabled SSID. Simplifies operations with single SSID for 802.11r clients. Although devices without updated drivers

Re: [WIRELESS-LAN] 802.11n frame aggregation vulnerability

2015-07-02 Thread Joshua Wright
http://securityaffairs.co/wordpress/38234/hacking/802-11n-flaw.html Fortunately, there are several methods to mitigate the attacks, including MAC layer encryption, disabling Aggregated Mac Protocol Data Unit (A-MPDU) frame aggregation, configuring the system to drop corrupted A-MPDUs, the

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Derek Johnson
You all were supposed to make me feel all warm and fuzzy about wireless door locks, not confirm my biggest fears! j/k Seriously, though, thanks all for sharing your experience... very helpful indeed. I know wireless locks are going to happen here, but perhaps I can convince planners to

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Aaron Abitia
Yeah, this thread is summing up the issues with doing the door locks over WiFi, but in the near term it's unlikely that any arguments will deter most organizations because it's all about initial financial layout. The cost of retrofit for a hardwire connection is so high, they will not want to pay

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread David Lawrence Robertson
While I am no longer part of the group that maintains the network, we do have wireless locks on campus, in an ever expanding number. Depending on the type, they only connect every so often, unless they are woken up by a configuration push. Housing has more of an issue dealing with the

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Harry Rauch
Eckerd has been dealing with wired and wireless lock systems. So far we have switched out the wireless system to a more conventional wired due a myriad of issues. The wireless locks being used on outside doors and the batteries that were supposed to last 6 months to a year were failing in all

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread 'Rossella Mariotti-Jones'
We do have wireless door locks. They use WEP (yes, I know!), so we do MAC authentication, and we use a separate hidden SSID (which sometimes doesn't work, so we have to expose it). We also separate them from the rest of our network on a DMZ behind the firewall and we apply additional

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Lee H Badman
We are doing wireless door locks on internal classroom doors (no external doors) with little fanfare so far (almost two years, slow rollout in a few buildings thus far). ASSA ABLOY locks, 802.11n with 11c expected (sometime) and 802.1X. I'm not thrilled, and laid out the risks clearly, yet

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Thomas Carter
We have some of these from Stanley; we already have wired badge readers from them so the wireless was a nice fit. It is nice to remove any responsibility from IT for managing connectivity, troubleshooting, etc. We use these primarily for accessibility for individual dorm rooms where a

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Harry Rauch
Eckerd has been dealing with wired and wireless lock systems. So far we have switched out the wireless system to a more conventional wired due a myriad of issues. The wireless locks being used on outside doors and the batteries that were supposed to last 6 months to a year were failing in all

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread 'Rossella Mariotti-Jones'
We have ASSA ABLOY locks too. I agree with Aaron, as that is exactly the reason why we went with the wifi locks. One argument that might have a little more traction is that we, for example, are not able to send and immediate lock to our wifi locks because they connect to the controller for a very

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Mike Cunningham
Stanley makes a door lock that is wireless but does not run on 802.11 so does not interface with the campus data wi-fi network. I think it’s 802.15 but not sure of that. I know it works with Tyco and their iStar controllers. You do have to deploy a Tyco proprietary access point that is just for

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Parker, Ron
I would strongly advise against these locks unless you fully understand their limitations and are OK with them. We did some construction projects where hard-wired locks were value engineered out of the project to save money. We ended up with a bunch of wireless Assa Abloy locks that don't work

802.11n frame aggregation vulnerability

2015-07-02 Thread Julian Y Koh
http://securityaffairs.co/wordpress/38234/hacking/802-11n-flaw.html Fortunately, there are several methods to mitigate the attacks, including MAC layer encryption, disabling Aggregated Mac Protocol Data Unit (A-MPDU) frame aggregation, configuring the system to drop corrupted A-MPDUs, the use

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Ian McDonald
Hi Folks, We have Assa Abloy Aperio wireless escutcheons on our ARX access control system (which also supports wired doors). http://www.assaabloy.co.uk/en/local/uk/Products/Access-control/Aperio/ They have a small transmitter (comhub) near each group of (up to 8 IIRC) locks. I understand

RE: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Parker, Ron
I’d be interested in more detail on how you’re powering them. If you’re now having to run power into the door just as we would for a powered hardwired lock, I don’t see how that saves much money. If this is some sort of retrofit, I’d be curious to know how you are doing it since that might

Re: [WIRELESS-LAN] Wireless Door Locks

2015-07-02 Thread Joshua Wright
Seriously, though, thanks all for sharing your experience... very helpful indeed. I know wireless locks are going to happen here, but perhaps I can convince planners to compromise with an 802.15-based system. I’m not sure which 802.15 specification you are referring to, but 802.15.4