RE: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.

2015-09-01 Thread Chuck Enfield 
If you have residence halls, you may want to anticipate this and take it up 
with you safety department.  Ours did actual testing and confirmed Aruba’s 
recommendations.  Now it’s them saying what the standard is rather than us.



Chuck Enfield

Manager, Wireless Systems & Engineering

Telecommunications & Networking Services

The Pennsylvania State University

110H, USB2, UP, PA 16802

ph: 814.863.8715

fx: 814.865.3988



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gruenhagen, Tim
Sent: Tuesday, September 01, 2015 11:19 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.



The 9 foot requirement came from the student's dad who "works in the 
industry and knows these things".  I actually found the FCC 20 cm notice in 
the Cisco AP materials also.  Now I've got something to present if this 
becomes a trend.



On Tue, Sep 1, 2015 at 10:12 AM, Chanowski, John  > wrote:

I don’t know where the 9’ recommendation comes from but the installation 
guide for Aruba’s 220 series access point (3x3x3,ac) contains the following 
RF Radiation Exposure Statement: “This equipment complies with FCC RF 
radiation exposure limits. This equipment should be installed and operated 
with a minimum distance of 7.9 inches (20 cm) between the radiator and your 
body for 2.4 GHz and 5 GHz operations.” Based on this 9 feet should be way 
safe and non-controversial:)



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
 ] On Behalf Of Barrett, Bruce
Sent: Tuesday, September 01, 2015 9:10 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.



We are getting complaints about this from our business areas, Enrollment 
Services etc. I was curious where the 9 feet from an AP recommendation came 
from.



Bruce



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Charlie Weaver
Sent: Tuesday, September 01, 2015 8:53 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.



Yes, it sets a precedent that you are going to meet the students’ needs and 
protect the university.  If the parents and the students think it’s an 
issue, why try and force the matter when it is easy enough to move the AP 
and let them plug into the network through a port in the room.



If they ask for the wireless on the entire campus to be turned off or in all 
of the classrooms the student is in, then it’s a different story.


While this is not an ADA issue, the ADA laws talk of “reasonable 
accommodation”.  I would be hard pressed to believe this request was not 
reasonable.



Ridiculous yes, but still very reasonable.



Charlie Weaver



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Frank Bulk
Sent: Monday, August 31, 2015 12:17 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.



Doesn’t that set a precedent?



Frank



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gruenhagen, Tim
Sent: Thursday, August 27, 2015 10:12 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.



Coincidentally, we just moved an AP out of a student's room because her 
parents were certain that it was a health hazard to be within 9 feet of an 
AP.  No point in arguing with an upset mom.



On Thu, Aug 27, 2015 at 10:59 AM, Lee H Badman  > wrote:

Two words:  Lawyers… geeze.



Lee Badman | Network Architect

Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244

t 315.443.3003 f 315.443.4325 e 
 lhbad...@syr.edu w its.syr.edu 


SYRACUSE UNIVERSITY
syr.edu 



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
 ] On Behalf Of Bob Brown
Sent: Tuesday, August 25, 2015 5:35 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.



FYI We’ve included a link to the lawsuit and the school’s statement on this 
lawsuit in this piece:

RE: Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Peter T Murphy 
Let me guess: TVs and gaming devices for the living spaces, right?

We have an SSID for only those devices that appears only in the residence 
buildings. Authenticated device registration for each MAC address is manual 
while we implement something better. We *have* been denying registrations for 
devices which we recognize as capable of 802.1x, but that may be gone with the 
technical process to replace the current manual.

Current annoyance: chromecast, which expects both pieces to be on the same 
broadcast domain, unhindered by APs with device isolation turned on. (It's the 
new vendor-agnostic AppleTV)


Peter T Murphy
Director - Network Engineering
Computing & Information Technology
Wayne State University
pmur...@wayne.edu
313-577-4737
http://wayne.edu/about/facts/





From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Troy Lynn Wiseman
Sent: Tuesday, September 01, 2015 10:40 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

We are trying to figure out how to handle non 802.1x devices on our enterprise 
network.  We are a Cisco shop and currently are broadcasting 4 SSIDs including 
a guest SSID that is non 802.1x.  We are concerned with how to give access to 
non 802.1x devices in our residence halls.  We were wondering how others are 
tackling this issue.

TROY WISEMAN
Network Engineer II

INFORMATION TECHNOLOGY
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

twise...@siu.edu
P: (618) 453-6264
INFOTECH.SIU.EDU

[http://siu.edu/_common/images/SIUlogo.png]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Lab Computers and wireless

2015-09-01 Thread Hunter Fuller 
We are currently testing this with Active Directory fronted by
freeradius. There is a single ESSID. User logs in to the 802.1X
prompt, freeradius authenticates the user, then connects via LDAP to
the AD and looks at group membership. This determines the VLAN
override ID that is sent to our wireless controller.

--
Hunter Fuller
Network Engineer
VBRH M-9B
+1 256 824 5331

Office of Information Technology
The University of Alabama in Huntsville
Systems and Infrastructure

I am part of the UAH Safe Zone LGBTQIA support network:
http://www.uah.edu/student-affairs/safe-zone


On Tue, Sep 1, 2015 at 3:22 PM, Paul Crittenden
 wrote:
> We are predominately a Meru shop. We have a staff and a student SSID and a 
> Windows Radius server for authentication.  To complicate this we have lab 
> laptops which both students and staff need to be able to log into. Currently 
> we have no way to prevent students from connecting to our staff wireless and 
> staff to student and still allow both students and staff to connect to lab 
> laptops.
>
> We have been charged to find out how other institutions are handling this and 
> what best practices they are using for this situation.
>
> Thanks in advance for any insight you may be able to offer.
>
>
> **
> Participation and subscription information for this EDUCAUSE Constituent 
> Group discussion list can be found at http://www.educause.edu/groups/.
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Cisco AVC reporting in PI 2.2

2015-09-01 Thread Chad Burnham 
Lee,

We have AVC working in PI 2.2.0  - our source is netflow from 2 x ASR-1006 edge 
Routers only. I spent a lot time trying to get it to work from SUP2T to no 
avail.
We are using Aruba controllers and airwave on our wireless side for this 
function.

Chad


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Tuesday, September 01, 2015 2:03 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco AVC reporting in PI 2.2

As I just shared with our SE...

After going to PI 2.2, we lost the ability to see AVC information in PI. It was 
easy to setup in 1.4 after getting the assurance licenses we needed using this: 
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

And then there is this for PI 3 
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-infrastructure/solution_overview_c22-728972.html#_Toc428598044

But I can find nothing on 2.2 and the PI interface maps to neither the old or 
new. Any idea where I can find guidance on application reporting setup in 2.2 
PI? I had no idea this was gone until I needed it, and I'm finding nothing 
after hours of searching.



Anyone else been down this road? I have it set fine on the WLCs, just PI is 
typically confounding.

(yes I know 3.0 is out)

Thanks-

Lee

Lee Badman | Network Architect
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w 
its.syr.edu
SYRACUSE UNIVERSITY
syr.edu



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Lab Computers and wireless

2015-09-01 Thread Frank Sweetser 
Absolutely!  Typically machine auth is done via eap-tls with a domain issued 
cert, but in the end it's just another identity to key off of.

Sent from my Android device with K-9 Mail. Please excuse my brevity.

On September 1, 2015 5:57:31 PM EDT, "Coehoorn, Joel"  
wrote:
>Could you do machine authentication for these devices, and put them
>into a
>vlan dedicated to the labs?
>
>
>
>Joel Coehoorn
>Director of Information Technology
>402.363.5603
>*jcoeho...@york.edu *
>
>The mission of York College is to transform lives through
>Christ-centered education and to equip students for lifelong service to
>God, family, and society
>
>On Tue, Sep 1, 2015 at 4:08 PM, Frank Sweetser  wrote:
>
>> A few people have mentioned dropping user categories into different
>VLANs,
>> which is certainly one viable option.  However, this may cause
>problems for
>> the multi user machines, as having the machine flip VLANs on login
>can be
>> disruptive.
>>
>> As an alternative, you may be able to use the wireless controllers as
>the
>> control point by defining different firewall policies there, and
>selecting
>> the policy on a per login basis. You still have user based resource
>> availability, but the machine never has to change VLAN or IP address.
>> 
>> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>>
>> On September 1, 2015 4:22:24 PM EDT, Paul Crittenden <
>> paul.critten...@simpson.edu> wrote:
>> >We are predominately a Meru shop. We have a staff and a student SSID
>> >and a Windows Radius server for authentication.  To complicate this
>we
>> >have lab laptops which both students and staff need to be able to
>log
>> >into. Currently we have no way to prevent students from connecting
>to
>> >our staff wireless and staff to student and still allow both
>students
>> >and staff to connect to lab laptops.
>> >
>> >We have been charged to find out how other institutions are handling
>> >this and what best practices they are using for this situation.
>> >
>> >Thanks in advance for any insight you may be able to offer.
>> >
>> >
>> >**
>> >Participation and subscription information for this EDUCAUSE
>> >Constituent Group discussion list can be found at
>> >http://www.educause.edu/groups/.
>>
>> **
>> Participation and subscription information for this EDUCAUSE
>Constituent
>> Group discussion list can be found at
>http://www.educause.edu/groups/.
>>
>
>**
>Participation and subscription information for this EDUCAUSE
>Constituent Group discussion list can be found at
>http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Lab Computers and wireless

2015-09-01 Thread Paul Crittenden 
We are predominately a Meru shop. We have a staff and a student SSID and a 
Windows Radius server for authentication.  To complicate this we have lab 
laptops which both students and staff need to be able to log into. Currently we 
have no way to prevent students from connecting to our staff wireless and staff 
to student and still allow both students and staff to connect to lab laptops.

We have been charged to find out how other institutions are handling this and 
what best practices they are using for this situation.

Thanks in advance for any insight you may be able to offer.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Lab Computers and wireless

2015-09-01 Thread Coehoorn, Joel 
Could you do machine authentication for these devices, and put them into a
vlan dedicated to the labs?



Joel Coehoorn
Director of Information Technology
402.363.5603
*jcoeho...@york.edu *

The mission of York College is to transform lives through
Christ-centered education and to equip students for lifelong service to
God, family, and society

On Tue, Sep 1, 2015 at 4:08 PM, Frank Sweetser  wrote:

> A few people have mentioned dropping user categories into different VLANs,
> which is certainly one viable option.  However, this may cause problems for
> the multi user machines, as having the machine flip VLANs on login can be
> disruptive.
>
> As an alternative, you may be able to use the wireless controllers as the
> control point by defining different firewall policies there, and selecting
> the policy on a per login basis. You still have user based resource
> availability, but the machine never has to change VLAN or IP address.
> 
> Sent from my Android device with K-9 Mail. Please excuse my brevity.
>
> On September 1, 2015 4:22:24 PM EDT, Paul Crittenden <
> paul.critten...@simpson.edu> wrote:
> >We are predominately a Meru shop. We have a staff and a student SSID
> >and a Windows Radius server for authentication.  To complicate this we
> >have lab laptops which both students and staff need to be able to log
> >into. Currently we have no way to prevent students from connecting to
> >our staff wireless and staff to student and still allow both students
> >and staff to connect to lab laptops.
> >
> >We have been charged to find out how other institutions are handling
> >this and what best practices they are using for this situation.
> >
> >Thanks in advance for any insight you may be able to offer.
> >
> >
> >**
> >Participation and subscription information for this EDUCAUSE
> >Constituent Group discussion list can be found at
> >http://www.educause.edu/groups/.
>
> **
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Cisco AVC reporting in PI 2.2

2015-09-01 Thread McClintic, Thomas 
I don't recall any extra steps when adding it to our 2.2 server. The document 
you have linked for the 5500 configuration is what I did. I had changed IPs 
though, so I had to tear it down to build it back up.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Tuesday, September 01, 2015 3:03 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco AVC reporting in PI 2.2

As I just shared with our SE...

After going to PI 2.2, we lost the ability to see AVC information in PI. It was 
easy to setup in 1.4 after getting the assurance licenses we needed using this: 
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

And then there is this for PI 3 
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-infrastructure/solution_overview_c22-728972.html#_Toc428598044

But I can find nothing on 2.2 and the PI interface maps to neither the old or 
new. Any idea where I can find guidance on application reporting setup in 2.2 
PI? I had no idea this was gone until I needed it, and I'm finding nothing 
after hours of searching.



Anyone else been down this road? I have it set fine on the WLCs, just PI is 
typically confounding.

(yes I know 3.0 is out)

Thanks-

Lee

Lee Badman | Network Architect
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w 
its.syr.edu
SYRACUSE UNIVERSITY
syr.edu



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Lab Computers and wireless

2015-09-01 Thread Frank Sweetser 
A few people have mentioned dropping user categories into different VLANs, 
which is certainly one viable option.  However, this may cause problems for the 
multi user machines, as having the machine flip VLANs on login can be 
disruptive.

As an alternative, you may be able to use the wireless controllers as the 
control point by defining different firewall policies there, and selecting the 
policy on a per login basis. You still have user based resource availability, 
but the machine never has to change VLAN or IP address.

Sent from my Android device with K-9 Mail. Please excuse my brevity.

On September 1, 2015 4:22:24 PM EDT, Paul Crittenden 
 wrote:
>We are predominately a Meru shop. We have a staff and a student SSID
>and a Windows Radius server for authentication.  To complicate this we
>have lab laptops which both students and staff need to be able to log
>into. Currently we have no way to prevent students from connecting to
>our staff wireless and staff to student and still allow both students
>and staff to connect to lab laptops.
>
>We have been charged to find out how other institutions are handling
>this and what best practices they are using for this situation.
>
>Thanks in advance for any insight you may be able to offer.
>
>
>**
>Participation and subscription information for this EDUCAUSE
>Constituent Group discussion list can be found at
>http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Cisco AVC reporting in PI 2.2

2015-09-01 Thread Lee H Badman 
As I just shared with our SE...

After going to PI 2.2, we lost the ability to see AVC information in PI. It was 
easy to setup in 1.4 after getting the assurance licenses we needed using this: 
http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

And then there is this for PI 3 
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-infrastructure/solution_overview_c22-728972.html#_Toc428598044

But I can find nothing on 2.2 and the PI interface maps to neither the old or 
new. Any idea where I can find guidance on application reporting setup in 2.2 
PI? I had no idea this was gone until I needed it, and I'm finding nothing 
after hours of searching.



Anyone else been down this road? I have it set fine on the WLCs, just PI is 
typically confounding.

(yes I know 3.0 is out)

Thanks-

Lee


Lee Badman | Network Architect
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244

t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w 
its.syr.edu

SYRACUSE UNIVERSITY
syr.edu




**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Lab Computers and wireless

2015-09-01 Thread Watters, John 
We do this with a single WPA2 Enterprise SSID using VLAN Override. Our 
FreeRadius Servers authenticates against our campus-wide LDAP directory and 
receives from LDAP not only a good or bad for the authentication but also a 
VLAN to drop the person into. This VLAN value (soon to be changed to a VLAN 
name for more flexibility in our new MPLS world) is generated by some back-end 
process and stored in the LDAP directory entries. Currently we drop folks into 
faculty/staff, student/eduroam, and HIPAA VLANs. A couple ore categories are on 
the horizon.




-jcw

John WattersThe University of Alabama
Office of Information Technology
205-348-3992
 

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Paul Crittenden
Sent: Tuesday, September 01, 2015 3:22 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Lab Computers and wireless

We are predominately a Meru shop. We have a staff and a student SSID and a 
Windows Radius server for authentication.  To complicate this we have lab 
laptops which both students and staff need to be able to log into. Currently we 
have no way to prevent students from connecting to our staff wireless and staff 
to student and still allow both students and staff to connect to lab laptops.

We have been charged to find out how other institutions are handling this and 
what best practices they are using for this situation.

Thanks in advance for any insight you may be able to offer.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Lab Computers and wireless

2015-09-01 Thread Rob Taylor 
I can think of a few ways to do this. I have meru but am migrating away from 
it. 

1. Use different radius servers for different ssid's, and have each radius 
server only authenticate members of it's respective group(which requires
   explicit group membership, not just an active account existing in AD).
   I would think that you would want to use vlans to separate the students and 
faculty as well.

2. While I have never used this feature I'm pretty sure with meru(as with many 
other wireless systesm) you can use radius attributes to drop users onto 
different vlans.
   So, you could reduce your ssid's to one ssid, and have the radius server 
return the appropriate information based on group membership(this also requires 
explicit group membership)
   , and that would control which vlan the user land in when they authenticate 
to the wireless.
   Only downside of this is if you need to test something from the other groups 
perspective you will need a test username in that group, or you will need
   to move the user under test from one group to another.

There may be other ways to do it as well. 

rgt

Whitehead Network/System Administrator

- Original Message -
> We are predominately a Meru shop. We have a staff and a student SSID and a
> Windows Radius server for authentication.  To complicate this we have lab
> laptops which both students and staff need to be able to log into. Currently
> we have no way to prevent students from connecting to our staff wireless and
> staff to student and still allow both students and staff to connect to lab
> laptops.
> 
> We have been charged to find out how other institutions are handling this and
> what best practices they are using for this situation.
> 
> Thanks in advance for any insight you may be able to offer.
> 
> 
> **
> Participation and subscription information for this EDUCAUSE Constituent
> Group discussion list can be found at http://www.educause.edu/groups/.
> 
> 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.

2015-09-01 Thread Charlie Weaver 
Yes, it sets a precedent that you are going to meet the students’ needs and 
protect the university.  If the parents and the students think it’s an issue, 
why try and force the matter when it is easy enough to move the AP and let them 
plug into the network through a port in the room.

If they ask for the wireless on the entire campus to be turned off or in all of 
the classrooms the student is in, then it’s a different story.

While this is not an ADA issue, the ADA laws talk of “reasonable 
accommodation”.  I would be hard pressed to believe this request was not 
reasonable.

Ridiculous yes, but still very reasonable.

Charlie Weaver

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Frank Bulk
Sent: Monday, August 31, 2015 12:17 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Doesn’t that set a precedent?

Frank

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gruenhagen, Tim
Sent: Thursday, August 27, 2015 10:12 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Coincidentally, we just moved an AP out of a student's room because her parents 
were certain that it was a health hazard to be within 9 feet of an AP.  No 
point in arguing with an upset mom.

On Thu, Aug 27, 2015 at 10:59 AM, Lee H Badman 
> wrote:
Two words:  Lawyers… geeze.

Lee Badman | Network Architect
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e 
lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Bob Brown
Sent: Tuesday, August 25, 2015 5:35 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

FYI We’ve included a link to the lawsuit and the school’s statement on this 
lawsuit in this piece: 
http://www.networkworld.com/article/2975945/mobile-wireless/massachusetts-boarding-school-fay-southborough-sued-over-wi-fi-sickness.html?nsdr=true




Bob Brown

Online Executive Editor, News

T: 508.766.5418
LinkedIn | Twitter: 
@alphadoggs | Facebook 
profile | Google + 
profile | 
Instagram


NETWORK WORLD

492 Old Connecticut Path | PO Box 9002 | Framingham, MA 01701-9002

NetworkWorld.com | Media 
Kit | Conferences & 
Events

An IDG Enterprise Brand


From: , James Patrick >
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>
Date: Tuesday, August 25, 2015 at 4:43 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

I'll drink to that!

-- Jim Gogan
ITS Communication Technologies
Univ of North Carolina at Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chuck Enfield
Sent: Tuesday, August 25, 2015 4:29 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Say what you want, but I know Wi-Fi makes me sick every year around this time.  
I can’t sleep, I eat less, I drink more, and it’s all Wi-Fi’s fault.

Chuck Enfield
Manager, Wireless Systems & Engineering
Telecommunications & Networking Services
The Pennsylvania State University
110H, USB2, UP, PA 16802
ph: 814.863.8715
fx: 814.865.3988

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike King
Sent: Tuesday, August 25, 2015 4:22 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.


In the local news today.
http://www.whdh.com/story/29873525/parents-say-schools-wi-fi-signal-making-son-sick
** Participation and subscription information

Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Troy Lynn Wiseman 
We are trying to figure out how to handle non 802.1x devices on our enterprise 
network.  We are a Cisco shop and currently are broadcasting 4 SSIDs including 
a guest SSID that is non 802.1x.  We are concerned with how to give access to 
non 802.1x devices in our residence halls.  We were wondering how others are 
tackling this issue.

TROY WISEMAN
Network Engineer II

INFORMATION TECHNOLOGY
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

twise...@siu.edu
P: (618) 453-6264
INFOTECH.SIU.EDU

[http://siu.edu/_common/images/SIUlogo.png]


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Rick Coloccia 

+1. We're doing almost exactly the same.

On 9/1/2015 10:53 AM, Williams, Matthew wrote:


We have an SSID for these devices and we built a device registration 
page for our students to go to enter their wireless MAC address.  This 
page requires the students to login so we capture who owns the device 
in question.  This page has an API that ties into our DHCP system.  
Several of the newer RADIUS products have this feature built in, but 
we’re still riding an old system that couldn’t do this.


Respectfully,

Matthew Williams

Manager, Network and Telecommunications Services

Kent State University

Office: (330) 672-7246

Mobile: (330) 469-0445

*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Troy Lynn 
Wiseman

*Sent:* Tuesday, September 1, 2015 10:40 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* [WIRELESS-LAN] Handling Non 802.1x Devices on the 
Enterprise Network


We are trying to figure out how to handle non 802.1x devices on our 
enterprise network.  We are a Cisco shop and currently are 
broadcasting 4 SSIDs including a guest SSID that is non 802.1x.  We 
are concerned with how to give access to non 802.1x devices in our 
residence halls.  We were wondering how others are tackling this issue.


TROY WISEMAN

Network Engineer II

INFORMATION TECHNOLOGY
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

twise...@siu.edu 

P: (618) 453-6264

INFOTECH.SIU.EDU 

http://siu.edu/_common/images/SIUlogo.png

** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.




--
Rick Coloccia, Jr.
Network Manager
State University of NY College at Geneseo
1 College Circle, 119 South Hall
Geneseo, NY 14454
V: 585-245-5577
F: 585-245-5579


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Case, Brandon J 
We are doing pretty much the same thing as well, although without the DHCP 
tie-in.

We set up a separate SSID for gaming consoles/media devices in the residence 
halls and have students register them via one of ISE's portals. We did set up 
an authorization policy with a logical profile to prevent 1x-capable devices 
from using the SSID. They get stuck in a walled garden and can only see a page 
that essentially says they have to connect the device they're currently using 
to the 1x SSID (which is the same one we broadcast all over campus). The 
profiling component of ISE works pretty well most of the time but we have had a 
real headache dealing with XboxOne's since they are essentially Windows 8 
machines and we drop Windows 8 clients in the walled garden. I ended up writing 
a few custom rules in the profiler that catch most of them and we handle the 
rest on an individual basis.

The whole system has worked out pretty well considering the scope (about 12,000 
students in 15 residence halls). It hasn't been without its share of bumps but 
overall we're pleased with it.

Thanks,
--
Brandon Case
Senior Network Engineer
IT Infrastructure Services
Purdue University
ca...@purdue.edu
Office: (765) 49-67096
Mobile: (765) 421-6259
Fax:(765) 49-46620

PGP Fingerprint:
99CB 02D6 983C 1E2A 015F  205C C7AA E985 A11A 1251

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Rick Coloccia
Sent: Tuesday, September 1, 2015 10:56 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise 
Network

+1. We're doing almost exactly the same.
On 9/1/2015 10:53 AM, Williams, Matthew wrote:
We have an SSID for these devices and we built a device registration page for 
our students to go to enter their wireless MAC address.  This page requires the 
students to login so we capture who owns the device in question.  This page has 
an API that ties into our DHCP system.  Several of the newer RADIUS products 
have this feature built in, but we're still riding an old system that couldn't 
do this.

Respectfully,

Matthew Williams
Manager, Network and Telecommunications Services
Kent State University
Office: (330) 672-7246
Mobile: (330) 469-0445

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Troy Lynn Wiseman
Sent: Tuesday, September 1, 2015 10:40 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

We are trying to figure out how to handle non 802.1x devices on our enterprise 
network.  We are a Cisco shop and currently are broadcasting 4 SSIDs including 
a guest SSID that is non 802.1x.  We are concerned with how to give access to 
non 802.1x devices in our residence halls.  We were wondering how others are 
tackling this issue.

TROY WISEMAN
Network Engineer II

INFORMATION TECHNOLOGY
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

twise...@siu.edu
P: (618) 453-6264
INFOTECH.SIU.EDU

[http://siu.edu/_common/images/SIUlogo.png]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



--

Rick Coloccia, Jr.

Network Manager

State University of NY College at Geneseo

1 College Circle, 119 South Hall

Geneseo, NY 14454

V: 585-245-5577

F: 585-245-5579
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Williams, Matthew 
We have an SSID for these devices and we built a device registration page for 
our students to go to enter their wireless MAC address.  This page requires the 
students to login so we capture who owns the device in question.  This page has 
an API that ties into our DHCP system.  Several of the newer RADIUS products 
have this feature built in, but we're still riding an old system that couldn't 
do this.

Respectfully,

Matthew Williams
Manager, Network and Telecommunications Services
Kent State University
Office: (330) 672-7246
Mobile: (330) 469-0445

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Troy Lynn Wiseman
Sent: Tuesday, September 1, 2015 10:40 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

We are trying to figure out how to handle non 802.1x devices on our enterprise 
network.  We are a Cisco shop and currently are broadcasting 4 SSIDs including 
a guest SSID that is non 802.1x.  We are concerned with how to give access to 
non 802.1x devices in our residence halls.  We were wondering how others are 
tackling this issue.

TROY WISEMAN
Network Engineer II

INFORMATION TECHNOLOGY
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

twise...@siu.edu
P: (618) 453-6264
INFOTECH.SIU.EDU

[http://siu.edu/_common/images/SIUlogo.png]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Hinson, Matthew P 
We used to use an open network with MAC filtering, but now we've moved to
Aerohive's PPSK. It's been working great so far.

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Case, Brandon J
Sent: Tuesday, September 1, 2015 11:05 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise
Network

 

We are doing pretty much the same thing as well, although without the DHCP
tie-in. 

 

We set up a separate SSID for gaming consoles/media devices in the residence
halls and have students register them via one of ISE's portals. We did set
up an authorization policy with a logical profile to prevent 1x-capable
devices from using the SSID. They get stuck in a walled garden and can only
see a page that essentially says they have to connect the device they're
currently using to the 1x SSID (which is the same one we broadcast all over
campus). The profiling component of ISE works pretty well most of the time
but we have had a real headache dealing with XboxOne's since they are
essentially Windows 8 machines and we drop Windows 8 clients in the walled
garden. I ended up writing a few custom rules in the profiler that catch
most of them and we handle the rest on an individual basis.

 

The whole system has worked out pretty well considering the scope (about
12,000 students in 15 residence halls). It hasn't been without its share of
bumps but overall we're pleased with it.

 

Thanks,

--

Brandon Case

Senior Network Engineer

IT Infrastructure Services

Purdue University

ca...@purdue.edu  

Office: (765) 49-67096

Mobile: (765) 421-6259

Fax:(765) 49-46620

 

PGP Fingerprint:

99CB 02D6 983C 1E2A 015F  205C C7AA E985 A11A 1251

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Rick Coloccia
Sent: Tuesday, September 1, 2015 10:56 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 
Subject: Re: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise
Network

 

+1. We're doing almost exactly the same.

On 9/1/2015 10:53 AM, Williams, Matthew wrote:

We have an SSID for these devices and we built a device registration page
for our students to go to enter their wireless MAC address.  This page
requires the students to login so we capture who owns the device in
question.  This page has an API that ties into our DHCP system.  Several of
the newer RADIUS products have this feature built in, but we're still riding
an old system that couldn't do this. 

 

Respectfully, 

 

Matthew Williams

Manager, Network and Telecommunications Services

Kent State University

Office: (330) 672-7246

Mobile: (330) 469-0445 

 

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Troy Lynn Wiseman
Sent: Tuesday, September 1, 2015 10:40 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 
Subject: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise
Network

 

We are trying to figure out how to handle non 802.1x devices on our
enterprise network.  We are a Cisco shop and currently are broadcasting 4
SSIDs including a guest SSID that is non 802.1x.  We are concerned with how
to give access to non 802.1x devices in our residence halls.  We were
wondering how others are tackling this issue.  

 

TROY WISEMAN

Network Engineer II

 

INFORMATION TECHNOLOGY 
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

 

  twise...@siu.edu

P: (618) 453-6264

  INFOTECH.SIU.EDU

 



 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

 

-- 
Rick Coloccia, Jr.
Network Manager
State University of NY College at Geneseo
1 College Circle, 119 South Hall
Geneseo, NY 14454
V: 585-245-5577
F: 585-245-5579

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



smime.p7s
Description: S/MIME cryptographic signature

Re: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Stuart, Nathan 
We are using Cloudpath for all onboarding including MAC authentication.

On Tue, Sep 1, 2015 at 10:53 AM, Williams, Matthew 
wrote:

> We have an SSID for these devices and we built a device registration page
> for our students to go to enter their wireless MAC address.  This page
> requires the students to login so we capture who owns the device in
> question.  This page has an API that ties into our DHCP system.  Several of
> the newer RADIUS products have this feature built in, but we’re still
> riding an old system that couldn’t do this.
>
>
>
> Respectfully,
>
>
>
> Matthew Williams
>
> Manager, Network and Telecommunications Services
>
> Kent State University
>
> Office: (330) 672-7246
>
> Mobile: (330) 469-0445
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Troy Lynn Wiseman
> *Sent:* Tuesday, September 1, 2015 10:40 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise
> Network
>
>
>
> We are trying to figure out how to handle non 802.1x devices on our
> enterprise network.  We are a Cisco shop and currently are broadcasting 4
> SSIDs including a guest SSID that is non 802.1x.  We are concerned with how
> to give access to non 802.1x devices in our residence halls.  We were
> wondering how others are tackling this issue.
>
>
>
> TROY WISEMAN
>
> Network Engineer II
>
>
>
> INFORMATION TECHNOLOGY
> MAIL CODE 4622
> SOUTHERN ILLINOIS UNIVERSITY
> 625 WHAM DRIVE
> CARBONDALE, ILLINOIS 62901
>
>
>
> twise...@siu.edu
>
> P: (618) 453-6264
>
> INFOTECH.SIU.EDU 
>
>
>
> [image: http://siu.edu/_common/images/SIUlogo.png]
>
>
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/groups/.
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/groups/.
>
>


-- 

*Nathan Stuart*

Director of Information Technology

252.334.2014  | 252.334.2071 (fax)

www.macuniversity.edu

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.

2015-09-01 Thread Gruenhagen, Tim 
The 9 foot requirement came from the student's dad who "works in the
industry and knows these things".  I actually found the FCC 20 cm notice in
the Cisco AP materials also.  Now I've got something to present if this
becomes a trend.

On Tue, Sep 1, 2015 at 10:12 AM, Chanowski, John  wrote:

> I don’t know where the 9’ recommendation comes from but the installation
> guide for Aruba’s 220 series access point (3x3x3,ac) contains the following
> RF Radiation Exposure Statement: “This equipment complies with FCC RF
> radiation exposure limits. This equipment should be installed and operated
> with a minimum distance of 7.9 inches (20 cm) between the radiator and your
> body for 2.4 GHz and 5 GHz operations.” Based on this 9 feet should be way
> safe and non-controversialJ
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Barrett, Bruce
> *Sent:* Tuesday, September 01, 2015 9:10 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> We are getting complaints about this from our business areas, Enrollment
> Services etc. I was curious where the 9 feet from an AP recommendation came
> from.
>
>
>
> Bruce
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Charlie Weaver
> *Sent:* Tuesday, September 01, 2015 8:53 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> Yes, it sets a precedent that you are going to meet the students’ needs
> and protect the university.  If the parents and the students think it’s an
> issue, why try and force the matter when it is easy enough to move the AP
> and let them plug into the network through a port in the room.
>
>
>
> If they ask for the wireless on the entire campus to be turned off or in
> all of the classrooms the student is in, then it’s a different story.
>
>
> While this is not an ADA issue, the ADA laws talk of “reasonable
> accommodation”.  I would be hard pressed to believe this request was not
> reasonable.
>
>
>
> Ridiculous yes, but still very reasonable.
>
>
>
> Charlie Weaver
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Frank Bulk
> *Sent:* Monday, August 31, 2015 12:17 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> Doesn’t that set a precedent?
>
>
>
> Frank
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Gruenhagen, Tim
> *Sent:* Thursday, August 27, 2015 10:12 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> Coincidentally, we just moved an AP out of a student's room because her
> parents were certain that it was a health hazard to be within 9 feet of an
> AP.  No point in arguing with an upset mom.
>
>
>
> On Thu, Aug 27, 2015 at 10:59 AM, Lee H Badman  wrote:
>
> Two words:  Lawyers… geeze.
>
>
>
> *Lee Badman* | Network Architect
>
> Information Technology Services
> 206 Machinery Hall
> 120 Smith Drive
> Syracuse, New York 13244
>
> *t* 315.443.3003  * f* 315.443.4325   *e* lhbad...@syr.edu *w* its.syr.edu
>
> *SYRACUSE UNIVERSITY*
> syr.edu
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Bob Brown
> *Sent:* Tuesday, August 25, 2015 5:35 PM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> FYI We’ve included a link to the lawsuit and the school’s statement on
> this lawsuit in this piece:
> http://www.networkworld.com/article/2975945/mobile-wireless/massachusetts-boarding-school-fay-southborough-sued-over-wi-fi-sickness.html?nsdr=true
>
>
>
>
>
> *Bob Brown*
>
> Online Executive Editor, News
>
> T: 508.766.5418
>
> LinkedIn  | Twitter:
> @alphadoggs  | Facebook profile
>  | Google + profile
>  | Instagram
> 
>
>
>
> *NETWORK* *WORLD*
>
> 492 Old Connecticut Path | PO Box 9002 | Framingham, MA 01701-9002
>
> NetworkWorld.com  | Media Kit
>  | Conferences & Events
> 
>
> An IDG Enterprise  Brand
>
>
>

Re: [WIRELESS-LAN] Handling Non 802.1x Devices on the Enterprise Network

2015-09-01 Thread Kevin McCormick 

Hello Troy,

We did the same thing until this year. We just upgraded our Cloud Path 
server and now have on-boarding. For devices students go to a website 
and register the MAC address of the device and then connect to a SSID 
using a preshared key.
We still have our guest SSID available but have plans to stop using it 
later this fall. Guests can no on-board and use a secure and restricted 
SSID for 24 hours, longer if they are sponsored and use voucher code.
We still working out the kinks, but if you want more info feel free to 
contact us directly.


Kevin McCormick
Western Illinois University


On 9/1/2015 9:39 AM, Troy Lynn Wiseman wrote:


We are trying to figure out how to handle non 802.1x devices on our 
enterprise network.  We are a Cisco shop and currently are 
broadcasting 4 SSIDs including a guest SSID that is non 802.1x.  We 
are concerned with how to give access to non 802.1x devices in our 
residence halls.  We were wondering how others are tackling this issue.


TROY WISEMAN

Network Engineer II

INFORMATION TECHNOLOGY
MAIL CODE 4622
SOUTHERN ILLINOIS UNIVERSITY
625 WHAM DRIVE
CARBONDALE, ILLINOIS 62901

twise...@siu.edu 

P: (618) 453-6264

INFOTECH.SIU.EDU 

http://siu.edu/_common/images/SIUlogo.png

** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.





**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.

2015-09-01 Thread Barrett, Bruce 
We are getting complaints about this from our business areas, Enrollment 
Services etc. I was curious where the 9 feet from an AP recommendation came 
from.

Bruce

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Charlie Weaver
Sent: Tuesday, September 01, 2015 8:53 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Yes, it sets a precedent that you are going to meet the students’ needs and 
protect the university.  If the parents and the students think it’s an issue, 
why try and force the matter when it is easy enough to move the AP and let them 
plug into the network through a port in the room.

If they ask for the wireless on the entire campus to be turned off or in all of 
the classrooms the student is in, then it’s a different story.

While this is not an ADA issue, the ADA laws talk of “reasonable 
accommodation”.  I would be hard pressed to believe this request was not 
reasonable.

Ridiculous yes, but still very reasonable.

Charlie Weaver

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Frank Bulk
Sent: Monday, August 31, 2015 12:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Doesn’t that set a precedent?

Frank

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gruenhagen, Tim
Sent: Thursday, August 27, 2015 10:12 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Coincidentally, we just moved an AP out of a student's room because her parents 
were certain that it was a health hazard to be within 9 feet of an AP.  No 
point in arguing with an upset mom.

On Thu, Aug 27, 2015 at 10:59 AM, Lee H Badman 
> wrote:
Two words:  Lawyers… geeze.

Lee Badman | Network Architect
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e 
lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Bob Brown
Sent: Tuesday, August 25, 2015 5:35 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

FYI We’ve included a link to the lawsuit and the school’s statement on this 
lawsuit in this piece: 
http://www.networkworld.com/article/2975945/mobile-wireless/massachusetts-boarding-school-fay-southborough-sued-over-wi-fi-sickness.html?nsdr=true




Bob Brown

Online Executive Editor, News

T: 508.766.5418
LinkedIn | Twitter: 
@alphadoggs | Facebook 
profile | Google + 
profile | 
Instagram


NETWORK WORLD

492 Old Connecticut Path | PO Box 9002 | Framingham, MA 01701-9002

NetworkWorld.com | Media 
Kit | Conferences & 
Events

An IDG Enterprise Brand


From: , James Patrick >
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>
Date: Tuesday, August 25, 2015 at 4:43 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

I'll drink to that!

-- Jim Gogan
ITS Communication Technologies
Univ of North Carolina at Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chuck Enfield
Sent: Tuesday, August 25, 2015 4:29 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Say what you want, but I know Wi-Fi makes me sick every year around this time.  
I can’t sleep, I eat less, I drink more, and it’s all Wi-Fi’s fault.

Chuck Enfield
Manager, Wireless Systems & Engineering
Telecommunications & Networking Services
The Pennsylvania State University
110H, USB2, UP, PA 16802
ph: 814.863.8715
fx:

Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.

2015-09-01 Thread Coehoorn, Joel 
I wonder if the student in question carries a cell phone?



Joel Coehoorn
Director of Information Technology
402.363.5603
*jcoeho...@york.edu *

The mission of York College is to transform lives through
Christ-centered education and to equip students for lifelong service to
God, family, and society

On Tue, Sep 1, 2015 at 8:10 AM, Barrett, Bruce  wrote:

> We are getting complaints about this from our business areas, Enrollment
> Services etc. I was curious where the 9 feet from an AP recommendation came
> from.
>
>
>
> Bruce
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Charlie Weaver
> *Sent:* Tuesday, September 01, 2015 8:53 AM
>
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> Yes, it sets a precedent that you are going to meet the students’ needs
> and protect the university.  If the parents and the students think it’s an
> issue, why try and force the matter when it is easy enough to move the AP
> and let them plug into the network through a port in the room.
>
>
>
> If they ask for the wireless on the entire campus to be turned off or in
> all of the classrooms the student is in, then it’s a different story.
>
>
> While this is not an ADA issue, the ADA laws talk of “reasonable
> accommodation”.  I would be hard pressed to believe this request was not
> reasonable.
>
>
>
> Ridiculous yes, but still very reasonable.
>
>
>
> Charlie Weaver
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Frank Bulk
> *Sent:* Monday, August 31, 2015 12:17 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> Doesn’t that set a precedent?
>
>
>
> Frank
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Gruenhagen, Tim
> *Sent:* Thursday, August 27, 2015 10:12 AM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> Coincidentally, we just moved an AP out of a student's room because her
> parents were certain that it was a health hazard to be within 9 feet of an
> AP.  No point in arguing with an upset mom.
>
>
>
> On Thu, Aug 27, 2015 at 10:59 AM, Lee H Badman  wrote:
>
> Two words:  Lawyers… geeze.
>
>
>
> *Lee Badman* | Network Architect
>
> Information Technology Services
> 206 Machinery Hall
> 120 Smith Drive
> Syracuse, New York 13244
>
> *t* 315.443.3003  * f* 315.443.4325   *e* lhbad...@syr.edu *w* its.syr.edu
>
> *SYRACUSE UNIVERSITY*
> syr.edu
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Bob Brown
> *Sent:* Tuesday, August 25, 2015 5:35 PM
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> FYI We’ve included a link to the lawsuit and the school’s statement on
> this lawsuit in this piece:
> http://www.networkworld.com/article/2975945/mobile-wireless/massachusetts-boarding-school-fay-southborough-sued-over-wi-fi-sickness.html?nsdr=true
>
>
>
>
>
> *Bob Brown*
>
> Online Executive Editor, News
>
> T: 508.766.5418
>
> LinkedIn  | Twitter:
> @alphadoggs  | Facebook profile
>  | Google + profile
>  | Instagram
> 
>
>
>
> *NETWORK* *WORLD*
>
> 492 Old Connecticut Path | PO Box 9002 | Framingham, MA 01701-9002
>
> NetworkWorld.com  | Media Kit
>  | Conferences & Events
> 
>
> An IDG Enterprise  Brand
>
>
>
>
>
> *From: *, James Patrick 
> *Reply-To: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> *Date: *Tuesday, August 25, 2015 at 4:43 PM
> *To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> *Subject: *Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making
> son sick.
>
>
>
> I'll drink to that!
>
>
>
> -- Jim Gogan
>
> ITS Communication Technologies
>
> Univ of North Carolina at Chapel Hill
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
> mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> ] *On Behalf Of *Chuck Enfield
> *Sent:* Tuesday, August 25, 2015 4:29 PM
> *To:*

RE: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son sick.

2015-09-01 Thread Chanowski, John 
I don’t know where the 9’ recommendation comes from but the installation guide 
for Aruba’s 220 series access point (3x3x3,ac) contains the following RF 
Radiation Exposure Statement: “This equipment complies with FCC RF radiation 
exposure limits. This equipment should be installed and operated with a minimum 
distance of 7.9 inches (20 cm) between the radiator and your body for 2.4 GHz 
and 5 GHz operations.” Based on this 9 feet should be way safe and 
non-controversial☺

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barrett, Bruce
Sent: Tuesday, September 01, 2015 9:10 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

We are getting complaints about this from our business areas, Enrollment 
Services etc. I was curious where the 9 feet from an AP recommendation came 
from.

Bruce

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Charlie Weaver
Sent: Tuesday, September 01, 2015 8:53 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Yes, it sets a precedent that you are going to meet the students’ needs and 
protect the university.  If the parents and the students think it’s an issue, 
why try and force the matter when it is easy enough to move the AP and let them 
plug into the network through a port in the room.

If they ask for the wireless on the entire campus to be turned off or in all of 
the classrooms the student is in, then it’s a different story.

While this is not an ADA issue, the ADA laws talk of “reasonable 
accommodation”.  I would be hard pressed to believe this request was not 
reasonable.

Ridiculous yes, but still very reasonable.

Charlie Weaver

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Frank Bulk
Sent: Monday, August 31, 2015 12:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Doesn’t that set a precedent?

Frank

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gruenhagen, Tim
Sent: Thursday, August 27, 2015 10:12 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

Coincidentally, we just moved an AP out of a student's room because her parents 
were certain that it was a health hazard to be within 9 feet of an AP.  No 
point in arguing with an upset mom.

On Thu, Aug 27, 2015 at 10:59 AM, Lee H Badman 
> wrote:
Two words:  Lawyers… geeze.

Lee Badman | Network Architect
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e 
lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Bob Brown
Sent: Tuesday, August 25, 2015 5:35 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Parents sue school, say Wi-Fi signal making son 
sick.

FYI We’ve included a link to the lawsuit and the school’s statement on this 
lawsuit in this piece: 
http://www.networkworld.com/article/2975945/mobile-wireless/massachusetts-boarding-school-fay-southborough-sued-over-wi-fi-sickness.html?nsdr=true




Bob Brown

Online Executive Editor, News

T: 508.766.5418
LinkedIn | Twitter: 
@alphadoggs | Facebook 
profile | Google + 
profile | 
Instagram


NETWORK WORLD

492 Old Connecticut Path | PO Box 9002 | Framingham, MA 01701-9002

NetworkWorld.com | Media 
Kit | Conferences & 
Events

An IDG Enterprise Brand


From: , James Patrick >
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>
Date: Tuesday, August 25, 2015 at 4:43 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Subject: Re: [WIRELESS-LAN] Parents