Re: [WIRELESS-LAN] eduroam CAT Tool questioin

2018-05-11 Thread Michael Davis 
There is a CAT users email list that might be helpful 
(https://lists.geant.org/sympa/subscribe/cat-users)


You wouldn't happen to be using a wildcard cert would you?  I believe 
Windows

has issues with them.

On 5/11/18 4:01 PM, Schwartz, Roger J wrote:


Tony,

Reading the documentation and after several eap option attempts, still 
not getting the endpoint on. I have tried eap types (in order of 
preference) PEAP-MSCHAPv2, TTLS-MSCHAPv2, TTLS-PAP all together and 
separately and still not getting on eduroam.


This is from the radius log:

Login incorrect (eap_peap: TLS Alert read:fatal:access denied): 
[rschw...@uthsc.edu/]


Login incorrect (eap: No mutually acceptable types found): 
[XxxxXxxx\rschwart/]


Any thoughts. What eap method are you using for your windows 10 
devices. We don’t have any issues with our MAC emdpoints.


I appreciate your help.

Roge

*From: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
 on behalf of Tony Skalski 
<0057dcfe0332-dmarc-requ...@listserv.educause.edu>
*Reply-To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 


*Date: *Thursday, May 10, 2018 at 4:19 PM
*To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 


*Subject: *Re: [WIRELESS-LAN] eduroam CAT Tool questioin

I would check the connection properties that get set up (by the CAT) 
and verify they are correct. This sounds similar to an issue we see 
with Windows 10 clients connecting to older PPTP VPNs, where we have 
to explicitly pick the EAP type to be used.


ajs

On Thu, May 10, 2018 at 4:05 PM Schwartz, Roger J > wrote:


Tony,

We cannot authenticate, getting the following error:  Login
incorrect (eap: No mutually acceptable types found): [uthsc.edu
\rschw...@uthsc.edu/
] or a varation
of this when we try other auth methods.  I am pretty sure it has
to do with the Supported EAP types for the profile.

Thanks

Roger

*From: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
"
> on behalf of Tony
Skalski <0057dcfe0332-dmarc-requ...@listserv.educause.edu
>
*Reply-To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
"
>
*Date: *Thursday, May 10, 2018 at 2:57 PM
*To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
"
>
*Subject: *Re: [WIRELESS-LAN] eduroam CAT Tool questioin

Yep. We have onboarded a bunch. What are you seeing?

There is also: https://lists.geant.org/sympa/info/cat-users

ajs

On Thu, May 10, 2018 at 2:55 PM Schwartz, Roger J
> wrote:

Has anyone used the eduroam CAT tool to create the onboarding
for Windows 10 users? We are stuck getting a Windows 10
configuration to work with the CAT Tool.

Any help would be appreciated.

Thanks

Roger


*___*

*Roger Schwartz *|Senior Wireless Network Technician/|
/*Information Technology Services*

*UNIVERSITY OF TENNESSEE HEALTH SCIENCE CENTER*

877 Madison Ave., Suite 738 | Memphis, TN  38163

( 901.448.2236 | 7 901.448.8199 |*: rschw...@uthsc.edu


*Error! Filename not specified.*

** Participation and subscription information for this
EDUCAUSE Constituent Group discussion list can be found at
http://www.educause.edu/discuss.


-- 


*Tony Skalski*

System Administrator | IT

*Office: *507-786-3227

1510 St. Olaf Avenue Northfield, MN 55057

stolaf.edu 

** Participation and subscription information for this
EDUCAUSE Constituent Group discussion list can be found at
http://www.educause.edu/discuss.

** Participation and subscription information for this
EDUCAUSE Constituent Group discussion list can be found at
http://www.educause.edu/discuss.


--

*Tony Skalski*

System Administrator | IT

*Office: *507-786-3227

1510 St. Olaf Avenue Northfield, MN 55057

stolaf.edu 

** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


** Participation and subscription information for this 
EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.





--

Re: [WIRELESS-LAN] eduroam CAT Tool questioin

2018-05-11 Thread Schwartz, Roger J 
Tony,

Reading the documentation and after several eap option attempts, still not 
getting the endpoint on. I have tried eap types (in order of preference) 
PEAP-MSCHAPv2, TTLS-MSCHAPv2, TTLS-PAP all together and separately and still 
not getting on eduroam.
This is from the radius log:

Login incorrect (eap_peap: TLS Alert read:fatal:access denied): 
[rschw...@uthsc.edu/]
Login incorrect (eap: No mutually acceptable types found): 
[XxxxXxxx\rschwart/]

Any thoughts. What eap method are you using for your windows 10 devices. We 
don’t have any issues with our MAC emdpoints.

I appreciate your help.

Roge



From: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU"  
on behalf of Tony Skalski <0057dcfe0332-dmarc-requ...@listserv.educause.edu>
Reply-To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 

Date: Thursday, May 10, 2018 at 4:19 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] eduroam CAT Tool questioin

I would check the connection properties that get set up (by the CAT) and verify 
they are correct. This sounds similar to an issue we see with Windows 10 
clients connecting to older PPTP VPNs, where we have to explicitly pick the EAP 
type to be used.

ajs

On Thu, May 10, 2018 at 4:05 PM Schwartz, Roger J 
> wrote:
Tony,

We cannot authenticate, getting the following error:  Login incorrect (eap: No 
mutually acceptable types found): 
[uthsc.edu\rschw...@uthsc.edu/] or a varation of this when we try other auth methods.  I am 
pretty sure it has to do with the Supported EAP types for the profile.

Thanks
Roger


From: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
> 
on behalf of Tony Skalski 
<0057dcfe0332-dmarc-requ...@listserv.educause.edu>
Reply-To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Date: Thursday, May 10, 2018 at 2:57 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Subject: Re: [WIRELESS-LAN] eduroam CAT Tool questioin

Yep. We have onboarded a bunch. What are you seeing?

There is also: https://lists.geant.org/sympa/info/cat-users

ajs

On Thu, May 10, 2018 at 2:55 PM Schwartz, Roger J 
> wrote:
Has anyone used the eduroam CAT tool to create the onboarding for Windows 10 
users? We are stuck getting a Windows 10 configuration to work with the CAT 
Tool.

Any help would be appreciated.

Thanks
Roger

___
Roger Schwartz |Senior Wireless Network Technician| Information Technology 
Services
UNIVERSITY OF TENNESSEE HEALTH SCIENCE CENTER
877 Madison Ave., Suite 738 | Memphis, TN  38163
• 901.448.2236 | 7 901.448.8199 |•: 
rschw...@uthsc.edu
Error! Filename not specified.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


--
Tony Skalski
System Administrator | IT
[https://docs.google.com/uc?export=download=0B8pehFb2jk1VTlJUMXNxQzlUZ0k=0B8pehFb2jk1VR0ZGVzBjRksvU1NMQUdwSzNIa05Ea08ydjFFPQ]
Office: 507-786-3227
1510 St. Olaf Avenue Northfield, MN 55057
stolaf.edu

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


--
Tony Skalski
System Administrator | IT
[https://docs.google.com/uc?export=download=0B8pehFb2jk1VTlJUMXNxQzlUZ0k=0B8pehFb2jk1VR0ZGVzBjRksvU1NMQUdwSzNIa05Ea08ydjFFPQ]
Office: 507-786-3227
1510 St. Olaf Avenue Northfield, MN 55057
stolaf.edu

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Re-authentication times for guest wireless solutions

2018-05-11 Thread Thomas Carter 
1 day (24 hours).

Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Daniel Wurst
Sent: Thursday, May 10, 2018 11:00 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Re-authentication times for guest wireless solutions

Hi all!

This summer we plan to make changes to our guest wireless solution. We plan to 
have users go to a captive portal page on our Aruba controllers. Currently we 
have our re-authentication interval set to 8 hours. We were wondering how often 
other universities are making wireless guests re-authenticate to their networks.

Any feedback is greatly appreciated.

Have a good one!

Dan
--
Daniel Wurst
Network Engineer
Denison University
wur...@denison.edu
740-587-6229

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.