Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

[Felix Windt]

Just for argument’s sake: why? Your users do not care about their WiFi access 
being authenticated. They don’t care about it being encrypted. From your user’s 
perspective, you’re about to make the wireless system behave worse.

Do you have an underlying reason that makes driving traffic towards the 
authenticated, encrypted wireless network a requirement, or is it for its own 
sake? If it’s the latter, you’ll have a lot of unhappy users on your hand, 
without a good reason to explain to them why that change was made.

thx,
felix

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Mangaiah Chowdary Garikapati 

Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv 

Date: Monday, February 24, 2020 at 4:40 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

Main goal is to put registration in front of unsecured Guest Wireless to help 
drive more traffic towards an authenticated secured campus wireless but 
students bring personal devices which may not be compatible with the 
registration / authentication process which is why we are enabling MAC bypass 
process on Guest wireless through Mydevices portal but encountering issues to 
make them work like before with casting / mirroring working.

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Rob Harris
Sent: Monday, February 24, 2020 11:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

May I ask what your goals are in this change?

(to echo the other responses, Aruba Clearpass is a great choice for this, we 
use it and it does everything we need it to).


[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Mangaiah Chowdary Garikapati
Sent: Monday, February 24, 2020 11:32 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

Hello,

At NIU, we are currently undergoing a project to move away from open access 
Guest Wireless to a registration based Guest Wireless using Cisco ISE and we 
are having following issues and any help or suggestions on these are much 
appreciated.


  1.  In the new system, devices are not able to see each other for casting 
purposes, is there any option we need to select to enable various casting and 
mirroring capabilities in the new registration based Guest Wireless?
  2.  We are also using ‘Mydevices’ portal to add devices which doesn’t have 
capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this 
is looking like a hit and miss where some devices connect immediately and some 
take at least an hour to two to be recognized and allowed to connect to the AP. 
Any suggestions why this could be happening?

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 

RE: Implementing registration based Guest Wi-Fi

[Mangaiah Chowdary Garikapati]

Main goal is to put registration in front of unsecured Guest Wireless to help 
drive more traffic towards an authenticated secured campus wireless but 
students bring personal devices which may not be compatible with the 
registration / authentication process which is why we are enabling MAC bypass 
process on Guest wireless through Mydevices portal but encountering issues to 
make them work like before with casting / mirroring working.

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Rob Harris
Sent: Monday, February 24, 2020 11:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

May I ask what your goals are in this change?

(to echo the other responses, Aruba Clearpass is a great choice for this, we 
use it and it does everything we need it to).


[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Mangaiah Chowdary Garikapati
Sent: Monday, February 24, 2020 11:32 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

Hello,

At NIU, we are currently undergoing a project to move away from open access 
Guest Wireless to a registration based Guest Wireless using Cisco ISE and we 
are having following issues and any help or suggestions on these are much 
appreciated.


  1.  In the new system, devices are not able to see each other for casting 
purposes, is there any option we need to select to enable various casting and 
mirroring capabilities in the new registration based Guest Wireless?
  2.  We are also using 'Mydevices' portal to add devices which doesn't have 
capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this 
is looking like a hit and miss where some devices connect immediately and some 
take at least an hour to two to be recognized and allowed to connect to the AP. 
Any suggestions why this could be happening?

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Implementing registration based Guest Wi-Fi

[Rob Harris]

May I ask what your goals are in this change?

(to echo the other responses, Aruba Clearpass is a great choice for this, we 
use it and it does everything we need it to).


[The Culinary Institute of America]
Robert Harris
Manager - Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.(tm)

Please consider the environment before printing this e-mail.



From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Mangaiah Chowdary Garikapati
Sent: Monday, February 24, 2020 11:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

Hello,

At NIU, we are currently undergoing a project to move away from open access 
Guest Wireless to a registration based Guest Wireless using Cisco ISE and we 
are having following issues and any help or suggestions on these are much 
appreciated.


  1.  In the new system, devices are not able to see each other for casting 
purposes, is there any option we need to select to enable various casting and 
mirroring capabilities in the new registration based Guest Wireless?
  2.  We are also using 'Mydevices' portal to add devices which doesn't have 
capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this 
is looking like a hit and miss where some devices connect immediately and some 
take at least an hour to two to be recognized and allowed to connect to the AP. 
Any suggestions why this could be happening?

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

[Ricardo Stella]

Vendors handle this very differently, but in general they tend to "block"
inter-device communications in order to protect the wireless network
experience from chatty protocols like mDNS.

Aruba's Clearpass for example uses the concept of AirGroups, where every
user's devices can see each other and hence allow casting. You still need
to register them (by recording their mac address) and put them on an open
SSID, But they can still communicate between different SSIDs. We have no
issues with the big three (Google, Apple, Amazon) and most other
IoT devices.

Good luck. You're gonna need it..

On Mon, Feb 24, 2020 at 11:41 AM Mangaiah Chowdary Garikapati <
mgarikapa...@niu.edu> wrote:

> Hello,
>
>
>
> At NIU, we are currently undergoing a project to move away from open
> access Guest Wireless to a registration based Guest Wireless using Cisco
> ISE and we are having following issues and any help or suggestions on these
> are much appreciated.
>
>
>
>1. In the new system, devices are not able to see each other for
>casting purposes, is there any option we need to select to enable various
>casting and mirroring capabilities in the new registration based Guest
>Wireless?
>2. We are also using ‘Mydevices’ portal to add devices which doesn’t
>have capabilities to register / authenticate (e.g. Chromecast, Roku etc.)
>but this is looking like a hit and miss where some devices connect
>immediately and some take at least an hour to two to be recognized and
>allowed to connect to the AP. Any suggestions why this could be happening?
>
>
>
> Thank you,
>
> *Mangaiah Chowdary Garikapati*
>
> Project Manager
>
> PMO | Division of Information Technology
>
> 3100 Sycamore Road | DeKalb, IL 60115
>
> mgarikapa...@niu.edu
>
> [image: 125-signature]
>
>
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>


-- 
°(((=((===°°°(((

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Implementing registration based Guest Wi-Fi

[Lee H Badman]

The various devices are all over the place in behavior, requirements, and 
capabilities. There is no one single answer. Cisco has a 36-page guide for 
configuring the WLAN for Chromecast, and some of what it wants you to do 
arguably will not scale very well.

I don't envy what you are taking on.

Lee Badman | Network Architect (CWNE#200)
Information Technology Services
(NDD Group)
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Mangaiah Chowdary Garikapati
Sent: Monday, February 24, 2020 11:32 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi

Hello,

At NIU, we are currently undergoing a project to move away from open access 
Guest Wireless to a registration based Guest Wireless using Cisco ISE and we 
are having following issues and any help or suggestions on these are much 
appreciated.


  1.  In the new system, devices are not able to see each other for casting 
purposes, is there any option we need to select to enable various casting and 
mirroring capabilities in the new registration based Guest Wireless?
  2.  We are also using 'Mydevices' portal to add devices which doesn't have 
capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this 
is looking like a hit and miss where some devices connect immediately and some 
take at least an hour to two to be recognized and allowed to connect to the AP. 
Any suggestions why this could be happening?

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Implementing registration based Guest Wi-Fi

[Mangaiah Chowdary Garikapati]

Hello,

At NIU, we are currently undergoing a project to move away from open access 
Guest Wireless to a registration based Guest Wireless using Cisco ISE and we 
are having following issues and any help or suggestions on these are much 
appreciated.


  1.  In the new system, devices are not able to see each other for casting 
purposes, is there any option we need to select to enable various casting and 
mirroring capabilities in the new registration based Guest Wireless?
  2.  We are also using 'Mydevices' portal to add devices which doesn't have 
capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this 
is looking like a hit and miss where some devices connect immediately and some 
take at least an hour to two to be recognized and allowed to connect to the AP. 
Any suggestions why this could be happening?

Thank you,
Mangaiah Chowdary Garikapati
Project Manager
PMO | Division of Information Technology
3100 Sycamore Road | DeKalb, IL 60115
mgarikapa...@niu.edu
[125-signature]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community