RE: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Harms, Onno (Aruba WLAN)]

No problem. Can't discuss roadmap here. Please reach out to Aruba directly.

/Onno

From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ian Lyons
Sent: Tuesday, March 31, 2020 5:15 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

Onno- sorry new phone and auto correct- my sincere apologies

Sent via the Samsung Galaxy S20 5G, an AT 5G smartphone

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Ian Lyons mailto:ily...@rollins.edu>>
Sent: Tuesday, March 31, 2020 8:13:27 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7


* External Email *

Onto

Any word on when the 303H equivalent will ship?

Ian Lyons
Network Manager
Rollins College

Sent via the Samsung Galaxy S20 5G, an AT 5G smartphone


From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Harms, Onno (Aruba WLAN) mailto:o...@hpe.com>>
Sent: Tuesday, March 31, 2020, 17:56
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7



* External Email *


That is correct. In 8.5 and 8.6 we introduced new chipset drivers which each 
added some missing 11ax functionality to our AP-5xx platforms.



8.6 is the release that delivers full 11ax functionality and Wi-Fi 6 compliance 
(all platforms are certified).



In addition, 8.6 is the first release to support the entry-level AP-504/505 
11ax platforms.



Thanks,

/Onno





[aruba-hp-signature-2_160x105.jpg]

Onno Harms
Sr. Director Product Management - WLAN Platforms
E: o...@hpe.com  |  M: +1-408-480-6498
 Scott Boulevard  |  Santa Clara, CA 95054

WWW.ARUBANETWORKS.COM
 | FOLLOW US | 
Twitter
 | 
LinkedIn





From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Davis
Sent: Tuesday, March 31, 2020 2:06 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7



AFAIK 8.6 will be the first to support the complete 802.11ax suite.  While 8.5
provides support for the 500-series and their WiFi6 components, they are 
incomplete.

So we'll all eventually be there, for now they're concentrating on getting 8.5 
stable.


On 3/31/20 4:39 PM, Adam Forsyth wrote:

All I wish for is that one day they'll have a version that they think is stable 
enough to call a conservative release and which supports the AP515 (which they 
started selling more than a year ago.



They have an 8.6.0.3 out as well.  Does anyone know the logic of who should 
want to be using 8.6 code vs 8.5 code.  I guess I didn't know that logic for 
8.4 code either.  We switched to that when we bought some AP515's, and then I 
switched from the 8.4 branch to the 8.5 branch when it seemed like the 
consensus on this list was that lots of people were having trouble with 8.4 and 
were having better luck with 8.5



On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:

Antonio,



Thank you for feedback.  I really hope this version is stable.  The 8.5 code 
has been quite challenging.  Please let us know if you experience any major 
issues.




Cesar Fernandez

Sr. Network Engineer

University of San Diego







On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia 
mailto:aagar...@scu.edu>> wrote:

We just upgraded to 8.5.0.7 this past Friday so far so good. We also 
experienced two of our MDs crash and we had to take one MD out of the cluster 
due to it being unstable. We had been running 8.5.0.5 without issues, no new MD 
crashes. Aruba stated the crash was due to a corrupt AMON packet. I 
reintroduced the MD that was offline without issues and then upgrade the 
cluster to 8.5.0.7.



On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty 

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Ian Lyons]

Onno- sorry new phone and auto correct- my sincere apologies

Sent via the Samsung Galaxy S20 5G, an AT 5G smartphone

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Ian Lyons 
Sent: Tuesday, March 31, 2020 8:13:27 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7


* External Email *

Onto

Any word on when the 303H equivalent will ship?

Ian Lyons
Network Manager
Rollins College

Sent via the Samsung Galaxy S20 5G, an AT 5G smartphone


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Harms, Onno (Aruba WLAN) 

Sent: Tuesday, March 31, 2020, 17:56
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7


* External Email *


That is correct. In 8.5 and 8.6 we introduced new chipset drivers which each 
added some missing 11ax functionality to our AP-5xx platforms.



8.6 is the release that delivers full 11ax functionality and Wi-Fi 6 compliance 
(all platforms are certified).



In addition, 8.6 is the first release to support the entry-level AP-504/505 
11ax platforms.



Thanks,

/Onno





[aruba-hp-signature-2_160x105.jpg]

Onno Harms
Sr. Director Product Management – WLAN Platforms
E: o...@hpe.com  |  M: +1-408-480-6498
 Scott Boulevard  |  Santa Clara, CA 95054

WWW.ARUBANETWORKS.COM
 | FOLLOW US | 
Twitter
 | 
LinkedIn





From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Davis
Sent: Tuesday, March 31, 2020 2:06 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7



AFAIK 8.6 will be the first to support the complete 802.11ax suite.  While 8.5
provides support for the 500-series and their WiFi6 components, they are 
incomplete.

So we'll all eventually be there, for now they're concentrating on getting 8.5 
stable.


On 3/31/20 4:39 PM, Adam Forsyth wrote:

All I wish for is that one day they'll have a version that they think is stable 
enough to call a conservative release and which supports the AP515 (which they 
started selling more than a year ago.



They have an 8.6.0.3 out as well.  Does anyone know the logic of who should 
want to be using 8.6 code vs 8.5 code.  I guess I didn't know that logic for 
8.4 code either.  We switched to that when we bought some AP515's, and then I 
switched from the 8.4 branch to the 8.5 branch when it seemed like the 
consensus on this list was that lots of people were having trouble with 8.4 and 
were having better luck with 8.5



On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:

Antonio,



Thank you for feedback.  I really hope this version is stable.  The 8.5 code 
has been quite challenging.  Please let us know if you experience any major 
issues.




Cesar Fernandez

Sr. Network Engineer

University of San Diego







On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia 
mailto:aagar...@scu.edu>> wrote:

We just upgraded to 8.5.0.7 this past Friday so far so good. We also 
experienced two of our MDs crash and we had to take one MD out of the cluster 
due to it being unstable. We had been running 8.5.0.5 without issues, no new MD 
crashes. Aruba stated the crash was due to a corrupt AMON packet. I 
reintroduced the MD that was offline without issues and then upgrade the 
cluster to 8.5.0.7.



On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty 
mailto:fle...@umn.edu>> wrote:

At the University of Minnesota, we're running 8.5.0.5 in production. We have 
8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close to a 
week, but not a lot of users on campus.



On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:



Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an 
Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to the 
8.5 code we've encountered several critical issues requiring upgrades, and 
subsequent downgrades, between various 8.5.0.X versions. We have been on 
8.5.0.1 for 

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Ian Lyons]

Onto

Any word on when the 303H equivalent will ship?

Ian Lyons
Network Manager
Rollins College

Sent via the Samsung Galaxy S20 5G, an AT 5G smartphone


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 on behalf of Harms, Onno (Aruba WLAN) 

Sent: Tuesday, March 31, 2020, 17:56
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7


* External Email *

That is correct. In 8.5 and 8.6 we introduced new chipset drivers which each 
added some missing 11ax functionality to our AP-5xx platforms.

8.6 is the release that delivers full 11ax functionality and Wi-Fi 6 compliance 
(all platforms are certified).

In addition, 8.6 is the first release to support the entry-level AP-504/505 
11ax platforms.

Thanks,
/Onno


[aruba-hp-signature-2_160x105.jpg]
Onno Harms
Sr. Director Product Management – WLAN Platforms
E: o...@hpe.com  |  M: +1-408-480-6498
 Scott Boulevard  |  Santa Clara, CA 95054

WWW.ARUBANETWORKS.COM
 | FOLLOW US | 
Twitter
 | 
LinkedIn


From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Davis
Sent: Tuesday, March 31, 2020 2:06 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

AFAIK 8.6 will be the first to support the complete 802.11ax suite.  While 8.5
provides support for the 500-series and their WiFi6 components, they are 
incomplete.

So we'll all eventually be there, for now they're concentrating on getting 8.5 
stable.


On 3/31/20 4:39 PM, Adam Forsyth wrote:
All I wish for is that one day they'll have a version that they think is stable 
enough to call a conservative release and which supports the AP515 (which they 
started selling more than a year ago.

They have an 8.6.0.3 out as well.  Does anyone know the logic of who should 
want to be using 8.6 code vs 8.5 code.  I guess I didn't know that logic for 
8.4 code either.  We switched to that when we bought some AP515's, and then I 
switched from the 8.4 branch to the 8.5 branch when it seemed like the 
consensus on this list was that lots of people were having trouble with 8.4 and 
were having better luck with 8.5

On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:
Antonio,

Thank you for feedback.  I really hope this version is stable.  The 8.5 code 
has been quite challenging.  Please let us know if you experience any major 
issues.


Cesar Fernandez
Sr. Network Engineer
University of San Diego



On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia 
mailto:aagar...@scu.edu>> wrote:
We just upgraded to 8.5.0.7 this past Friday so far so good. We also 
experienced two of our MDs crash and we had to take one MD out of the cluster 
due to it being unstable. We had been running 8.5.0.5 without issues, no new MD 
crashes. Aruba stated the crash was due to a corrupt AMON packet. I 
reintroduced the MD that was offline without issues and then upgrade the 
cluster to 8.5.0.7.

On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty 
mailto:fle...@umn.edu>> wrote:
At the University of Minnesota, we're running 8.5.0.5 in production. We have 
8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close to a 
week, but not a lot of users on campus.

On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:

Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an 
Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to the 
8.5 code we've encountered several critical issues requiring upgrades, and 
subsequent downgrades, between various 8.5.0.X versions. We have been on 
8.5.0.1 for the better part of the school year as it has been the most stable 
for our environment.  A couple weeks before the COVID-19 crisis, 3 of our 4 MD 
controllers randomly crashed.  TAC is now recommending that we upgrade to 
8.5.0.7, which was released last week.

Are there any universities on this list that have recently upgraded to 8.5.0.7? 
If so, what has been your experience?

I understand most campuses are only seeing a fraction of 

Re: How does your enterprise do your wireless door locks?

[Green, William C]

We don’t have enough such that I am aware of them, however, I did see a vendor 
document several years ago stating PSK was more power efficient than 802.1X.  
So whenever the topic comes up, suggest PPSK as the strategy.  That may have 
changed.  I expect when locks support 802.11ax, they get another bump in 
efficiency.

We use FreeRadius (with our own mods) for PPSK so don’t have the ISE licensing 
issues.  I heard that PacketFence also had mods.




William Green, Director of Networking and Telecommunications
The University of Texas at Austin | ITS | 512-475-9295 | 
it.utexas.edu | 
gr...@austin.utexas.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Harms, Onno (Aruba WLAN)]

That is correct. In 8.5 and 8.6 we introduced new chipset drivers which each 
added some missing 11ax functionality to our AP-5xx platforms.

8.6 is the release that delivers full 11ax functionality and Wi-Fi 6 compliance 
(all platforms are certified).

In addition, 8.6 is the first release to support the entry-level AP-504/505 
11ax platforms.

Thanks,
/Onno


[aruba-hp-signature-2_160x105.jpg]
Onno Harms
Sr. Director Product Management – WLAN Platforms
E: o...@hpe.com  |  M: +1-408-480-6498
 Scott Boulevard  |  Santa Clara, CA 95054

WWW.ARUBANETWORKS.COM | FOLLOW US | 
Twitter | 
LinkedIn


From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Davis
Sent: Tuesday, March 31, 2020 2:06 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

AFAIK 8.6 will be the first to support the complete 802.11ax suite.  While 8.5
provides support for the 500-series and their WiFi6 components, they are 
incomplete.

So we'll all eventually be there, for now they're concentrating on getting 8.5 
stable.


On 3/31/20 4:39 PM, Adam Forsyth wrote:
All I wish for is that one day they'll have a version that they think is stable 
enough to call a conservative release and which supports the AP515 (which they 
started selling more than a year ago.

They have an 8.6.0.3 out as well.  Does anyone know the logic of who should 
want to be using 8.6 code vs 8.5 code.  I guess I didn't know that logic for 
8.4 code either.  We switched to that when we bought some AP515's, and then I 
switched from the 8.4 branch to the 8.5 branch when it seemed like the 
consensus on this list was that lots of people were having trouble with 8.4 and 
were having better luck with 8.5

On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:
Antonio,

Thank you for feedback.  I really hope this version is stable.  The 8.5 code 
has been quite challenging.  Please let us know if you experience any major 
issues.


Cesar Fernandez
Sr. Network Engineer
University of San Diego



On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia 
mailto:aagar...@scu.edu>> wrote:
We just upgraded to 8.5.0.7 this past Friday so far so good. We also 
experienced two of our MDs crash and we had to take one MD out of the cluster 
due to it being unstable. We had been running 8.5.0.5 without issues, no new MD 
crashes. Aruba stated the crash was due to a corrupt AMON packet. I 
reintroduced the MD that was offline without issues and then upgrade the 
cluster to 8.5.0.7.

On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty 
mailto:fle...@umn.edu>> wrote:
At the University of Minnesota, we're running 8.5.0.5 in production. We have 
8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close to a 
week, but not a lot of users on campus.

On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:

Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an 
Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to the 
8.5 code we've encountered several critical issues requiring upgrades, and 
subsequent downgrades, between various 8.5.0.X versions. We have been on 
8.5.0.1 for the better part of the school year as it has been the most stable 
for our environment.  A couple weeks before the COVID-19 crisis, 3 of our 4 MD 
controllers randomly crashed.  TAC is now recommending that we upgrade to 
8.5.0.7, which was released last week.

Are there any universities on this list that have recently upgraded to 8.5.0.7? 
If so, what has been your experience?

I understand most campuses are only seeing a fraction of the normal wireless 
traffic load as most students are currently not on campus - so any feedback 
would be greatly appreciated.


Cesar Fernandez
Sr. Network Engineer
University of San Diego


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community


--
Steve Fletty
Network Engineer
Office of Information Technology (OIT)
University of Minnesota
Phone: 612-625-1048
Email: fle...@umn.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community


--

Antonio Garcia 

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Adam Forsyth]

So with 802.11AX turned off on our 515's hoping for maximum stability and
good user experience, it sounds like 8.5 is exactly where we want to be
with hopes that it leads into a new conservative release, and that a
conservative release of 8.6 happens before we have lots of AX clients and
really want to enable their AX capabilities.

On Tue, Mar 31, 2020 at 4:06 PM Michael Davis  wrote:

> AFAIK 8.6 will be the first to support the complete 802.11ax suite.  While
> 8.5
> provides support for the 500-series and their WiFi6 components, they are
> incomplete.
>
> So we'll all eventually be there, for now they're concentrating on getting
> 8.5 stable.
>
>
> On 3/31/20 4:39 PM, Adam Forsyth wrote:
>
> All I wish for is that one day they'll have a version that they think is
> stable enough to call a conservative release and which supports the AP515
> (which they started selling more than a year ago.
>
> They have an 8.6.0.3 out as well.  Does anyone know the logic of who
> should want to be using 8.6 code vs 8.5 code.  I guess I didn't know that
> logic for 8.4 code either.  We switched to that when we bought some
> AP515's, and then I switched from the 8.4 branch to the 8.5 branch when it
> seemed like the consensus on this list was that lots of people were having
> trouble with 8.4 and were having better luck with 8.5
>
> On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
> wrote:
>
>> Antonio,
>>
>> Thank you for feedback.  I really hope this version is stable.  The 8.5
>> code has been quite challenging.  Please let us know if you experience any
>> major issues.
>>
>>
>>
>> *Cesar Fernandez *
>> *Sr. Network Engineer*
>> *University of San Diego*
>>
>>
>>
>> On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia  wrote:
>>
>>> We just upgraded to 8.5.0.7 this past Friday so far so good. We also
>>> experienced two of our MDs crash and we had to take one MD out of the
>>> cluster due to it being unstable. We had been running 8.5.0.5 without
>>> issues, no new MD crashes. Aruba stated the crash was due to a corrupt AMON
>>> packet. I reintroduced the MD that was offline without issues and then
>>> upgrade the cluster to 8.5.0.7.
>>>
>>> On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty  wrote:
>>>
 At the University of Minnesota, we're running 8.5.0.5 in production. We
 have 8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close
 to a week, but not a lot of users on campus.

 On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez <
 cfernan...@sandiego.edu> wrote:

>
> Hi Everyone,
>
> We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an
> Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to
> the 8.5 code we've encountered several critical issues requiring upgrades,
> and subsequent downgrades, between various 8.5.0.X versions. We have been
> on 8.5.0.1 for the better part of the school year as it has been the most
> stable for our environment.  A couple weeks before the COVID-19 crisis, 3
> of our 4 MD controllers randomly crashed.  TAC is now recommending that we
> upgrade to 8.5.0.7, which was released last week.
>
> Are there any universities on this list that have recently upgraded to
> 8.5.0.7? If so, what has been your experience?
>
> I understand most campuses are only seeing a fraction of the normal
> wireless traffic load as most students are currently not on campus - so 
> any
> feedback would be greatly appreciated.
>
>
>
> *Cesar Fernandez *
> *Sr. Network Engineer*
> *University of San Diego*
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> 
>


 --
 Steve Fletty
 Network Engineer
 Office of Information Technology (OIT)
 University of Minnesota
 Phone: 612-625-1048
 Email: fle...@umn.edu

 **
 Replies to EDUCAUSE Community Group emails are sent to the entire
 community list. If you want to reply only to the person who sent the
 message, copy and paste their email address and forward the email reply.
 Additional participation and subscription information can be found at
 https://www.educause.edu/community
 

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Michael Davis]

AFAIK 8.6 will be the first to support the complete 802.11ax suite.  
While 8.5
provides support for the 500-series and their WiFi6 components, they are 
incomplete.


So we'll all eventually be there, for now they're concentrating on 
getting 8.5 stable.



On 3/31/20 4:39 PM, Adam Forsyth wrote:
All I wish for is that one day they'll have a version that they think 
is stable enough to call a conservative release and which supports the 
AP515 (which they started selling more than a year ago.


They have an 8.6.0.3 out as well.  Does anyone know the logic of who 
should want to be using 8.6 code vs 8.5 code.  I guess I didn't know 
that logic for 8.4 code either.  We switched to that when we bought 
some AP515's, and then I switched from the 8.4 branch to the 8.5 
branch when it seemed like the consensus on this list was that lots of 
people were having trouble with 8.4 and were having better luck with 8.5


On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:


Antonio,

Thank you for feedback.  I really hope this version is stable. 
The 8.5 code has been quite challenging.  Please let us know if
you experience any major issues.


*Cesar Fernandez
*
*Sr. Network Engineer*
*University of San Diego*



On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia mailto:aagar...@scu.edu>> wrote:

We just upgraded to 8.5.0.7 this past Friday so far so good.
We also experienced two of our MDs crash and we had to take
one MD out of the cluster due to it being unstable. We had
been running 8.5.0.5 without issues, no new MD crashes. Aruba
stated the crash was due to a corrupt AMON packet. I
reintroduced the MD that was offline without issues and then
upgrade the cluster to 8.5.0.7.

On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty mailto:fle...@umn.edu>> wrote:

At the University of Minnesota, we're running 8.5.0.5 in
production. We have 8.5.0.7 in our lab. No issues with
8.5.0.7 so far. Been running close to a week, but not a
lot of users on campus.

On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez
mailto:cfernan...@sandiego.edu>>
wrote:


Hi Everyone,

We are an Aruba wireless shop currently running
ArubaOS 8.5.0.1 on an Active/Standby MM pair with 4 MD
controllers.  Ever since we upgraded to the 8.5 code
we've encountered several critical issues requiring
upgrades, and subsequent downgrades, between various
8.5.0.X versions. We have been on 8.5.0.1 for the
better part of the school year as it has been the most
stable for our environment.  A couple weeks before the
COVID-19 crisis, 3 of our 4 MD controllers randomly
crashed.  TAC is now recommending that we upgrade to
8.5.0.7, which was released last week.

Are there any universities on this list that
have recently upgraded to 8.5.0.7? If so, what has
been your experience?

I understand most campuses are only seeing a fraction
of the normal wireless traffic load as most students
are currently not on campus - so any feedback would be
greatly appreciated.


*Cesar Fernandez
*
*Sr. Network Engineer*
*University of San Diego*

**
Replies to EDUCAUSE Community Group emails are sent to
the entire community list. If you want to reply only
to the person who sent the message, copy and paste
their email address and forward the email reply.
Additional participation and subscription information
can be found at https://www.educause.edu/community






-- 
Steve Fletty

Network Engineer
Office of Information Technology (OIT)
University of Minnesota
Phone: 612-625-1048
Email: fle...@umn.edu 

**
Replies to EDUCAUSE Community Group emails are sent to the
entire community list. If you want to reply only to the
person who sent the message, copy and paste their email
address and forward the email reply. Additional
participation and subscription information can be found at
https://www.educause.edu/community

RE: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Enfield, Chuck]

I hear 10.2.0.4 should be stable. 

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Adam Forsyth
Sent: Tuesday, March 31, 2020 4:40 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

All I wish for is that one day they'll have a version that they think is stable 
enough to call a conservative release and which supports the AP515 (which they 
started selling more than a year ago.

They have an 8.6.0.3 out as well.  Does anyone know the logic of who should 
want to be using 8.6 code vs 8.5 code.  I guess I didn't know that logic for 
8.4 code either.  We switched to that when we bought some AP515's, and then I 
switched from the 8.4 branch to the 8.5 branch when it seemed like the 
consensus on this list was that lots of people were having trouble with 8.4 and 
were having better luck with 8.5

On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:
Antonio,

Thank you for feedback.  I really hope this version is stable.  The 8.5 code 
has been quite challenging.  Please let us know if you experience any major 
issues.


Cesar Fernandez
Sr. Network Engineer
University of San Diego



On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia 
mailto:aagar...@scu.edu>> wrote:
We just upgraded to 8.5.0.7 this past Friday so far so good. We also 
experienced two of our MDs crash and we had to take one MD out of the cluster 
due to it being unstable. We had been running 8.5.0.5 without issues, no new MD 
crashes. Aruba stated the crash was due to a corrupt AMON packet. I 
reintroduced the MD that was offline without issues and then upgrade the 
cluster to 8.5.0.7.

On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty 
mailto:fle...@umn.edu>> wrote:
At the University of Minnesota, we're running 8.5.0.5 in production. We have 
8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close to a 
week, but not a lot of users on campus.

On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
mailto:cfernan...@sandiego.edu>> wrote:

Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an 
Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to the 
8.5 code we've encountered several critical issues requiring upgrades, and 
subsequent downgrades, between various 8.5.0.X versions. We have been on 
8.5.0.1 for the better part of the school year as it has been the most stable 
for our environment.  A couple weeks before the COVID-19 crisis, 3 of our 4 MD 
controllers randomly crashed.  TAC is now recommending that we upgrade to 
8.5.0.7, which was released last week.

Are there any universities on this list that have recently upgraded to 8.5.0.7? 
If so, what has been your experience?

I understand most campuses are only seeing a fraction of the normal wireless 
traffic load as most students are currently not on campus - so any feedback 
would be greatly appreciated.


Cesar Fernandez
Sr. Network Engineer
University of San Diego


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community


--
Steve Fletty
Network Engineer
Office of Information Technology (OIT)
University of Minnesota
Phone: 612-625-1048
Email: fle...@umn.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community


--
Error! Filename not 

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Adam Forsyth]

All I wish for is that one day they'll have a version that they think is
stable enough to call a conservative release and which supports the AP515
(which they started selling more than a year ago.

They have an 8.6.0.3 out as well.  Does anyone know the logic of who should
want to be using 8.6 code vs 8.5 code.  I guess I didn't know that logic
for 8.4 code either.  We switched to that when we bought some AP515's, and
then I switched from the 8.4 branch to the 8.5 branch when it seemed like
the consensus on this list was that lots of people were having trouble with
8.4 and were having better luck with 8.5

On Tue, Mar 31, 2020 at 2:17 PM Cesar Fernandez 
wrote:

> Antonio,
>
> Thank you for feedback.  I really hope this version is stable.  The 8.5
> code has been quite challenging.  Please let us know if you experience any
> major issues.
>
>
>
> *Cesar Fernandez*
> *Sr. Network Engineer*
> *University of San Diego*
>
>
>
> On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia  wrote:
>
>> We just upgraded to 8.5.0.7 this past Friday so far so good. We also
>> experienced two of our MDs crash and we had to take one MD out of the
>> cluster due to it being unstable. We had been running 8.5.0.5 without
>> issues, no new MD crashes. Aruba stated the crash was due to a corrupt AMON
>> packet. I reintroduced the MD that was offline without issues and then
>> upgrade the cluster to 8.5.0.7.
>>
>> On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty  wrote:
>>
>>> At the University of Minnesota, we're running 8.5.0.5 in production. We
>>> have 8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close
>>> to a week, but not a lot of users on campus.
>>>
>>> On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
>>> wrote:
>>>

 Hi Everyone,

 We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an
 Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to
 the 8.5 code we've encountered several critical issues requiring upgrades,
 and subsequent downgrades, between various 8.5.0.X versions. We have been
 on 8.5.0.1 for the better part of the school year as it has been the most
 stable for our environment.  A couple weeks before the COVID-19 crisis, 3
 of our 4 MD controllers randomly crashed.  TAC is now recommending that we
 upgrade to 8.5.0.7, which was released last week.

 Are there any universities on this list that have recently upgraded to
 8.5.0.7? If so, what has been your experience?

 I understand most campuses are only seeing a fraction of the normal
 wireless traffic load as most students are currently not on campus - so any
 feedback would be greatly appreciated.



 *Cesar Fernandez*
 *Sr. Network Engineer*
 *University of San Diego*

 **
 Replies to EDUCAUSE Community Group emails are sent to the entire
 community list. If you want to reply only to the person who sent the
 message, copy and paste their email address and forward the email reply.
 Additional participation and subscription information can be found at
 https://www.educause.edu/community
 

>>>
>>>
>>> --
>>> Steve Fletty
>>> Network Engineer
>>> Office of Information Technology (OIT)
>>> University of Minnesota
>>> Phone: 612-625-1048
>>> Email: fle...@umn.edu
>>>
>>> **
>>> Replies to EDUCAUSE Community Group emails are sent to the entire
>>> community list. If you want to reply only to the person who sent the
>>> message, copy and paste their email address and forward the email reply.
>>> Additional participation and subscription information can be found at
>>> https://www.educause.edu/community
>>> 
>>>
>>
>>
>> --
>> [image: Santa Clara University] 
>> Antonio Garcia
>> Network Engineer
>>
>> 500 El Camino Real, Santa Clara, CA 95053
>> phone | 408-554-5531
>> email | aagar...@scu.edu
>>
>> **
>> Replies to EDUCAUSE Community Group emails are sent to the entire
>> community list. If you want to reply only to the person who sent the
>> message, copy and paste their email address and forward the email reply.
>> Additional participation and subscription information can be found at
>> https://www.educause.edu/community
>>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information 

RE: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

[Enfield, Chuck]

I’m not a lock guy, but I was in a meeting where our ASSA reseller said that 
the power-only cabling for the PoE locks is much more reliable than the old 
stuff.  I can’t validate the accuracy of that statement, but our lock guys have 
seen and evaluated it and they seem to have more confidence in it.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Michael Gregory
Sent: Tuesday, March 31, 2020 3:36 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] How does your enterprise do your wireless door 
locks?




For our new residence buildings we are using the PoE version for power and 
communications.

The WiFi service for the residence buildings is provided by a 3rd party so we 
can't control or manage the

RF space or have a secure SSID/Vlan.



The door hinges for PoE are expensive, unreliable and can't be repaired, just 
replaced. A better solution is a

Concealed Electrical Power Transfere (CEPT) that can also house a data cable. 
Lower cost and easier to repair.



The next challenge is the integration of the locks with Lenel (Access Control) 
and StaRez (Residences Management).



Michael Gregory

Network Architect | Infrastructure Services

Simon Fraser University


On 2020-03-31 12:05 p.m., Jim Pampinella wrote:
Have they talked about how they are going to power the Wi-Fi locks? There are 
several options, battery, external low voltage power and PoE. At Syracuse we 
have a mixture of all three with the external low voltage power being the most 
common. PoE has been discussed and in a few places installed, but no one 
(including me) wants to own the cable going through the door and door frame.  
While they have PoE rated hinges they are triple the cost and the support from 
the vendors has been less than desirable.

Jim Pampinella
IT Manager
Network and Wiring Services
T 315.443.5768   M 315.420.2246
japam...@syr.edu
004 Machinery Hall, Syracuse, NY 13244
syracuse.edu
 | 
its.syr.edu/
Syracuse University

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 
On Behalf Of Lee H Badman
Sent: Tuesday, March 31, 2020 2:54 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] How does your enterprise do your wireless door 
locks?

Same locks. We started on dedicated 802.1X SSID, then moved them to main SSID 
(is not eduroam here) using VLAN steering to get them into their own private IP 
space. They seem to handle PEAP with MS-CHAPv2 quite nicely. No idea on TLS.

Lee Badman | Network Architect (CWNE#200)
Information Technology Services
(NDD Group)
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Jess Walczak
Sent: Tuesday, March 31, 2020 2:47 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

Sending out a question as to how you do your wifi that serves your wireless 
door locks.  Do you have them on your branded wifi/eduroam, their own SSID, or 
a shared IoT or infrastructure SSID?  Is it a hidden SSID?  Do you have them 
using a simple PSK or do you onboard it with a tool like ISE or Clearpass.  Do 
you install a cert?

Our institution has purchased Assa Abloy model IN120 door locks.  We are a 
Cisco shop and we have ISE, so we could easily onboard using their Mac Address 
Bypass device profiling, but that would consume an expensive license, so 
perhaps other folks have done something simpler and found it to work well and 
to be enough security/segmentation.

Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | 
stthomas.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and 

RE: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

[Enfield, Chuck]

Was use a separate hidden 1x SSID.  Auth is the same as for our main SSID and 
the username is used to put the client in either the lock role or the deny all 
role. We could do something similar on our MAIN SSID, but I try to avoid 
multiple VLANs on an SSID in anticipations of maybe someday dual-stacking.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jess Walczak
Sent: Tuesday, March 31, 2020 2:47 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

Sending out a question as to how you do your wifi that serves your wireless 
door locks.  Do you have them on your branded wifi/eduroam, their own SSID, or 
a shared IoT or infrastructure SSID?  Is it a hidden SSID?  Do you have them 
using a simple PSK or do you onboard it with a tool like ISE or Clearpass.  Do 
you install a cert?

Our institution has purchased Assa Abloy model IN120 door locks.  We are a 
Cisco shop and we have ISE, so we could easily onboard using their Mac Address 
Bypass device profiling, but that would consume an expensive license, so 
perhaps other folks have done something simpler and found it to work well and 
to be enough security/segmentation.

Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | 
stthomas.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Antonio Garcia]

Hi  Cesar,

Your welcome. I will keep you in mind if we experience any issues.

On Tue, Mar 31, 2020 at 12:17 PM Cesar Fernandez 
wrote:

> Antonio,
>
> Thank you for feedback.  I really hope this version is stable.  The 8.5
> code has been quite challenging.  Please let us know if you experience any
> major issues.
>
>
>
> *Cesar Fernandez*
> *Sr. Network Engineer*
> *University of San Diego*
>
>
>
> On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia  wrote:
>
>> We just upgraded to 8.5.0.7 this past Friday so far so good. We also
>> experienced two of our MDs crash and we had to take one MD out of the
>> cluster due to it being unstable. We had been running 8.5.0.5 without
>> issues, no new MD crashes. Aruba stated the crash was due to a corrupt AMON
>> packet. I reintroduced the MD that was offline without issues and then
>> upgrade the cluster to 8.5.0.7.
>>
>> On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty  wrote:
>>
>>> At the University of Minnesota, we're running 8.5.0.5 in production. We
>>> have 8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close
>>> to a week, but not a lot of users on campus.
>>>
>>> On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
>>> wrote:
>>>

 Hi Everyone,

 We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an
 Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to
 the 8.5 code we've encountered several critical issues requiring upgrades,
 and subsequent downgrades, between various 8.5.0.X versions. We have been
 on 8.5.0.1 for the better part of the school year as it has been the most
 stable for our environment.  A couple weeks before the COVID-19 crisis, 3
 of our 4 MD controllers randomly crashed.  TAC is now recommending that we
 upgrade to 8.5.0.7, which was released last week.

 Are there any universities on this list that have recently upgraded to
 8.5.0.7? If so, what has been your experience?

 I understand most campuses are only seeing a fraction of the normal
 wireless traffic load as most students are currently not on campus - so any
 feedback would be greatly appreciated.



 *Cesar Fernandez*
 *Sr. Network Engineer*
 *University of San Diego*

 **
 Replies to EDUCAUSE Community Group emails are sent to the entire
 community list. If you want to reply only to the person who sent the
 message, copy and paste their email address and forward the email reply.
 Additional participation and subscription information can be found at
 https://www.educause.edu/community
 

>>>
>>>
>>> --
>>> Steve Fletty
>>> Network Engineer
>>> Office of Information Technology (OIT)
>>> University of Minnesota
>>> Phone: 612-625-1048
>>> Email: fle...@umn.edu
>>>
>>> **
>>> Replies to EDUCAUSE Community Group emails are sent to the entire
>>> community list. If you want to reply only to the person who sent the
>>> message, copy and paste their email address and forward the email reply.
>>> Additional participation and subscription information can be found at
>>> https://www.educause.edu/community
>>> 
>>>
>>
>>
>> --
>> [image: Santa Clara University] 
>> Antonio Garcia
>> Network Engineer
>>
>> 500 El Camino Real, Santa Clara, CA 95053
>> phone | 408-554-5531
>> email | aagar...@scu.edu
>>
>> **
>> Replies to EDUCAUSE Community Group emails are sent to the entire
>> community list. If you want to reply only to the person who sent the
>> message, copy and paste their email address and forward the email reply.
>> Additional participation and subscription information can be found at
>> https://www.educause.edu/community
>> 
>>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
> 
>


-- 
[image: Santa 

Re: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

[Michael Gregory]

For our new residence buildings we are using the PoE version for power 
and communications. The WiFi service for the residence buildings is 
provided by a 3rd party so we can't control or manage the RF space or 
have a secure SSID/Vlan. The door hinges for PoE are expensive, 
unreliable and can't be repaired, just replaced. A better solution is a 
Concealed Electrical Power Transfere (CEPT) that can also house a data 
cable. Lower cost and easier to repair. The next challenge is the 
integration of the locks with Lenel (Access Control) and StaRez 
(Residences Management).


Michael Gregory
Network Architect | Infrastructure Services
Simon Fraser University


On 2020-03-31 12:05 p.m., Jim Pampinella wrote:


Have they talked about how they are going to power the Wi-Fi locks? 
There are several options, battery, external low voltage power and 
PoE. At Syracuse we have a mixture of all three with the external low 
voltage power being the most common. PoE has been discussed and in a 
few places installed, but no one (including me) wants to own the cable 
going through the door and door frame. While they have PoE rated 
hinges they are triple the cost and the support from the vendors has 
been less than desirable.


*Jim Pampinella*
IT Manager
Network and Wiring Services

*T* 315.443.5768 *M* 315.420.2246
_japam...@syr.edu _

004 Machinery Hall, Syracuse, NY 13244
syracuse.edu | its.syr.edu/ 

Syracuse University

*From:*The EDUCAUSE Wireless Issues Community Group Listserv 
 *On Behalf Of *Lee H Badman

*Sent:* Tuesday, March 31, 2020 2:54 PM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] How does your enterprise do your 
wireless door locks?


Same locks. We started on dedicated 802.1X SSID, then moved them to 
main SSID (is not eduroam here) using VLAN steering to get them into 
their own private IP space. They seem to handle PEAP with MS-CHAPv2 
quite nicely. No idea on TLS.


*Lee Badman*| Network Architect (CWNE#200)

Information Technology Services
(NDD Group)
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244

*t*315.443.3003 *e* lhbad...@syr.edu  *w* 
its.syr.edu


*SYRACUSE UNIVERSITY*
syr.edu

*From:*The EDUCAUSE Wireless Issues Community Group Listserv 
> *On Behalf Of *Jess Walczak

*Sent:* Tuesday, March 31, 2020 2:47 PM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

*Subject:* [WIRELESS-LAN] How does your enterprise do your wireless 
door locks?


Sending out a question as to how you do your wifi that serves your 
wireless door locks.  Do you have them on your branded wifi/eduroam, 
their own SSID, or a shared IoT or infrastructure SSID?  Is it a 
hidden SSID?  Do you have them using a simple PSK or do you onboard it 
with a tool like ISE or Clearpass.  Do you install a cert?


Our institution has purchased Assa Abloy model IN120 door locks.  We 
are a Cisco shop and we have ISE, so we could easily onboard using 
their Mac Address Bypass device profiling, but that would consume an 
expensive license, so perhaps other folks have done something simpler 
and found it to work well and to be enough security/segmentation.


Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | stthomas.edu 

**
Replies to EDUCAUSE Community Group emails are sent to the entire 
community list. If you want to reply only to the person who sent the 
message, copy and paste their email address and forward the email 
reply. Additional participation and subscription information can be 
found at https://www.educause.edu/community


**
Replies to EDUCAUSE Community Group emails are sent to the entire 
community list. If you want to reply only to the person who sent the 
message, copy and paste their email address and forward the email 
reply. Additional participation and subscription information can be 
found at https://www.educause.edu/community


**
Replies to EDUCAUSE Community Group emails are sent to the entire 
community list. If you want to reply only to the person who sent the 
message, copy and paste their email address and forward the email 
reply. Additional participation and subscription information can be 
found at https://www.educause.edu/community



--


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Cesar Fernandez]

Antonio,

Thank you for feedback.  I really hope this version is stable.  The 8.5
code has been quite challenging.  Please let us know if you experience any
major issues.



*Cesar Fernandez*
*Sr. Network Engineer*
*University of San Diego*



On Mon, Mar 30, 2020 at 2:19 PM Antonio Garcia  wrote:

> We just upgraded to 8.5.0.7 this past Friday so far so good. We also
> experienced two of our MDs crash and we had to take one MD out of the
> cluster due to it being unstable. We had been running 8.5.0.5 without
> issues, no new MD crashes. Aruba stated the crash was due to a corrupt AMON
> packet. I reintroduced the MD that was offline without issues and then
> upgrade the cluster to 8.5.0.7.
>
> On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty  wrote:
>
>> At the University of Minnesota, we're running 8.5.0.5 in production. We
>> have 8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close
>> to a week, but not a lot of users on campus.
>>
>> On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
>> wrote:
>>
>>>
>>> Hi Everyone,
>>>
>>> We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an
>>> Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to
>>> the 8.5 code we've encountered several critical issues requiring upgrades,
>>> and subsequent downgrades, between various 8.5.0.X versions. We have been
>>> on 8.5.0.1 for the better part of the school year as it has been the most
>>> stable for our environment.  A couple weeks before the COVID-19 crisis, 3
>>> of our 4 MD controllers randomly crashed.  TAC is now recommending that we
>>> upgrade to 8.5.0.7, which was released last week.
>>>
>>> Are there any universities on this list that have recently upgraded to
>>> 8.5.0.7? If so, what has been your experience?
>>>
>>> I understand most campuses are only seeing a fraction of the normal
>>> wireless traffic load as most students are currently not on campus - so any
>>> feedback would be greatly appreciated.
>>>
>>>
>>>
>>> *Cesar Fernandez*
>>> *Sr. Network Engineer*
>>> *University of San Diego*
>>>
>>> **
>>> Replies to EDUCAUSE Community Group emails are sent to the entire
>>> community list. If you want to reply only to the person who sent the
>>> message, copy and paste their email address and forward the email reply.
>>> Additional participation and subscription information can be found at
>>> https://www.educause.edu/community
>>> 
>>>
>>
>>
>> --
>> Steve Fletty
>> Network Engineer
>> Office of Information Technology (OIT)
>> University of Minnesota
>> Phone: 612-625-1048
>> Email: fle...@umn.edu
>>
>> **
>> Replies to EDUCAUSE Community Group emails are sent to the entire
>> community list. If you want to reply only to the person who sent the
>> message, copy and paste their email address and forward the email reply.
>> Additional participation and subscription information can be found at
>> https://www.educause.edu/community
>> 
>>
>
>
> --
> [image: Santa Clara University] 
> Antonio Garcia
> Network Engineer
>
> 500 El Camino Real, Santa Clara, CA 95053
> phone | 408-554-5531
> email | aagar...@scu.edu
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Michael Davis]

When going from 8.5.0.3 to 8.5.0.6 it occurred on 5 AP515s, they didn't come
back online after the (live) upgrade.  When going from 8.5.0.6 to 
8.5.0.7, one

AP515 didn't come back online after the (manual) upgrade.

I worked with TAC on the original 5 and they symptoms were determined, but
no other cure but to console in the APs and manually flip the 
environment variable.



On 3/31/20 2:38 PM, Cesar Fernandez wrote:

Mike,

Thank you for you reply.  Regarding the end-less loop on 515s - is 
that issue randomly triggered after normal functioning uptime or did 
the issue occur during an upgrade? Also, were any of this APs factory 
reset?


*Cesar Fernandez
*
*Sr. Network Engineer*
*University of San Diego*



On Mon, Mar 30, 2020 at 12:36 PM Michael Davis > wrote:


We're on 8.5.0.7.  So far only one odd issue with SNMP traps
exploding Airwave (110K
traps during the upgrade) but with no one on campus, testing is
limited.

I have a recurring issue (since 8.5.0.6) with AP-515s not flipping
their boot variable and
getting stuck in an end-less upgrade loop..

On 3/30/20 3:14 PM, Cesar Fernandez wrote:


Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1
on an Active/Standby MM pair with 4 MD controllers.  Ever since
we upgraded to the 8.5 code we've encountered several critical
issues requiring upgrades, and subsequent downgrades, between
various 8.5.0.X versions. We have been on 8.5.0.1 for the better
part of the school year as it has been the most stable for our
environment.  A couple weeks before the COVID-19 crisis, 3 of our
4 MD controllers randomly crashed.  TAC is now recommending that
we upgrade to 8.5.0.7, which was released last week.

Are there any universities on this list that have recently
upgraded to 8.5.0.7? If so, what has been your experience?

I understand most campuses are only seeing a fraction of the
normal wireless traffic load as most students are currently not
on campus - so any feedback would be greatly appreciated.


*Cesar Fernandez
*
*Sr. Network Engineer*
*University of San Diego*

*



--
 Mike Davis
 IT - University of Delaware - 302.831.8756
 Newark, DE 19716   Email da...@udel.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Cesar Fernandez]

Steve,

Thank you for your feedback.  TAC has informed us that the critical issues
we have encountered ( MDs crashing on 8.5.0.1 and an MD VRRP issue causing
APs to move to their backup LMS on 8.5.0.4) should be fixed on 8.5.0.7.  We
are still reluctant to upgrade because AOS 8.5 has been very buggy.
Without students on campus, I feel we won't experience issues with
limited users.


*Cesar Fernandez*
*Sr. Network Engineer*
*University of San Diego*



On Mon, Mar 30, 2020 at 1:28 PM Steve Fletty  wrote:

> At the University of Minnesota, we're running 8.5.0.5 in production. We
> have 8.5.0.7 in our lab. No issues with 8.5.0.7 so far. Been running close
> to a week, but not a lot of users on campus.
>
> On Mon, Mar 30, 2020 at 2:24 PM Cesar Fernandez 
> wrote:
>
>>
>> Hi Everyone,
>>
>> We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an
>> Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to
>> the 8.5 code we've encountered several critical issues requiring upgrades,
>> and subsequent downgrades, between various 8.5.0.X versions. We have been
>> on 8.5.0.1 for the better part of the school year as it has been the most
>> stable for our environment.  A couple weeks before the COVID-19 crisis, 3
>> of our 4 MD controllers randomly crashed.  TAC is now recommending that we
>> upgrade to 8.5.0.7, which was released last week.
>>
>> Are there any universities on this list that have recently upgraded to
>> 8.5.0.7? If so, what has been your experience?
>>
>> I understand most campuses are only seeing a fraction of the normal
>> wireless traffic load as most students are currently not on campus - so any
>> feedback would be greatly appreciated.
>>
>>
>>
>> *Cesar Fernandez*
>> *Sr. Network Engineer*
>> *University of San Diego*
>>
>> **
>> Replies to EDUCAUSE Community Group emails are sent to the entire
>> community list. If you want to reply only to the person who sent the
>> message, copy and paste their email address and forward the email reply.
>> Additional participation and subscription information can be found at
>> https://www.educause.edu/community
>>
>
>
> --
> Steve Fletty
> Network Engineer
> Office of Information Technology (OIT)
> University of Minnesota
> Phone: 612-625-1048
> Email: fle...@umn.edu
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

[Jim Pampinella]

Have they talked about how they are going to power the Wi-Fi locks? There are 
several options, battery, external low voltage power and PoE. At Syracuse we 
have a mixture of all three with the external low voltage power being the most 
common. PoE has been discussed and in a few places installed, but no one 
(including me) wants to own the cable going through the door and door frame.  
While they have PoE rated hinges they are triple the cost and the support from 
the vendors has been less than desirable.

Jim Pampinella
IT Manager
Network and Wiring Services
T 315.443.5768   M 315.420.2246
japam...@syr.edu
004 Machinery Hall, Syracuse, NY 13244
syracuse.edu | its.syr.edu/
Syracuse University

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Lee H Badman
Sent: Tuesday, March 31, 2020 2:54 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] How does your enterprise do your wireless door 
locks?

Same locks. We started on dedicated 802.1X SSID, then moved them to main SSID 
(is not eduroam here) using VLAN steering to get them into their own private IP 
space. They seem to handle PEAP with MS-CHAPv2 quite nicely. No idea on TLS.

Lee Badman | Network Architect (CWNE#200)
Information Technology Services
(NDD Group)
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Jess Walczak
Sent: Tuesday, March 31, 2020 2:47 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

Sending out a question as to how you do your wifi that serves your wireless 
door locks.  Do you have them on your branded wifi/eduroam, their own SSID, or 
a shared IoT or infrastructure SSID?  Is it a hidden SSID?  Do you have them 
using a simple PSK or do you onboard it with a tool like ISE or Clearpass.  Do 
you install a cert?

Our institution has purchased Assa Abloy model IN120 door locks.  We are a 
Cisco shop and we have ISE, so we could easily onboard using their Mac Address 
Bypass device profiling, but that would consume an expensive license, so 
perhaps other folks have done something simpler and found it to work well and 
to be enough security/segmentation.

Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | stthomas.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

[Chris Hart]

We did the same thing but on eduroam with a special VLAN dedicated for the 
locks.



Chris Hart
Northwestern University

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Lee H Badman
Sent: Tuesday, March 31, 2020 1:54 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] How does your enterprise do your wireless door 
locks?

Same locks. We started on dedicated 802.1X SSID, then moved them to main SSID 
(is not eduroam here) using VLAN steering to get them into their own private IP 
space. They seem to handle PEAP with MS-CHAPv2 quite nicely. No idea on TLS.

Lee Badman | Network Architect (CWNE#200)
Information Technology Services
(NDD Group)
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Jess Walczak
Sent: Tuesday, March 31, 2020 2:47 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

Sending out a question as to how you do your wifi that serves your wireless 
door locks.  Do you have them on your branded wifi/eduroam, their own SSID, or 
a shared IoT or infrastructure SSID?  Is it a hidden SSID?  Do you have them 
using a simple PSK or do you onboard it with a tool like ISE or Clearpass.  Do 
you install a cert?

Our institution has purchased Assa Abloy model IN120 door locks.  We are a 
Cisco shop and we have ISE, so we could easily onboard using their Mac Address 
Bypass device profiling, but that would consume an expensive license, so 
perhaps other folks have done something simpler and found it to work well and 
to be enough security/segmentation.

Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | 
stthomas.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

[Lee H Badman]

Same locks. We started on dedicated 802.1X SSID, then moved them to main SSID 
(is not eduroam here) using VLAN steering to get them into their own private IP 
space. They seem to handle PEAP with MS-CHAPv2 quite nicely. No idea on TLS.

Lee Badman | Network Architect (CWNE#200)
Information Technology Services
(NDD Group)
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   e lhbad...@syr.edu w its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jess Walczak
Sent: Tuesday, March 31, 2020 2:47 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] How does your enterprise do your wireless door locks?

Sending out a question as to how you do your wifi that serves your wireless 
door locks.  Do you have them on your branded wifi/eduroam, their own SSID, or 
a shared IoT or infrastructure SSID?  Is it a hidden SSID?  Do you have them 
using a simple PSK or do you onboard it with a tool like ISE or Clearpass.  Do 
you install a cert?

Our institution has purchased Assa Abloy model IN120 door locks.  We are a 
Cisco shop and we have ISE, so we could easily onboard using their Mac Address 
Bypass device profiling, but that would consume an expensive license, so 
perhaps other folks have done something simpler and found it to work well and 
to be enough security/segmentation.

Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | stthomas.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

How does your enterprise do your wireless door locks?

[Jess Walczak]

Sending out a question as to how you do your wifi that serves your wireless
door locks.  Do you have them on your branded wifi/eduroam, their own SSID,
or a shared IoT or infrastructure SSID?  Is it a hidden SSID?  Do you have
them using a simple PSK or do you onboard it with a tool like ISE or
Clearpass.  Do you install a cert?

Our institution has purchased Assa Abloy model IN120 door locks.  We are a
Cisco shop and we have ISE, so we could easily onboard using their Mac
Address Bypass device profiling, but that would consume an expensive
license, so perhaps other folks have done something simpler and found it to
work well and to be enough security/segmentation.

Thanks!--JW

Jess Walczak
Network Engineer
Innovation & Technology Services
University of St. Thomas | stthomas.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Cesar Fernandez]

Mike,

Thank you for you reply.  Regarding the end-less loop on 515s - is that
issue randomly triggered after normal functioning uptime or did the
issue occur during an upgrade?  Also, were any of this APs factory reset?


*Cesar Fernandez*
*Sr. Network Engineer*
*University of San Diego*



On Mon, Mar 30, 2020 at 12:36 PM Michael Davis  wrote:

> We're on 8.5.0.7.  So far only one odd issue with SNMP traps exploding
> Airwave (110K
> traps during the upgrade) but with no one on campus, testing is limited.
>
> I have a recurring issue (since 8.5.0.6) with AP-515s not flipping their
> boot variable and
> getting stuck in an end-less upgrade loop..
>
> On 3/30/20 3:14 PM, Cesar Fernandez wrote:
>
>
> Hi Everyone,
>
> We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an
> Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to
> the 8.5 code we've encountered several critical issues requiring upgrades,
> and subsequent downgrades, between various 8.5.0.X versions. We have been
> on 8.5.0.1 for the better part of the school year as it has been the most
> stable for our environment.  A couple weeks before the COVID-19 crisis, 3
> of our 4 MD controllers randomly crashed.  TAC is now recommending that we
> upgrade to 8.5.0.7, which was released last week.
>
> Are there any universities on this list that have recently upgraded to
> 8.5.0.7? If so, what has been your experience?
>
> I understand most campuses are only seeing a fraction of the normal
> wireless traffic load as most students are currently not on campus - so any
> feedback would be greatly appreciated.
>
>
>
> *Cesar Fernandez *
> *Sr. Network Engineer*
> *University of San Diego*
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>
>
>
> --
>  Mike Davis
>  IT - University of Delaware - 302.831.8756
>  Newark, DE 19716 Email da...@udel.edu
>
> **
> Replies to EDUCAUSE Community Group emails are sent to the entire
> community list. If you want to reply only to the person who sent the
> message, copy and paste their email address and forward the email reply.
> Additional participation and subscription information can be found at
> https://www.educause.edu/community
>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Doodle Poll for Virtual Session - Covid-19 Response

[Ferguson, Michael]

For the first virtual session between Netman and Wireless-Lan, we’re hosting a 
discussion via Zoom about our preparedness and response to supporting remote 
learning and working remotely due to the Covid-19/Coronoavirus outbreak.  In 
subsequent virtual meetings, we’ll talk about Network Monitoring and Network 
Management, which was the desired interest in early February.  But due to the 
current conditions, we felt it better to address our response to the pandemic 
and to discuss creative ideas and overcoming challenges we’ve all faced as the 
first topic of conversation.  This way we can share information about how we’ve 
supported our schools with the rapid switch to virtual classrooms and virtual 
offices.  Ryan Turner and Jeff Farese of Netman along with Iyan Lyons and Eric 
Kenny of Wireless-LAN will be co-facilitating the meeting.

We’re gathering everyone’s input on the best time to hold the virtual meeting. 
Here’s a link to a Doodle poll to collect everyone’s preferred meeting time:

https://doodle.com/poll/gqn6gaueb9u5yimb

Note that the timeframes of the poll are based on 1-hour time slots in North 
America, between 8 am to 2 pm Pacific time or 11 am to 5 pm Eastern time. We 
know there is international interest in participating in this virtual session 
and we hope that those of you in non-North American time zones can help pick 
the best time that fits into the available North American timeslots.

Also, note that the tentative week we’re looking to host the virtual meeting is 
between April 13 to April 17. We haven’t nailed down the exact week yet, but 
the week of April 13-17 is representative of any week we might host the virtual 
meeting. So if you can pick the best time no matter what week we end up having 
the session, this way we can pick the most popular time which will likely set a 
pattern of a regular time frame for subsequent virtual meetings that follow.

In the doodle poll, we’re asking that everyone include their email address so 
that we can send a link to the Zoom meeting ahead of time. We’ll be judicious 
about how we post the actual meeting link to the Netman and Wireless-LAN lists 
in order to prevent any Zoom Bombing. However, we will post to both lists the 
scheduled date and time of the meeting, once we get everyone’s feedback.

Last, here’s a link to our Lean Coffee Table discussion board where we’re 
collecting everyone’s input on topics to discuss. We ask that people submit up 
to 3 topic cards to bring up for discussion. Everyone will have 3 votes to give 
to any topic card so we can rank the hot topics that are on everyone’s mind.

https://www.leancoffeetable.com/TaskBoard/View/7bcaae9e-7c9c-45d3-aacb-cc6c61de3165?guest=true

Ryan Turner has already suggested these 6 topics as starting points, which have 
already been topics that have come up in the Netman list or also in the CIO 
list:

1)VPN upgrades
2)How are departments transitioning to work from home
3)How are staff responsible for deployments staggering shifts to 
provide coverage on-site
4)What the new normal will look like for the time being
5)Special requests for connecting staff that don’t have proper 
internet
6)Special requests for ‘parking lotwirelesss’


--
Mike Ferguson
Network Manager
Chapman University
One University Drive, Orange, CA 92866
714-744-7873
chapman.edu



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Chicago 2019 Recap and Upcoming Events (Boston 2020 & Virtual Covid19 Preparedness Session)

[Ferguson, Michael]

See below announcements about upcoming events and activities for the 
Wireless-LAN Group.  Part of this message has been cross-posted to the Netman 
List.

Chicago 2019 Recap

I realize (again) I'm overdue in providing a recap about the last Annual 
Conference which took place in October at the Chicago Convention Center.   At 
the conference, we again had a combined session with the Wireless-LAN group.  
But this year we combined the timeframe of both Community Group sessions as one 
super session.  Eric Kenny from Harvard and Ian Lyons from Rollins, Co-Leads of 
Wireless-LAN, helped Ryan Turner and myself facilitate a joint session of 1 
hour, 45 minutes.  The session was attended by about 80 people, but it could 
have been a lot more.  Due to constraints at the Chicago Convention Center, the 
room we were in was only capable of holding 80 people.

The session started off with 2 presentations of roughly 10-15 minutes.  The 
first presenter was Will Whitaker from UNC-Chapel Hill on DOH (or DNS over 
HTTPS) and the second presenter was Steven Lee from Virginia Tech on NetRecon 
(Open Source Centralized Logging with ELK).  Let me again express our gratitude 
to both presenters as they each shared valuable insight and helped us kick off 
the broader discussion for the remaining 1 hour and 15 minutes.

The last part of the session was a free-form discussion based on topics that 
were submitted by attendees who then voted on topic(s) of most interest.  We 
started discussing the topics with the highest amount of votes until we ran out 
of time.  Unfortunately, the voting isn't full representative of all the topics 
of interest and rank because I mistakenly closed the voting as we were starting 
to kick off the discussion.

But for the topics that were submitted and voted on, here are the topics that 
we discussed:

Votes   Topics
11  Monitoring and logging - what to keep and what to feed the siem
11  Supporting IOT Devices on Campus Networks
5   Who is looking to drop Cisco when they eol the 5508 controller? Are you 
looking for a new controller solution or cloud etc?
4   Firewalls in the cloud.  Are you using native tools or bringing your 
3rd party devices?  Palo Alto, Checkpoint, Sonicwall, ect...  What worked well, 
what didn't?
4   Analytics tools (Nyansa, extrahop and beyond)
3   Authentication to the network:  MAC Auth, 802.1x, certs?
3   Is anyone using Ansible for orchestration/automation? If so what for?
3   Are people rolling out traditional DAS, allowing carriers to install 
local cells on your network, just defaulting to the phones' WiFi calling 
features, doing nothing and hoping the problem goes away?
3   IPv6 :  are you doing it?
3   Integrated network monitoring tools for WiFi and Wired infrastructure

In addition to the above topics, we also had 2 topics that were introduced in 
the middle of the discussion:


1)  Ryan Turner asked about what other schools are doing to mix high-demand 
Audio-Visual applications on their production data network.

2)  There was an open topic of burning interest where an attendee asked 
what to look for in evaluating vendors, particularly related to WiFi.

There were other topics submitted, but we ran out of time before we could 
discuss them.  The topics that we didn't have time to discuss were:


-What is everyone looking at as far as Intent-Based Network, if anything.

-Starting regular (monthly?) CG calls for topics of interest to keep the 
conversation going. Something like what the commtech and it's a groups are 
doing.

-Selling IPv4 addresses, is there a market

-Anyone experiencing interference with wireless spectrum and new lighting 
systems?

-Baremetal or white box hardware. What is a good way to start?

-Who is doing automated quarantining of wireless clients?

-Clever tricks with packet brokers like bigswitch

-Decrypting network traffic.  Do you do it?  Performance impact? Community 
backlash?

-High bandwidth video delivery over IP for class room tech.  We are just 
starting to see the demand for this with Crestron NVX deployments.  Are other 
seeing this need?  What is your approach?

-Analytics and historical review with zeke, corelight, niksun or others.

-Headaches and solutions to onboarding WiFi clients

As has happened in other years, the number of attendees who weren't aware of 
the Community Groups (Netman or Wireless-LAN) is consistent with what we've 
seen in past years.  Out of the 80 people that joined the session, we had 47 
fill out the Roster sheet.  One of the questions on the Roster was whether one 
knew about the CG groups and if they wanted to join.  We had 24 out of 47 say 
they weren't familiar with the CG groups and 19 of which said they wanted to be 
signed up.  It's always a surprise to learn how many of our peers aren't 
familiar with the Educause CG Groups.  Please take any opportunity you can to 
let your colleagues know about the 

Re: [WIRELESS-LAN] ArubaOS 8.5.0.7

[Turner, Ryan H]

8.5.0.7 is the landing code for UNC with the bugs that were worked on with 
Aruba.  We haven’t upgraded to it, yet (under current conditions) but will, 
soon.

Ryan Turner
Head of Networking, ITS
The University of North Carolina at Chapel Hill
+1 919 274 7926 Mobile
+1 919 445 0113 Office

On Mar 30, 2020, at 3:24 PM, Cesar Fernandez  wrote:



Hi Everyone,

We are an Aruba wireless shop currently running ArubaOS 8.5.0.1 on an 
Active/Standby MM pair with 4 MD controllers.  Ever since we upgraded to the 
8.5 code we've encountered several critical issues requiring upgrades, and 
subsequent downgrades, between various 8.5.0.X versions. We have been on 
8.5.0.1 for the better part of the school year as it has been the most stable 
for our environment.  A couple weeks before the COVID-19 crisis, 3 of our 4 MD 
controllers randomly crashed.  TAC is now recommending that we upgrade to 
8.5.0.7, which was released last week.

Are there any universities on this list that have recently upgraded to 8.5.0.7? 
If so, what has been your experience?

I understand most campuses are only seeing a fraction of the normal wireless 
traffic load as most students are currently not on campus - so any feedback 
would be greatly appreciated.


Cesar Fernandez
Sr. Network Engineer
University of San Diego


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community