Re: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread Tim Cappalli
EAP-TTLS is simply an EAP method. What credential and subject type you use is up to your configuration and policy. RE: EMMs (speaking generically), yes many need to have additional config options exposed for Passpoint parameters but you don't need client certificates for Passpoint. If no

Re: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread James Andrewartha
On 21/7/20 11:04 am, Tim Cappalli wrote: > Both major Wi-Fi vendors have Passpoint offerings that are either > available or in preview. I'm talking about the client side. Intune doesn't even have a CA either (no the short-lived one for conditional access doesn't count). Where's the Microsoft

Re: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread Tim Cappalli
Both major Wi-Fi vendors have Passpoint offerings that are either available or in preview. Tim From: The EDUCAUSE Wireless Issues Community Group Listserv Date: Monday, July 20, 2020 at 22:34 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] MAC Randomization, a step

Re: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread James Andrewartha
On 21/7/20 5:21 am, Tim Cappalli wrote: > Passpoint solves all of these issues. Where is the vendor support for it? Autopilot white glove doesn't even support wireless networks at all. -- James Andrewartha Network & Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph.

Re: [WIRELESS-LAN] WIRELESS-LAN Digest - 20 Jul 2020 to 21 Jul 2020 - Special issue (#2020-88)

2020-07-20 Thread Tim Cappalli
Agreed that there are some privacy concerns, but many are in the process of being addressed. I’d argue that the privacy concerns with Passpoint are no different than with eduroam today. At least Passpoint gives the user more visibility into the actual operator of the network they’re connected

Re: [WIRELESS-LAN] WIRELESS-LAN Digest - 20 Jul 2020 to 21 Jul 2020 - Special issue (#2020-88)

2020-07-20 Thread Philippe Hanset
Passpoint solves some issues (less SSIDs, encryption, instant access) and then it brings other issues like Privacy and authentication pains (certificate expiration, loss of credentials) Philippe Hanset, CEO www.anyroam.net Operator of eduroam-US +1 (865) 236-0770 > On Jul 20, 2020, at 9:42

Re: [WIRELESS-LAN] WIRELESS-LAN Digest - 20 Jul 2020 to 21 Jul 2020 - Special issue (#2020-88)

2020-07-20 Thread Tim Cappalli
There has been an exponential increase in Passpoint rollouts in the past 18 months, on both the network infrastructure side as well as clients. Ping your vendor. The more people talk about it (and ask for it), the faster it will be adopted and rolled out. tim From: The EDUCAUSE Wireless

Re: WIRELESS-LAN Digest - 20 Jul 2020 to 21 Jul 2020 - Special issue (#2020-88)

2020-07-20 Thread Green, William C
Passpoint solves all of these issues. Tim Count me in the fan bucket when widely deployed. But when will that be I wonder? MAC rotation increases in a few months. I recognize institutions have different relations with their guests. For ours the friction/intrusiveness of onboarding

Re: [WIRELESS-LAN] [External] Re: [WIRELESS-LAN] Request for outdoor wifi access point mounting example photos

2020-07-20 Thread Blake Brown
How are you providing AC/DC power and are these setup in a mesh configuration or wired back into the network? Thanks, Blake Sent from my cell phone On Jul 20, 2020, at 6:20 PM, Smith, Nayef wrote:  External Email Thanks Ricardo. I agree with your observation regarding limited options.

Re: [External] Re: [WIRELESS-LAN] Request for outdoor wifi access point mounting example photos

2020-07-20 Thread Smith, Nayef
Thanks Ricardo. I agree with your observation regarding limited options. We’ve deployed the x75s using the nearest utility poles up to this point and painted them. We’re now challenged with providing service to our main quad with few utilities structures and buildings with specialized exterior

Re: MAC Randomization, a step further...

2020-07-20 Thread Jeffrey D. Sessler
As higer-ed transitions more and more to SaaS/IaaS services, and we are running fewer services on-premise, WiFi is nothing more than a commodity gateway to the Internet. Why not make it easier on everyone and move to less obtrusive ways to get folks connected? Passpoint, or rather,

Re: [WIRELESS-LAN] Request for outdoor wifi access point mounting example photos

2020-07-20 Thread Scott Himes
Hi Nayef, Also search for the thread from May 2018 with the subject line of "Photos of outdoor APs on building" – there were a number of great examples in that thread as well. Best, *Scott Himes | Biola University * *Director, Network Operations | Information Technology*

Chromebook Suggestions

2020-07-20 Thread Gray, Sean
Hi wi-fi peeps! Our ITS department is looking to buy a Chromebook, and I've been asked to look into whether there are better ones for testing wi-fi. So before I start trawling the web, I though I'd throw it out to the forum and see what experiences you folks have had with Chromebooks, and if

RE: Request for outdoor wifi access point mounting example photos

2020-07-20 Thread Hales, David
We had a really good thread about this a while back, The subject line was "Aruba AP-3XX mounting question" and it was last July in case anyone wants to look in the old digests. I'm forwarding you a copy of the thread directly. David Hales Network Systems Administrator Information Technology

Request for outdoor wifi access point mounting example photos

2020-07-20 Thread Smith, Nayef
Hello All, We are in the process of designing an outdoor wifi deployment utilizing APs mounted on building exteriors. We want to minimize their visual impact where possible. Any photos or lessons learned you can share would be appreciated. We're particularly interested to see what others

Re: MAC Randomization, a step further...

2020-07-20 Thread Tim Cappalli
Passpoint solves all of these issues. Tim From: The EDUCAUSE Wireless Issues Community Group Listserv Date: Monday, July 20, 2020 at 17:14 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] MAC Randomization, a step further... For guests, I've been tossing around the idea of

Re: MAC Randomization, a step further...

2020-07-20 Thread Green, William C
For guests, I've been tossing around the idea of an open network. No .1x, no PSK, no captive portal. Affiliates would be encouraged to use eduroam via SSO nag. Columbia University had a presentation on how they are doing the open network side of this. I suspect the most difficult part will be

RE: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread Johnson, Christopher
Jonathan, I was thinking the same thing about possibility of multiple macs onto a single unique certificate for Airwave. I am curious though. Does anyone happen to know the maximum number of "unique/randomized mac addresses" that can be allotted? Christopher Johnson Wireless Network Engineer

Re: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread Jonathan Waldrep
For .1x connections, per device certs seems to be the way to go. I'm not sure if Airwave and other monitoring tools have a way to consolidate multiple macs to a single device based on the cert, though. For guests, I've been tossing around the idea of an open network. No .1x, no PSK, no captive

RE: [WIRELESS-LAN] MAC Randomization, a step further...

2020-07-20 Thread Johnson, Christopher
Default behavior matters indeed. Got a preview of what to expect over the weekend. Found one individual that was in Aruba Airwave “12 Times” for their iPhone 14.0 over past couple of weeks and another “6 times”. It appears that as long as the device remains “connected” to the network beyond

Re: [WIRELESS-LAN] XPS 15 Laptop - Killer Networking NIC Experience

2020-07-20 Thread Jonathan Waldrep
Killer doesn't make its own chipsets. I would use the drivers for the underlying chip. For example, Killer's Wi-Fi 6 card is just a rebranded Intel AX200. IIRC, the Wi-Fi 5 cards use Qualcomm. Use the Intel/Qualcomm drivers and ditch the KCC. On 2020-07-17 20:58:37, Johnson, Christopher wrote: >