RE: [WIRELESS-LAN] Ripley's Believe it or not, wireless edition

2014-02-26 Thread Turner, Ryan H
to be sure I understood it. I'll be honest, I haven't a clue and would be inclined to say I wouldn't have believed it! Do PS3's use the same MAC address for both wired and wireless I recall? Might be some clue in there somewhere. On Wed, Feb 26, 2014 at 11:28 AM, Turner, Ryan H rhtur

RE: [WIRELESS-LAN] Ripley's Believe it or not, wireless edition

2014-02-26 Thread Turner, Ryan H
: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Wednesday, February 26, 2014 12:29 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Ripley's Believe

RE: Ripley's Believe it or not, wireless edition

2014-02-26 Thread Turner, Ryan H
@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Wednesday, February 26, 2014 12:29 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Ripley's Believe it or not, wireless edition I am hard pressed to explain this. We've had a good number

RE: Ripley's Believe it or not, wireless edition

2014-02-26 Thread Turner, Ryan H
of North Carolina at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445 0113 Office +1 919 274 7926 Mobile From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Wednesday, February 26, 2014 2:52 PM To: WIRELESS

RE: [WIRELESS-LAN] OS X 802.1x auth issue

2014-01-23 Thread Turner, Ryan H
I am going to plead some ignorance here, and see if people can connect the dots… We use 802.1X (TLS), and we use Godaddy Certs for our radius server. The clients are set to verify the server certificates. When I look at the installed certificates, I see information for CRLs. Yet, I connect

RE: [WIRELESS-LAN] dropped connections on Macbooks with Cisco WLC 7.6.100.0

2014-01-23 Thread Turner, Ryan H
Ok. So this is happening in the cisco environment, but any issues in the Aruba environment? Ryan H Turner Senior Network Engineer The University of North Carolina at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445 0113 Office +1 919 274 7926 Mobile -Original Message- From: The

Virtualization of airwave

2013-12-20 Thread Turner, Ryan H
How many of you have successfully virtualized an Airwave platform? We are considering it, as we are moving beyond 5,000 Aps in the near future, and are going to either have to buy new hardware or spin up new instances. We have a brand new high performance cluster we have purchased (currently

RE: 802.11AC Future Infrastructure

2013-12-18 Thread Turner, Ryan H
Call me naïve, but I think 10 gig uplinks for ac WAPs is serious overkill. We have almost 4,500 switches across campus, most with 1 gig user uplinks, and the vast majority are perfectly fine with 1G (heck, we could swap a good number of those for 100 Meg, and they'd barely notice). These are

RE: 802.11AC Future Infrastructure

2013-12-18 Thread Turner, Ryan H
7926 Mobile From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Wednesday, December 18, 2013 12:47 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] 802.11AC Future Infrastructure Call me

RE: [WIRELESS-LAN] WiFi planning

2013-12-12 Thread Turner, Ryan H
Things like iPhones are a lot lower than 25 mW. Closer to 17. Ryan H Turner Senior Network Engineer The University of North Carolina at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445 0113 Office +1 919 274 7926 Mobile From: The EDUCAUSE Wireless Issues Constituent Group Listserv

RE: [WIRELESS-LAN] WiFi planning

2013-12-12 Thread Turner, Ryan H
that weak of a signal at -65 or close to that? -dan Dan Brisson Network Engineer University of Vermont (Ph) 802.656.8111 dbris...@uvm.edumailto:dbris...@uvm.edu On 12/12/13, 1:54 PM, Turner, Ryan H wrote: Things like iPhones are a lot lower than 25 mW. Closer to 17. Ryan H Turner Senior

RE: [WIRELESS-LAN] WiFi planning

2013-12-12 Thread Turner, Ryan H
It not just poor client design, however (and I can't really always call it poor design, because who here doesn't get peeved with a short battery life device?? Which is what low transmit power helps). We are really switching from a coverage based design to capacity based design. If we want

RE: [WIRELESS-LAN] WiFi planning

2013-12-12 Thread Turner, Ryan H
. No easy way to skin this cat ☺ From: Frank Sweetser [mailto:f...@wpi.edu] Sent: Thursday, December 12, 2013 6:41 PM To: The EDUCAUSE Wireless Issues Constituent Group Listserv; Turner, Ryan H Subject: Re: [WIRELESS-LAN] WiFi planning In certain areas, sure. One more thing we're going to have

RE: [WIRELESS-LAN] Problem with WPS2 and new IOS 7.0.4 Upgrade

2013-11-21 Thread Turner, Ryan H
@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Thursday, November 21, 2013 2:47 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Problem with WPS2 and new IOS 7.0.4 Upgrade Still working for me. What EAP Method are you using? Ryan

RE: Problem with WPS2 and new IOS 7.0.4 Upgrade

2013-11-21 Thread Turner, Ryan H
-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Thursday, November 21, 2013 3:40 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Problem with WPS2 and new IOS 7.0.4 Upgrade I haven't upgraded my phone, but now you've inspired me. I haven't heard any complaints

RE: Problem with WPS2 and new IOS 7.0.4 Upgrade

2013-11-21 Thread Turner, Ryan H
I haven't upgraded my phone, but now you've inspired me. I haven't heard any complaints, however. I'll let you know. Ryan H Turner Senior Network Engineer The University of North Carolina at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445 0113 Office +1 919 274 7926 Mobile From: The

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-20 Thread Turner, Ryan H
We have done a complete TLS deployment using both onboard cloudpath CA (for guest access) and Microsoft CA (for standard access). It takes some work, but it is well worth the effort. Feel free to contact me. We would be happy to help. Ryan H Turner Senior Network Engineer The University of

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-20 Thread Turner, Ryan H
I agree with a lot you said. Philippe Hanset had mentioned 'unathenticated TLS', which appears to do what you want to do, but it appears it isn't very well supported yet.I haven't found much on it. Ryan H Turner Senior Network Engineer The University of North Carolina at Chapel Hill CB

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-20 Thread Turner, Ryan H
My problem with these approaches is their proprietary nature. I wonder how this has been addressed/discussed in the IEEE groups... Ryan H Turner Senior Network Engineer The University of North Carolina at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445 0113 Office +1 919 274 7926 Mobile

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-20 Thread Turner, Ryan H
at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445 0113 Office +1 919 274 7926 Mobile -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Wednesday, November 20, 2013 3:16 PM

RE: [WIRELESS-LAN] 802.1x vs web-portal

2013-11-19 Thread Turner, Ryan H
I've been very surprised to find applications on campus that don't encrypt data. We've found recently even in credit card processing devices that were not properly configured, and sent information in the clear. Given the vast amount of applications out there, and the absolute zero control

UNII Bands and wireless

2013-11-05 Thread Turner, Ryan H
I'm curious. How many of you out there have avoided the UNII space in your deployments, and how many embrace it? For those that are using the UNII bands, what have you done to minimize client compatibility issues? Ryan H Turner Senior Network Engineer The University of North Carolina at

RE: UNII Bands and wireless

2013-11-05 Thread Turner, Ryan H
them. -Hector Rios Louisiana State University From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Tuesday, November 05, 2013 11:59 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN

Re: [WIRELESS-LAN] Eduroam rollout- one more time

2013-11-01 Thread Turner, Ryan H
I have been debating the eduroam idea for a while and how we'd phase it in. The desire to get away from having a bunch of SSIDs and having realm based roles under a single SSID is really appealing. Our main issue is that we have just pushed people off an old unsecured SSID onto a new SSID,

802.11s Wireless Mesh

2013-10-28 Thread Turner, Ryan H
I'm curious if anyone on the list has experience with medium size and upward scale meshes, can give some details on their project, conclusions, and lessons learned? Ryan H Turner Senior Network Engineer The University of North Carolina at Chapel Hill CB 1150 Chapel Hill, NC 27599 +1 919 445

RE: Wireless authentication issue after certificate renew

2013-10-24 Thread Turner, Ryan H
From our experience, this is normal. Apple does some caching with its certificate. If the certificate that is being offered from the server differs, they appear to complain. From my experience, there is a dialogue box that will come up on screen telling the users to accept a new certificate.

Re: [WIRELESS-LAN] Wireless authentication issue after certificate renew

2013-10-24 Thread Turner, Ryan H
We are a Cloudpath customer. It is not going to help you prevent Apple issues with certificate changes. It will install all the necessary certificate chains, as well as provision all client settings. We use EAP-TLS, and it has made the distribution of certificates a trivial matter. Most

RE: XpressConnect...

2013-08-01 Thread Turner, Ryan H
We currently use the Cloudpath enrollment service. We switched to EAP-TLS away from EAP-TTLS and given the complexity of certificate generation and installation of CA certs to support those personal certificates, I don’t expect we will be moving away from Cloudpath anytime, soon. It was too

RE: Google Marketplace / Play IP address range

2013-04-26 Thread Turner, Ryan H
] 207.171.162.142/32 [host] 216.137.33.0/24 Bruce Osborne Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Turner, Ryan H [mailto:rhtur...@email.unc.edu] Sent: Thursday, April 25, 2013 1:49 PM Subject: Re: Google Marketplace / Play

Google Marketplace / Play IP address range

2013-04-25 Thread Turner, Ryan H
We have a setup SSID that allows users to access Xpressconnect to configure for 802.1x. Android requires a connection to the Playstore in order to download a cloudpath applet to complete the profile. So, this setup SSID, which was restricted from external connections must be opened up so

RE: Google Marketplace / Play IP address range

2013-04-25 Thread Turner, Ryan H
off. Pino Peppino Muraca Sr. Network Administrator Stonehill College 508-565-1193 pmur...@stonehill.edumailto:pmur...@stonehill.edu From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H Sent: Thursday, April 25

RE: [WIRELESS-LAN] Google Marketplace / Play IP address range

2013-04-25 Thread Turner, Ryan H
Services University of Michigan (734) 615-9438 On Thu, Apr 25, 2013 at 11:21 AM, Turner, Ryan H rhtur...@email.unc.edumailto:rhtur...@email.unc.edu wrote: Thanks, Peppino! I will have to explore that option a little more. Ryan From: The EDUCAUSE Wireless Issues Constituent Group Listserv

Radiator versus Freeradius

2013-04-17 Thread Turner, Ryan H
We are switching to EAP-TLS for wireless authentication, and have everything in place with the exception of a Certificate Revocation Checking process. We would prefer to use OCSP, but it appears that freeRadius isn't supporting OCSP very well (it is either buggy or not feature rich).

<    1   2   3