RE: [External] Re: [WIRELESS-LAN] Wi-Fi expectations/service levels and validation

We often refer people to this document penned by my predecessor when they try to do things like have an auditorium of students all connect to Zoom and then complain about the WiFi. https://its.uiowa.edu/support/article/2790 -Neil -- Neil Johnson - University of Iowa From: The EDUCAUSE

Aruba Founders Retiring (CEO, CTO, and Architect)

CEO Blog Post - https://blogs.arubanetworks.com/uncategorized/lets-name-it-aruba/ CTO Blog Post - https://blogs.arubanetworks.com/uncategorized/my-aruba-journey/ Chief Architect - https://blogs.arubanetworks.com/uncategorized/reflecting-on-my-aruba-family/ -Neil -- Neil Johnson (he/him/his)

Re: [External] [WIRELESS-LAN] InCommon certificate trust chain issues with upgraded Windows Systems

Update, The problem was I was using the wrong InCommon Intermediate CA cert (I was using an older SHA512 cert which had been upgraded to a SHA384). Once I straightened that out, the broken clients started working. But that leaves the question why most other clients were working with a broken

InCommon certificate trust chain issues with upgraded Windows Systems

This problem has been vexing us for a few weeks, so I'd thought I'd pass along my message to Microsoft and Sectigo in case others run into the same issue. Thanks. -Neil The authentication has been temporarily resolved, BUT only temporarily. The cause of the problem involved many factors:

Network Engineer I or II opening at The University of Iowa

All, Information Technology Services (ITS) at The University of Iowa, a service organization that provides technology support for the campus, has an opening for a Network Engineer in the Enterprise Infrastructure (EI) department. This position is member of the Network team responsible for the

CBS All Access not working on wireless

We’ve gotten some complaints that users are unable to stream shows from CBS All Access on our wireless network. I suspect it is either a NAT or IPv6 issue. Before I go and sign up for a trial account, has anyone here seen a similar issue? Thanks! -Neil -- Neil Johnson Network Engineer The

Detection Methodology for Bluetooth Credit Card Skmmers ?

To comply with PCI requirements, I’ve been asked to find a way to detect Bluetooth devices that maybe being used by CC skimmers to steal card numbers and PIN’s. There are a lot of retail locations on campus, so some sort of automatic method would be preferable to walking around after hours

Re: [WIRELESS-LAN] Xbox 360 connection issues? - Aruba

Just curious if anyone came up with a solution. We have a half a dozen Xbox 360s with connection issues. In our case they seem to work on AP 225’s but not AP 205H’s. From what my colleague has been able to gather, the AP205H is not passing the DHCP offer back to the 360 (We see the request

Re: [WIRELESS-LAN] Aruba controller loading

At the University of Iowa, we try not to put more than 80% of the max AP’s on our 7240’s. We have ~9200 AP’s and 44-50K clients peak load. We have primarily AP-225s and AP-205H’s (with some 224s and outdoor APs). We have four clusters consisting of primary and backup masters with sets of

Re: [WIRELESS-LAN] Certificate Expiration and IoT (Door Locks)

sed Assaa Abloyas our vendor. > > > Chris > > > > > Chris Hart > Senior Network Engineer > > > > > > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Neil M

Certificate Expiration and IoT (Door Locks)

Our housing department is pushing pretty hard to replace keyed locks on dorm room doors with Wi-Fi connected proximity card locks (a pilot this summer and then eventually rolling out to ~3,000 rooms). The locks would be “offline” locks that cache valid cards locally and only connect to the

Re: [WIRELESS-LAN] TLS Onboarding Vendors

Reminds of this quote for Eugene Stafford: "Secure web servers [cryptographically enabled web servers] are the equivalent of heavy armored cars. The problem is, they are being used to transfer rolls of coins and checks written in crayon by people on park benches to merchants doing business in

Re: [WIRELESS-LAN] Anyone else jumping on Aruba 8.0 code?

We plan to play with it in the lab after the start of year with a target of rolling it out next summer. -Neil -- Neil Johnson neil-john...@uiowa.edu From: The EDUCAUSE Wireless Issues Constituent Group Listserv on behalf of

Re: [WIRELESS-LAN] eduroam ssid

eduroam should work with just about any authentication method that uses EAP (PEAP,TLS,TTLS) etc. So if your are say moving to TLS (Client certificates) it should still just work. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 E-Mail:

Re: [WIRELESS-LAN] Nyansa Voyance - thoughts?

For those of you who are Aruba shops, Do you see this as a replacement for Airwave? I didn’t see anything like Visual RF. I looked at the demo, and while intriguing, at $30 per AP I’d have a hard time justifying the cost. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone:

Re: [WIRELESS-LAN] It's that time of year...

Some days I’d prefer to be working with wave lengths measured in meters rather than centimeters ;-) -Neil, N0SFH -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 E-Mail: neil-john...@uiowa.edu > On Dec 3, 2015, at 6:43 AM, Jorj Bauer

Re: [WIRELESS-LAN] Supporting "those other Wi-Fi devices" in the dorms- quick Survey

ucture & Media Solutions > > (434) 592-4229 > > LIBERTY UNIVERSITY > Training Champions for Christ since 1971 > > -Original Message- > From: Johnson, Neil M [mailto:neil-john...@uiowa.edu] > Sent: Thursday, September 3, 2015 12:08 PM > Subject: Re: Supporti

Re: [WIRELESS-LAN] Supporting "those other Wi-Fi devices" in the dorms- quick Survey

We are investigating a device net at UofI so, I would be interested in hearing from anyone who has implemented a Device Net with Clearpass. Thanks. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 E-Mail: neil-john...@uiowa.edu > On Sep 3,

RE: [WIRELESS-LAN] guest wireless

- You’re saying ATT charges you for this? Do you charge them back for the Wi-Fi offload? -Lee From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Neil M Sent: Friday, September 12, 2014 11:13 AM To: WIRELESS-LAN

iOS 8 drops tomorrow

We’ve add some additional bandwidth to the links between our wireless nets and campus in anticipation of heavy traffic tomorrow. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 E-Mail: neil-john...@uiowa.edu ** Participation and

RE: [WIRELESS-LAN] guest wireless

We contracted with ATT to handle guests and visitors. We advertise their SSID (attwifi) on our wireless infrastructure and then hand the traffic off to them via boxes called Network Management Devices (NMD) that they provide. They tunnel the traffic to their cloud via our Internet connection.

RE: [WIRELESS-LAN] requests for open, unauthenticated, no portal WiFi

We get requests every 3-4 months to create an open SSID for on-campus Board of Regents Meetings. Our solution was to contract with ATT WiFi to provide guest access across campus. We advertise the attwifi SSID on our wireless infrastructure, hand off layer two traffic to an appliance provided

Re: [WIRELESS-LAN] Cisco LWAP disable DNS resolver

Follow up. Cisco has it down as a bug to be fixed in future release and recommends that we put an ACL in place to filter incoming DNS requests. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: +1 319 384-0938tel:+13193840938 Fax: +1 319 335-2951tel:+13193352951 E-Mail:

Cisco LWAP disable DNS resolver

We are testing a few Cisco LWAP's and our security office dinged us in a scan because they are acting as open DNS resolvers. I can't find a way to turn that feature off. Any ideas ? -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: +1 319 384-0938tel:+13193840938 Fax: +1

Re: [WIRELESS-LAN] loadbalacing WPA2 802.1X traffic between controller and radius servers

.html and let me know if you have any thoughts. Jethro. On Tue, 26 Nov 2013, Johnson, Neil M wrote: We are running RADIATOR on Windows Boxes (long story). The boxes are configured with 6 child processes and 1 parent process. The parent process uses AuthBy EAPBALANCE to distribute

Re: [WIRELESS-LAN] loadbalacing WPA2 802.1X traffic between controller and radius servers

We are running RADIATOR on Windows Boxes (long story). The boxes are configured with 6 child processes and 1 parent process. The parent process uses AuthBy EAPBALANCE to distribute the EAP authentications across the child processes. Using EAPBALANCE insures that each EAP conversation makes it

Re: [WIRELESS-LAN] Force Windows to send UPN

...@brandeis.edumailto:cappa...@brandeis.edu On Nov 15, 2013 10:42 AM, Johnson, Neil M neil-john...@uiowa.edumailto:neil-john...@uiowa.edu wrote: Here is what we ended up doing. Quoted from our Enterprise Client Team e-mail….. We have had some reported issues with the Eduroam single sign on GPO

Re: [WIRELESS-LAN] Force Windows to send UPN

Here is what we ended up doing. Quoted from our Enterprise Client Team e-mail….. We have had some reported issues with the Eduroam single sign on GPO. The GPO, called _PUBLIC-Eduroam Wireless Config, allows laptops to connect to Eduroam before logon as long as the UPN is used as the username –

Prepare for the crush (again).

OS X (Mavericks) will be available ~2:00 CST today for free …. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: +1 319 384-0938tel:+13193840938 Fax: +1 319 335-2951tel:+13193352951 E-Mail: neil-john...@uiowa.edumailto:neil-john...@uiowa.edu Lync:

Network Engineer Position at the University of Iowa

Information Technology Services (ITS) at the University of Iowa has an opening for a Network Engineer on the Network Services Team within Enterprise Infrastructure. The position is part of a team responsible for the design, architecture, performance and maintenance of the entire campus data

Re: [WIRELESS-LAN] RF interference from 802.11

We faced the same situation in a building with multiple tenants. Researchers with labs didn't want wireless because they were concerned that it would interfere with their equipment (They didn't want to spend the money to shield the equipment) while people in the office spaces wanted it. The

Re: [WIRELESS-LAN] 7Signal- anyone?

Lee, (Off the record). We purchased five eyes as a pilot. The product shows a lot of promise, but we have had the following issues: 1. Access to raw data is limited which results in the following: a. We found that their Radio Attach Success Rate measurement doesn't breakout into detail

Re: [WIRELESS-LAN] 7Signal- anyone?

Whoops :-( -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Johnson, Neil Johnson neil-john...@uiowa.edumailto:neil-john...@uiowa.edu Reply-To: The EDUCAUSE Wireless Issues Constituent

Re: [WIRELESS-LAN] eduroam best practices?

I plan to follow the guidelines in the UK documents also. Some Service Providers (SP) are also not sending the Calling-Station-Id attribute to the Identity Provider (IdP) for privacy reasons. However, the eduroam agreement signed by eduroam-us requires participants to send this data so that the

Re: [WIRELESS-LAN] Wow vision veos: Will products using Miracast be an alternative?

We had a departmental IT person who insisted on trying SIX simultaneous Miracast connected TV's in the same classroom. According to our spectrum analyzer, Two Miracast devices chew-up 80% - 90% of the available duty-cycle (they do this whether the display is static (Power Point Slide) or active

Re: [WIRELESS-LAN] Student devices

What we will have: UI-Wireless-Setup – Captive portal that redirects to Cloudpath XpressConnect setup scripts. eduroam – We are using this as our main WP2-Enterprise connection for everyone, and we don't differentiate between students and staff. attwifi (Coming soon) - For parents, guests, and

Re: [WIRELESS-LAN] Radiator versus Freeradius

We have found RADIATOR to be very flexible and configurable. We are using it to implement our own version of vlan pooling since Meru doesn't have that feature. One caution, we run RADIATOR on windows servers (because we do AD authentication) and there is the potential for you to have

eduroam and machine authentication

We are getting requests to do windows machine authentication on our eduroam SSID (just for local machines). Is there anyone else out there doing this ? Thanks. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail:

Re: [WIRELESS-LAN] About the eduroam configuration on Freeradius

tristan.gul...@monash.edumailto:tristan.gul...@monash.edu Wireless Network Engineer M: +61 403224484 eSolutions divisionP: +61 3 9902 9092 Building 205 Monash University 3800 Australia On 16/02/2013, at 8:55 AM, Johnson, Neil M neil-john...@uiowa.edumailto:neil-john...@uiowa.edu

RE: [WIRELESS-LAN] About the eduroam configuration on Freeradius

We have been using eduroam as our primary SSID since the fall. We could put non @uiowa.edu users in a separate VLAN that appears outside our border, but the acutual number of non iowa users on campus is so small that it wasn't deemed worth the effort to setup and maintain. Implementing

FW: [mdnsext] draft-cheshire-mdnsext-hybrid-00

Stuart Cheshire's submission for a longterm solution to mDNS (Bonjour) issues. Please review and submit your comments via the mdnsext mailing list: https://www.ietf.org/mailman/listinfo/mdnsext Thanks. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319

FW: [mdnsext] draft-cheshire-mdnsext-hybrid-01

Stuart submitted a update to his draft already... -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu On 1/27/13 12:46 AM, Stuart Cheshire chesh...@apple.com wrote: In private discussions

FW: [mdnsext] draft-lynn-mdnsext-requirements-01.txt - Bonjour Airplay Issues

FYI Posted yesterday If you have comments or suggestions please post them to the mdnsext mailing list. Thanks. -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu On 1/24/13 11:41 PM, Stuart

Re: [WIRELESS-LAN] Apple TV's (Again).

Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Neil M Sent: Wednesday, December 05, 2012 3:29 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Apple TV's (Again). I've been following the traffic over

Apple TV's (Again).

I've been following the traffic over on the mdnsext mailing list and there hasn't been any significant traffic since 11-15-2012. While I'm all for going through the standards process to establish a long-term permanent fix for Bonjour/AirPlay in Enterprise environments, it will be probably

Re: [WIRELESS-LAN] eduroam question(s)

James, That's a cool graph. What tool(s) did you use to create it? Thanks. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu On 11/13/12 5:26 AM, James JJ Hooper

FW: [mdnsext] BoF today, minuter taker and Jabber relay needed

For those interested in the Apple Bonjour/Airplay issues, Sorry for the short notice, but if you are interested in participating in the development of mdnsext (Extensions to Bonjour protocols). Information is below. Live audio is available and hopefully there will be jabber (XMPP) chat

University of Iowa Network Architect Position

The University of Iowa has a position open for a Network Architect to support the campus wireless network (and assist with the wired network also). More information on the position can be found at: https://jobs.uiowa.edu/jobSearch/pandsDetailDisplay.php?requisitionNumber=61574fromComm=Y If

Windows 7 Wireless Single Sign-On and UPN (eduroam) issue.

We are currently seeing the following issue. 1. User's laptop is configured to use SSO to connect to the wireless network BEFORE user logon 2. User logs in using a UPN (example: u...@uiowa.edu and connects just fine. 3. The User's wireless connection is interrupted (laptop goes to sleep, they

Re: [WIRELESS-LAN] FreeRADIUS performance question

We run RADIATOR and just had to add additional servers to handle the load. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Craig Simons craigsim...@sfu.camailto:craigsim...@sfu.ca

Re: [WIRELESS-LAN] DHCP losing its mindŠ.

We did last fall (ISC DHCP on Dell Servers running RedHat Enterprise Linux). Although the CPU load was fine, we were having disk I/O issues resulting in the server not responding to requests. - Quick Fix was to bring up DHCP on additional boxes and spread the scopes out. - Long term fix consisted

Re: [WIRELESS-LAN] Wireless AP Tripods

We've had good luck with Wonder Poles http://www.wonderpole.com/telescopingpole.html. The only down side is the bases. When filled with sand can be quite heavy, but less likely to tip over. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951

FW: [386504]Pending: Feature Requested - ER: AirPlay/Apple TV Enhancement Request

Well, Here is the response I received from Apple. I did receive a voice-mail from our TAM who said he was going to follow-up via e-mail, but I haven't heard anything yet. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081

Our Apple Request Tracking ID

Our authorized Apple support person opened a feature request/trouble ticket for me. The ID is as follows: [386504] AirPlay/Apple TV Enhancement Request Basically we submitted a truncated version of the petition. Feel free to quote this ID in your requests to Apple support. -Neil -- Neil

Re: [WIRELESS-LAN] Apple Petition- Mid-Week Sanity Check

Jesse, We are looking at several options for providing a way to officially sign the petition. The Facebook group was one suggestion, but since not everyone is on (or wants to be on) Facebook, we'll look at something else. Stay tuned. Thanks. -Neil On Jul 11, 2012, at 6:33 PM, Jesse Rink

Re: [WIRELESS-LAN] Apple Petition

From: The EDUCAUSE Wireless Issues Constituent Group Listserv [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Neil M [neil-john...@uiowa.edu] Sent: Tuesday, July 10, 2012 8:41 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: Apple Petition My concern

Re: [WIRELESS-LAN] Apple Petition- Mid-Week Sanity Check

It's just my opinion, but while asking Apple to implement OKC sounds like worthwhile idea, I'd like to keep the focus on Bonjour and Airplay for this petition. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail:

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

From an administrator's perspective: I unpack the Apple TV, connect it to the wired network and projector, configure it to register with a central directory, give it a name, enable authentication to the enterprise AAA service, and be done. From a end-user's standpoint I'd like to see the

Re: [WIRELESS-LAN] Apple Petition

We looked into DNS-SD, but with entries like this (example taken from an earlier e-mail from Oscar Silva at the Univ. or Texas , and confirmed by our own testing): _airplay._tcp PTR utnet-appletv._airplay._tcp utnet-appletv._airplay._tcp SRV 0 0 7000

Re: [WIRELESS-LAN] Apple Petition

This is where I have been keeping the latest draft. https://www.facebook.com/groups/enterpriseairplay/files/ -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Jesse Rink

Re: [WIRELESS-LAN] Apple Petition

/modifying the needed records. Sent from my iPad On Jul 10, 2012, at 7:11 PM, Johnson, Neil M neil-john...@uiowa.edumailto:neil-john...@uiowa.edu wrote: We looked into DNS-SD, but with entries like this (example taken from an earlier e-mail from Oscar Silva at the Univ. or Texas , and confirmed

Re: [WIRELESS-LAN] Apple Petition

How does this sound for an update (The latest is posted on the Facebook site): We the undersigned academic and research institutions hereby solemnly request that Apple provide support for Bonjour/Airplay technology in enterprise networks. With an Apple client device penetration of 50% or

Re: [WIRELESS-LAN] Apple Petition

]On Behalf Of Johnson, Neil M Sent: Monday, July 09, 2012 10:16 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Apple Petition How does this sound for an update (The latest is posted on the Facebook site): We the undersigned academic

Re: [WIRELESS-LAN] Apple Petition (Was Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.)

Wireless Issues Constituent Group Listserv [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Johnson, Neil M [neil-john...@uiowa.edumailto:neil-john...@uiowa.edu] Sent: Thursday, July 05, 2012 3:37 PM To: WIRELESS-LAN

Re: [WIRELESS-LAN] Apple Petition (Was Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.)

[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Johnson, Neil M [neil-john...@uiowa.edumailto:neil-john...@uiowa.edu] Sent: Thursday, July 05, 2012 3:37 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject

Re: [WIRELESS-LAN] Apple TV/Wide Area Bonjour question

06:12 PM, Oscar Ricardo Silva wrote: Subject: Re: You knew it was coming...Airplay/Apple TV support for instructors. From: Johnson, Neil M neil-john...@uiowa.edu Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Date: Mon, 19 Dec 2011 18:34

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

Or maybe a well known blogger could write an article about it…. :-) -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Lee H Badman lhbad...@syr.edumailto:lhbad...@syr.edu Reply-To: The

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

@LISTSERV.EDUCAUSE.EDU] on behalf of Johnson, Neil M [neil-john...@uiowa.edu] Sent: Thursday, July 05, 2012 1:23 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors. Or maybe a well known blogger could write an article

Apple Petition (Was Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.)

I'm a little fuzzy on the specifics things to request from Apple, but here is a first pass): Whereas, we the undersigned academic and research institutions are receiving numerous requests from our faculty, staff, and students for the ability to utilize Airplay technology in classrooms,

PacketFence

I would be interested in talking to anyone about their experiences using packetfence (http://www.packetfence.org) to register guest users on their wireless network. Thanks. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081

Re: [WIRELESS-LAN] SSID connection order on Mac Devices

Pete, Yes, we have seen the same behavior. Users of Apple devices will frequently get put back on our open setup network SSID (UI-Wireless-Setup) because it comes alphabetically before our production WPA2 Enterprise Network SSID (UI-Wireless-WPA2). The only solution we have come up is the

Re: [WIRELESS-LAN] Blocking Chatty protocols

We don't filter it yet, but Princeton has some pretty good pages with good justifications for blocking (or getting users to disable these protocols). For example: http://www.net.princeton.edu/filters/ssdp.html The following link lays out the other protocols they filter.

Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

If we are going to do this, implementing static wide area bonjour entries seems the way to go. Thanks for the references, but the one thing I can't find is the format for the SRV and TXT records for an Apple TV. If anyone has those I'd be grateful for them, I have an Apple TV device in my hands

Re: [WIRELESS-LAN] NAT Logging Storage Requirements

environment. On Wed, Nov 2, 2011 at 11:32 AM, Johnson, Neil M neil-john...@uiowa.edu wrote: We are looking at having to move our wireless net's to private address space and NAT/PAT ing traffic from the wireless nets to the Internet. What are you using to store your NAT logs (Systems, Disk

Re: [WIRELESS-LAN] 1200 Series AP's on a newer 2960s Cisco switch using POE

That's why we only buy the 12-port Power Dsine, the 24 port ones are over subscribed. We are using Meru AP311's on ours. -Neil -- Neil Johnson Network Engineer The University of Iowa Phone: 319 384-0938 Fax: 319 335-2951 Mobile: 319 540-2081 E-Mail: neil-john...@uiowa.edu From: Hanset,

Re: Interference in dorms.

verified this, but the source is reliable... -Rick On 7/21/2011 12:58 PM, Johnson, Neil M wrote: We are struggling with the same issues. We are finding that X-boxes and PS3s generate lots of interference (they use a proprietary 2.4 protocol between the joysticks and console). This summer we've

Re: [WIRELESS-LAN] Separate SSID for 5GHz band

Infrastructure Manager Utica College On 7/7/2011 11:16 AM, Karl Reuss wrote: On 7/7/2011 10:29 AM, Johnson, Neil M wrote: Has anyone here considered creating a separate SSID for the 5GHz band? The ideas is to encourage users to exclusively use 5 GHZ over 2.4. We've implemented band

Separate SSID for 5GHz band

Has anyone here considered creating a separate SSID for the 5GHz band? The ideas is to encourage users to exclusively use 5 GHZ over 2.4. We've implemented band-steering, but it was suggested this would insure that users use 5GHz and not fall back to 2.4. Thanks. -Neil -- Neil Johnson

Re: [WIRELESS-LAN] iOS devices on wireless

Even on on our wired side we have multiple L2 networks in the same dorm building. Our dorms are substantially bigger (800+ residents). When you only have two /16's for the entire campus and a desire not to do NAT, you have to make compromises. In addition, most of our dorms are right next to

Re: [WIRELESS-LAN] Wireless design

We use several separate subnets for wireless clients and use some RADIUS custom hooks (We use a combination of RADIATOR and SBR) to dynamically assign clients to the subnets. Our AP's themselves our addressed using RFC1918 space on a separate VLAN routed out each routing hub. -Neil -- Neil

RE: [WIRELESS-LAN] MERU wireless

Meru: - What version of code are you running Just upgraded to 4.0-150. So far it seems fine. It resolved the administration interface lock ups we were seeing. - What style of AP's do you use We have mix of 208's and 311's. - Do you use different style access points within the same air

Re: [WIRELESS-LAN] MERU wireless

We have ~2300 APs on campus and are satisfied with the system. There's some functionality (VLAN pooling, Native IPv6 support) that we would like to see in the product. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319 384-0938 Mobile:

RE: [WIRELESS-LAN] MERU wireless

the case? Frank -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Neil M Sent: Wednesday, April 13, 2011 10:07 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] MERU

Policy towards self installed AP's in dorms

These questions are targeted at larger schools with large dorm populations that use EAP authentication (802.1x) on their wireless network. 1. What is your school's policy in regards to students installing their own access points in the dorms where you have wireless service already

RE: [WIRELESS-LAN] PEAP/MSCHAPv2 using Juniper SBR + AD

We are. With a little RADIATOR thrown in the middle to assign users to VLANS dynamically. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa 319 384-0938 neil-john...@uiowa.edu From: The EDUCAUSE Wireless Issues Constituent Group Listserv

RE: [WIRELESS-LAN] WiFi on campus buses

We partnered with all our local municipal transportation services to implement NextBus (http://nextbus.com) route information technology. NextBus uses GPS and 3G backhaul to provide location and arrival time information that is accessible by the web, SMS, and voice. On our campus buses

RE: [WIRELESS-LAN] 802.1x SIP Phone

My Cisco 7921 phone does... -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa 319 384-0938 neil-john...@uiowa.edu -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv

RE: [WIRELESS-LAN] Coachcomm system...

We had a similar issue with a wireless scoreboard system for the swimming pool in our new Recreation and Wellness center. It took out the whole 2.4 GHz band. Fortunately the pathways were in place so they could switch it to a wired setup. -Neil -- Neil Johnson Network Engineer Information

RE: [WIRELESS-LAN] Versign New Root CERT

-...@listserv.educause.edu] On Behalf Of Johnson, Neil M Sent: Monday, November 01, 2010 12:27 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Versign New Root CERT We are also moving to Comodo via Incommon which is going to be interesting. Hopefully we can leverage our Cloudpath

RE: [WIRELESS-LAN] Versign New Root CERT

We are also moving to Comodo via Incommon which is going to be interesting. Hopefully we can leverage our Cloudpath installation to rollout the changes. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa 319 384-0938 neil-john...@uiowa.edu From:

RE: [WIRELESS-LAN] Apple and wireless connectivity issues?

We also see lots of problems with Macs being unable to obtain DHCP addresses properly eventually ending up with a self-assigned IP address. Attempts to engage Apple have not been helpful. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319

RE: [WIRELESS-LAN] Macbooks with odd Airport MAC addresses

Jaime, I saw the exact same thing in our DHCP logs, including the hostname (android_977…) . Curious. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319 384-0938 Mobile: 319 540-2081 Fax: 319 355-2618 E-mail: neil-john...@uiowa.edu From:

RADIUS Accounting Interval

What do you use for RADIUS accounting interval ? We have ours set to 10 minutes in order to match our DHCP lease time and it's put quite a load on our RADIUS server infrastructure. Thanks. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319

Wireless for Exams

We are getting inquiries concerning the use of the wireless network for computer based exams in large lecture halls. Although we provide coverage in most of our lecture halls, our current policy states that given the unlicensed nature of 802.11 spectrum we can't guarantee network availability

RE: [WIRELESS-LAN] Experiences with Meru

We are currently expanding our wireless network and by fall semester we will have around 2100 AP's. We have both AP 208's and AP 300's. We have been very happy with the single channel architecture, but have had the same driver issues mentioned by others. Again most issues are easily resolved

RE: [WIRELESS-LAN] Anyone use CloudPath ?

We have been using Xpress connect since this summer and it has greatly reduced the number of Wireless Setup support calls to our help desk. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319 384-0938 Mobile: 319 540-2081 Fax: 319 355-2618

RE: [WIRELESS-LAN] PhiHong

We tested several different vendors and settled on Powerdsine. The biggest issue we ran into was the robustness of the on-board management software. We had several instances where other vendors would crash, requiring the box to be restarted. The Powerdsine boxes were the most robust, but not

NAT Appliance Recommendations

For those of you who have moved your wireless clients to private IP address space, what are you using to do NAT ? We are a Meru shop and Meru doesn't do NAT native on their controllers. Thanks. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa

RE: [WIRELESS-LAN] wireless DHCP lease time

We are running a 10 minute lease on our 2 /21's with no issues that I know of. Generates a lot of logs though. I wouldn't want to go much shorter. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319 384-0938 Mobile: 319 540-2081 Fax: 319

NPS and Outer Identities

Is anyone using Microsoft NPS as their RADIUS server ? Do you have make sure the outer and inner identities match in order for authentications to be successful ? Thanks. -Neil -- Neil Johnson Network Engineer Information Technology Services The University of Iowa Work: 319 384-0938 Mobile:

  1   2   >