network.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On 6/9/21 8:35 AM, Shoebottom, Bryan wrote:
>
> I took over from our previous wireless admin a few years ago and went
> through
nk of both pros and cons for including these campus SSIDs but
wonder what others think.
Thanks,
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On 2/19/21 9:17 PM, Rios, Hector J wrote:
>
y remedied with regular signature updates
or by using custom signatures.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On 9/25/20 7:24 PM, Lee H Badman wrote:
> We did start down this path,
will prevent reauths.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On 9/25/20 10:25 AM, Tim Cappalli wrote:
> If you're using Aruba ClearPass, you can add an account chec
osed then letting out the line has helped. Having a PSK
network also solves the issue of devices that can't connect to open
SSIDs. And if we end up just allowing all on the devices network at
least we have a sponsor to tie the devices back to.
Mike Dickson
Michael Dickson
Network Engineer
I
ng
to see what percentage reruns JoinNow and who just "figures it out".
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On 5/27/20 8:42 AM, Tim Cappalli wrote:
>
> It will be a mi
Problem appears to be resolved. It is for us locally.
https://status.securew2.com/
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On 1/29/20 10:34 AM, Patrick McEvilly wrote
#x27;t heard of any issues yet but want to get in front
of any that might crop up..
Thanks,
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu<mailto:michael.dick...@umass.ed
d not try to resolve their supplicant issue on their smartphone.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu<mailto:michael.dick...@umass.edu>
PGP: 0x16777D39
From: Th
Hi Manny,
I'm curious, why is your facilities department looking to replace Lutron? We
are being asked to look at them as a lighting control solution on our campus.
Thanks,
Mike
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
on behalf of Man
I’m attending as well. Looking to meeting other higher education folks.
Mike Dickson
On Mar 24, 2018, at 10:48 PM, Sidharth Nandury
mailto:nandu...@denison.edu>> wrote:
I will be there Mon - Fri. Do let me know if there is an informal meet. Would
love to meet and get acquainted with colleagues
Excellent advice! I like the idea of eliminating the console's wireless NIC
while still using the wireless network.
If we were able to I'd also consider running a temporary cable across the hall
to the eth1 port on the AP.
Mike
Michael Dickson
Network Engineer
Information
U
> Subject: Re: [WIRELESS-LAN] gaming on wireless
>
> Hi Mike,
>
> You might also try putting a temporary AP in the room with the Playstation
> and see if it still has the same issue. With those types of walls, across
> the hall might be on the fringe of service for 5 GHz.
>
I agree! Unfortunately I'm not quite sure how feasible this would be in the
short term.
Thanks
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
On Mar 8, 2018, at 1:58 PM, Kenny, Eric
device has exclusively connected to that AP
so roaming does not appear to be an issue (user reported issues as late as
yesterday). The walls are cement block.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16
Thanks. We use Aruba. I realize that like VoIP gaming is (typically) UDP and
bufferless. Any minor imperfections are magnified with gaming and voice.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP
ate logged events. We have a TAC
ticket open with the vendor.
Any shared gaming experiences or advice about how to make gaming consoles happy
would be appreciated.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.
(Alexa App smartphone
communicates to the Echo via IP through the AWS cloud). Is the Home Pod
similar? Or is it basically useless unless it can bathe in mDNS?
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP:
y for Apple Home Pod?
Thanks in advance,
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x16777D39
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list
Joseph B.
Which EAP type did you use to Connecticut?
Mike
> On Feb 7, 2018, at 10:52 AM, Joseph Bernard wrote:
>
> I have the latest 10" Fire tablet on our eduroam which uses 802.1x
>
> Thanks,
> Joseph B.
>
> Sent from my iPhone
>
> On Feb 7, 2018, at 10:49 AM, Johnson, Christopher wrote:
gned themselves the same IP and are
discovering each other over L2?
Good luck. We're pretty much going down the same CPPM/Airgroup path right now.
Mike
Michael Dickson
Network Engineer
Information Technology
University of Massachusetts Amherst
413-545-9639
michael.dick...@umass.edu
PGP: 0x1
eduroam (our only 802.1x offering)
UMASS (open, CP, primarily for guests)
UMASS-DEVICES (MAC auth'd device support for non-802.1x capable
devices, as allowed by policy)
Mike
Michael Dickson
Network Analyst
Information Technology
University of Massachusetts Amherst
413-545-9639
michael
Same here.
Mike
Michael Dickson
Network Analyst
Information Technology
University of Massachusetts Amherst
michael.dick...@umass.edu
413-545-9639
On Jul 28, 2015, at 8:26 PM, Jason Cook wrote:
> Thanks Debbie. Wish we could include some technical detail in some of our
> comms lik
Thanks all. I believe we determined that Yosemite did not reintroduce support
for EAP-TTLS (PAP).
We are are dealing with numerous complaints of dropped connections too-frequent
reauths (in absence of roaming or disconnects).
Mike
Michael Dickson
Network Analyst
Information Technology
Hi all,
Can anyone confirm if the new MacOSX (Yosemite 10.10) still does not allow DIY
supplicant configuration for EAP-TTLS (PAP) in 802.1x without a "helper app"
like XpressConnect? Or did Apple reintroduce native PAP support?
Thanks,
Mike
Michael Dickson
Network Analyst
I
maintenance?
Thanks,
Mike
Michael Dickson
Network Analyst
Office of Information Technologies
University of Massachusetts Amherst
Voice 413.545.9639
On Sep 8, 2014, at 1:30 PM, Lee H Badman wrote:
> This is exactly what we're doing, and so far our biggest Appleheads are
> happy. But... only
Thanks Lee. Yes I believe you are correct. No ATV discovery over BLE yet for
MacOSX. I misspoke about that earlier. Maybe this will be announced tomorrow
and we'll forget all about the lack of iWatch announcement! ;-)
Mike
Michael Dickson
Network Analyst
Office of Information Technol
Seems this should be ok if all done via layer 3 post-discovery.
We have an opportunity to add a dedicated wired jack for some ATV's going in
classrooms and I'm in the camp of "wired when you can, wireless when you must"
for these types of end points.
Thanks,
Mike
Michael Dicks
I'm guessing the 10.9.4 "fix" refers strictly to a wake-from-sleep issue and
not the intermittent-delay-with-EAP issue outlined at
http://support.apple.com/kb/TS5258.
Mike
Michael Dickson
Network Analyst
Office of Information Technologies
University of Massachusetts Amherst
Voi
Great idea thanks!
Michael Dickson
Network Analyst
Office of Information Technologies
University of Massachusetts Amherst
Voice 413.545.9639
On Apr 24, 2014, at 1:19 PM, Ian McDonald wrote:
> Posters and instructions in the welcome pack. Mini helpdesks at strategic
> points duri
they need to run the configuration utility by going first
to the "onboarding" SSID.
I realize this may be more of a communications problem than a technical one but
I'd be interested to hear what folks are doing to steer their users to "go to
this SSID first to configure for that SSID&
Has anyone tried this using an ethernet connection instead of wireless?
Michael Dickson
Network Analyst
Office of Information Technologies
University of Massachusetts Amherst
On Mar 20, 2014, at 3:26 PM, Brian Helman wrote:
> We toyed around with the new Bluetooth configuration and found
but I was wondering if we
could do something quicker.
Has anyone tweaked Apple's command - suggested in their KB article - into an
Applescript for distribution? As the cert is already installed on the devices I
would thing some modification is needed.
http://support.apple.com/kb/TS5258
e for us.
Mike
Michael Dickson
Network Analyst
Office of Information Technologies
University of Massachusetts Amherst
Voice 413.545.9639
On Nov 1, 2013, at 12:34 PM, Lee H Badman wrote:
> I know this comes up frequently, so forgive me. We’re at a different place
> than we were at last in
e out. We use XpressConnect to configure
EAP-TTLS/PAP with a 2048 bit cert.
Mike
Michael Dickson
Network Analyst
University of Massachusetts Amherst
On Sep 4, 2013, at 3:37 PM, Aaron Smith wrote:
> Hello folks,
>
> I am wondering if anyone else is seeing a problem with laptops
rtal role after eduroam
authentication. True, it's presenting your rules "after-the-fact" but I don't
see a real need to make the users click through our AUP before connecting.
Mike
***********
Michael Dickson 413.54
uter
>
> David Gillett, CISSP CCNP
>
>
> -Original Message-
> From: Michael Dickson [mailto:mdick...@nic.umass.edu]
> Sent: Wednesday, July 06, 2011 10:23
> To: WIRELESS-LAN@listserv.educause.edu
> Subject: [WIRELESS-LAN] anyone connecting Aruba to Juniper MX rou
f you prefer.
Thanks!
-Mike
***
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
***
**
Participation and subscription information for
account for all of the devices my laptop discovers - or all the devices that
discover my laptop.
Mike
*******
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
On Jun 21, 2011, at 2:04 PM, Jeffrey Sessler wrote:
> My belief is that a student should be able to have a similar experience when
> in a residential hall as they would at home. That requires supporting
> everything under the sun including Bonjour.
Unfortunately our enterprise network is suffi
onjour? Or is this why people are saying it's "unsupported"?
-Mike
***********
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
***
On
moving the antenna.
>
> On Tue, Mar 8, 2011 at 2:28 PM, Michael Dickson
> wrote:
> For those folks who allow a wired-jack-by-request for printers, is the wired
> vlan (always) the same as the wireless vlan? If not, how effective is that
> solution? Our wireless vlan pool (Arub
n how to get a handle on it. Inexplicably it
appears that some vendors (cough, Lexmark) don't even have a way to disable the
wireless radio.
Good thread overall!
-Mike
*******
Michael Dickson 413.545.9639
Network Analyst
Fascinating. We have one user on campus so far with this address:
00:11:22:33:44:55
Vendor (reported by Airwave): CIMSYS Inc
For Macbooks, the vendor is typically reported as Apple or Apple,Inc.
Mike
Michael Dickson 413.545.9639
y quick.
This issue is most prevalent with an open SSID. Using 802.1x will
virtually eliminate the issue of drive-by lease grabbers.
Mike
********
Michael Dickson 413.545.9639
Network Analyst Univ. of Massac
At UMass Amherst we have 30 minute lease times.
Mike
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
On 9/14/2010 9:08 AM, Ryan Holland
Another thing to consider, if you have multiple controllers and a fairly large
deployment roaming across a controller boundary may trigger a reauth event as
well.
Mike
***
Michael Dickson 413.545.9639
Network Analyst Univ
ed.
To further put things in perspective, our wired-jack NetReg service only
"checks in" once per semester.
Mike
***********
Michael Dickson 413.545.9639
Network Analyst
We've had good success with XpressConnect. It's made device
configuration *much* easier. It also boosted our efforts to wean users
away from our captive portal SSID and onto 802.1x.
Mike
********
Michael Dickson 413.545.96
Philippe,
So are you adding the collected MAC addresses to Aruba's Internal DB and basic
doing a MAC -white-list check on route to the captive portal?
Thanks,
Mike
***
Michael Dickson 413.545.9639
Network Analyst Uni
vices on the network.
>
> Take care!
>
> Matt Barber
> Network Analyst
> Morrisville State College
> 315-684-6053
>
> -Original Message-
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv
> [mailto:wireless-...@listserv.educause.edu] On
n SSIDs on campus. One is captive portal and the other
is 802.1x (EAP-TTLS, PAP, AES). Neither of these SSIDs are particularly
suitable for gaming consoles.
Any advice or experiences is most appreciated.
Mike
*******
Michael Dickson 41
er.
Mike
********
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
On 4/22/2010 1:30 PM, Methven, Peter J wrote:
We are EAP-PEAP compliant, and had gone down th
tion and removes the variables involved with manual
user configuration and Help Desk advice.
Mike
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
On 4/22/2010 12:42 PM, P
The current Cloudpath build allows us to choose to remove or "let be"
any third party supplicants.
Mike
********
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachuset
e most elegant solution but this is the price paid for
requiring TTLS on Windows.
Hope this helps.
Mike
************
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http
t me offline if you'd like more info (we're still an Aruba shop).
Mike
***********
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
***
On Apr
2.3at
compliant but the 9000 series is.
Thanks,
Mike
Michael Dickson 413.545.9639
Network Analyst Univ. of Massachusetts Amherst
On 3/8/2010 2:55 PM, Watters, John
ive portal SSID that we're hoping to
make go away, not grow. We'll also soon have many wireless-only dorms so
telling gamers to plug in is not an option.
--Mike
************
Michael Dickson 413.545.9639
Network Analyst
Thanks to everyone who responded. This certainly sounds worth investigating.
Can XpressConnect also remove the open SSID profile and perhaps reorder
preferred networks to ensure users stay on the 802.1x SSID?
Thanks,
Mike
Michael
ppreciated. Reply to me
directly if you prefer not to air grievances publicly.
Thanks in advance,
--Mike
********
Michael Dickson 413.545.9639
Network Analyst Univ. of M
lient subnets and the odds
are most clients can't see their friends at L2)
Mike
*******
Michael Dickson
Network Analyst
University of Massachusetts Amherst
***
Barros, Jacob wrote:
We were recently reviewing our policies on our Arub
Philippe,
If that's a vlan limit could I just size my vlans as /23's instead and
get twice the user count?
Mike
******
Michael Dickson
Network Analyst
University of Massachusetts
Network Systems and Services
***
Philippe Ha
Hope this helps.
Mike
***********
Michael Dickson
Network Analyst
University of Massachusetts
Network Systems and Services
Ken Connell wrote:
Assuming you you have multiple client side vlans already configured on
your controller, you assign those vlans to the
eally not a question of "could we" (we can see
solutions for various requests) but rather "should we".
Thanks,
Mike
*******
Michael Dickson
Network Analyst
University of Massachusetts Amherst
**
Participation and subscription informa
So, for anyone who is offering 802.1n is anyone putting bandwidth
restrictions for per-role or per-user?
Mike
Peter P Morrissey wrote:
Thanks Matt,
I ordered a Dell that has one of those. Looking forward to testing
it. All of this confirms though that there is no compelling reason
fo
Matt,
If you are offering 5GHz in the res halls does that mean you are also
offering 5GHz in your academic buildings?
We are using AP-65's (a/b/g) in the academic buildings. We are
considering AP-125's for the res halls.
We have not enabled 802.11a on the AP-65's yet, mostly because we stil
e any specific questions.
Take care,
Matt Barber
Network Analyst
Morrisville State College
315-684-6053
-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Michael Dickson
Sent: Friday, April 24, 2009
Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Michael Dickson
Sent: Friday, April 24, 2009 11:42 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless-only in residence halls
Wondering if anyone has successfully implemented a
ould be greatly appreciated (saw an old thread from 2005).
Regards,
Mike
------
Michael Dickson
Network Analyst
University of Massachusetts Amherst
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
y roam?
Thanks,
Mike
***********
Michael Dickson
Network Analyst
University of Massachusetts
***
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
atabase onto Airwave?
Thanks,
Michael Dickson
Network Analyst
University of Massachusetts at Amherst
Osborne, Bruce W. (NS) wrote:
Lee,
Liberty University also uses Airwave in “monitor-only” mode for our
Aruba controllers.
In the Aruba controller architecture, there is typically one
evice acting as an AP.
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst [EMAIL PROTECTED]
University of Massachusetts
Network Systems and Ser
jack.
Thanks,
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst [EMAIL PROTECTED]
University of Massachusetts
Network Systems and Ser
D, no encryption,
with captive portal as the only point of authentication. 802.1x rollout
expected soon.
As always, thanks for the help!
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst [
? What features "go
away" (i.e. RFID or user tracking, etc.) Are there any gotchas?
We're an Aruba shop and expect about 3000+ wireless clients this
semester and have been adding more APs by the week.
Thanks,
Mike
*******
harmony in a mixed
wired/wireless world?
Thanks,
Mike
-----------
Michael Dickson
Network Analyst
University of Massachusetts Amherst
Network Systems and Services
[EMAIL PROTECTED]
**
Participation and subscription information for this EDUCAUSE Constituent Group
discus
what effect adding
wireless coverage with no L2 connectivity will have on these departments.
Thanks!
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst [EMAIL PROTECTED]
Universi
f traction, either.
Thanks,
Mike
~~~~~~~~~
Michael Dickson
Network Analyst
OIT - Network Systems and Services
University of Massachusetts Amherst
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.
Hi all,
I wonder if anyone using Bluesocket is seeing the same inconsistencies
that we are seeing regarding EDT or any non-UTC time zone.
After dutifully patching our Bluesocket 5000 boxes for the new Daylight
Saving Time we are seeing an inconsistency between the time reported by
Bluesocket
multiple vlans set.
3. Make sure infra-ssid is in same case on each 1300 (Cisco says SSIDs
are case sensitive)
4. Enures that CCX extensions are turned on on each
Not sure if any of this will help but it is a start.
Mike
*********
ector so you will have to have an ortronics receptacle. Here is a
picture of its guts.
I don't think there are any student dorms with them installed, maybe
someone knows.
-Emerson
Picture (Enhanced Metafile)
-Original Message-----
From: Michael Dickson [_mailto:[EMAIL PROTE
jacks, or if there are any other
AP-in-a-jack solution.
(Please, no vendor or sales calls)
Thanks,
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst [EMAIL PROTECTED
an OS-only way to get the MAC address?
Thanks,
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst [EMAIL PROTECTED]
University of Massachusetts
Network Systems and Ser
***
Michael Dickson Phone: 413-545-9639
Network Analyst [EMAIL PROTECTED]
University of Massachusetts
Network Systems and Services
***
Julian Y
0 are defined on the switch,
but only VLANs 1, 10 and 30 are defined on the wireless equipment, you
must remove the others from the trunk switchport."
hope this helps.
Mike
***********
Michael DicksonPhone: 413
. We would most
likely leverage Bluesocket there, if/when we do.
Mike
*******
Michael Dickson Phone: 413-545-9639
Network Analyst Fax: 413-545-3203
University of Massachusetts Email: [EMAIL
***
Michael Dickson Phone: 413-545-9639
Network Analyst Fax: 413-545-3203
University of Massachusetts Email: [EMAIL PROTECTED]
Network Systems and Services
***
Karyn
gap.
Mike
*******
Michael Dickson Phone: 413-545-9639
Network Analyst Fax: 413-545-3203
University of Massachusetts Email: [EMAIL PROTECTED]
Network Systems and Services
***
Yair Oren w
uck,
Mike
*******
Michael Dickson Phone: 413-545-9639
Network Analyst Fax: 413-545-3203
University of Massachusetts Email: [EMAIL PROTECTED]
Network Systems and Services
***
John J. Brassil
used
in a localized fashion. Suppressing SSID and creating profiles on the
clients machines might also help in ensuring the rights clients are
finding the right AP, and folks outside the classrooms will see only the
production AP's.
Mike
****
ch.
Mike
*******
Michael Dickson Phone: 413-545-9639
Network Analyst Fax: 413-545-3203
University of Massachusetts Email: [EMAIL PROTECTED]
Network Systems and Services
***
Yantis, Jonathan Lin
most cases the AP is no more than 36"
from the AP.
You can always tell the contractors to get back in there and find them
themselves. Sounds like they did a horrible job of mapping.
*******
Michael Dickson Phone: 41
Lee, do you use WLSE to discover and monitor switches? We only use it
for AP's here. CWSI handles the switches and routers.
Mike
***
Michael Dickson Phone: 413-545-9639
Network Analyst
We use the WLSE 1130 (I thought the WLSM was a diferent animal
altogether). The WLSE is a great way to upgrade firmware, monitor usage
and push new configs to our 150+ Cisco 1200's.
Mike
***
Michael Dickson
We are having success with Bluesocket.
No client software.
OS and media agnostic (can use it on a wired jack as well)
Works with LDAP, AD, RADIUS
Can terminate LLTP, IPSEC, etc. locally as well
Scalable
Mike
***
Michael Dickson
USE Constituent Group
discussion list can be found at http://www.educause.edu/cg/.
**
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/cg/.
--
*
I agree. Very nice. Would you be willing to share your code, Rick?
***
Michael Dickson Phone: 413-545-9639
Network Analyst Fax: 413-545-3203
University of Massachusetts Email: [EMAIL
adding the appropriate
policy to the "Un-registered" role would be ok. Your call.
We do not have a campus wide windows authentication policy. Maybe that's
why we do not hear of any complaints on this.
***********
Michael Dickson
1 - 100 of 104 matches
Mail list logo
