RE: [EXT]: Re: [WIRELESS-LAN] Amazon prime video error (Your device is connected to the internet using a VPN or proxy service)

[Muraca, Peppino P.]

Hi Jon, thank you for this information geoguard  cleared our ip from black list 
. Thank you for the information !!

Thank you
Pino

Peppino Muraca
Manager of Network Services
Stonehill College
W:508-565-1193
C:508-243-5910
pmur...@stonehill.edu<mailto:pmur...@stonehill.edu>




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jon Young
Sent: Friday, September 17, 2021 10:37 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [EXT]: Re: [WIRELESS-LAN] Amazon prime video error (Your device is 
connected to the internet using a VPN or proxy service)

There have been several threads over this on the NANOG list with a sudden 
uptick in this issue for several of the streaming services.  My takeaway from 
the posts is that amazon has been easier to deal with than some other others 
(.e.g., Disney+) and that the best contact to resolve this for amazon prime is 
n...@geoguard.com<mailto:n...@geoguard.com> as geoguard is apparently the prime 
(sorry, couldn't resist) source for amazon.  The website 
https://thebrotherswisp.com/index.php/geo-and-vpn/<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fthebrotherswisp.com%2Findex.php%2Fgeo-and-vpn%2F=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C5f7dec59907b4723af2208d979e8b1d3%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C1%7C637674862589560389%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=W7jkkDvZAr1bEeqvA2hbpkIxh9snIsnbt14eMZ69%2FSw%3D=0>
 was also referenced as a good source of contacts for several of the providers.

Jon Young
Vantage TCG

On Fri, Sep 17, 2021 at 10:06 AM Jeffrey D. Sessler 
mailto:j...@scrippscollege.edu>> wrote:
If you aren't blocking P2P anonymizer clients, where user devices are endpoints 
for folks in other regions, Amazon and others may blacklist your IP range.  
These clients may show up with students from other countries, or students who 
have returned from being abroad.

If you have something like Cisco's Umbrella, they have an entire anonymizer 
category you can block, but to be 100% effective, you need to block external 
DNS access so that is harder to circumvent.

Jeff

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Muraca, Peppino P. 
mailto:pmur...@stonehill.edu>>
Date: Friday, September 17, 2021 at 6:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] Amazon prime video error (Your device is connected to 
the internet using a VPN or proxy service)
You don't often get email from 
pmur...@stonehill.edu<mailto:pmur...@stonehill.edu>. Learn why this is 
important<http://aka.ms/LearnAboutSenderIdentification>
Hi everyone, has anyone come across this yet where Prime video will not play . 
this is what is on the screen ( Your device is connected to the internet using 
a VPN or proxy service. Please disable it and try again.) we have called Amazon 
and they told us to contact our ISP . We only see this on our wireless 
networks. Talking with our ISP it seems this is happening more and more and 
what basically has happened is out NAT ip's for out wireless have been black 
listed and now we have to remove our selves from these lists. Has anyone else 
come across this yet ? if so how successful has it been to remove yourself from 
these lists.

Thank you
Pino

[cid:image001.png@01D7AE01.60977D20]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C5f7dec59907b4723af2208d979e8b1d3%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C1%7C637674862589560389%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=QNnM6SMtYTc8PLVD7FgZtI7i20AqnY9PNbK4lmQoa0M%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C5f7dec59907b4723af2208d979e8b1d3%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C1%7C637674862589570380%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=0eiRMcKXuxHQqi5hkVgCQ6FdTzc2Gbluv0pm%2BCcfQmw%3D=0>

**
Replies to EDUCAUSE Co

RE: [EXT]: Re: [WIRELESS-LAN] Amazon prime video error (Your device is connected to the internet using a VPN or proxy service)

[Muraca, Peppino P.]

Hi Jon, thank you for this info I will be sending them an email!

Again Thank you very much !

Pino

Peppino Muraca
Manager of Network Services
Stonehill College
W:508-565-1193
C:508-243-5910
pmur...@stonehill.edu<mailto:pmur...@stonehill.edu>




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Jon Young
Sent: Friday, September 17, 2021 10:37 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [EXT]: Re: [WIRELESS-LAN] Amazon prime video error (Your device is 
connected to the internet using a VPN or proxy service)

There have been several threads over this on the NANOG list with a sudden 
uptick in this issue for several of the streaming services.  My takeaway from 
the posts is that amazon has been easier to deal with than some other others 
(.e.g., Disney+) and that the best contact to resolve this for amazon prime is 
n...@geoguard.com<mailto:n...@geoguard.com> as geoguard is apparently the prime 
(sorry, couldn't resist) source for amazon.  The website 
https://thebrotherswisp.com/index.php/geo-and-vpn/<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fthebrotherswisp.com%2Findex.php%2Fgeo-and-vpn%2F=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C5f7dec59907b4723af2208d979e8b1d3%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C1%7C637674862589560389%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=W7jkkDvZAr1bEeqvA2hbpkIxh9snIsnbt14eMZ69%2FSw%3D=0>
 was also referenced as a good source of contacts for several of the providers.

Jon Young
Vantage TCG

On Fri, Sep 17, 2021 at 10:06 AM Jeffrey D. Sessler 
mailto:j...@scrippscollege.edu>> wrote:
If you aren't blocking P2P anonymizer clients, where user devices are endpoints 
for folks in other regions, Amazon and others may blacklist your IP range.  
These clients may show up with students from other countries, or students who 
have returned from being abroad.

If you have something like Cisco's Umbrella, they have an entire anonymizer 
category you can block, but to be 100% effective, you need to block external 
DNS access so that is harder to circumvent.

Jeff

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Muraca, Peppino P. 
mailto:pmur...@stonehill.edu>>
Date: Friday, September 17, 2021 at 6:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] Amazon prime video error (Your device is connected to 
the internet using a VPN or proxy service)
You don't often get email from 
pmur...@stonehill.edu<mailto:pmur...@stonehill.edu>. Learn why this is 
important<http://aka.ms/LearnAboutSenderIdentification>
Hi everyone, has anyone come across this yet where Prime video will not play . 
this is what is on the screen ( Your device is connected to the internet using 
a VPN or proxy service. Please disable it and try again.) we have called Amazon 
and they told us to contact our ISP . We only see this on our wireless 
networks. Talking with our ISP it seems this is happening more and more and 
what basically has happened is out NAT ip's for out wireless have been black 
listed and now we have to remove our selves from these lists. Has anyone else 
come across this yet ? if so how successful has it been to remove yourself from 
these lists.

Thank you
Pino

[cid:image001.png@01D7ABB8.E3F9CC90]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C5f7dec59907b4723af2208d979e8b1d3%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C1%7C637674862589560389%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=QNnM6SMtYTc8PLVD7FgZtI7i20AqnY9PNbK4lmQoa0M%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C5f7dec59907b4723af2208d979e8b1d3%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C1%7C637674862589570380%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000=0eiRMcKXuxHQqi5hkVgCQ6FdTzc2Gbluv0pm%2BCcfQmw%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the 

RE: [EXT]: Re: [WIRELESS-LAN] Amazon prime video error (Your device is connected to the internet using a VPN or proxy service)

[Muraca, Peppino P.]

Hi everyone, so far I have checked what our ISP has sent us and I can't seem to 
find the smoking gun. I think this will be something we will have to go through 
amazon to try or help get resolved but Im sure that will not be easy at all.


Here is the link of resources I have seen others use to get the VPN issue 
cleared up on streaming services.

https://thebrotherswisp.com/index.php/geo-and-vpn/<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fthebrotherswisp.com%2Findex.php%2Fgeo-and-vpn%2F=04%7C01%7Cpmuraca%40stonehill.edu%7C392313ee03b44322b1fc08d979dc3e59%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C0%7C637674809111060407%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=HpqCVQRr8Jtx9OuZAfyme4vFpOR%2FwaKjFfzddQE2WGE%3D=0>

Thanks


Peppino Muraca
Manager of Network Services
Stonehill College
W:508-565-1193
C:508-243-5910
pmur...@stonehill.edu<mailto:pmur...@stonehill.edu>




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Joe Walker
Sent: Friday, September 17, 2021 9:24 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [EXT]: Re: [WIRELESS-LAN] Amazon prime video error (Your device is 
connected to the internet using a VPN or proxy service)

We recently had this issue as well and funneling through the different levels 
of support on the Amazon Prime TV side just to talk to someone that knew what I 
was talking about was infuriating to say the least. I did receive an email this 
morning from Amazon saying the issue was "resolved" but I haven't yet verified. 
 As far as I can tell there isn't any sort of documentation anywhere from 
Amazon that shows the criteria for what they deem to be a VPN or proxy nor is 
there any documentation on how to appeal/remove your IP's from this list.



Joe Walker
Network and Telecommunication Services
Kansas State University
(785)532-4997
f...@ksu.edu<mailto:f...@ksu.edu>

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Muraca, Peppino P. 
mailto:pmur...@stonehill.edu>>
Sent: Friday, September 17, 2021 8:17 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] Amazon prime video error (Your device is connected to 
the internet using a VPN or proxy service)


This email originated from outside of K-State.


Hi everyone, has anyone come across this yet where Prime video will not play . 
this is what is on the screen ( Your device is connected to the internet using 
a VPN or proxy service. Please disable it and try again.) we have called Amazon 
and they told us to contact our ISP . We only see this on our wireless 
networks. Talking with our ISP it seems this is happening more and more and 
what basically has happened is out NAT ip's for out wireless have been black 
listed and now we have to remove our selves from these lists. Has anyone else 
come across this yet ? if so how successful has it been to remove yourself from 
these lists.



Thank you

Pino



[cid:image001.png@01D7ABA9.92E51B70]



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C0a155f3dd94a4087938b08d979de6bdd%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C0%7C637674818475989652%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=LhMDyGh0E7KuGqZQ%2FXP9T7SoEOmHuXeYHS3JLXL1SOQ%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity=04%7C01%7Cpmuraca%40STONEHILL.EDU%7C0a155f3dd94a4087938b08d979de6bdd%7C2d1c5372f88f46c1a557ed75b9b2893c%7C1%7C0%7C637674818475989652%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000=LhMDyGh0E7KuGqZQ%2FXP9T7SoEOmHuXeYHS3JLXL1SOQ%3D=0>

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Amazon prime video error (Your device is connected to the internet using a VPN or proxy service)

[Muraca, Peppino P.]

Hi everyone, has anyone come across this yet where Prime video will not play . 
this is what is on the screen ( Your device is connected to the internet using 
a VPN or proxy service. Please disable it and try again.) we have called Amazon 
and they told us to contact our ISP . We only see this on our wireless 
networks. Talking with our ISP it seems this is happening more and more and 
what basically has happened is out NAT ip's for out wireless have been black 
listed and now we have to remove our selves from these lists. Has anyone else 
come across this yet ? if so how successful has it been to remove yourself from 
these lists.

Thank you
Pino

[cid:image003.png@01D7ABA4.C8387B50]


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [EXT]: [WIRELESS-LAN] Theater wifi - to have or not to have

[Muraca, Peppino P.]

Hi , I would defiantly wire for access points and depending on what type of 
ceiling the architect goes with ( access to locations) I would add the waps. 
You can easily disabled them for events if requested.
Here at Stonehill we plan for coverage in every interior space, we have 
actually had our theatre arts people ask to expand wireless in the theatre.

Like others have said it is easy to add them now , and much more difficult and 
expensive later on.

Pino

Peppino Muraca
Manager of Network Services
Stonehill College
W:508-565-1193
C:508-243-5910
pmur...@stonehill.edu




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Bull, Mary
Sent: Tuesday, October 22, 2019 12:34 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [EXT]: [WIRELESS-LAN] Theater wifi - to have or not to have

Hello all,

I’m wondering if anyone here has dealt with a decision on wireless in the 
theaters, concert halls, or recital halls on their campus. We have a new arts 
complex coming on line in the next two years and there’s no clear direction 
from faculty on whether wireless for the audience is desirable. The previous 
main theater, and other currently used theaters on campus, did/do not have full 
connectivity for the audience (just a few aps tacked on the walls that were 
useless when the room was full). Facilities planning is favorable toward 
building it in, so I’d prefer that too, especially since it would be much 
harder or impossible to install if the faculty changes their mind in a few 
years once the building is complete. However, I’m not sure whether there is 
really an expectation from the audience that they should have wifi when they 
attend a show or concert.

Has anyone dealt with this on their campus? What influenced your choice?

Mary Bull
William and Mary
757-221-2491
mb...@wm.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Per room wireless

[Muraca, Peppino P.]

Depending on the layout of the Dorm, we are moving to Aruba wireless and we are 
going to a every other room for the dorms that are long halls and Ap per suite 
for the Suite Dorms

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edu
  (OO=[][]=OO)


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Blaisdell
Sent: Friday, November 4, 2016 10:48 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Per room wireless

How many on the list have moved to a per room model for wireless for student 
residence halls?



Michael Blaisdell
Director of Network Services
IT Services
Learning Commons/Library
Saint Francis University
117 Evergreen Drive
Loretto, PA  15940
814-472-3242
http://www.francis.edu
The best way to predict the future is to invent it. Alan Kay

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: 802.1x certificate authentication

[Muraca, Peppino P.]

This is great information, I have been worried that this will create a ton of 
support calls. The key seems to make sure the onboarding system is a good one, 
we are also a cloudpath shop, but are hoping to get to clearpass.

-Pino

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edu
  (OO=[][]=OO)


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen
Sent: Wednesday, September 21, 2016 1:13 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 802.1x certificate authentication

The Android experience is still good in my opinion, just weaker than iOS when 
you incorporate the Play Store.  (I think ISE links to the Play Store too).  
Luckily, Cloudpath has the option of directly downloading the certs instead of 
requiring the app from the Play Store.  Of course, a profile based option (What 
Google does with ChromeOS) negates the need for any link to the Play Store.

-Curtis


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Turner, Ryan H 
<rhtur...@email.unc.edu>
Sent: Wednesday, September 21, 2016 10:03 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 802.1x certificate authentication

Android is definitely 'the' problem.  In our stats, you can see that they are 
only 10% of the clients we onboard, but are closer to 90% of the trouble 
tickets.  We were a Cloudpath customer and made the switch to SecureW2 (the 
android experience was a big reason).

Ryan

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen
Sent: Wednesday, September 21, 2016 11:55 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 802.1x certificate authentication

We've been offering EAP-TLS for about 2 years.  It's been the only supported 
option for BYOD for just over a year.  Personally, I think the user experience 
is pretty good across all devices  (Android is weaker but still not bad).  I've 
heard rumblings that Android might be changing to a profile method more similar 
to ChromeOS ...so that would probably improve things.  Our stats are eerily 
similar to Ryan's but we use the Cloudpath Enrollment System, and we have not 
disabled PEAP yet.

Thanks,

--
Curtis K. Larsen
Senior Network Engineer
University of Utah IT/CIS



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Turner, Ryan H 
<rhtur...@email.unc.edu>
Sent: Wednesday, September 21, 2016 7:53 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 802.1x certificate authentication

We are a very experienced shop with TLS.  We've been using certificates for 4 
years.  We now use the SecureW2 onboarding platform to perform the operation, 
and we have been VERY happy with the results.  Attached below is our statistics 
for onboarding from the Fall of 2015 to today.  I would be happy to help you 
out.  My contact information is below.  In short, we've onboarded over 160,000 
devices in the last two years (over 300k in 4).

[cid:image001.jpg@01D213EE.09553910]


Ryan Turner
Manager of Network Operations
ITS Communication Technologies
The University of North Carolina at Chapel Hill

r...@unc.edu<mailto:r...@unc.edu>
+1 919 445 0113 Office
+1 919 274 7926 Mobile



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Muraca, Peppino P.
Sent: Wednesday, September 21, 2016 8:39 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 802.1x certificate authentication

Hello all,  I was wondering who or if anyone is using 802.1x cert auth for all 
wireless devices, and if you are, what is the experience with student devices ?

We are currently 802.1x username password , and have been thinking about the 
going the cer route. I feel the cert auth is still a painful experience for 
DYOD devices.

Thank you
Pino

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edu<mailto:pmur...@stonehill.edu>
  (OO=[][]=OO)



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fgroups%2F=01%7C01%7Crhturner%40email.unc.edu%7C0342ed2d3b6649f18ec208d3e237d0b2%7C58b3d54f16c942d3af081fcabd095666%7C1=ysMJchqMYCtLKm9TdNY%2BN6OVzQL6kOBQXDBCdUMYW%2B4%3D=0<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fgroups%2F=01%7C01%7Crhturner%40email.unc.edu%7Cab5faee7f3934ca14b2d08d3e21c6186%7C58b3d54

802.1x certificate authentication

[Muraca, Peppino P.]

Hello all,  I was wondering who or if anyone is using 802.1x cert auth for all 
wireless devices, and if you are, what is the experience with student devices ?

We are currently 802.1x username password , and have been thinking about the 
going the cer route. I feel the cert auth is still a painful experience for 
DYOD devices.

Thank you
Pino

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edu
  (OO=[][]=OO)




**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Aruba Instant IAP-215 Wireless Access Points

[Muraca, Peppino P.]

Make sure you have it plugged eth0

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edu



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ronald Loneker
Sent: Monday, September 14, 2015 11:38 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Aruba Instant IAP-215 Wireless Access Points

Good Morning -
(forgive cross-postings - a member of the NETMAN list suggested this might be 
the place to post this question)

We just had close to 90 new Aruba Instant IAP-215 wireless access points 
installed in our residence halls to upgrade our wireless network.  Another 
building is soon to be underway, and I'm managing this project.
Over the last couple of weeks, it seems like random access points are shutting 
down wireless access.  They are not all connected to the same Cisco switch 
(various Cisco POE switches in two residence halls).  The access point is not 
ping-able, the MAC address is not found in the virtual controller's table, the 
switch port is up and power is being supplied to the access point.  The only 
way we seem to get an access point back up is to do a shut/no shut on the 
switch port to which it is connected.
The vendor who configured the access points hasn't been able to determine why 
this is happening and before we initiate an Aruba support call, I was wondering 
if anyone had any similar experiences like this and what you determined was the 
cause of the issue.  We are running into walls here.
Thanks in advance for any thoughts or ideas.

Ron Loneker, Jr.
Director of Media Services
College of Saint Elizabeth
Mahoney Library
2 Convent Road
Morristown, NJ  07960

Phone:  973-290-4229

e-mail:  rlone...@cse.edu


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] IO7 devices not connecting to wireless

[Muraca, Peppino P.]

I have tried that, and it doesn't seem to work, I have reset network settings 
and even in some cases had students reset entire phone, but I believe when they 
restore the phone they are actually restoring the issue. I believe for some 
reason it is blocking/blacklisting our networks because possibly not being able 
to verify dns connectivity when they are connected to our onboarding ssid which 
is set to redirect all traffic to our onboarding server, but I cannot confirm 
this.



Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edu


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Todd Hall
Sent: Tuesday, September 09, 2014 10:08 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] IO7 devices not connecting to wireless

I'm not sure about your devices but we've noticed problems with iOS devices 
that might be related.

Here is the scenario:
The device connects to one of our SSIDs, usually the open web-auth network.  
When we then try to connect to our 802.1x network it fails to connect.  Turns 
out this happens whenever we try to change SSIDs with an iOS device where the 
previous network is still visible to the device.

Workaround: Click on the little info button next to the other networks and if 
any of them have a Forget this Network button, click it.  Then try to connect 
to the network you are wanting to connect to.  This has worked in every case 
where we have run into this problem.

I hope this helps.


On Mon, 8 Sep 2014, James Andrewartha wrote:

 Date: Mon, 8 Sep 2014 22:05:54 -0500
 From: James Andrewartha jandrewar...@ccgs.wa.edu.au
 Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv
 WIRELESS-LAN@listserv.educause.edu
 To: WIRELESS-LAN@listserv.educause.edu
 Subject: Re: [WIRELESS-LAN] IO7 devices not connecting to wireless
 
 On 09/09/14 01:08, Muraca, Peppino P. wrote:
 Hi, I was wondering if anyone has been having issues being able to 
 connect some IO7 devices iphone or ipad.

 We have been seeing some devices just not connect to either open or 
 secure ssid?s . we have plenty of iphones and ipads that seem to 
 connect fine, but I have a good amount that cannot. From everything I 
 have found it seems io7 does have some wireless issues, but I haven?t 
 been able to pinpoint a cause or find a solution to get these devices 
 connected.

 I can't comment on your particular case, but I'll note that Apple has 
 some profiles you can install to get debugging information from iOS 
 devices. If you have a developer account they're at 
 https://developer.apple.com/bug-reporting/ios/wi-fi/ otherwise your 
 vendor should be able to pass them on. Note that you have to email the 
 profile or download it directly on the device, they don't work with 
 Apple Configurator or an third-party MDM.



--
Todd M. Hall
Sr. Network Analyst
Information Technology Services
Mississippi State University
t...@msstate.edu
662-325-9311 (phone)

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

IO7 devices not connecting to wireless

[Muraca, Peppino P.]

Hi, I was wondering if anyone has been having issues being able to connect some 
IO7 devices iphone or ipad.

We have been seeing some devices just not connect to either open or secure 
ssid's . we have plenty of iphones and ipads that seem to connect fine, but I 
have a good amount that cannot. From everything I have found it seems io7 does 
have some wireless issues, but I haven't been able to pinpoint a cause or find 
a solution to get these devices connected.

Pino


Peppino Muraca
Sr. Network Administrator
Stonehill College
320 Washington St.
Easton, MA 02357
508-565-1193
pmur...@stonehill.edumailto:pmur...@stonehill.edu
www.stonehill.eduhttp://www.stonehill.edu

[cid:image001.png@01CFCB66.06975F00]




**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

mac OSx 10.9 wpa2 enterprise connection issues

[Muraca, Peppino P.]

Hi , has anyone else seen issues using wpa2 enterprise wireless where a Macbook 
OSX 10.9.X  will authenticate but it will not pull a dhcp address, I have read 
that this was an issue with 10.6 snow leopard, but I am seeing the same issue 
with 10.9 . I have some machines connect no problem but I have a good amount 
that will only authenticate and not pull a dhcp address. I have checked our 
DHCP pools and we are not running out of address.

Is this just one of the many wireless issues that are plaguing OSX 10.9 ?

Pino


Peppino Muraca
Sr. Network Administrator
Stonehill College
320 Washington St.
Easton, MA 02357
508-565-1193
pmur...@stonehill.edumailto:pmur...@stonehill.edu
www.stonehill.eduhttp://www.stonehill.edu

[cid:image001.png@01CFC2C1.9187B360]




**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Bandwidth utilization and IOS7 upgrade

[Muraca, Peppino P.]

Here is our last 24H so far we have peeked at about 850 Mbps





[cid:image001.png@01CEB48A.ECC58FE0]



Peppino Muraca

Sr. Network Administrator

Stonehill College

508-565-1193

pmur...@stonehill.edu



-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Colantuoni, Robert
Sent: Wednesday, September 18, 2013 4:17 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Bandwidth utilization and IOS7 upgrade



They tracked our problem down to an issue on their side -- they were not 
properly processing our BGP advertisements. They've fixed it but I haven't seen 
any change in traffic just yet...



---

Robert G Colantuoni

Senior Programmer Analyst

CIT - Network and Classroom Services

SUNY Buffalo

r...@buffalo.edumailto:r...@buffalo.edu

716.645.3552





 -Original Message-

 From: The EDUCAUSE Wireless Issues Constituent Group Listserv

 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Peter P

 Morrissey

 Sent: Wednesday, September 18, 2013 4:03 PM

 To: 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

 Subject: Re: [WIRELESS-LAN] Bandwidth utilization and IOS7 upgrade



 Ours didn't at first, but eventually kicked in and thankfully took on

 a good 2 gigs worth.

 Pete Morrissey



 -Original Message-

 From: The EDUCAUSE Wireless Issues Constituent Group Listserv

 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh

 Sent: Wednesday, September 18, 2013 3:48 PM

 To: 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

 Subject: Re: [WIRELESS-LAN] Bandwidth utilization and IOS7 upgrade



 On Sep 18, 2013, at 14:40 , Colantuoni, Robert 
 r...@buffalo.edumailto:r...@buffalo.edu

  wrote:

 

  We actually have an Akamai cache on campus, which has taken the

  brunt

 of the load in the past. It doesn't seem to be getting the traffic

 this time around, they are trouble-shooting it now.



 Yeah, our Akamai server isn't picking up the load this time either.





 --

 Julian Y. Koh

 Acting Associate Director, Telecommunications and Network Services

 Northwestern University Information Technology (NUIT)



 2001 Sheridan Road #G-166

 Evanston, IL 60208

 847-467-5780

 NUIT Web Site: http://www.it.northwestern.edu/ PGP Public

 Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html





**

Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

inline: image001.png

RE: Google Marketplace / Play IP address range

[Muraca, Peppino P.]

Ryan, you don't need to open up your ssid to the playstore, xpressconnect has 
the app locally on the server you have it running from. You should have three 
options to download the xpressconnect app from,playstore, amazon app store and 
locally.  The devices will need to have allow apps from unknown sources to be 
checked off.

Pino

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edumailto:pmur...@stonehill.edu



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Thursday, April 25, 2013 10:15 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Google Marketplace / Play IP address range

We have a setup SSID that allows users to access Xpressconnect to configure for 
802.1x.  Android requires a connection to the Playstore in order to download a 
cloudpath applet to complete the profile.   So, this setup SSID, which was 
restricted from external connections must be opened up so that these users can 
download from the Playstore.  I have had difficulties in scoping an acceptable 
IP address range that allows Play connectivity without opening up too much

Has someone else out there troubleshooted and configured a good scope for this 
application you can share?

Thanks!
Ryan Turner
UNC Chapel Hill
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Google Marketplace / Play IP address range

[Muraca, Peppino P.]

It is actually pretty simple when they are directed to download the app the 
third option in the pull down is local download, and xpressconnect with walk 
them through enabling unknown source app install.

We are currently using xpressconnect  and do not allow them to get to anything 
but the xpressconnect server. We haven't run into many issues with android 
users other then student not reading what the page tells them, and that usually 
goes across all platforms.

Pino


Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edumailto:pmur...@stonehill.edu



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Thursday, April 25, 2013 11:04 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Google Marketplace / Play IP address range

Thanks.  Unfortunately, I don't know how common that is (the option about 
trusting non google apps), or if it's worth having to get those users to follow 
more steps.  I am not an android user, but for people that I have tested this 
on, they are required to go to Playstore.

Ryan

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Muraca, Peppino P.
Sent: Thursday, April 25, 2013 10:23 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Google Marketplace / Play IP address range

Ryan, you don't need to open up your ssid to the playstore, xpressconnect has 
the app locally on the server you have it running from. You should have three 
options to download the xpressconnect app from,playstore, amazon app store and 
locally.  The devices will need to have allow apps from unknown sources to be 
checked off.

Pino

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edumailto:pmur...@stonehill.edu



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Thursday, April 25, 2013 10:15 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Google Marketplace / Play IP address range

We have a setup SSID that allows users to access Xpressconnect to configure for 
802.1x.  Android requires a connection to the Playstore in order to download a 
cloudpath applet to complete the profile.   So, this setup SSID, which was 
restricted from external connections must be opened up so that these users can 
download from the Playstore.  I have had difficulties in scoping an acceptable 
IP address range that allows Play connectivity without opening up too much

Has someone else out there troubleshooted and configured a good scope for this 
application you can share?

Thanks!
Ryan Turner
UNC Chapel Hill
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] iPhone 5 wireless issues

[Muraca, Peppino P.]

Thomas,
  We are running juniper wlc2800's  running 7.6.2.3 and we have PEAP and 
MSCPAV2 with Microsoft Radius for Authentication. We Have 532's, 522' and 82's 
for Ap's and I have seen any issues with iphone 5's not being able to 
authenticate to wireless.  I have come across some iphones  that stop 
connecting to our wireless and usually we delete wifi profile and recreate the 
connection and it usually takes care of it.

Pino

Peppino Muraca
Sr. Network Administrator
Stonehill College
508-565-1193
pmur...@stonehill.edumailto:pmur...@stonehill.edu



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Westacott
Sent: Monday, April 22, 2013 3:50 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] iPhone 5 wireless issues

Thomas, Keith:

I am interested in the details, I have 532's.  (and a lot of 432)  I have not 
had reports as yet.  What version of MSS are you running, what EAP, and radius ?
We are running mostly 7.6.2  MsChapV2 and Radiator.  InCommon-Comodo certs.
anything that I can look for in my logs ?
/daniel/



On Mon, Apr 22, 2013 at 2:01 PM, Thomas Carter 
tcar...@austincollege.edumailto:tcar...@austincollege.edu wrote:
We have started noticing an issue with iPhone 5 phones occasionally failing to 
connect to our wireless network. I haven't dug too deep into the issue yet, but 
was wondering if anyone has seen this issue. Everything else works just fine - 
other iPhones, iPads, Androids, Windows  Mac laptops, etc. We're using Juniper 
wireless gear with a RADIUS-based access control system. The access control is 
responding immediately and doesn't seem to be the problem. Unfortunately 
iPhones don't have a lot of ways of troubleshooting wireless.

Thomas Carter
Network and Operations Manager
Austin College
903-813-2564tel:903-813-2564
[AusColl_Logo_Email]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

inline: image001.gif