RE: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

[Stephen Belcher]

Cisco shop here with around 5300 APs. We are looking to get away from Cisco 
because of bugs and poor support. I would be happy to go in more detail 
off-line.

Our fist choice is Mist. They are doing some amazing things but the price is a 
premium and we may not be able to afford them.

Our second choice was Extreme (we have one small site with Extreme wireless) 
but, we just found out yesterday that with the acquisition of AeroHive, all new 
wireless will be based on their AeroHive HiveManager cloud platform rebranded 
to ExtremeCloud IQ. We are doing a deeper technical dive for that platform to 
understand the new offering. That being said, does anyone use AeroHive in a 
large deployment?

Maybe it's just a problem with Wi-Fi in general...

Steve

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Michael Davis
Sent: Thursday, January 9, 2020 11:27 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Who has transitioned away from Aruba, and why?

While not an answer to your request, we are also starting to look into this 
possibility for
the same reasons.  While we only have about 500 515s deployed with WiFi6 
extensions
disabled, we haven't seen tickets to this extent but we also don't have any 
greenfield
515-only deployments.

We will be looking at Mist, being a heavy Juniper shop, but also Cisco as some 
existing
collaborations may lead to cost effective transitions..


On 1/9/20 11:15 AM, Turner, Ryan H wrote:
All:

We've been an Aruba shop for a very long time and have around 10,000 access 
points.  While every relationship with vendors have their ups and downs, my 
frustration with the Aruba is finally peaking to the point that I am 
considering making the enormous move to choose a different vendor.  The biggest 
reason is with the 8.X code train, and bugs that we just don't consider 
appropriate to use in production.  It has been one thing after the other, and 
my extremely talented and qualified Network Architect (Keith Miller) might as 
well be on the Aruba payroll as much work as he has been doing for them to 
solve bugs.  Just when we think we have one fixed, another one crops up.

The big one as of late is with 515s running 8.5 code train.  We have them 
deployed in one of our IT buildings.  Periodically, people that are connected 
to these APs in the 5G band will stop working.  To the user, they are browsing 
a site, then it becomes unresponsive.  If they are on their phone, they will 
disconnect from wifi and everything works fine on cell.  Nothing makes an 
802.11 network look worse than switching to cell and seeing a problem resolve.  
Normally, if the users disconnect then reconnect, their problems will go ahead 
(but I think they end up connecting in the 2.4G band).   We've been working on 
this problem with them for months.  It always seems as though we have to prove 
there is a real issue.  I'm fed up with it.  We are a sophisticated shop.  If 
we have a problem, 9 times out of 10 when we bring it to the vendor, it is a 
real problem.  I'm extra frustrated that due to issues we've seen in ResNet on 
the 8.3X train that we don't want to abandon our 6 train on main campus.  To 
Aruba's credit, we purchased around 1,000 515s last year (I think around 
February).  When they could not get good code to support them on, Aruba bought 
back half of them.  I asked for them to buy back half because I thought for 
sure with the 315s that we would have instead, the issues would be fixed by the 
time the 315s ran out.  Not looking to be the case.

So, with that rant over, we are seriously considering looking to move away from 
Aruba (unless they get their act together really soon).  There are other bugs 
I'm not even mentioning here.  For those of you that made the switch to another 
vendor, I would be curious how long the honeymoon lasted, what were your 
motivators, and were you happy with the overall results?  Of course, this is a 
great opportunity to plug your vendor.  As I see it, we have 3 choices  
Something from Cisco (we had Cisco long ago and dumped them for bugs), 
something from Extreme (we are a huge Extreme shop so this makes sense), 
something from Juniper (Mist).

Thanks,
Ryan Turner
Head of Networking
The University of North Carolina at Chapel Hill
+1 919 445 0113 Office
+1 919 274 7926 Mobile
r...@unc.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community




--

 Mike Davis

 IT - University of Delaware  - 302.831.8756

 Newark, DE  19716 Email da...@udel.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the 

RE: Wi-Fi in the Elevator Car

[Stephen Belcher]

We use Fluidmesh to create a wireless bridge between a base unit at the top of 
the shaft and a mobile unit on top of the car. This setup is used for security 
cameras with no issue. We have tested Wi-Fi and it also works although we don't 
have any in production at the moment. 

It's fairly inexpensive to install so you can run a pilot without a ton of 
spend.

Steve

-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Curtis K. Larsen
Sent: Tuesday, November 5, 2019 1:26 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wi-Fi in the Elevator Car

Hello,

Has anyone designed Wi-Fi specifically to work in the elevator car itself?  
Willing to share your experience?

Thanks,

--
Curtis K. Larsen
Senior Wi-Fi Network Engineer
University of Utah Network Services
CWNA, CWDP, CWSP, CWAP
Office 801-587-1313


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] My personal training recommendation for Devin Akin's wireless training classes

[Stephen Belcher]

Thanks Ryan. The suggestion is much appreciated!

Sent from Nine

From: "Turner, Ryan H" 
Sent: Friday, October 25, 2019 4:49 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] My personal training recommendation for Devin Akin's 
wireless training classes

All,

For those of you who’ve been looking for extremely deep and informative classes 
on wireless tech, I want to personally pass along my recommendation to consider 
Devin Akin with divdyn.com.  I’ve now brought him in for 3 weeks of training 
(over 2 years) to teach courses on CWNA/CWSP/CWAP/CWDP.  Devin recently helped 
out the educause wireless CG on the Wifi6/5G session we had.  This is the guy 
that cofounded the CWNP program.

Ryan Turner
Head of Networking
The University of North Carolina at Chapel Hill
+1 919 445 0113 Office
+1 919 274 7926 Mobile
r...@unc.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Eduroam Go-Live Verbiage/Notification to Customers

[Stephen Belcher]

This was our initial announcement:

WVU joins eduroam; global Wi-Fi service helps educators, researchers

West Virginia University is now offering eduroam, a secure and worldwide 
roaming access service that lets educators, researchers and others in higher 
education instantly log on to Wi-Fi at participating schools.

The service went live Monday and is now available in all University-owned 
buildings except residence halls. Tim Williams, director of telecommunications 
and networking for Information Technology, said eduroam was requested by 
faculty members and will benefit those who travel to other universities to 
collaborate.

Eduroam lets students, researchers and staff from the participating 
institutions connect to the Internet simply by powering up their devices and 
looking for active networks. Select "eduroam" and enter the email address that 
incorporates your MyID user name.

Visitors to the Morgantown, WVU Tech and Potomac State campuses can enter their 
credentials from their home institutions and likewise have immediate access.

Williams said the partner schools provide authentication of those credentials. 
That means visiting instructors and researchers no longer need to seek a 
sponsor and obtain a temporary MyID credential from WVU.

Dean of Libraries Jon Cawthorne discovered eduroam on a trip to London in 
February.

"The minute you open up your laptop, it recognizes who you are, and it gives 
you access to the networks. Your hosts don't have to go scrounge around for 
guest access and passwords," Cawthorne said. A week after that trip, he went to 
Washington, D.C., and watched as a colleague from Iowa used eduroam.

"All of us were fumbling around trying to get guest access and passwords. It's 
just so convenient in so many ways," he said. "It's usually all these steps to 
get connected, and eduroam just takes those steps away. It is great."

Chief Information Officer John Campbell said the eduroam service aligns with 
several of the University's strategic goals, including the promotion of 
international partnerships in education and the encouragement of 
interdisciplinary activity in research, scholarship and creativity.

For the University to excel in research and innovation, Campbell said, it must 
also have an underlying IT infrastructure that is robust, resilient and 
ever-improving.

Here's how eduroam works: https://www.eduroam.us/

Nearly 150 institutions in the United States and more than 5,500 worldwide are 
already using eduroam. Dozens more in the U.S. are either testing or 
considering the service. To see the list, visit: 
https://www.eduroam.us/eduroam_us_institutions.

For more information, visit https://www.eduroam.org/.


From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Turner, Ryan H
Sent: Monday, October 7, 2019 2:37 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Eduroam Go-Live Verbiage/Notification to Customers

This was the announcement made back in 2014.  We switched to eduroam being the 
primary SSID in 2015.  I didn't check all the links as this is really old (some 
may not work).

https://its.unc.edu/project/eduroam-wi-fi-service-travelling-scholars/


From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Michael Butler
Sent: Monday, October 7, 2019 1:54 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Eduroam Go-Live Verbiage/Notification to Customers

Hello,
I would like to see if anyone here has added Eduroam into production in their 
current wireless environment. If so could you please share the verbiage used to 
communicate to the campus community about this implementation? We are going 
live and just want to see if anyone has a template we can go off of.

Thanks!

Respectfully,

Michael N. Butler
Network Engineer
Office - IT 113C
Phone - 410-677-5355
Salisbury University


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] [Ext] Re: [WIRELESS-LAN] Residential Wireless and Gaming

[Stephen Belcher]

We have 100% wireless residential halls with no ethernet option. We have a 
single AP per room in our traditional residential complexes. We profile gaming 
consoles and hand them a public IP address. We work with the students to make 
sure they are on 5Ghz if their device supports it. We try to minimize any 
interference from other devices in their rooms and their neighbors rooms.

During testing, the user will consistently get between 40Mb and 50Mb download 
and upload speeds. Latency is always less than 20ms.

The gamers still complain about lagging and glitching and rubber banding.

You can provide amazing bandwidth and minimize latency as much as you want, but 
there is nothing you can do about the jitter that is inherent in a Wi-Fi 
network. Especially as groups of people congregate by the elevator (which 
happens to be right outside of this particular student’s room).

As others have pointed out, there is no real fix.

We haven’t decided to let the students plug in yet, but we are discussing it.


/ Stephen Belcher
Director of Network Operations and Telecommunications
WVU Information Technology Services
One Waterfront Place / PO Box 6500
Morgantown, WV  26506

(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>




From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of John Turner
Sent: Tuesday, September 3, 2019 10:45 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] [Ext] Re: [WIRELESS-LAN] Residential Wireless and 
Gaming

Hard core gamers will tell you wired is always better - they will also blame 
latency for their lack of skill ;-)

However you CAN create a low latency small cell environment with hospitality 
AP's, DFS enabled, and a careful 2.4 plan.

In the end you will still have issues with older clients and streaming hogs, 
but it's the best you can do. Yes AX sounds promising but we are years away 
from any meaningful adoption and bug fixes. (AC wave 2 came out 3 years ago...)

On Tue, Sep 3, 2019 at 10:38 AM Biggs, Nathanael 
mailto:nbiggs...@cedarville.edu>> wrote:
High SNR and high RSSI are great, but most of the problems that I've 
experienced with our wireless come down to contention. Even if you've gone to a 
WAP-per-room wireless deployment in residential spaces, chances are you're 
still going to have 5-10 devices in each room.

No matter how close you are to the AP, WiFi is still a contention-bound, 
half-duplex medium. This is exacerbated by everything Dan mentioned, but even 
with great WiFi, you're never going to get the low-latency full-duplex 
experience that you get with a wired connection (assuming that you do Gig-FD to 
your wired ports).

Multiplayer games are really sensitive to latency, so any contention problems 
that automatically cause a device to back off from transmitting and wait for 
airtime could cause the problems you mentioned.

802.1ax is supposed to help a lot with this by breaking channels up in to 
sub-channels and scheduling airtime more effectively, but this will only work 
if every client that's talking has a fully-implemented, compliant AX chipset. 
No matter how up to date your AX WAP is, as soon as a legacy client chimes in, 
you're back to the contention-bound dark ages.

This isn't to say that it's impossible to achieve performance sufficient for 
gamers on WiFi, but there are some physical limitations to the medium, 
especially when there's more than one device transmitting.

[https://www.cedarville.edu/~/media/Images/Email/2column-CU.png?ver=201705150925]
Nathanael Biggs
Network Analyst
Information Technology
Adjunct Professor
School of Business Administration
Cedarville University
o:
937-766-7905
www.cedarville.edu<https://www.cedarville.edu/>
[https://www.cedarville.edu/~/media/Images/Email/2column-tagline.png?ver=201705150925]
[https://www.cedarville.edu/~/media/Images/Email/email_twitter-22px.png?ver=201705150925]<https://twitter.com/cedarville>
  
[https://www.cedarville.edu/~/media/Images/Email/email_youtube-22px.png?ver=201705150925]
 <https://www.youtube.com/user/cedarvilleu>   
[https://www.cedarville.edu/~/media/Images/Email/email_facebook-22px.png?ver=201705150925]
 <https://www.facebook.com/cedarville>   
[https://www.cedarville.edu/~/media/Images/Email/email_linkedin-22px.png?ver=201705150925]
 <https://www.linkedin.com/in/nathanael-biggs-86595125/>   
[https://www.cedarville.edu/~/media/Images/Email/email_instagram-22px.png?ver=201705150925]
 <https://www.instagram.com/cedarville/>


On Tue, Sep 3, 2019 at 10:19 AM Dan Lauing 
mailto:lau...@mc.edu>> wrote:
Tom,

Absolutely. And, this isn't meant to be rude, because we are going through the 
same issues currently, but the only fix is better wireless.

On the other hand, when students play from these consoles, they're really 
setting your team up behind the eight ball. These devices love the 2.4 spectrum 
and in dorms like ours (ran

RE: [WIRELESS-LAN] Site Survey software

[Stephen Belcher]

+1 for Ekahau with sidekick.

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Lee H Badman
Sent: Wednesday, August 21, 2019 11:46 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Site Survey software

Second GT’s comments, but would also suggest looking at iBwave. Unfortunately, 
the AirMagnet survey product is somewhat stagnated but was awesome when kept 
current. And… TamoSoft is in the game as well. That’s pretty much the market at 
this point.

Lee Badman | Network Architect (CWNE#200)
Information Technology Services
206 Machinery Hall
120 Smith Drive
Syracuse, New York 13244
t 315.443.3003   f 315.443.4325   e lhbad...@syr.edu w 
its.syr.edu
SYRACUSE UNIVERSITY
syr.edu

From: The EDUCAUSE Wireless Issues Community Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of GT Hill
Sent: Wednesday, August 21, 2019 11:41 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Site Survey software

The software most predominant in the industry is from Ekahau. Most of us that 
do site surveys professionally use an Ekahau sidekick (hardware) in conjunction 
with the software.

If you decide to purchase it feel free to reach out to me. A friend of mine is 
a reseller for ekahau and treads people quite fairly.

GT Hill
CWNE #21

On Wed, Aug 21, 2019 at 10:26 AM Rick Brown 
mailto:r...@ncsu.edu>> wrote:
We plan to begin evaluating site survey software.  I was wondering if anyone 
who has gone through this process
already would be willing to share their opinions on the various software they 
looked at.  On list or direct email.

Thanks!


Rick
--
[cid:image001.png@01D55817.AA5ECF90]

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Re: [WIRELESS-LAN] Photos of outdoor APs on building

[Stephen Belcher]

I will run out and take some pictures today. We haven’t been worried about 
aesthetics as much as coverage. Generally, people don’t see them at all even if 
it’s obvious to us.

Also, we are looking at the below pedestals for some new buildings and in areas 
where trenching is easy and the pedestals can be hidden in landscaping. Looks 
like a great option for hiding APs in the open.

http://oberoninc.com/index.php?option=com_content=article=4561=399

Steve


/ Stephen Belcher

Assistant Director of Network Operations
WVU Information Technology Services

One Waterfront Place / PO Box 6500

Morgantown, WV  26506



(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of "Blasingame, Bob" 
<blasinga...@xavier.edu>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Date: Tuesday, May 8, 2018 at 9:25 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] Photos of outdoor APs on building

Greetings,

We are upgrading our outdoor wireless APs to Cisco 1562s and want to move the 
mount locations from roof top down to ground level; approx. 10-15 feet up on 
walls.

Unfortunately, we are getting pushback that, aesthetically, this is not going 
to be allowed, even with camouflaging of the AP.

We have now ben tasked with providing photos of outdoor APs in use on other 
campuses.  Thirty minutes on Google showed that this was not an easy thing to 
find, so we are wondering if anyone has photos of outdoor APs on their campus 
buildings that they would be willing to share. Preferably, Cisco 1562s, but 
anything to show that other universities are willing to bend a little on looks 
to gain wireless coverage.

If you have any information on how you handled this dilemma, that would be 
appreciated as well.

Thanks for your time,

Bob


Bob Blasingame
Network and Communications Engineer
IT Infrastructure
Xavier University
513-745-4899
Get Technical HELP anytime!<http://www.xavier.edu/ts/helpdesk/>
[cid:image001.gif@01D3E6AD.E3279870]




** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] More client weirdness

[Stephen Belcher]

Sounds like the code is just plain buggy. Let me know if the 702w swap fixes 
the issue.

For reference, here is the specific bug we ran into:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi84734/?rfs=iqvred

*Apr 4 00:46:45.487: decrypt err vlan 1 num 1 key 989AECF64E247F028x dest vlan 
0 cl 0 pakv 0
*Apr 4 00:46:45.487: Client: 3052.cbea.2be7 KT: 200 DE-0 D-180 S-112 aid 14
*Apr 4 00:46:45.487: decrypt err vlan 1 num 1 key 989AECF64E247F028x dest vlan 
0 cl 0 pakv 0
*Apr 4 00:46:45.487: Client: 3052.cbea.2be7 KT: 200 DE-0 D-180 S-112 aid 14
*Apr 4 00:46:45.671: decrypt err vlan 1 num 1 key 989AECF64E247F028x dest vlan 
0 cl 0 pakv 0
*Apr 4 00:46:45.671: Client: 3052.cbea.2be7 KT: 200 DE-0 D-180 S-66 aid 14

Steve

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
(681) 214-3389 mobile


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gray, Sean
Sent: Monday, April 9, 2018 11:14 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] More client weirdness

Hi Stephen,

I just replied to Tristan with the following – “So the problem with the 
specific student I mentioned seemed to resolve itself. Our latest issue, that 
seems to again only impact the 702w involves  a couple of MacBook Air users, 
running either Sierra or High Sierra. A debug shows that on occasion when 
trying to connect to a.1x network they make it as far as the DHCP required 
state and then never request an IP. They hit the timeout, the WLC deletes the 
client and the dance begins again.”

So unless the students aren’t complaining and choosing to use our Guest network 
in the limited areas where 702ws are installed, our issue is now isolated to 
MacBook Airs connecting to .1x networks via a 702w AP. On the plus side we 
don’t have “Allow AAA Override enabled” on our Student WLAN, so at least we 
know that isn’t part of the problem.

As this seems to be a severely isolated issue our next move will be to swap out 
the 702w in the area reporting problems.

Thanks

Sean

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Stephen Belcher
Sent: April-09-18 6:31 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] More client weirdness

We hit the same bug on 8.3.133.0 code.

After running a debug code on the 702w (and with the help of a very nice 
student), Cisco determined it was change of auth that was causing the issue. We 
disabled “Allow AAA Override” on the WLAN which seems to have mitigated the 
issue. Fortunately, we aren’t using the AAA Override at this time.

Cisco hasn’t sent us a bug number and it’s not showing in the open Caveats yet.

If I get more info from Cisco I will send it to the group. Let me know if you 
have any questions.

Steve

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
(681) 214-3389 mobile

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tristan Gulyas
Sent: Sunday, April 8, 2018 10:03 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] More client weirdness

Hi all,

We've hit this issue as well.  Ever since moving from 8.3.112.7 to 8.3.135.2.

What we see:

* Devices with the Killer NIC 1535 authenticate but can't pass traffic.
* Apple devices will connect, pass traffic for a while, then go dead.

We believe we may have seen this on a 1532 series AP as well.

Debugs don't seem to give us much.

3702i, 3802i appear to be unaffected.

Cheers,
Tristan
--
TRISTAN GULYAS
Senior Network Engineer

Technology Services, eSolutions
Monash University
738 Blackburn Road
Clayton 3168
Australia

T: +61 3 9902 9092
M: +61 (0)403 224 484
E: tristan.gul...@monash.edu<mailto:tristan.gul...@monash.edu>
monash.edu<http://monash.edu/>

On 1 Feb 2018, at 8:40 am, Gray, Sean 
<sean.gr...@uleth.ca<mailto:sean.gr...@uleth.ca>> wrote:

Yep, I noticed this too. Unfortunately we jumped onto 8.3.133.0 prior to the 
discovering of the catastrophic bug. Hopefully they publically release a fixed 
version soon.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kitri Waterman
Sent: January-31-18 1:09 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] More client weirdness

This sounds like a specific client issue but TAC does have warning out about 
any 8.3.13x code: 
https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html#anc9

You can request the 8.3.133.10 escalation code and also sign up for the 8.3MR4 
Interim code.

Best of luck,

Kitri Waterman
Network Ar

RE: [WIRELESS-LAN] More client weirdness

[Stephen Belcher]

We hit the same bug on 8.3.133.0 code.

After running a debug code on the 702w (and with the help of a very nice 
student), Cisco determined it was change of auth that was causing the issue. We 
disabled “Allow AAA Override” on the WLAN which seems to have mitigated the 
issue. Fortunately, we aren’t using the AAA Override at this time.

Cisco hasn’t sent us a bug number and it’s not showing in the open Caveats yet.

If I get more info from Cisco I will send it to the group. Let me know if you 
have any questions.

Steve

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
(681) 214-3389 mobile


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tristan Gulyas
Sent: Sunday, April 8, 2018 10:03 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] More client weirdness

Hi all,

We've hit this issue as well.  Ever since moving from 8.3.112.7 to 8.3.135.2.

What we see:

* Devices with the Killer NIC 1535 authenticate but can't pass traffic.
* Apple devices will connect, pass traffic for a while, then go dead.

We believe we may have seen this on a 1532 series AP as well.

Debugs don't seem to give us much.

3702i, 3802i appear to be unaffected.

Cheers,
Tristan
--
TRISTAN GULYAS
Senior Network Engineer

Technology Services, eSolutions
Monash University
738 Blackburn Road
Clayton 3168
Australia

T: +61 3 9902 9092
M: +61 (0)403 224 484
E: tristan.gul...@monash.edu<mailto:tristan.gul...@monash.edu>
monash.edu<http://monash.edu/>

On 1 Feb 2018, at 8:40 am, Gray, Sean 
<sean.gr...@uleth.ca<mailto:sean.gr...@uleth.ca>> wrote:

Yep, I noticed this too. Unfortunately we jumped onto 8.3.133.0 prior to the 
discovering of the catastrophic bug. Hopefully they publically release a fixed 
version soon.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kitri Waterman
Sent: January-31-18 1:09 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] More client weirdness

This sounds like a specific client issue but TAC does have warning out about 
any 8.3.13x code: 
https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html#anc9

You can request the 8.3.133.10 escalation code and also sign up for the 8.3MR4 
Interim code.

Best of luck,

Kitri Waterman
Network Architect/Engineer
Enterprise Infrastructure Services (Networks)
Western Washington University
360.650.4027
kitri.water...@wwu.edu<mailto:kitri.water...@wwu.edu>


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of "Gray, Sean" <sean.gr...@uleth.ca<mailto:sean.gr...@uleth.ca>>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Wednesday, January 31, 2018 at 10:34 AM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] More client weirdness

Hi Craig,

Sorry I should have mentioned that, our WLC is a 5520 running 8.3.133.0 code

Sean

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Craig Eyre
Sent: January-31-18 11:30 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] More client weirdness

Sean,


What version of controller software are you running?


Craig Eyre

On Wed, Jan 31, 2018 at 11:17 AM, Gray, Sean 
<sean.gr...@uleth.ca<mailto:sean.gr...@uleth.ca>> wrote:
Hi Everyone,

I just wanted to throw this weirdness out to the group to see if anyone has 
experienced the same issue and has found a solution or work around.

We have a student on campus who intermittently cannot connect to our 802.1x 
Student WLAN when trying to connect to a Cisco 702w access point installed 
nearby. They can connect to our open Guest WLAN. I should say that they are 
fail to connect to Student more times than they succeed when in their Student 
Residence. On campus they are able to connect to Student.

I recently brought them down to my office to have them try and connect to a 
702w that I had set up specially for the purpose of this test.

Client Details:


• Acer Aspire F5-571T Laptop

• NIC: Qualcomm Atheros QCA9377

• Driver Version 12.0.0.309

• O/S: Windows 10 Home

Client has Symantec Anti-virus installed

Windows updates and driver versions were all validated.


During testing I noticed that the client completes the AUT

RE: [WIRELESS-LAN] Degree Analytics?

[Stephen Belcher]

We have had a few conversations with them but no demo. Basically they use Wi-Fi 
logs along with IDM and SIS information to generate classification tables for 
student behaviors, then calculate student percentage in each category using 
some type of statistical algorithm. They can then feed this information into 
your student success system. My opinion is that there are legal/privacy 
concerns not to mention PR issues with this type of data mining.

In addition, the U.S. Supreme Court just heard arguments about whether people 
have a reasonable expectation of privacy in their location for a lengthy period 
of time based on cell site information. The analysis in this case will likely 
apply to this type of situation. Currently, the law states that there’s no 
reasonable expectation but, at least according to some commentators, the 
justices seemed to be concerned by this.

Here’s an article discussing the case: 
https://www.nytimes.com/2017/11/29/us/politics/supreme-court-digital-privacy.html


Below are the requirements that we gleamed from the calls:

Wireless data:

  *   Historical syslogs - multiple formats we can receive this
 *   Router MAC Address/ID, timestamp, User MAC Address/ID, User Identity 
(if available)
 *   Preferably 6+ months of historical data
  *   Map of network access points
 *   Router ID, building name, Router name (optional), Longitude & Latitude 
(preferred, but optional)
IDM:

  *   IDM - historical device ownership, needs to go back as far as network 
syslogs
 *   Device MAC address, student ID (or other identifier)
Banner:

  *   Demographic information
 *   Profile features (not limited to): Home state, High school GPA, SATs, 
Ethnicity, Gender, Adult learner or Age, First-gen, Scholarship Amount, Pell 
Grant, Socio-economic class, Degree - Major/Minor, Degree Type - 2 or 4 year, 
Credit Hours, GPA, Transfer Student, Honors, Athlete, University Employment
  *   Class information
 *   Classes: Course name, course times (days of week and hours in day), 
course location (historical for length of syslog history)
  *   Student schedule
 *   Student class schedule (historical over length of network history): 
course name, semester, course ID, drop/add history (optional)


Feel free to contact me directly if you want to discuss.

Steve

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
(304) 293-8440 office
steve.belc...@mail.wvu.edu


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike Atkins
Sent: Tuesday, January 2, 2018 9:57 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Degree Analytics?

Did anyone talk to Degree Analytics at Educause?  Or better yet, has anyone 
attempted a demo yet?  Our library seems interested in Degree Analytics and I’d 
like to have at least a little information about how the system works and what 
the requirements are before engaging a serious discussion with customers.  Our 
library says they specialize in wireless networking analytics but the website 
makes no mention of wireless.

https://www.degreeanalytics.com/






Mike Atkins
Network Engineer
Office of Information Technology
University of Notre Dame
Phone: 574-631-7210


   .__o
   - _-\_<,
   ---  (*)/'(*)

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Big flaw in WPA2

[Stephen Belcher]

>From our Cisco SE:


The fix for IOS based AP’s (802.11ac Wave 1 or older) has been posted 
(8.3.130.0)
The fix for ClickOS based AP’s (All 802.11ac Wave 2 AP’s  [1800, 2800 3800 
series]) is in finalization testing and should be posted within a few days. 
(8.3.13x.0) same for 8.2/8.4/8.5
The fix for 8.0 is being written now and ETA will be provided shortly.



/ Stephen Belcher

Assistant Director of Network Operations
WVU Information Technology Services

One Waterfront Place / PO Box 6500

Morgantown, WV  26506



(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Chuck Anderson <c...@wpi.edu>
Sent: Monday, October 16, 2017 3:07:55 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

It isn't a design flaw.  It is an implementation flaw that everyone did wrong 
because the spec didn't address the need to be careful about it.

Read this Aruba FAQ, it is helpful to address these sorts of questions:

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-007_FAQ_Rev-1.pdf

On Mon, Oct 16, 2017 at 06:57:57PM +, Mike Cunningham wrote:
> If this is a flaw in the design of the WPA2 protocol isn't the fix going to 
> need to be made on both sides of the communication link?  Access points will 
> all need to be updated but also all client wifi drivers are going to need to 
> be updated on all wifi enabled devices that support WPA2, right?
>
> Mike Cunningham
>
>
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Stephen Belcher
> Sent: Monday, October 16, 2017 10:40 AM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> Subject: Re: [WIRELESS-LAN] Big flaw in WPA2
>
>
> >From Cisco:
>
>
>
> https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa
>
>
>
>
>
> / Stephen Belcher
>
> Assistant Director of Network Operations
> WVU Information Technology Services
>
> One Waterfront Place / PO Box 6500
>
> Morgantown, WV  26506
>
>
>
> (304) 293-8440 office
> (681) 214-3389 mobile
> steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>
>
> 
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
>  on behalf of Richard Nedwich 
> <rich.nedw...@brocade.com<mailto:rich.nedw...@brocade.com>>
> Sent: Monday, October 16, 2017 10:34:43 AM
> To: 
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> Subject: Re: [WIRELESS-LAN] Big flaw in WPA2
>
> Ruckus is providing a response today.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Big flaw in WPA2

[Stephen Belcher]

>From Cisco:


https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171016-wpa



/ Stephen Belcher

Assistant Director of Network Operations
WVU Information Technology Services

One Waterfront Place / PO Box 6500

Morgantown, WV  26506



(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Richard Nedwich 
<rich.nedw...@brocade.com>
Sent: Monday, October 16, 2017 10:34:43 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

Ruckus is providing a response today.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Best Wireless Solution for Residence Hall Rooms

[Stephen Belcher]

We started with an all wireless residence halls concept three years ago and 
will finish the last three (fairly small) installs next summer. We went with 
in-room access points supplemented with APs in common areas. For traditional 
residence halls we went with Cisco 702w initially changing to 1815w access 
points when they became available. For residence halls designed more as a suite 
concept we went with 2800 series access points. We pretty much blast the 5 GHz 
everywhere and disable 2.4 GHz in every other room (with a few exceptions).

We have 6120 beds and the cost per bed for installs was about $370. I will be 
at Educause this year with a poster presentation on wireless dorms. If anyone 
is around stop by and say hi and grab some literature with the cost breakdown 
and FAQs.


/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
(681) 214-3389 mobile


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Umut Arus
Sent: Wednesday, October 11, 2017 11:49 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Best Wireless Solution for Residence Hall Rooms

Hello all,

We have 500 Aruba APs for 3000 students in dorm building hallways however we 
are getting complaint still even if fine tuning because of walls. I think it is 
very contemporary issue for many.

In every room with Aruba solution would be very expensive. We'd like to ask you 
what is your best solution that you have resolved it?

thanks.

--
Umut Arus
System Specialist
Information Technology
Sabancı University

Phone: +90216 483 9172

[Image removed by sender.]
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Plastered buildings

[Stephen Belcher]

John,

We just went through that exact scenario except we had a common hallway. Our 
initial plan was to place WAPs along the middle hallway. We were surprised to 
find zero penetration through plaster walls. Upon further inspection (and a few 
discreet holes) we found the metal lath. Fortunately, we had drop ceilings so 
we ended up installing CAT6 cabling in each room and placing an access point.

That is not an easy situation. Good luck!

Steve
WVU Network Operations

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of John Rodkey 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Tuesday, August 29, 2017 at 12:20 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: [WIRELESS-LAN] Plastered buildings

How do you deal with buildings that have plaster and fine metal mesh enclosing 
them?  We have placed access points on the exterior of the building, but the 
signal isn't getting through.  The rooms all open onto an outside hallway - 
there is no common internal hallway.

John Rodkey
Director of Servers and Networks
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Cisco 3800 Series APs

[Stephen Belcher]

We are currently deploying 1800, 2800 and 3800 series and we are happy with the 
results with one caveat:  We identified a bug where RX-SOP is supposed to be 
supported but it is not working at this time. Bug ID is CSCvf05427. It might 
not be available on the web site until some time next week.

This bug also affects the 1560 series which is imperative for ticket scanning 
at our football stadium.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Eric Glinsky 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Wednesday, July 5, 2017 at 2:22 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] Cisco 3800 Series APs

I also didn’t see the need for 3800s over 2800s. We started deploying 2800s 
last month, having upgraded software to 8.2.151.0 ahead of time. No complaints, 
granted it is summer and they haven’t been used much yet.

Some of the 2800s are replacing 3700s in a gym so we can take advantage of the 
dual-band radio to balance load across more 5 GHz radios.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Brisson
Sent: Wednesday, July 05, 2017 1:48 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco 3800 Series APs

Hi Bryan,

This doesn’t answer your question, but I thought I’d mention that we ended up 
going with the 2800 series APs instead of the 3800s.  Historically we’ve stayed 
in the 3000 series but for the differences between the 2800 and 3800, we 
thought the 2800 was enough for our environment.

Hit me direct if you’d like more info.

-dan


Dan Brisson
Network Engineer
University of Vermont


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> 
on behalf of Bryan Ward 
>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>
Date: Wednesday, July 5, 2017 at 12:07 PM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Subject: [WIRELESS-LAN] Cisco 3800 Series APs

Couldn’t find a recent discussion on the list archives, so I’ll ask my question.

For those of you that have Cisco 3800 series APs in production, how have they 
been working for you recently?
We currently purchase 3700 series APs as our standard for new installs and 
replacement of our 3500 series APs, but are now considering switching to the 
3800 series.
I heard there were a lot of issues with them at first, but was wondering if 
they’re still troublesome now that they’ve been out in the wild for some time.
Also, does anyone currently have issues using Prime to manage them?

Thanks all,

--
Bryan Ward
Network Engineer
Dartmouth College Network Services
603-646-2245
bryan.w...@dartmouth.edu

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
This e-mail message is intended only for the person or entity to which it is 
addressed and may contain CONFIDENTIAL or PRIVILEGED material. Any unauthorized 
review, use, disclosure or distribution is prohibited. If you are not the 
intended recipient, please contact the sender and destroy all copies of the 
original message. If you are the intended recipient but do not wish to receive 
communications through this medium, please so advise the sender immediately. 
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Eduroam adoption (and migration process)

[Stephen Belcher]

That is the same situation with WVU. We maintain WVU.Encrypted for faculty, 
staff and students. We treat those users as “on campus”. 

We treat WVU.Guest and Eduroam as “off campus".


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Fligor, Debbie
Sent: Monday, April 24, 2017 4:38 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Eduroam adoption (and migration process)

I can’t speak for the campuses you named, but we have not switched to eduroam 
as our main SSID, and we have no current plans to. I’m sure someone is happy 
about the branding somewhere, but it’s also for technical reasons. Eduroam, 
like our guest wireless, is routed outside our campus border firewall. When you 
are on our campus's IllinoisNet SSID you are on the campus side of the border 
firewall and have more access to campus resources than you do when you are on 
the eduroam SSID or our IllinoisNet_Guest SSID.  Our campus network design has 
very little internal firewalling - the majority of the protection for offices, 
labs, classrooms, wireless, and anything other than University-wide Admin 
applications is the border firewall. So putting guests on the outside, and 
faculty, staff and students on the inside is important. 

Additionally the firewall for the eduroam network is set up to allow the 
minimum ports required by the eduroam agreement, so that when our faculty, 
staff and students test that something works on eduroam before they travel, 
they are reasonably well guaranteed it will work on any eduroam net anywhere. 
With our change from Meru/Radiator to Aruban/Clearpass last summer, it’s likely 
that it would be much simpler to drop eduroam users that are local onto a 
“different” version of eduroam that was on the campus side of the border 
firewall, but then the user experience on eduroam here would not be the same 
experience as if they were at a different site providing eduroam. Both in what 
ports were allowed in/out of the eduroam network and much more importantly how 
connections to campus resources function for networks off-campus. We want users 
to have a consistent experience with how eduroam works for their use cases, 
regardless of whether they are on our campus or somewhere else.


To answer the other questions, we currently have 3 non-eduroam SSIDs

our main SSID that is inside the campus board firewalls is 802.1x we have an 
open guest SSID that uses the Clearpass guest captive portal system we have a 
devices SSID that is MAC auth but I believe this one is being phased out in 
favor of using features in ClearPass to do something similar. This is mostly 
for gaming consoles and the things that really can’t do 802.1x.


It’s been quite a few years since I ran the wireless network on our campus, but 
I believe I’ve got the current technical details correct, Chuck can correct me 
if I got anything wrong.


-- 
-debbie
Debbie Fligor, n9dn   Lead Network Engineer @ Univ. of Il at 
Urbana-Champaign
email: fli...@illinois.edu 



> On Apr 24, 2017, at 14:18, Marcelo Maraboli  wrote:
> 
> I would like to thank all who responded.
> 
> Everybody who responded is making EduRoam their main SSID
> deprecating their old SSID (MAC or .1x).
> 
> I still wonder why Universities like MIT,Harvard,Stanford and Berkeley
> only use Eduroam as a secondary SSID and still keep their main SSID.
> The only thing I can think of is branding.
> 
> 
> 
> thanks.
> 
> 
> On 4/20/17 6:16 PM, Marcelo Maraboli wrote:
>> Hello everyone.
>> 
>> We are finally adopting EduROAM in our University and we currently have one
>> SSID with MAC-based authentication, so moving to EduROAM is also a 802.1x 
>> upgrade
>> for us as well.
>> 
>> Would you be so kind to respond a couple of questions?:
>> 
>> 
>> If you adopted EduROAM as your primary SSID:
>> - Did you leave an SSID for legacy devices ? (What AUTH mechanism for this 
>> SSID?)
>> - How did you "force-move" your users to EdoROAM from your old SSID ?
>> 
>> If you added EduROAM as just another SSID:
>> - why not adopt EduROAM as your primary SSID ?  (Branding or no interest? )
>> - Is your primary SSID also 802.1x o MAC-based ?
>> - if 802.1x, why have 2 SSIDs with 802.1x ? 
>> 
>> 












**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

[Stephen Belcher]

Excellent! Thank you!

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Walter Reynolds 

Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Tuesday, February 28, 2017 at 7:33 AM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

Sorry this took so long, I just realized I had not sent this out already.
Here is the link to the document on google docs.

https://docs.google.com/document/d/1EmCEYqMeHzfZ73UCm4w1QnXncg8XR1r9JTP1_gPTlTE/edit?usp=sharing
​​
--
Walter Reynolds
Principal Systems Security Development Engineer
Information and Technology Services
University of Michigan
(734) 615-9438


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] 2.4GHz - educating end users about interference

[Stephen Belcher]

That’s brilliant and disgusting all at the same time. It gives viral marketing 
a whole new meaning. And I bet it’s effective!

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Dexter Caldwell
Sent: Wednesday, February 22, 2017 3:43 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

I hate to bring this up, but we have something all the Flusher.
http://www.furman.edu/sites/marketing/services/Pages/communications.aspx


It gets posted right above bathtroom urinals at eye level and on the inside of 
stall doors or on the wall above the toilets.   Students are paid to deliver 
it.  There are already little paper hold clips on the wall so they take one 
down and post the new one quickly.  Rather effective I might say.  It’s a 
narrow reader that gives you notice about upcoming events and such.   I’ve 
never seen one being delivered, but they magically show up.

Just saying…

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Danny Eaton
Sent: Wednesday, February 22, 2017 3:27 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

That was my thinking – putting it in each residential college/dorm, graduate 
apartments housing, etc.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Oliver, Jeff
Sent: Wednesday, February 22, 2017 2:13 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

I would love to turn this into a big poster and plaster it all over the campus…

Cheers,
Jeff

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Peter P Morrissey
Sent: Wednesday, February 22, 2017 1:10 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

Me too. Nicely formatted, great graphics, clearly written. Just wondering how 
this would/could be used. Having a hard time imagining most or any users having 
enough interest to read the second line of this, never mind the second page, 
given everything else they are barraged with these days.

Pete Morrissey

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Coehoorn, Joel
Sent: Wednesday, February 22, 2017 10:30 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] 2.4GHz - educating end users about interference

I love the 2nd page with the colored chart and diagram.



[http://www.york.edu/Portals/0/Images/Logo/YorkCollegeLogoSmall.jpg]


Joel Coehoorn
Director of Information Technology
402.363.5603
jcoeho...@york.edu



The mission of York College is to transform lives through Christ-centered 
education and to equip students for lifelong service to God, family, and society

On Tue, Feb 21, 2017 at 10:24 AM, Walter Reynolds 
> wrote:
This is a link to a pdf of what we came up with.

https://drive.google.com/file/d/0B0BKRE3DeEPKb1RWc1BPSkljYUtJZjRGel9icmU3NklJRHRv/view

If the link does not allow you to see it I am attaching the file as well.



Walter Reynolds
Principal Systems Security Development Engineer
Information and Technology Services
University of Michigan
(734) 615-9438

On Fri, Feb 17, 2017 at 11:02 AM, Michael Hulko 
> wrote:
Netscout.. aka Fluke… aka Airmagnet wrote a pretty easy to understand document 
related to interference.


M

On Feb 17, 2017, at 10:44 AM, Jeffrey D. Sessler 
> wrote:

You are fighting a battle that will never be won, and even a stale-mate is 
unlikely.

IMHO, your best bet is to work toward abandoning 2.4. In the early days, we did 
try outreach and education, but there are just too many devices today that use 
2.4, and in many cases, users don’t even know it e.g. Apple’s Airdrop. You can 
minimize some of this by solving the reasons behind some of the interference 
sources i.e. install more WAPs to improve the service, reducing the rogue 
problem. Install residential printers to mitigate the need for student printers.

Most of our residential is now designed around dense 5 GHz, and while 2.4 is 
available, it’s mostly ignored.

Jeff

From: 
"wireless-lan@listserv.educause.edu" 
> 
on behalf of "Gray, Sean" 

RE: [WIRELESS-LAN] Per room wireless

[Stephen Belcher]

We have moved to a per room model for student residence halls. It has worked 
well.

/ Stephen Belcher 
Assistant Director of Network Operations 
WVU Information Technology Services
One Waterfront Place / PO Box 6500
Morgantown, WV  26506

(304) 293-8440 office 
(681) 214-3389 mobile 
steve.belc...@mail.wvu.edu

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Michael Blaisdell
Sent: Friday, November 04, 2016 10:48 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Per room wireless

How many on the list have moved to a per room model for wireless for student 
residence halls?



Michael Blaisdell
Director of Network Services
IT Services
Learning Commons/Library
Saint Francis University
117 Evergreen Drive
Loretto, PA  15940
814-472-3242
http://www.francis.edu
The best way to predict the future is to invent it. Alan Kay

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Question about Cisco 1810w APs in residential buildings

[Stephen Belcher]

We just finished up our residential deployment this past summer. One Cisco 702 
AP in every room (the 1810s weren't ready when we deployed). We pulled the 
existing cable up to around 6.5 ft and mounted the AP so it wouldn't get 
damaged (as much). We disable the Ethernet ports but the mounting bracket 
covers them just in case. We turned 2.4 Ghz off in every other room and added 
2700 series APs to the common areas.

In total we have around 2620 702s deployed.

Our Palo Alto firewalls don't support UPnP while NATting so we use ISE to 
profile the gaming devices and give them a public IP address. We have a few 
sporadic issues but it's fairly typical client-side driver problems.


/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
One Waterfront Place / PO Box 6500
Morgantown, WV  26506

(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ian Lyons
Sent: Thursday, October 27, 2016 10:01 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Question about Cisco 1810w APs in residential 
buildings

Due to the room density and building materials (cement block) we put one in 
each room.

We got a good deal from Cisco and the cost was about 1/3 of a full power AP.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Thomas Carter
Sent: Thursday, October 27, 2016 9:59 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Question about Cisco 1810w APs in residential 
buildings

What's the density of these? With 700 beds, it doesn't sound like one AP per 
room. Just curious about the trade-offs in cost vs coverage compared to more 
traditional APs.

Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu<http://www.austincollege.edu/>
[http://www.austincollege.edu/images/AusColl_Logo_Email.gif]

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Brisson
Sent: Thursday, October 27, 2016 8:07 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Question about Cisco 1810w APs in residential 
buildings

We've deployed around 150 or so in one complex although we're fortunate to have 
them mounted just to the left or right of the door at about waist level.  Still 
have the concerns about getting knocked around with furniture, but so far so 
good.

Hopefully the DNS discovery issues have been resolved as we have another 180 or 
so going in this winter into a new 700 bed building.

-dan



Dan Brisson
Network Engineer
University of Vermont

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ian Lyons
Sent: Thursday, October 27, 2016 8:52 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Question about Cisco 1810w APs in residential 
buildings

They are designed to cover the room itself.  Rollins has found that it does do 
that, even with the furniture covering it.

It actually helps limit the signal propagation (2.4).

Ian

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hector J Rios
Sent: Thursday, October 27, 2016 8:36 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] Question about Cisco 1810w APs in residential 
buildings

One of my biggest concerns has always been the height at which these WAPs get 
installed (as you mentioned, 1.5ft). In most of our residential buildings, the 
data ports happen to be right behind desks that are provided by ResLife and the 
desks have covers in the back that essentially would bump against the WAP. Not 
to mention the fact that as furniture gets moved around, there is always the 
potential of knocking down the WAP. I wonder how has already deployed them in a 
similar fashion and what the experience has been?

If you end up using them, I'd be curious to see how things work out.

Best,

Hector Rios
Louisiana State University

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Devyn Moore
Sent: Tuesday, October 25, 2016 9:49 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] Question about Cisco 1810w APs in residential buildings

All,

Our housing department wants us to look at these for wide-scale deployment in 
11 residence halls within the next 2-3 years due to 

RE: [WIRELESS-LAN] About the Guest wireless network and account

[Stephen Belcher]

We are doing the same as Tim using ISE except we give the user five days of 
access. We also have a sponsor portal that some of our trusted LAN Managers can 
access to give certain guest users access for up to 45 days. This covers large 
camps and conferences.

We treat all wireless as outside entities and block all peer-to-peer. We are 
also very happy with the solution.

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
One Waterfront Place / PO Box 6500
Morgantown, WV  26506

(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Tyler
Sent: Thursday, September 08, 2016 2:19 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account

We wanted to eliminate the administrative hassle of guests so we followed a 
model which I think many instructions are following to some degree.   We 
created a self-registration portal that is on an open SSID.  They register and 
are sent an sms and email message which contains a password code to get on for 
24 hours.   It has worked very well and I now have minimal involvement.   We 
think it is reasonable in terms of CALEA in case anyone really cares about that.

We pretty much just ask for full name, cell number, and personal email address. 
  We block our domain addresses from using it.  We do restrict it to certain 
protocols and a bandwidth limit.   In over a year, I  only had one protocol 
complaint which I simply added to the capabilities since I agreed it was a 
reasonable one to allow.   Given how few complaints I have had and how many 
connect to it, I am happy with it as a solution.

Tim

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>]
 On Behalf Of Linchuan Yang
Sent: Thursday, September 08, 2016 1:02 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] About the Guest wireless network and account

Dear All

We are doing research for the wireless Guest network. Currently, we create temp 
employee account for the Guests in our AD and using a separate captive portal 
for the Guest login. For the group Guests (e.g. external event), we allow them 
to share the same guest account.

However, we found that it’s not easy to manage and track the temp wireless 
guest accounts. Could you please share how your institute setup and manage the 
wireless guest network and the accounts?

​Thank you, and have a good afternoon.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.educause.edu%2fgroups%2f=01%7c01%7csteve.belcher%40MAIL.WVU.EDU%7c939723117cc440eb6ced08d3d814b869%7ca7531e183e5d4145ae4c336d320ca7e4%7c0=ond7PrHON6dqCmjS3wtVHXLDg3hJy8DAwxjhp1u34%2fY%3d>.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.educause.edu%2fgroups%2f=01%7c01%7csteve.belcher%40MAIL.WVU.EDU%7c939723117cc440eb6ced08d3d814b869%7ca7531e183e5d4145ae4c336d320ca7e4%7c0=ond7PrHON6dqCmjS3wtVHXLDg3hJy8DAwxjhp1u34%2fY%3d>.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: Cisco ISE

[Stephen Belcher]

We have never had a Cisco engineer recommend WPA2/AES-PSK on an enterprise 
environment. Was it a consultant? If not I would talk to your Cisco SE about 
the bad advice. That type of thinking is archaic.

We have been using ISE for three years at WVU. The initial implementation was 
to replace our ACS servers for RADIUS authentication. We are now using it for 
students to self-register their devices that don’t support 802.1x 
authentication. So far it has worked extremely well. We also use ISE to 
specifically profile gaming consoles and place them on a VLAN with a public IP 
so we don’t have to fight with UPnP using NAT through the firewall.

We just implemented both the guest self-registration and the sponsor portal 
registration which are also working well with the exception of a bug we just 
ran into in the self-registration process after upgrading to 2.1.0.474. The 
self-registration still works but the text message sent to the user is blank 
and the email can’t be read using Apple Mail (it ends up as garbled text). We 
expect a fix in the next few weeks.

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
One Waterfront Place / PO Box 6500
Morgantown, WV  26506

(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu<mailto:steve.belc...@mail.wvu.edu>


From: T. Shayne Ghere [mailto:sgh...@fsmail.bradley.edu]
Sent: Monday, August 1, 2016 10:06 AM
Subject: Cisco ISE

Good morning,

Currently we have a home grown wireless registration system in place that is 
becoming obsolete.  We are getting ready to refresh our Cisco AP’s, and I’m 
writing to see if anyone has any positive/negative issues in using Cisco ISE 
for individual “self” registration on your wireless network.

We also use WPA2/AES Certificate based security, but that is problematic 
because of compatibility issues and devices that have no way of accepting 
certs.   In talking with some Cisco Wireless Engineers, they recommend 
WPA2/AES-PSK but we don’t have the manpower to set that up on every device.   
We also do not NAT any devices.

If you have any suggestions, or comments on using ISE and moving away from 
Certs, I would greatly appreciate them.

Thanks
Shayne

--
T. Shayne Ghere
Bradley University
Wireless/Lan Network Engineer
1501 W. Bradley Ave, Jobst 224A
sgh...@fsmail.bradley.edu<mailto:sgh...@fsmail.bradley.edu>
FBI CA Graduate2011 Alumni
FBI InfraGard Member
--
UPCOMING OUT OF OFFICE
None
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.educause.edu%2fgroups%2f=01%7c01%7csteve.belcher%40MAIL.WVU.EDU%7c3754866688ef445244ee08d3bac8de0e%7ca7531e183e5d4145ae4c336d320ca7e4%7c0=zCgKjQATauS1YY7XErXK9BuG%2fXPY%2fgELLg9bCzh9mOU%3d>.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.educause.edu%2fgroups%2f=01%7c01%7csteve.belcher%40MAIL.WVU.EDU%7c3754866688ef445244ee08d3bac8de0e%7ca7531e183e5d4145ae4c336d320ca7e4%7c0=zCgKjQATauS1YY7XErXK9BuG%2fXPY%2fgELLg9bCzh9mOU%3d>.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: NERCOMP Conference -- Wireless-LAN/NETMAN session summary

[Stephen Belcher]

Just to be on the record, we are an all Cisco shop.

It is true that Cisco has a huge lead in the market share and installation base 
overall but I wonder what it is for higher ed. This is a vastly different 
market. From our experience, Cisco wireless has been built for the very strict 
corporate world and not the Wild Wild West of higher ed.

That being said, they are starting to take notice that all BYOD installs aren’t 
created equal and they are building their wireless APs and controllers around 
that model.

/ Stephen Belcher
Assistant Director of Network Operations
WVU Information Technology Services
One Waterfront Place / PO Box 6500
Morgantown, WV  26506

(304) 293-8440 office
(681) 214-3389 mobile
steve.belc...@mail.wvu.edu

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Osborne, Bruce W 
(Network Services)
Sent: Thursday, March 31, 2016 8:15 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] NERCOMP Conference -- Wireless-LAN/NETMAN session 
summary

“While Aruba is #2, their market share and installed base is but a tiny 
fraction of Cisco’s,…”

Here is an interesting counterpoint. There is a Wi-Fi vendor straw poll on this 
list. Current results list Aruba at 36% (59 votes) and Cisco at 35% (57 votes). 
To me, at least, that does not look like a distant second.

​

Bruce Osborne
Wireless Engineer
IT Network Services - Wireless

(434) 592-4229

LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Jeffrey D. Sessler [mailto:j...@scrippscollege.edu]
Sent: Wednesday, March 30, 2016 11:46 AM
Subject: Re: NERCOMP Conference -- Wireless-LAN/NETMAN session summary

Bruce,

so it stands to reason that the conversation here is going to be predominantly 
Cisco. If you are a customer of the #1 vendor you’ll likely be more open to 
discussing the pain points given management is unlikely to be concerned. If you 
have something else, then it may call into question the decision to go that 
direction. Right or wrong, that’s just how it sees to work.

So sure, I don’t see Aruba customers debating their pain points here, but I do 
see Aruba cheerleading – especially from you.

I’m in a fortunate position of having both in my consortium, and the Aruba folk 
have had to deal with a number of show stopping bugs over the years. So It’s 
not unique to Cisco, but the Cisco people seem more open to sharing – which to 
me is a good thing.

Jeff

From: 
"wireless-lan@listserv.educause.edu<mailto:wireless-lan@listserv.educause.edu>" 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of "bosbo...@liberty.edu<mailto:bosbo...@liberty.edu>" 
<bosbo...@liberty.edu<mailto:bosbo...@liberty.edu>>
Reply-To: 
"wireless-lan@listserv.educause.edu<mailto:wireless-lan@listserv.educause.edu>" 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Wednesday, March 30, 2016 at 4:35 AM
To: 
"wireless-lan@listserv.educause.edu<mailto:wireless-lan@listserv.educause.edu>" 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: Re: [WIRELESS-LAN] NERCOMP Conference -- Wireless-LAN/NETMAN session 
summary

Brian,

Thank you for offending Lee.

This is a WLAN list, not a *Cisco* WLAN list.

Although there are many Aruba customers here, you do not see us debating the 
latest bugs, etc.  Perhaps that is a compliment to Aruba’s Engineering & TAC 
Support teams.

​

Bruce Osborne
Wireless Engineer
IT Network Services - Wireless

(434) 592-4229

LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Brian Helman [mailto:bhel...@salemstate.edu]
Sent: Tuesday, March 29, 2016 2:46 PM
Subject: NERCOMP Conference -- Wireless-LAN/NETMAN session summary

(cross-posted to NETMAN group)

As promised, here is a summary of the combined Wireless-LAN/NETMAN session from 
the NERCOMP Conference last week.  In preparation for these sessions, I review 
the hot topics (based purely on number of comments) from the listservs that 
occurred over the previous year.  I keep a running PowerPoint on these topics 
(1 slide per year).  I’m happy to post that PowerPoint, if there is a good 
place to do it.   I believe DropBox has a bandwidth cap, so I’d prefer not to 
distribute that way.   Also, I tend to avoid vendor-specific topics .. so you 
won’t see the billions of discussions on Cisco WAPs (sorry Lee).

This year I tried to mix up the conversation a bit and gave a quick (10 minute) 
demonstration of the JDSU OLP-820p fiber scope/power meter.   In the session I 
said I thought it was around $7,000 (give or take).  I see it on Amazon for 
$5,132.  While I don’t want to recommend specific products, I would recommend 
acquiring this unit or another that performs the same core functions.  When I 
demo’d my JDSU with an old multimod

RE: [WIRELESS-LAN] Cisco Aironet Series

[Stephen Belcher]

We went the same route. Started with the 3700’s but after deciding that we 
probably would not use the modular slot we switched to deploying 2700’s across 
campus – with the exception of 702w’s for the dorms.

Stephen Belcher | Assistant Director of Network Operations
West Virginia University
steve.belc...@mail.wvu.edumailto:steve.belc...@mail.wvu.edu






From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hector J Rios
Sent: Thursday, August 06, 2015 9:45 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco Aironet Series

I second that. We started deploying 3700’s but we quickly saw that the 
performance of the 2700 was comparable and the savings was worth it. So now 
that is our standard WAP.

Hector Rios
Louisiana State University

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Walter Reynolds
Sent: Thursday, August 06, 2015 6:55 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco Aironet Series

For cost savings as well we are using the 2702's as the primary AP that we 
deploy on campus.



Walter Reynolds
Principal Systems Security Development Engineer
Information and Technology Services
University of Michigan
(734) 615-9438

On Wed, Aug 5, 2015 at 8:14 PM, Tony Juarez 
ajua...@uchicago.edumailto:ajua...@uchicago.edu wrote:
We have started using the 2702i’s in are smaller locations, and use the 3702’s 
on the main campus.


Tony Juarez, CCNP Wireless
Senior Network Engineer - Wireless
IT Services
[banner-a-color-600100percent]
773-702-5592tel:773-702-5592 (Office)
773-230-7923tel:773-230-7923 (Cell)


From: Deshong, Kenneth 
kdesh...@health.usf.edumailto:kdesh...@health.usf.edu
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
WIRELESS-LAN@listserv.educause.edumailto:WIRELESS-LAN@listserv.educause.edu
Date: Wednesday, August 5, 2015 at 3:35 PM
To: 
WIRELESS-LAN@listserv.educause.edumailto:WIRELESS-LAN@listserv.educause.edu 
WIRELESS-LAN@listserv.educause.edumailto:WIRELESS-LAN@listserv.educause.edu
Subject: [WIRELESS-LAN] Cisco Aironet Series

I have a question that I hope someone can help me with.

In the hope of saving money, my boss wants me to look at a cheaper alternative 
to the 3702i in areas that might not need a top of the line Access Point. In my 
comparison, I find the Aironet 2702i to have similar specs minus the 4x4 radio. 
Both support 802.11ac, Client Link 3.0, CleanAir 2.0.  I don’t plan on using 
the Modular slot .

I’ve read from limited sources that say the electrons are the same, and 
performance is neck and neck.  Can anyone debunk that?
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Fortinet-Meru

[Stephen Belcher]

I don't believe you do understand or respect the rules of this forum.

Stephen Belcher
Assistant Director of Network Services
West Virginia University




Sent via the Samsung Galaxy S® 5 ACTIVE™, an ATT 4G LTE smartphone


 Original message 
From: Richard Nedwich rnedw...@merunetworks.com
Date: 07/17/2015 3:26 PM (GMT-05:00)
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Fortinet-Meru

All:

While we understand and respect that this forum exists for Educause 
constituents, without any unsolicited marketing information from vendors, I 
felt the need to comment on the recent Meru Networks acquisition by Fortinet.

I am excited to announce that Meru Networks has now officially been acquired by 
Fortinet.  For more details, you can refer to the Press 
Releasehttp://www.fortinet.com/press_releases/2015/fortinet-closes-acquisition-meru-networks..html.

With all mergers and acquisitions, questions arise.  First, I want to assure 
this community that Meru’s product roadmap and support processes are still in 
place.  We will continue to invest in Meru’s unique “Network In Control” 
platform with Virtual Cell, Channel Layering and SDN Wi-Fi, providing a true 
end-to-end, deterministic, wireless user experience.  And we expect the 
combined company to be only stronger.   Fortinet is an innovation leader, with 
a product and technology focus, a track record of success, a Worldwide customer 
base, and over $1B in annual sales and over $1B in cash with no debt.

Our people, technology and products will begin integrating in the coming 
months, benefitting existing Fortinet and Meru customers, and future customers. 
As we move through the transition, our branding will change immediately, with 
product and solution enhancements coming soon.

Best regards,

Rich Nedwich
Sr. Director, Education Business
Fortinet

If you no longer wish to receive these emails you may unsubscribe at any time 
by sending email to 
unsubscr...@merunetworks.commailto:unsubscr...@merunetworks.com

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.