RE: Requesting arena Wi-Fi feedback

[Yahya M. Jaber]

Hi,

I am looking for a mobile high density solution, I am ordering one Ubiquity 
XG-Base stations as stories say they work well!

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Allen Toms
Sent: Wednesday, March 4, 2020 20:30
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Requesting arena Wi-Fi feedback


Hello Everyone,

Louisiana State University ITS is interested in pursuing an arena Wi-Fi 
solution for the Pete Maravich Assembly Center, our 13,215 seat indoor arena 
used primarily for NCAA basketball, volleyball and gymnastics competitions. We 
are curious to know what other educational institutions have implemented Wi-Fi 
solutions in their arenas of similar size, which provider they chose to go 
with, and how it is working out for them.



A few of the many questions we have include:



--Identification of the similar arena Wi-Fi deployment(s).

--Rough cost of installation?

--Is there an ongoing cost to the arena Wi-Fi provider? How much/month/year?

--Description of the implementation (number and type of AP's, controllers, 
cabling, mounting points, etc.)

--How do customers connect to the arena Wi-Fi?

--Do customers have to download an app on their device?

--Is there a service fee to the customer for any of the services provided? For 
season ticket holders?

--What degree of security (no authentication, splash page requesting what info, 
etc.)?

--Separate network or integrated into campus network?

--How is the arena Wi-Fi traffic drained to the internet?

--What value-added services are being utilized from the arena Wi-Fi solution?

--How is the relevant data compiled and retrieved?

--Did extra personnel need to be hired on to manage the solution?

--Have you seen a notable change in customer feedback after the implementation?

--What elements of the installation went well, what did not?



In summary, we would love to learn any information that you can share, as this 
would be our first foray into arena Wi-Fi.



Thank you in advance!



[Image removed by sender. LSU]

Allen Toms
Wireless Network Manager
Information Technology Services
Louisiana State University
200 Frey Computing Services , Baton Rouge, LA  70803
office 225-578-3763
alt...@lsu.edu | lsu.edu


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass

[Yahya M. Jaber]

Hi,

We were in similar position to provide home like access to the students here.
The way to solve this was to use Cisco 1815 series AP’s as OEAP, this will give 
the user an option to access the AP GUI and create his own SSID “and other 
options” while still being managed by the WLC “having the campus SSID’s also”.

We have looked into many vendors, only Cisco provides this functionality.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-3/b_Cisco_OfficeExtend_Access_Point_/b_Cisco_OfficeExtend_Access_Point__chapter_01100.html

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Craig D Rice
Sent: Wednesday, March 4, 2020 18:19
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass

We are an Aruba shop and are evaluating AirGroup + ClearPass to provide 
students a more home-like experience in their residence halls. That is, we 
would like students to be able to register and see only their registered 
devices.

If a user registers a device in ClearPass, is that device visible to 
non-registered devices (or devices registered to another user) -- even if the 
devices are associated with the same AP?

We have received conflicting answers from our Aruba SEs, account exec, and TAC, 
so we are hoping to learn how to limit device visibility from others who are 
using ClearPass.

Thanks for your advice!
Craig
--

Craig D. Rice
Director of Enterprise Infrastructure | IT
[Image removed by sender. St. Olaf College]
Office: +1-507-786-3631
1510 St. Olaf Avenue Northfield, MN 55057-1097  USA
stolaf.edu



**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Deploying Cisco 9120's with existing APs

[Yahya M. Jaber]

If you have multiple WLC’s, You can assign one WLC for 9120 only and upgrade 
it. I did this for testing at couple of floors.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Becker, Jason
Sent: Thursday, December 12, 2019 16:51
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Deploying Cisco 9120's with existing APs

Looking to deploy some of the new 9120’s and was wondering if anyone has 
deployed these with existing access points(3702’s, 3802’s, and 1815W’s)?  My 
biggest concern is having to move to new code, but I know we all need to 
upgrade at some point.  Any experience good or bad is appreciated.


--
Thanks,
Jason Becker
Network Engineer 3
4480 Clayton Ave, St. Louis, MO 63110
Mail stop 8218-45-1200
•: 314.935.5006 | Ë: 618.363.2900 |  
•:jbec...@wustl.edu




The materials in this message are private and may contain Protected Healthcare 
Information or other information of a sensitive nature. If you are not the 
intended recipient, be advised that any unauthorized use, disclosure, copying 
or the taking of any action in reliance on the contents of this information is 
strictly prohibited. If you have received this email in error, please 
immediately notify the sender via telephone or return mail.

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Wi-Fi in the Elevator Car

[Yahya M. Jaber]

Hi,

I have read it somewhere that leaky cables might work, but didn't test it.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA
 
Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177


-Original Message-
From: The EDUCAUSE Wireless Issues Community Group Listserv 
 On Behalf Of Curtis K. Larsen
Sent: Tuesday, November 5, 2019 21:26
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wi-Fi in the Elevator Car

Hello,

Has anyone designed Wi-Fi specifically to work in the elevator car itself?  
Willing to share your experience?

Thanks,

--
Curtis K. Larsen
Senior Wi-Fi Network Engineer
University of Utah Network Services
CWNA, CWDP, CWSP, CWAP
Office 801-587-1313


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Android 10 Weirdness - Cisco

[Yahya M. Jaber]

Hi,

Here is something I came across.. 
https://community.cisco.com/t5/wireless-and-mobility/transitioning-between-2-4-and-5-0-on-the-same-ssid/td-p/2921943

Hope this helps.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gray, Sean
Sent: Wednesday, October 23, 2019 19:21
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Android 10 Weirdness - Cisco

Hi Gang,

I'm not sure how much of a problem this is on our network, and I haven't spoken 
with Cisco TAC yet. But I wanted to share what I have seen from a client, in 
case anyone else has seen the same issue.

We are running 8.8.125.0 on a HA pair of 5520s

We have an Android cell phone, running Android 10, that is reported to be 
disconnecting from the network. When I run a debug I see the following 
behaviour:


  *   Client associates to an 1815w in Student Residence
  *   Client performs an intra-roam on the AP from 2.4Ghz to 5GHz, or vice versa
  *   WLC sends an EAP-Identity-Request
  *   Client doesn't respond
  *   Client session is timed out and client is de-authed

This dance seems to repeat whenever an intra roam occurs and has only been 
noticed/reported when they are associated to an 1815w
New associations are fine.

Has anyone seen this before?
Could it be related to this being a sleepy client? Client goes to sleep, but 
the WLC fails to correctly define it and responds as if the client is just 
being unresponsive?
Could it be another AireOS bug?
Is this just a client side bug?

Thanks

Sean

Sean Gray | B.Sc (Hons)
Voice, Collaboration & Wireless Network Analyst
ITS, University of Lethbridge


**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: Theater wifi - to have or not to have

[Yahya M. Jaber]

If there is no clear decision, at least have the cabling infrastructure ready.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Community Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Bull, Mary
Sent: Tuesday, October 22, 2019 19:34
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Theater wifi - to have or not to have

Hello all,

I’m wondering if anyone here has dealt with a decision on wireless in the 
theaters, concert halls, or recital halls on their campus. We have a new arts 
complex coming on line in the next two years and there’s no clear direction 
from faculty on whether wireless for the audience is desirable. The previous 
main theater, and other currently used theaters on campus, did/do not have full 
connectivity for the audience (just a few aps tacked on the walls that were 
useless when the room was full). Facilities planning is favorable toward 
building it in, so I’d prefer that too, especially since it would be much 
harder or impossible to install if the faculty changes their mind in a few 
years once the building is complete. However, I’m not sure whether there is 
really an expectation from the audience that they should have wifi when they 
attend a show or concert.

Has anyone dealt with this on their campus? What influenced your choice?

Mary Bull
William and Mary
757-221-2491
mb...@wm.edu

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**
Replies to EDUCAUSE Community Group emails are sent to the entire community 
list. If you want to reply only to the person who sent the message, copy and 
paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

RE: [WIRELESS-LAN] Chromecast on Residence Hall Network

[Yahya M. Jaber]

Hi,

I am doing something like this for our schools using ActivConnect…we have Cisco 
gear and am planning to use mDNS LSS feature so the service advertisement will 
be location based…I don’t know if Aruba has such thing.

HTH.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Adam Forsyth
Sent: Wednesday, September 5, 2018 05:04
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Chromecast on Residence Hall Network

Does anyone have a good solution for managing student Chromecasts on their 
residence hall network?  The problem that we're running into is that I think 
there is some limit to the number of chromecasts that will appear on the list 
when you try to select a device to cast to.  The result is that some students 
can see their chromecast, but other people can just see a bunch of other 
chromecasts but theirs is not on the list.

We are transitioning from an HP MSM wireless network to an Aruba wireless 
network. This problem is getting worse over time as we move to more Aruba AP's 
because the MSM's were configured with a separate wireless subnet for each 
building.  That limited the number of chromecasts on each network and increased 
a user's chance of seeing theirs.  As we move to Aruba, all of traffic is 
tunneled back to the controller and all of the users are on a single subnet.  
An elegant solution is to us ClearPass as the NAC for the network and then let 
users set up their own Air Groups then their devices see each other and no one 
else's.  This also solves the problem that there is nothing preventing one user 
from streaming to another user's chromecast.  We use Bradford Networks Network 
Sentry as our NAC, however, and switching to a different NAC isn't in the cards 
as a near term solution anyway.  Network sentry doesn't provide any way to 
manage air groups.

When we first set up our Aruba controller the chromecast traffic was blocked by 
default, and I worked with support to get an Air group set up tohave that 
traffic sent everywhere.  I was wishing for some way to make an air group per 
building or per some group of AP's that we'd create.  That would mimic the 
imperfect but better solution that we've had with our MSM AP's.  Support 
couldn't seem to come up with that sort of a solution for me.  I'm not sure if 
that's not possible, or if I simply should have kept escalating the ticket 
until I found someone that could help make that configuration.

I'm wondering if any other Aruba users out there have found a solution to this 
issue that doesn't involve also being Clear Pass customers.

--
Adam Forsyth
Director of Network and Systems
Luther College Information Technology Services
700 College Drive
Decorah, IA 52101
563-387-1402
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Wireless Only in Student Housing?

[Yahya M. Jaber]

Hi,

I started doing this as a test  last month 1810W AP’s with Cradle, here are my 
findings so far:


-  No extra installation costs due to the cradle, it looks nice.

-  4 extra ports with PoE out for the phone. Which can be configured 
individually.

-  Ability to have a local SSID configured by the user “just for the 
sake of any device that won’t work on the WLC SSID”.

Things to consider:

-  The AP and the clients should be on the same VLAN so the user can 
access the AP and configures the local SSID.

-  A bug I faced when I convert the AP to OEAP mode which disables the 
CDP and uses LLDP, I need the OEAP feature to use the local SSID.

-  Power requirements for 1810W is PoE+ to run the PoE out port, which 
is strange, as the older models use PoE 702 and the newer ones use PoE 1815! So 
you might need to consider buying the power adapter along with the AP.

-  Make sure to disable DTLS on the AP when converting it to OEAP as it 
will kill the throughput due to encryption/decryption.

Other than that it seems like the right choice.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Wurst
Sent: Friday, August 24, 2018 21:12
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless Only in Student Housing?

Hi All,

We are looking into building a new student housing building and are considering 
going Wifi only for network connectivity. We were wondering if anyone else has 
gone the route of only allowing network connectivity via wireless. If so, can 
you share your experience, lessons learned, and advice.

Thank you,

Dan
--
Daniel Wurst
Network Engineer
Denison University
wur...@denison.edu
740-587-6229

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: eduroam ssid on RTS

[Yahya M. Jaber]

Hi Nancy,

To be exact, what kind of info do you want? How to setup eduroam? How to setup 
wifi on buses?

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Watson,Nancy A
Sent: Thursday, August 16, 2018 15:10
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] eduroam ssid on RTS


​I am involved in a joint project with RTS to run eduroam on  the city buses 
that pass through our campus to service the students.  We are currently a Cisco 
Shop and I was curious if anyone has done anything like this with Cisco or any 
other vendor.


Thanks,
Nancy

 Nancy Watson
 Engineer, Network Services - UFIT
 nwat...@ufl.edu, (352) 273-1057
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Your eduroam semi-annual report

[Yahya M. Jaber]

Is this only for Idp’s who has it as primary network? Eduroam is a secondary 
one for us here.


Best Regards,

Yahya Jaber
Sr. Wireless Engineer
IT Network & Communications – Engineering

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Friday, July 6, 2018 4:03 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Fwd: Your eduroam semi-annual report

All:

We have run eduroam as our primary SSID for several years.  For those 
institutions that do not, but wonder what it might look like for those that do, 
I’ve included our semi annual report.
Ryan Turner
Senior Manager of Networking, ITS
The University of North Carolina at Chapel Hill
+1 919 274 7926 Mobile
+1 919 445 0113 Office

Begin forwarded message:

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Apple TV alternative?

[Yahya M. Jaber]

We use AirMedia, it's just simple to use.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joseph Bernard
Sent: Wednesday, June 20, 2018 17:27
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Apple TV alternative?

Does anyone have success with a device that is $200 or less that works with 
Apple devices to share video and works with an enterprise wifi network 
(802.1x/PEAP)?

Thanks,
Joseph Bernard

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Indoor Navigation.

[Yahya M. Jaber]

Thanks Julian,

What about the outdoor areas, do you have such?
You use WiFi only?

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
Sent: Monday, June 18, 2018 3:04 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Indoor Navigation.

> On Jun 18, 2018, at 04:38, Yahya M. Jaber  wrote:
>
> I just want to gather feedback from anyone who uses indoor navigation for 
> their campus, what is your feedback on your solution? What solution do you 
> use? What problems do you face?

We used the Meridian system from Aruba/HPE in our new business school building 
last year, and our engineering school did a limited pilot before that.  The 
system works in general, and Aruba support from the product team as always is 
excellent.  The particular challenges we face are:

1.) The system itself costs a fair bit of money, so customers need to do a lot 
of planning from a budgeting perspective.  I and others have been talking about 
alternative licensing models with Aruba, since the higher ed use case is 
definitely different from those of the original customer bases.

2.) The business school building specifically offered some unique challenges in 
terms of architecture.  There are huge open atriums and other spaces that lead 
to beacons being _too_ visible, which can occasionally confuse the device 
trying to do the triangulation.

3.) While the development environment is quite easy to pick up, customers need 
to account for development time, especially if external integrations need to be 
built in.  Just like #1, this adds to the necessary planning and resources that 
need to be brought to bear.

--
Julian Y. Koh
Associate Director, Telecommunications and Network Services Northwestern 
Information Technology

2020 Ridge Avenue #331
Evanston, IL 60208
+1-847-467-5780
Northwestern IT Web Site: <http://www.it.northwestern.edu/> PGP Public Key: 
<https://bt.ittns.northwestern.edu/julian/pgppubkey.html>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Indoor Navigation.

[Yahya M. Jaber]

Hi All,

I just want to gather feedback from anyone who uses indoor navigation for their 
campus, what is your feedback on your solution? What solution do you use? What 
problems do you face?

Thanks.

Yahya Jaber
Sr. Wireless Engineer
IT Network & Communications - Engineering




This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: eduroam CAT Tool questioin

[Yahya M. Jaber]

I would start with the following:

-  Debug client. Then see what is RADIUS responding back “reject reason 
or challenge reason”

-  Try it without the tool. “to rule out the eap type”

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Schwartz, Roger J
Sent: Thursday, May 10, 2018 22:56
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] eduroam CAT Tool questioin

Has anyone used the eduroam CAT tool to create the onboarding for Windows 10 
users? We are stuck getting a Windows 10 configuration to work with the CAT 
Tool.

Any help would be appreciated.

Thanks
Roger

___
Roger Schwartz |Senior Wireless Network Technician| Information Technology 
Services
UNIVERSITY OF TENNESSEE HEALTH SCIENCE CENTER
877 Madison Ave., Suite 738 | Memphis, TN  38163
• 901.448.2236 | 7 901.448.8199 |•: 
rschw...@uthsc.edu
[cid:image001.png@01D3E9E2.950FFCD0]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Re-authentication times for guest wireless solutions

[Yahya M. Jaber]

We do 1 day with AUP.
We had a registration portal before with SMS validation, but since guest come 
from different countries with different mobile ISP, we had complains that they 
didn’t receive the SMS, so we changed it to AUP to be more frictionless.
And sometimes they come with a laptop only, so no way to get the SMS.


Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Wurst
Sent: Thursday, May 10, 2018 19:00
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Re-authentication times for guest wireless solutions

Hi all!

This summer we plan to make changes to our guest wireless solution. We plan to 
have users go to a captive portal page on our Aruba controllers. Currently we 
have our re-authentication interval set to 8 hours. We were wondering how often 
other universities are making wireless guests re-authenticate to their networks.

Any feedback is greatly appreciated.

Have a good one!

Dan
--
Daniel Wurst
Network Engineer
Denison University
wur...@denison.edu
740-587-6229

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: DHCP Lease Times

[Yahya M. Jaber]

Hi Curtis,

I have 8k users daily, what I did is have an interface group with multiple /20 
subnets "I have broadcast forwarding disabled so it shouldn't matter", and I 
use AAA override to send the interface group back when authentication is done.
On the WLC side, it uses round robin for selecting the interface inside the 
interface group.

Lease time I use is 8 hours which are the work time.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen
Sent: Tuesday, May 8, 2018 02:17
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] DHCP Lease Times

Hello,

I'm curious to see what process/algorithm others use when determining DHCP 
lease times for your Wi-Fi networks.  Assuming plenty of IP addresses, what 
DHCP lease time is ideal to assign to clients in a WLAN with 90,000 unique 
clients/day, where avg. user spends 3hrs connected , but some (maybe 20%) go 
several days, Keep in mind that 90% are the same user/device every day.

What level of DHCP pool utilization do you think is best?  Have you found any 
industry documentation on this?  Thanks in advance.

-Curtis

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Cisco WLC / Home router

[Yahya M. Jaber]

FlexConnect Local Switching?

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Toth
Sent: Friday, May 4, 2018 18:51
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco WLC / Home router

We have a cisco 2504 WLC with 8.2.161 code (can change) going into a special 
situation were need to provide several SSIDs with one SSID that acts and 
operates just like a home router. I am trying to find information on settings 
to change and profiles to create to recreate the feel of a home router.  My two 
areas of concern are mDNS and gaming.

For mDNS we currently have to define individual services to permit.  This SSID 
has to be open to any device / service that they want to connect: Apple 
product, Chromecast, speakers, cyborg guinea pigs, whatever... and I'm not sure 
how to provide that.  As for gaming I know devices like the Nintendo Switch use 
PtP hosting mechanisms to establish some multiplayer games.  We opted to 
dedicate 1-1 public IPs to resolve those issues on campus.  At this location 
there will only be one IP to PAT, but I will still need to ensure devices like 
the Switch still work.

I would appreciate any information or documentation that anyone can provide to 
point me towards this goal.

Thank you,

Chris Toth
Senior Network Technician
Bowling Green State University
(419) 372-8462

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] More client weirdness

[Yahya M. Jaber]

I stopped thinking about  going to 8.0 releases since this was published 
https://www.cisco.com/c/en/us/products/collateral/wireless/8540-wireless-controller/eos-eol-notice-c51-739984.html

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Blasingame, Bob
Sent: Wednesday, April 25, 2018 22:22
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] More client weirdness

Hopefully this is no longer a problem for you. We ran into this same issue and 
just resolved it this past weekend with a code upgrade. We have 702W and 2702 
APs on 5508s running 8.0.140, with random clients (mostly iPhones) dropping 
after five minutes. Finally send in client debug and Prime client 
troubleshooting logs to TAC.

Said we were hitting this bug 
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve81314/?rfs=iqvred and gave 
us code 8.0.152.6 which has resolved the issue.



Bob Blasingame
Network and Communications Engineer
IT Infrastructure
Xavier University
513-745-4899
Get Technical HELP anytime!
[cid:image001.gif@01D3DD36.DB7C3840]





From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> 
On Behalf Of Tristan Gulyas
Sent: Monday, April 9, 2018 11:03 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] More client weirdness

Hi all,

Sounds like the same issue we're seeing.

There seems to be an intermittent spread of devices.  Anything from devices not 
receiving DHCP to devices remaining connected for 5-10 minutes and then ceasing 
to pass traffic any further.

Today's request was from two users with iPhone X devices, but her MacBook Pro 
works fine on the same AP.  I can confirm the Dell laptops with Killer 1535s 
are still an issue.

I attempted a replacement of one 702W and the issue returned straight away, so 
we're confident it's not hardware.

We use AAA-Override for interface-name but we don't do CoA after auth.

Thanks all - this has been a *huge* help.


Cheers,
Tristan
--
TRISTAN GULYAS
Senior Network Engineer

Technology Services, eSolutions
Monash University
738 Blackburn Road
Clayton 3168
Australia

T: +61 3 9902 9092
M: +61 (0)403 224 484
E: tristan.gul...@monash.edu
monash.edu

On 10 Apr 2018, at 9:52 am, Jason Cook 
> wrote:

We also seen the same/similar issues on 702w, however it seems an iPad has been 
the biggest issue. The user moves down the hall to a 3602i and no worries, 
moves back to the 702w and it’s a problem. Other devices including her iPhone 
is fine. Strangely it seems to occur randomly (days or weeks apart), and always 
the same device. Rebooting the AP will resolve it, or just time! But waiting 
for resolution could be hours.

On 8.2.164.0

--
Jason Cook
Information Technology and Digital Services
The University of Adelaide, AUSTRALIA 5005
Ph: +61 8 8313 4800

CRICOS Provider Number 00123M
---
This email message is intended only for the addressee(s) and contains 
information which may be confidential and/or copyright.  If you are not the 
intended recipient please do not read, save, forward, disclose, or copy the 
contents of this email. If this email has been sent to you in error, please 
notify the sender by reply email and delete this email and any copies or links 
to this email completely and immediately from your system.  No representation 
is made that this email is free of viruses.  Virus scanning is recommended and 
is the responsibility of the recipient.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> 
On Behalf Of Gray, Sean
Sent: Tuesday, 10 April 2018 12:36 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] More client weirdness

Hi Tristan,

So the problem with the specific student I mentioned seemed to resolve itself. 
Our latest issue, that seems to again only impact the 702w involves  a couple 
of MacBook Air users, running either Sierra or High Sierra. A debug shows that 
on occasion when trying to connect to a.1x network they make it as far as the 
DHCP required state and then never request an IP. They hit the timeout, the WLC 
deletes the client and the dance begins again.

Thanks

Sean

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 

RE: [WIRELESS-LAN] CCKM timestamp tolerance

[Yahya M. Jaber]

I would check the WLC RADIUS packets Queue after doing this.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joachim Tingvold
Sent: Thursday, April 5, 2018 17:09
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] CCKM timestamp tolerance

Hi,

We’ve encountered some clients on our wireless network that seems to handle 
roaming worse than other clients. Our WLC (Cisco 8540) responds by excluding 
the client after some failed attempts (which, of course, works as it should).

The culprit seems to be that the clients uses old CCKM-data when 
re-associating/roaming;

   “Received Timestamp deviation > 1 sec in REASSOC REQ IE from mobile”

I know this can be tuned (“config wlan security wpa akm cckm 
timestamp-tolerance”), but that also increases the chance of replay attacks 
(the WLC even warns about this). However, I’m not sure if this is a “real” 
security issue in practice? (e.g. raising the tolerance from 1000ms to 5000ms).

Since these are the first clients we’ve observed with this issue, I’m more 
inclined to ask the vendor to fix the issue on their end, but I know that will 
be a “fight” (that I’m not sure if I want to have). The “easiest” solution is 
of course just to increase the tolerance (if that helps, that is).

What is the BCP on this matter?

--
Joachim

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Wireless USB adapters

[Yahya M. Jaber]

Hi David,

Thanks for the email,

Those are USB only devices, they don't have Ethernet port, if they did, it 
would be much easier to connect them via wire.

I am looking for something more enterprise oriented like the Cisco old USB 
adapters.

Yahya Jaber.
CCIE Wireless.
055-869-7555
ITNC Engineering.
KAUST.



Sent from an Android

On Mar 30, 2018 16:43, "Hales, David" <dha...@tntech.edu> wrote:
We've had a few cases where we've needed adapters for devices along these 
lines.  My recommendation is to work with the manufacturer of the system you're 
trying to support.  Depending on the hardware/firmware on the system, support 
for wireless adapters is likely limited to a small set of makes and models.  If 
the device has a wired Ethernet interface, it may be easier to install a 
wireless bridge adapter onto the existing Ethernet, avoiding the need to match 
up a USB adapter with whatever limited USB support the freezers have.

Back in the N days, I used to like using the Netgear WNCE2001.  It was very 
small, and they could be powered through a USB port or AC adapter as needed.  
I'd really love to find something similar to that with AC support that I don't 
have to scrounge around on eBay to purchase.  Ideally something cheap enough 
that the occasional residential student with a wired only device could purchase 
it to get their device online in our wireless only residence halls.

David Hales
Network Systems Administrator
Information Technology Services
1010 N. Peachtree
Clement Hall 117
Cookeville, TN 38505
P 931-372-3983
F 931-372-6130
E dha...@tntech.edu<mailto:dha...@tntech.edu>
www.tntech.edu/its<http://www.tntech.edu/its>
[Tennessee Tech Logo]<https://www.tntech.edu/>
[TTU Facebook] <https://www.facebook.com/tennesseetech/> [TTU Twitter]  
<https://twitter.com/tennesseetech> [TTU Instagram]  
<https://www.instagram.com/tntechuniversity/> [TTU Youtube]  
<https://www.youtube.com/user/ttunews> [TTU Pintrest] 
<https://www.pinterest.com/tennesseetech/>

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Yahya M. Jaber
Sent: Friday, March 30, 2018 6:37 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless USB adapters

Hi All,

Anyone has experience in an enterprise USB WiFi adapters? In terms of support, 
robustness, compliance...

I am looking for something to connect couple of freezers wirelessly.

Thanks.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa<mailto:yahya.ja...@kaust.edu.sa>
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177



This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Wireless USB adapters

[Yahya M. Jaber]

Hi All,

Anyone has experience in an enterprise USB WiFi adapters? In terms of support, 
robustness, compliance...

I am looking for something to connect couple of freezers wirelessly.

Thanks.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177



This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Wireless USB adapter

[Yahya M. Jaber]

Hi All,

Anyone has experience in an enterprise USB WiFi adapters? In terms of support, 
robustness, compliance...

I am looking for something to connect couple of freezers wirelessly.

Thanks.

Yahya Jaber.
ITNC Engineering.
KAUST.



Sent from an Android

I'll be attending as well. Look forward to meeting everyone!

Christopher Johnson
Wireless Network Engineer
AT Infrastructure Operations & Networking (ION)
Illinois State University
(309) 438-8444
Stay connected with ISU IT news and tips with @ISU IT Help on Facebook and 
Twitter

Get Outlook for Android


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Michael Dickson 

Sent: Sunday, March 25, 2018 8:21:17 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Atmosphere Conference next week - higher education 
gathering

I’m attending as well. Looking to meeting other higher education folks.

Mike Dickson

On Mar 24, 2018, at 10:48 PM, Sidharth Nandury 
> wrote:

I will be there Mon - Fri. Do let me know if there is an informal meet. Would 
love to meet and get acquainted with colleagues in the higher education space.

Regards,
Sid
On Fri, Mar 23, 2018 at 10:24 AM Brian Helman 
> wrote:
Kevin,

Thanks for finding this.  I actually just heard from Aruba verifying this.

Everyone:  if the tables are full .. start your own!

I’m going to x-post this to the NETMAN CG.

-Brian

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> 
On Behalf Of Kevin Grover
Sent: Friday, March 23, 2018 10:06 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

Subject: Re: [WIRELESS-LAN] Atmosphere Conference next week - higher education 
gathering

Looks like they are having the Breakfast/lunch tables again


186769 - Higher Ed- Atmosphere meetup discussion
Join the Higher Education meetup group to discuss the landscape, share 
challenges, and learn best practices that can help you achieve your campus 
goals!

1hr 15min Meetup Discussion
Tuesday, Mar 27, 7:00 AM - 8:15 AM – Oceanside A-Higher Ed Table
Tuesday, Mar 27, 11:45 AM - 1:00 PM – Oceanside A-Higher Ed Table


Kevin Grover
Utah State University



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> 
on behalf of "Osborne, Bruce W (Network Operations)" 
>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
>
Date: Friday, March 23, 2018 at 5:53 AM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
>
Subject: Re: [WIRELESS-LAN] Atmosphere Conference next week - higher education 
gathering

I will not be making it this year.

Last year there were some informal meetups during meals, at designated tables. 
Perhaps that can work, with a little bit of coordination.

Maybe somebody should spin up a Slack channel to coordinate.


Bruce Osborne
Senior Network Engineer
Network Operations - Wireless
 (434) 592-4229
LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Brian Helman [mailto:bhel...@salemstate.edu]
Sent: Thursday, March 22, 2018 5:09 PM
Subject: Atmosphere Conference next week - higher education gathering

Several of you replied to me directly about possibly putting together a higher 
education gathering sometime next week at the Atmosphere Conference in Las 
Vegas.  I’ve looked over my schedule as well as the conference’s and I don’t 
see a time where it’s feasible.  I will be at part or all of the Monday and 
Tuesday Innovation Zone receptions.   Given it’s the start of the baseball 
season, there’s a good chance I’ll be in bright orange Mets colors, so 
introduce yourself!

More generically speaking, as many of us go to conferences that may not be 
Higher Education-specific, make sure you introduce yourselves to our peers, and 
make sure they are aware of the Educause Constituency Groups (especially this 
one and the NETMAN group).

If you are going to Atmosphere and want to try to catch up, feel free to direct 
message me on Twitter (@BrianHelman).


-Brian

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

RE: point-to-point wireless backhauls

[Yahya M. Jaber]

We use Cisco 1572, they can have multiple types of antenna's at the same time, 
so I can use the same AP with a directional antenna to reach the Root AP, and 
use another two omni antenna's for clients access. Also, I can connect a camera 
"or industrial Switch" to its PoE+ port.
Other solution  for good client access is to use daisy chain by connecting 
another AP to the MESH Via PoE+ port.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Brian Helman
Sent: Tuesday, February 20, 2018 20:03
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] point-to-point wireless backhauls

This has come up a few times, but I wanted to ask introduce a deviation from 
the larger (trunk) discussion - what are people recommending for small 
backhauls over wireless (e.g to support a 1-2 devices, such as CCTV) for 
example at a ball field?  If you are offering WiFi services to people attending 
events, do you need to reconcile the introduction of a point-to-point backhaul 
into your site planning?

Have any of you used the NanoBeamAC units?

-Brian


Brian Helman, M.Ed |  Director, ITS/Networking Services | *: 978.542.7272
Salem State University, 352 Lafayette St., Salem Massachusetts 01970
GPS: 42.502129, -70.894779

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Cisco Channel Width

[Yahya M. Jaber]

The default configuration I have is 40Mhz which suites the dense areas, for 
less interference areas I use 80Mhz

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Legge, Jeffry
Sent: Friday, January 19, 2018 15:08
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco Channel Width

Initially I thought it was a great idea. In practice students kept getting 
bounced because of width changes so I removed it an I  am using 20Mhz channels 
only.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Les Ridgley
Sent: Thursday, January 18, 2018 9:45 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco Channel Width

Hi All,
For those Cisco shops - has anyone configured the "BEST" parameter for channel 
width that would like to share their experiences or thoughts on the benefits or 
otherwise .

We have been advised to use 20Mhz as a campus wide setting, however DBS appears 
to offer significant benefits that would allow us to make better use of our 
802.11ac AP's.  We are currently running two 8540 WLC's with around 2,500 
access points with a mix of 3600 - 3700 -3800 and 1810 access points.

Thanks in advance,
Les
--
Les Ridgley
Senior Communications Officer (Network Operations),

IT Services
Resources Division
The University of Newcastle
University Drive, Callaghan NSW 2308
les.ridg...@newcastle.edu.au,
Phone +61 2 4921 6598
Fax: +61 2 4921 6910

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Another Cisco WLC Code Thread

[Yahya M. Jaber]

Hi,

This is what Cisco Says, 
https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-tac-recommended-aireos.html#anc6


HTH

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Britton Anderson
Sent: Tuesday, December 19, 2017 11:43 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Another Cisco WLC Code Thread

Happy Holidays,

Like many others I'm sure, I've been studying all of the email threads from 
this list to see if anyone has settled on any of the current code releases on 
their controllers. With all of the bugs disabling several AP models, we have 
been holding off our code upgrade and wireless migration.

I have a plan to move about half of our wireless APs off of a pair of WiSM2s to 
our new 8540's next week. We've had the 8540's up since the summer running on 
8.4.100.0 seemingly without many issues. It's been pretty stable but there has 
only been about 80 APs on it for our Fall semester. That code release is now 
deferred and we've looked at going up to 8.5.110.0 which released just a few 
days ago. Release notes list the open caveats, and there are several that still 
impact the 3500/3600/3700 lines pretty hard. 8.6.101.0 released a day after, 
and its even more grim.

Has anyone found anything stable? We have a pretty wide deployment of APs, but 
most of them are 3500/3600/3700s with a fleet of 702W/1810W in residences. We 
simply don't have the manpower to run around and console into APs that lose 
their marbles, and our time slot to move forward is narrowing by the day.

And more importantly, I would like to sleep better over the holidays, like we 
all would I'm sure.

Thanks for the input,
Britton

Britton Anderson |

 Lead Network Communications Specialist |

 University of Alaska |

 907.450.8250


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Wi-Fi Temperature Sensor Inquiry

[Yahya M. Jaber]

Hi,

We used temperature sensors in our green house, they were from "files thru the 
air", they work only on 2.4Ghz.
I had difficulties is setting them up because:

-  To initially connect them I had to plug them into their server, so I 
could not install the server in my datacenter hence no guarantee of data 
storage.

-  The server must be on the same subnet as the sensors -they run on 
broadcast!, we run MPLS network which made it difficult to implement.

-  If the laptop went off, the lab technician must press the reset 
button on all sensors.

-  The WiFi is on separate VRF than the wired connections, so I had to 
do local switching on the access point and to create a separate SSID for them 
only!

-  They never connect back if they got disconnected! Manual 
intervention is a must.

-  WPA2/Enterprise is just too difficult for the vendor to implement. 
Or at least it will be a headache for the operations team.

-  Upgrading the software on those devices is not that easy and cannot 
be done through the management tool.

HTH.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications - Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Christopher
Sent: Monday, December 4, 2017 8:10 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wi-Fi Temperature Sensor Inquiry

Good Morning,

Was curious if anyone had any experience with any particular types of Wi-Fi 
Temperature Sensors for labs/green houses, etc - such as headaches and/or 
lessons learned? From what I've gathered - all of the ones on the market are 
2.4GHz only with a majority capable of 802.11g only - a couple exceptions I've 
found are 802.11n capable with WPA2 Enterprise security as well.

Christopher Johnson
Wireless Network Engineer
AT Infrastructure Operations & Networking (ION)
Illinois State University
(309) 438-8444
Stay connected with ISU IT news and tips with @ISU IT Help on 
Facebook and Twitter
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Question regarding the support of WiFi Calling and texting

[Yahya M. Jaber]

Can you give us an example on the issues reported?, so I can understand your 
issue more.



Yahya Jaber.
CCIE Wireless.
055-869-7555
ITNC Engineering.
KAUST.



Sent from an Android

On Oct 24, 2017 17:25, Vikki Cutrone  wrote:
I am the Network Administrator at Vassar College and I was wondering what 
position  institutions were taking regarding support and troubleshooting of 
clients trying to use the wireless for wifi calling and wifi texting?  I am 
getting a large amount of requests for this service but with the multitude of  
cell phones, operating systems and cell providers it is impossible to keep up.  
Any input about your institution's policy or thoughts on a potential policy 
would be greatly appreciated.

Thank you in advance!

--
Vikki Cutrone
Network Administrator
Vassar College, Box 13
124 Raymond Ave
Poughkeepsie, NY 12604-0013

845-437-7231
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.



This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] Big flaw in WPA2

[Yahya M. Jaber]

Cisco said they will release an official statement today.

Yahya Jaber.
CCIE Wireless.
055-869-7555
ITNC Engineering.
KAUST.



Sent from an Android

On Oct 16, 2017 17:10, "Norton, Thomas (Network Operations)" 
 wrote:

For Aruba folks:


http://community.arubanetworks.com/aruba/attachments/aruba/unified-wired-wireless-access/74698/1/WPA2%20Vulnerability%20IDS%20feature.pdf


T.J. Norton
Wireless Network Architect – Team Lead
Network Services – Wireless

(434) 592-6552

[http://www.liberty.edu/media/1616/40themail/wordmark-for-email.jpg]

Liberty University  |  Training Champions for Christ since




From: Norton, Thomas (Network Operations)
Sent: Monday, October 16, 2017 8:41 AM
To: The EDUCAUSE Wireless Issues Constituent Group Listserv
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2

So basically those are work around as in the interim, so don’t use 802.11r, 
mesh, or clarify engine. Fun stuff! Lee said it Best, let the panic begin lol


T.J. Norton

Wireless Network Architect
Network Operations

(434) 592-6552



[http://www.liberty.edu/media/1616/40themail/wordmark-for-email.jpg]

Liberty University  |  Training Champions for Christ since 1971

On Oct 16, 2017, at 8:30 AM, McClintic, Thomas 
> wrote:


This seems contradicting…




Workarounds

===

All vulnerabilities described in this advisory may be mitigated by

disabling certain features:

- For ArubaOS, ensure that 802.11r is disabled by verifying that any

   configured SSID profile does not contain a "dot11r-profile".  From the

   command line, "show wlan dot11r-profile" will list any 802.11r profiles

   that have been configured.  If the reference count is 0, 802.11r is not

   enabled.

- For InstantOS, ensure that 802.11r is not enabled in any configured WLAN.

- Disabling 802.11r on the AP infrastructure will effectively mitigate

   client-side 802.11r vulnerabilities.  It will not, however, mitigate

   client-side 4-way handshake vulnerabilities.

- Clarity Engine is a beta feature enabled only in special builds of

   software.  Customers who are participating in this beta should not use

   Clarity Engine until a software update has been completed.

- Mesh mode for both ArubaOS and InstantOS is vulnerable.  Until this

   vulnerability is patched, mesh networks should be disabled.

- Wi-Fi uplink mode for InstantOS is vulnerable.  Until this vulnerability

   is patched, the Wi-Fi uplink feature should not be used.





TJ McClintic




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Monday, October 16, 2017 7:10 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Big flaw in WPA2



Let the panic begin.





From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Turner, Ryan H
Sent: Monday, October 16, 2017 7:51 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Big flaw in WPA2



https://arstechnica.com/information-technology/2017/10/severe-flaw-in-wpa2-protocol-leaves-wi-fi-traffic-open-to-eavesdropping/

Ryan Turner

Manager of Network Operations, ITS

The University of North Carolina at Chapel Hill

+1 919 274 7926 Mobile

+1 919 445 0113 Office

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found 

Re: [WIRELESS-LAN] FTE's for Wireless

[Yahya M. Jaber]

Hi Daniel,

Wish you all the best in your project.
I would appreciate if you can explain more about how you handle IoT..that would 
be nice.

Thanks.

Yahya Jaber.
CCIE Wireless.
055-869-7555
ITNC Engineering.
KAUST.



Sent from an Android

On Sep 27, 2017 19:41, Daniel Eklund  wrote:
University of Michigan has over 13,000 access points and we're continuing to 
install for the next 9 months to reach a goal of about 16,000.  We have about 8 
FTEs assigned to this but some have duties that aren't specifically wireless 
and so that's why the number is approximate.  We have also employed an external 
contractor to perform pre-installation site surveys and design for the majority 
of this project.  Engineers are responsible for design and design reviews, 
development of scope of work, in-depth troubleshooting, new product testing, 
etc.  Network analysts are responsible for overseeing installation, turn-up, 
and day to day operations.  Conduit, cabling and installation is handled by our 
plant operations and facilities groups respectively.

As to whether we have enough people, I think the answer is yes under normal 
circumstances.  We could use a few more people right now in order to relieve 
the folks with more technical expertise so they can spend time thinking about 
the myriad requests we get on a daily basis that are outside the scope of this 
project.  Mostly this is exceptions requested by departments, one off projects, 
the growing demand to handle IoT, etc.

I will add that before we undertook this project we had almost daily negative 
input from campus about their WiFi experience.  In the past year we've had 
almost no complaints.  Instead we've seen a number of tweets from people who've 
left the university and who are missing their UofM WiFi experience.

Details on the project here:  http://its.umich.edu/projects/wifi-upgrade/

On Tue, Sep 26, 2017 at 5:03 PM, Hector J Rios 
> wrote:
Need your help. What is the number of network engineers you have dedicated to 
wireless? Please indicate the size of your network, the scope of your wireless 
team's responsibilities, whether you rely on other resources (like contractors 
or other internal groups) to complement your efforts, and the most important 
question, is this enough people or do you need more (if so, what would the 
ideal number be)?

Not sure if this has been done before, if so, please let me know.

Here at LSU, we have 3600 APs, and two wireless engineers. The scope of their 
work includes plan reviews (designing WLANs for new construction), requests for 
additional coverage, site surveys, Tier 3 level of support, Controller/AP 
config/monitoring/maintenance, lifecycle replacements, testing/evals/research 
of new technologies. We rely on cable contractors to run cable and mount APs , 
NOC personnel to install some switches, APs, and troubleshooting, and student 
workers to configure APs and minor deployments. Two wireless engineers is not 
enough for us. We need at least one more.

If you think there is value in this information and would prefer a better 
format let me know.

Regards,

Hector Rios
Louisiana State University

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



--
[http://www.umich.edu/assets/email-logo.png]

Daniel Eklund
Network Planning Manager
ITS Infrastructure
734-763-6389
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.



This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Wi-Fi Request for University Conference event

[Yahya M. Jaber]

Hey Jake,

Thanks for that, I didn’t get the picture from the first time ;)
Yes, your way is much better and less headache to the WLC.

The next thing I should find out now is how to remove all the registration 
blanks "username..name...last name...email..etc.." and keep only the mobile 
phone.

Thanks again.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA
 
Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jake Snyder
Sent: Wednesday, September 27, 2017 4:00 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wi-Fi Request for University Conference event

For CWA, you need to put the MAC address into a guest endpoint group.

Then, if the endpoint is in guest endpoint group, just put them on instead of 
the portal.

Way easier than LWA + sleeping client.

Sent from my iPhone

> On Sep 27, 2017, at 6:50 AM, Yahya M. Jaber <yahya.ja...@kaust.edu.sa> wrote:
> 
> Hi,
> 
> Thanks for that.
> 
> I do use CWA with ISE.
> The issue is not with the ISE, its with the WLC that by nature has the idle 
> timeout for 5 minutes. Then the client would have to re-auth as its no longer 
> on the WLC client list.
> 
> For idle timeout...i am trying to find a sane value that would at least give 
> me good repots when needed...but I think I'll go with LWA+AUP and sleeping 
> client.
> 
> Yahya Jaber.
> Sr. Wireless Engineer
> IT Network & Communications – Engineering Building 14, Level 3, Rm 
> 308-WS07 KAUST 23955-6900 Thuwal, KSA
> 
> Email yahya.ja...@kaust.edu.sa
> Office +966 (0) 12 8081237
> Mobile +966 (0) 558697555
> On Call Rotation Mobile: +966 54 470 1177
> 
> -Original Message-
> From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joachim 
> Tingvold
> Sent: Wednesday, September 27, 2017 3:44 PM
> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> Subject: Re: [WIRELESS-LAN] Wi-Fi Request for University Conference 
> event
> 
>> On 27 Sep 2017, at 14:17, Yahya M. Jaber wrote:
>> - Would give up my guest SSID through ISE. As still there is no 
>> feature to increase the idle timeout on the WLC “like the sleeping 
>> client” which will stop users from complaining about the constant 
>> login once they go idle “”especially iPhone that turns off WiFi after 
>> sometime when its on the lock screen!!””…I know that I can increase 
>> the idle timeout, but that would prevent getting real client count 
>> from the WLC and PI and might affect the client WLC DB.
>> - Would use simple AUP guest SSID with sleeping client timer of 1-4 
>> days.
> 
> Hi,
> 
> You should look into CWA (Central Web Authentication), if that’s not already 
> what you’re looking into. Then you can use MAC-caching, where you can set the 
> time for how long they should he allowed into the network before needing to 
> re-enter the username/password. Hence, you can set the idle-timeout to a more 
> sane value. CWA works with most RADIUS servers (i.e. you don’t specifically 
> need ISE).
> 
> --
> Joachim
> 
> **
> Participation and subscription information for this EDUCAUSE Constituent 
> Group discussion list can be found at http://www.educause.edu/discuss.
> 
> 
> This message and its contents including attachments are intended solely for 
> the original recipient. If you are not the intended recipient or have 
> received this message in error, please notify me immediately and delete this 
> message from your computer system. Any unauthorized use or distribution is 
> prohibited. Please consider the environment before printing this email.
> 
> **
> Participation and subscription information for this EDUCAUSE Constituent 
> Group discussion list can be found at http://www.educause.edu/discuss.
> 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Wi-Fi Request for University Conference event

[Yahya M. Jaber]

Hi,

Thanks for that.

I do use CWA with ISE.
The issue is not with the ISE, its with the WLC that by nature has the idle 
timeout for 5 minutes. Then the client would have to re-auth as its no longer 
on the WLC client list.

For idle timeout...i am trying to find a sane value that would at least give me 
good repots when needed...but I think I'll go with LWA+AUP and sleeping client.

Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joachim Tingvold
Sent: Wednesday, September 27, 2017 3:44 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wi-Fi Request for University Conference event

On 27 Sep 2017, at 14:17, Yahya M. Jaber wrote:
> - Would give up my guest SSID through ISE. As still there is no
> feature to increase the idle timeout on the WLC “like the sleeping
> client” which will stop users from complaining about the constant
> login once they go idle “”especially iPhone that turns off WiFi after
> sometime when its on the lock screen!!””…I know that I can increase
> the idle timeout, but that would prevent getting real client count
> from the WLC and PI and might affect the client WLC DB.
> - Would use simple AUP guest SSID with sleeping client timer of 1-4
> days.

Hi,

You should look into CWA (Central Web Authentication), if that’s not already 
what you’re looking into. Then you can use MAC-caching, where you can set the 
time for how long they should he allowed into the network before needing to 
re-enter the username/password. Hence, you can set the idle-timeout to a more 
sane value. CWA works with most RADIUS servers (i.e. you don’t specifically 
need ISE).

--
Joachim

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Wi-Fi Request for University Conference event

[Yahya M. Jaber]

Hi,

We are actually improving our guest experience, and what I thought of is the 
following: “we use Cisco Equipment’s”:

-  Would give up my guest SSID through ISE. As still there is no 
feature to increase the idle timeout on the WLC “like the sleeping client” 
which will stop users from complaining about the constant login once they go 
idle “”especially iPhone that turns off WiFi after sometime when its on the 
lock screen!!””…I know that I can increase the idle timeout, but that would 
prevent getting real client count from the WLC and PI and might affect the 
client WLC DB.

-  Would use simple AUP guest SSID with sleeping client timer of 1-4 
days.

-  Won’t use bandwidth limit…the internet link is good.

-  802.11ac 80Mhz or 40Mhz based on the location of the event.

-  Survey..survey..survey..before the event to check everything.


Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering
Building 14, Level 3, Rm 308-WS07
KAUST 23955-6900 Thuwal, KSA

Email yahya.ja...@kaust.edu.sa
Office +966 (0) 12 8081237
Mobile +966 (0) 558697555
On Call Rotation Mobile: +966 54 470 1177

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Osborne, Bruce W 
(Network Operations)
Sent: Wednesday, September 27, 2017 3:08 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wi-Fi Request for University Conference event

Our process is not ideal.

Where possible, we try to avoid setting up special SSIDs. Our normal Guest SSID 
allows for self registration for bandwidth-restricted Internet access or 
sponsored registration for faster Internet access.

We utilize our ClearPass Guest management to create an expiring event guest 
username with unlimited devices ending in “@event” instead of a proper email 
address. The original plan was for our IT Communications BRMs to create these 
accounts. Lately, our wireless team has been doing that. Event coordinators 
need to test access ahead of time, especially if it is “critical”. Otherwise, 
they are failing their job, IMHO.

For major events, with special access we sometimes set up a PSK SSID. In our 
experience, an open SSID is not good because you will pick up every roaming 
mobile device, exhausting your DHCP address pool.

Bruce Osborne
Senior Network Engineer
Network Operations - Wireless
 (434) 592-4229
LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Williams, Mr. Michael [mailto:mmwilli...@tarleton.edu]
Sent: Monday, September 25, 2017 4:01 PM
Subject: Wi-Fi Request for University Conference event

Hello,

Here recently, we have received numerous requests for guest WI-FI access during 
on campus conference events.  In order to support these events, we normally 
create a special open conference SSID that requires a pre-shared key or 
passcode for authentication.

What we struggling with is how to set the level of expectation for WI-FI 
functionality during these types events.   Conference sponsors inform us that 
Wi-Fi/internet access for conference attendees is critical, or some special app 
must function flawlessly or their conference event will be a bust.

We want to develop a formal conference request process that would detail what 
type of Wi-Fi support we can offer, what level of user experience to expect and 
what the sponsor responsibilities would be during these conference events.

I am curious to hear how other university handle these types of events. Does 
anyone have a formal process, that they are willing to share, that addresses 
some of these concerns?
Thanks

Mike


Michael M. Williams
Senior Network Engineer
Information Technology Services
Tarleton State University
201 St. Felix Str.
Box T-0220
Stephenville, TX 76402
Tel: (254) 968-1850
Fax: (254) 968-9658
mmwilli...@tarleton.edu

“ Tarleton Networks – Connecting people with their potential”

Information Technology Services staff will never ask for your password in an 
email.  Don't ever email your password to anyone or share confidential 
information in emails.

Confidentiality Notice:  This electronic message, including any attachments, is 
for the sole use of the intended recipients(s) and may contain confidential and 
privileged information.  Any unauthorized review, use, disclosure or 
distribution is prohibited.  If you are not the intended recipient, please 
contact the sender by reply e-mail and destroy all copies of the original 
message

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hunter Fuller
Sent: Monday, September 25, 2017 2:36 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Two RF Questions

We currently won't even touch 40MHz as we like having the ability to solve 
problems by throwing more APs at them.

On Mon, Sep 25, 

RE: [WIRELESS-LAN] Two RF Questions

[Yahya M. Jaber]

Try to simulate your AP location in Ekahau, see what it tells you.
I use almost 40Mhz channels everywhere, and some 80Mhz which was based on the 
design.


Yahya Jaber.
Sr. Wireless Engineer
IT Network & Communications – Engineering

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Entwistle, Bruce
Sent: Tuesday, September 26, 2017 12:11 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Two RF Questions

We have a similar configuration and have begun using the additional channels 
but continue to use 20MHz channel width.

Bruce Entwistle
Network Manager
University of Redlands


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of David Blahut
Sent: Monday, September 25, 2017 12:17 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Two RF Questions

Greetings,
I have two hopefully simple RF related questions:
1.  Should I enable the extended UNII-2 channels campus wide?
2.  Should I enable 40Mhz channel width campus wide?
In other words what are you doing on your campus and what is the "best practice?

Our wireless infrastructure:

3 Cisco 5508s running 8.2.141.0

20 - 3800 APs
368 - 3700 APs
414 - 3600 APs
8 - 3500 APs
7 - 1810 APs
32 - 1142 APs

Prime 3.1.0

Thanks for your input.
David
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] spurious cpi report of mass AP disassociation

[Yahya M. Jaber]

Hi,

You can see the same on the WLC GUI.
Also, from the statistics of the AP join at the monitor tab. "This one is 
easier and would show you what happened when you are not there"

Yahya Jaber.
CCIE Wireless.
055-869-7555
ITNC Engineering.
KAUST.



Sent from an Android

On Sep 15, 2017 8:19 PM, Earl Barfield  wrote:
> Date:Mon, 11 Sep 2017 17:48:58 -0700
> From:Mark Duling 
> Subject: Re: spurious cpi report of mass AP disassociation
>
> Thanks for all the replies everyone. Well I'm not used to looking at AP
> logs, but ...


After such an event, log into the controller and run 'show ap summary'
the list of APs shows up in the order that the APs joined the controller
so the ones at the end of the list are the newest ones to join.   Pick
one of the bottom of the list and run 'show ap config general '
and look for the join info near the bottom eg:

> AP Up Time. 1 days, 21 h 15 m 05 s
> AP LWAPP Up Time... 1 days, 21 h 13 m 10 s
> Join Date and Time. Wed Sep 13 16:03:59 2017
> Join Taken Time 0 days, 00 h 01 m 54 s


Is the APs dropped and joined, then it will be evident from the Join
Time.   If the AP rebooted, then it will be evident from the AP Up Time.
If neither, then you had a false alarm from Prime.




--
Earl Barfield -- Academic & Research Tech / Information Technology
Georgia Institute of Technology, Atlanta Georgia, 30332
Internet: earl.barfi...@oit.gatech.edue...@gatech.edu

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] AAA Override Bug?

[Yahya M. Jaber]

I used to have 8.0.140.0 and now 8.0.140.9 both were working fine with AAA 
override.

Yahya Jaber.
CCIE Wireless.
055-869-7555
ITNC Engineering.
KAUST.



Sent from an Android

On Sep 15, 2017 17:39, Hector J Rios  wrote:

This week we identified a bug in our wireless software that is affecting 
eduroam. The behavior we are seeing is the following: when an LSU user connects 
to eduroam we look up their AD group membership. If it is a student, the user 
is placed on network “Y”; if it is an employee (faculty/staff), the user is 
placed on network “Z”. We have noticed employees being incorrectly placed on 
the student network (which is the default WLAN interface). We haven’t yet 
identified why this is happening but we are working with our Cisco. We do have 
AAA override enabled. We have WiSM2s running 8.0.140.0 code. We have confirmed 
that our RADIUS server is sending the correct VLAN id attribute. Anybody 
noticed the same behavior?



Hector Rios

Louisiana State University

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.



This message and its contents including attachments are intended solely for the 
original recipient. If you are not the intended recipient or have received this 
message in error, please notify me immediately and delete this message from 
your computer system. Any unauthorized use or distribution is prohibited. 
Please consider the environment before printing this email.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.