Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-20 Thread Ciesinski, Nick
r mailto:yahya.ja...@kaust.edu.sa>> Sent: Thursday, August 16, 2018 9:24 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] eduroam ssid on RTS Hi Nancy, To be exact, what kind of info do you want? How to setup eduroam? How to setu

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-20 Thread Hunter Fuller
Makes perfect sense, thanks for clarifying! On Mon, Aug 20, 2018 at 10:43 AM Philippe Hanset < 005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote: > Hunter, > > You are correct. > I was comparing 802.1X without a Web portal (A la eduroam) to a Web based > SSID with a portal and a

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-20 Thread Philippe Hanset
Hunter, You are correct. I was comparing 802.1X without a Web portal (A la eduroam) to a Web based SSID with a portal and a timeout. (which is what I have seen in buses with Wi-Fi very often) Many OSes will not switch your Internet routing in your phone to Wi-Fi unless access to the Internet

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-17 Thread Hunter Fuller
On Fri, Aug 17, 2018 at 2:45 PM Philippe Hanset < 005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote: > I wouldn't use 802.1X for that project, and that is coming from the > eduroam guys :( > > if using 802.1X (eduroam or local) in the bus… even people with decent > data plans that could

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-17 Thread Philippe Hanset
> (Network Operations) mailto:bosbo...@liberty.edu>> > Sent: Friday, August 17, 2018 7:27 AM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > Subject: Re: [WIRELESS-LAN] eduroam ssid on RTS > > We are an Aruba shop. For

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-16 Thread Philippe Hanset
Hello Nancy, eduroam in a bus, this is exciting! 3 things that come to my mind as far as eduroam is concerned for your design: 1) Not helpful, more of a heads up: The connector agreement with Internet2 asks to not connect Wi-Fi networks that you don't own/control (in this case you are

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-16 Thread James Helzerman
half of Yahya M. Jaber < > yahya.ja...@kaust.edu.sa> > *Sent:* Thursday, August 16, 2018 9:24 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] eduroam ssid on RTS > > > Hi Nancy, > > > > To be exact, what kind of info do you wan

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-16 Thread Joseph Bernard
on behalf of "Watson,Nancy A" Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv Date: Thursday, August 16, 2018 at 8:37 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: [WIRELESS-LAN] eduroam ssid on RTS ​I am involved in a joint project with RTS to run

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Curtis K. Larsen
igate that same vulnerability for another >>> institutions' users on my >>> campus. >>> >>> -Curtis >>> >>> >>> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: >>> > How would you disable PEAP on the eduroam SSID? I

RE: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Turner, Ryan H
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen Sent: Tuesday, June 21, 2016 11:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid Philippe, I agree with you that EAP-TLS is by far the best way to avoid Evil Twin attacks. I also think your

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Curtis K. Larsen
ns, but I cannot mitigate that same vulnerability for another >>>> institutions' users on my >>>> campus. >>>> >>>> -Curtis >>>> >>>> >>>> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: >>>>> How woul

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeremy Mooney
me vulnerability for another > >>> institutions' users on my > >>> campus. > >>> > >>> -Curtis > >>> > >>> > >>> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: > >>>> How would you disable

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeremy Mooney
t; How would you disable PEAP on the eduroam SSID? I've never noticed a >> > setting for that. >> > >> > -----Original Message- >> > From: The EDUCAUSE Wireless Issues Constituent Group Listserv >> > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeremy Mooney
ions' users on my > >> campus. > >> > >> -Curtis > >> > >> > >> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: > >> > How would you disable PEAP on the eduroam SSID? I've never noticed a > >> > setting for that. > >> &

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeffrey D. Sessler
eply-To: "wireless-lan@listserv.educause.edu" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Monday, June 20, 2016 at 6:20 PM To: "wireless-lan@listserv.educause.edu" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] eduroam ssid David, To clarify, eduroam is not a

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Philippe Hanset
sable PEAP on the eduroam SSID? I've never noticed a >>>> setting for that. >>>> >>>> -Original Message- >>>> From: The EDUCAUSE Wireless Issues Constituent Group Listserv >>>> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Be

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
sage > From: "Curtis K. Larsen" <curtis.k.lar...@utah.edu > <mailto:curtis.k.lar...@utah.edu>> > Date: 6/20/16 6:04 PM (GMT-07:00) > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <mailto:WIRELESS-LAN@listserv.educause.edu> > Subject: Re: [WIREL

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Jason Cook
] On Behalf Of Philippe Hanset Sent: Tuesday, 21 June 2016 7:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid Jason et al., https://www.eduroam.org/wp-content/uploads/2016/05/eduroam_Compliance_Statement_v1_0.pdf The compliance statement doesn’t require

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Schuette, David
04 PM (GMT-07:00) To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid The PEAP vulnerability is only mitigated by requiring EAP-TLS and disabling PEAP. (It may help a little to recommend the CAT tool or similar, but not much) We've recommended similar tools for

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Curtis K. Larsen
. That's the problem - PEAP is vulnerable to Evil Twin >> > attacks so we are disabling PEAP. Doing that on eduroam would break all >> > institutions that still offer it. Leaving it enabled exposes users at >> our >> > institution. >> > >> > -Curtis &g

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
DU>] On Behalf Of Curtis K. Larsen > > Sent: Monday, June 20, 2016 5:19 PM > > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > > <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > > Subject: Re: [WIRELESS-LAN] eduroam ssid > > > > Yes it does work. That's the pro

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Jeremy Mooney
ent: Monday, June 20, 2016 5:19 PM > > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > > Subject: Re: [WIRELESS-LAN] eduroam ssid > > > > Yes it does work. That's the problem - PEAP is vulnerable to Evil Twin > > attacks so we are disabling PEAP. Doing that on eduroam would

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Matthew Newton
On Mon, Jun 20, 2016 at 05:50:51PM -0400, Chuck Enfield wrote: > How would you disable PEAP on the eduroam SSID? I've never noticed a > setting for that. Easy on the RADIUS server - reject if EAP-Message matches /^0x19/. Not that anyone should do that for non-local accounts. That's a

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen > Sent: Monday, June 20, 2016 5:19 PM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: Re: [WIRELESS-LAN] eduroam ssid > > Yes it does work. That's the problem - PEAP is vulnerable to Evil Tw

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Curtis K. Larsen
Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen > Sent: Monday, June 20, 2016 5:19 PM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: Re: [WIRELESS-LAN] eduroam ssid > > Yes it does work. That's the problem - PEAP is vulner

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
: +61 8 8313 4800 > > -Original Message- > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen > Sent: Saturday, 18 June 2016 12:49 AM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject:

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Chuck Enfield
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid Yes it does work. That's the problem - PEAP is vulnerable to Evil Twin attacks so we are disabling PEAP. Doing that on eduroam would break all institutions that still offer it. Leaving it enabled exposes users at our

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Curtis K. Larsen
: Johnson, Neil M [neil-john...@uiowa.edu] Sent: Monday, June 20, 2016 2:52 PM To: Curtis K. Larsen Cc: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid eduroam should work with just about any authentication method that uses EAP (PEAP,TLS,TTLS) etc. So if your are say moving

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Johnson, Neil M
>> >> r...@unc.edu<mailto:r...@unc.edu> >> +1 919 445 0113 Office >> +1 919 274 7926 Mobile >> >> >> >> From: The EDUCAUSE Wireless Issues Constituent Group Listserv >> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Becker,

RE: [WIRELESS-LAN] eduroam ssid

2016-06-19 Thread Jason Cook
al Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen Sent: Saturday, 18 June 2016 12:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid We're beginning to run into

Re: [WIRELESS-LAN] eduroam ssid

2016-06-17 Thread Curtis K. Larsen
t; > > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Becker, Jason > Sent: Thursday, June 16, 2016 11:45 PM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: [WIRELESS-LAN] eduroam ssid > > Has anyone r