RE: [WIRELESS-LAN] Wireless LAN Rate-limit

2006-10-26 Thread Dennis Xu
We enforce average/burst rate at WISM QoS profile. Dennis Xu Network Analyst (CCS) University of Guelph 519-824-4120 x 56217 [EMAIL PROTECTED] -Original Message- From: Lee Badman [mailto:[EMAIL PROTECTED] Sent: Thursday, October 26, 2006 11:43 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

RE: [WIRELESS-LAN] PEAP Authentication Question

2006-11-10 Thread Dennis Xu
. Dennis Xu Network Analyst (CCS) University of Guelph 519-824-4120 x 56217 [EMAIL PROTECTED] From: ktaillon [mailto:[EMAIL PROTECTED] Sent: Friday, November 10, 2006 9:11 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] PEAP Authentication Question I'm

RE: [WIRELESS-LAN] Upgrade 1200 to lwapp

2007-02-15 Thread Dennis Xu
or dns resolution to find controller at layer 3. Dennis Xu Network Analyst (CCS) University of Guelph 519-824-4120 x 56217 [EMAIL PROTECTED] -Original Message- From: Jorge Bodden [mailto:[EMAIL PROTECTED] Sent: Thursday, February 15, 2007 2:12 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

RE: [WIRELESS-LAN] Vista DHCP and CISCO WCS/WLC

2007-05-08 Thread Dennis Xu
server to the dhcp relay(WiSM). Then WiSM sends the ACK to the vista clients through broadcast. So WiSMs won't drop the ACKs. That's my two cents. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 -Original Message- From: Anthony Croome [mailto:[EMAIL PROTECTED] Sent

WiSM SUP720 Performance Issue

2007-06-08 Thread Dennis Xu
this issue before? Thanks! Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

RE: [WIRELESS-LAN] Problems with WISM Controller and BlueSocket

2007-06-13 Thread Dennis Xu
I know there is a bug CSCsf32185 about WiSM DHCP relay when using external DHCP server. TAC engineer told me they cannot reproduce this problem in their lab, and only some WiSMs they sold out having this problem. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 From

RE: [WIRELESS-LAN] Vendor Choice

2007-10-19 Thread Dennis Xu
We have been using Cisco WiSM and WCS for more than one year. We have two WiSMs and around 400 APs. Our experience with Cisco is positive. Although there are some bugs, the system has been stable and easy to manage. Also it integrates with Cisco NAC well. Dennis Xu Network Analyst(CCS

RE: [WIRELESS-LAN] Cisco WISM + Radius to select VLAN

2007-10-22 Thread Dennis Xu
James, The client should be moved to the vlan specified in Airespace / Interface-Name attribute, not Tunnel-Group-ID. Do you have a dynamic interface called np8ss0 in your WLC? Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 -Original Message- From: James J J

RE: [WIRELESS-LAN] Cisco WISM + Radius to select VLAN

2007-10-22 Thread Dennis Xu
. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 -Original Message- From: James J J Hooper [mailto:[EMAIL PROTECTED] Sent: October-22-07 5:57 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Cisco WISM + Radius to select VLAN Hi Dennis, Yes

WiSM Web Login Issue

2007-10-26 Thread Dennis Xu
been running Cisco WiSM for more than one year (from 4.0.155.5 to 4.1.185.0). We did not see this problem before. Has anyone seen the similar issue? Thanks! Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 ** Participation and subscription information

Disable 1M 2M data rates in High density enviroment

2007-10-26 Thread Dennis Xu
I have seen some threads on forums about disabling 1M 2M data rates. We get better throughput but decrease the AP coverage. Also it decrease the noise and co-channel interference in high density environment. Has anyone tried this? Any luck or bad about it? Thanks! Dennis Xu Network

RE: [WIRELESS-LAN] 802.1x and password changes

2007-11-01 Thread Dennis Xu
We use Cisco ACS 4.1 for Radius servers and WiSM for wireless. We see users get the prompt to select a certificate or other credentials after they change the password in AD. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 From: Kobiske, Rob [mailto:[EMAIL PROTECTED

RE: [WIRELESS-LAN] ACS Machine Authentication Problems

2007-11-28 Thread Dennis Xu
and it should be fixed in ACS v4.1. After we upgraded to ACS V4.1, the problem has gone away. Not sure why you see this problem with ACS V4.1... We use PEAP/WPA/WPA2 as well. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 -Original Message- From: Hector J Rios [mailto

802.11b Support

2007-11-28 Thread Dennis Xu
Has anyone stopped supporting 802.11b in your network? Any issues with that? Got a lots of complains? Thanks! Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion

SPAM Wireless Performance Analysis

2008-01-11 Thread Dennis Xu
how things are improved. Has anyone done such analysis? Do you use any tools to collect the data? Thanks! Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can

RE: [WIRELESS-LAN] Wireless User Logging?

2008-01-18 Thread Dennis Xu
ACS accounting records should give you all the information including user ID, MAC address and IP address. The ACS Passed authentication records do not have IP address info for 802.1x auth, but you can find IP address info in the accounting records. Dennis Xu Network Analyst(CCS) University

RE: [WIRELESS-LAN] Wireless 802.1x working well- now add NAC?

2008-02-05 Thread Dennis Xu
for a single login). But you can find the user in the ACS Passsed Authentication records. So combine the ACS Radius Accounting records and Passed Authentication records together, we can lock down which user with which machine was using that IP during a specific time. Dennis Xu Network Analyst

RE: [WIRELESS-LAN] Cisco Wisms CPU

2008-02-13 Thread Dennis Xu
We have two wism blades running 4.1.185.0. Our wisms CPU are running normally at 5% and 20% at peak time. We have 450 APs and 2000 users. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 -Original Message- From: James J J Hooper [mailto:[EMAIL PROTECTED] Sent

WiSM 5.0.148.0 Upgrade Lost Service IP

2008-04-28 Thread Dennis Xu
then it got service IP successfully. Has anyone seen this problem before? Thanks Dennis Xu ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] Windows Wireless Clients- strange behavior after recent Windows Updates?

2008-10-31 Thread Dennis Xu
, I didn't see any issues. Dennis Xu Network Analyst(CCS) University of Guelph 5198244120 x 56217 - Original Message - From: Lee H Badman [EMAIL PROTECTED] To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Friday, October 31, 2008 8:29:13 AM GMT -05:00 US/Canada Eastern Subject: Re: [WIRELESS

Re: [WIRELESS-LAN] WiSM Code- Revisited

2009-01-20 Thread Dennis Xu
We upgraded to 4.2.176.0 from 4.1.185.0 and we run into a problem that sometimes the web login page cannot load on client browsers. It happens only during peak times. The WPA users seems to be fine. We may have to downgrade to 4.1.185.0. Dennis Xu Network Analyst(CCS) University of Guelph

Re: [WIRELESS-LAN] Thresholds??

2009-02-06 Thread Dennis Xu
the issue. Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Korin Munsterman | WCL IT kmuns...@wcl.american.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Friday, February 6, 2009 12:54:00 PM GMT -05:00 US

Re: [WIRELESS-LAN] Thresholds??

2009-02-06 Thread Dennis Xu
and use another web auth portal. Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Charles Bisel charles.bi...@bayerbbs.com To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Friday, February 6, 2009 1:38:23 PM GMT -05

Re: [WIRELESS-LAN] Broadcast Flood

2009-02-19 Thread Dennis Xu
WISMs have good broadcast and multicast controls by default as addressed below: http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch2_Arch.html#wp1028269 Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 - Original

IDEngines and Autoconnect

2009-03-11 Thread Dennis Xu
with this product or look for other alternatives? Any suggestions are appreciated. Thanks, Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can

Anyone use AirWave to configure Wisms and LWAPP APs?

2009-05-05 Thread Dennis Xu
It seems Airwave works very well in monitoring and reporting. I am wondering is it safe to use it to configure wisms and lwapp APs? Anyone use it for configuration jobs? Any gotchas? Do you use it to upgrade wisms? Thanks, Dennis Xu Network Analyst Computing and Communication Services

Re: [WIRELESS-LAN] WLAN Deployment-High number of users

2009-05-15 Thread Dennis Xu
are reaching the limit for /22 subnets, we are considering to change to /21 subnets this summer. Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Bruce T Johnson bjohns...@partners.org To: WIRELESS-LAN

Re: [WIRELESS-LAN] Cisco LWAPP- The change from WLAN Override to AP Groups- Pain?

2009-05-29 Thread Dennis Xu
Yes after the code upgrade, all the old WLAN override settings are gone and all the APs are put into default-group and broadcasting all SSIDs. Then you need to create AP groups and move APs to appropriate groups. Dennis Lee H Badman wrote: Thanks, Hector

WiSM 6.0.182.0

2009-08-05 Thread Dennis Xu
Has anybody upgraded to WiSM 6.0.182.0? Any feedback? Thanks! Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http

Re: [WIRELESS-LAN] FW: [WIRELESS-LAN] WiSM 5.2.193

2009-08-05 Thread Dennis Xu
. That is the same idea to prevent APs from joining WLCs before the upgrade finish. Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: John Watters john.watt...@ua.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Wednesday

Re: [WIRELESS-LAN] WiSM 6.0.182.0

2009-08-20 Thread Dennis Xu
reconfigure the VLAN Mappings for all HREAP APs. Not sure if that is the problem for you. So far, I haven't heard any complains from our HREAP users after the upgrade. Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message

wireless per user bandwidth control with 11n

2009-09-25 Thread Dennis Xu
control for 11n deployment? If you do, what is the your bandwidth cap? 2. If you don't apply bandwidth control, do you see any problems? Thanks, Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription

Re: [WIRELESS-LAN] wireless DHCP lease time

2009-09-30 Thread Dennis Xu
We had run 15 minutes lease time on /22 wireless public subnets for a few years without problem. We just moved our wireless subnets to private IPs and changed to 4 hours lease time this fall. Dennis - Original Message - From: Ryan Holland holland@osu.edu To:

Management Frame Protection

2010-05-28 Thread Dennis Xu
action plans after receiving the MFP alerts? Thanks! Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http

Mobile devices and NAC

2010-06-25 Thread Dennis Xu
filter to bypass NAC, how do you manage and maintain the filter list? Any suggestions are appreciated! Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent Group

Re: [WIRELESS-LAN] Mobile devices and NAC

2010-06-25 Thread Dennis Xu
. I am sure there is always ways to get around it, but it won't be so easy for normal users. NAC is more than identifying users, it also checking system health and some other things. Dennis Xu Network Analyst Computing and Communication Services University of Guelph 5198244120 x 56217

Re: [WIRELESS-LAN] Mobile devices and NAC

2010-06-28 Thread Dennis Xu
Hi Bruce, That is interesting. So Bradford has a build-in portal for users to register their MAC address? How does Bradford know the MAC address they entered is a mobile device, not a Windows computer? Thanks! Dennis Xu Network Analyst Computing and Communication Services University of Guelph

Re: [WIRELESS-LAN] Campus WLAN Design Question

2010-08-27 Thread Dennis Xu
You also need to make sure the two APs involved in user roaming hand-off can see each other as neighbors and they are controlled by the same RF group leader. Otherwise users will change IP during roamings. Dennis Xu Network Analyst Networking and Security Cluster Computing and Communication

Re: [WIRELESS-LAN] Campus WLAN Design Question

2010-08-27 Thread Dennis Xu
be fine in his case as it is a single controller environment, so no rf group really. --- Justin Hao On Aug 27, 2010, at 1:10 PM, Dennis Xu d...@uoguelph.ca wrote: You also need to make sure the two APs involved in user roaming hand-off can see each other as neighbors and they are controlled

Re: [WIRELESS-LAN] Link LDAP groups to Separate SSIDs for Authentication

2011-01-24 Thread Dennis Xu
(with Cisco WLC, it is called-station-id) == 802.1x SSID and LDAP.Group == Faculty/Staff, then Permit_Access. 3. If anything else, deny_access. --- Dennis Xu Network Analyst Networking and Security Cluster Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message

Re: [WIRELESS-LAN] Cisco WLC code

2011-03-23 Thread Dennis Xu
We have seen the similar webauth issue with both 4.x and 5.x code. We tried many different versions with no luck. Then we decided to stop doing webauth on WLC. We made the wlan open auth and do web auth on external web auth server. Then we don't have this headache any more. --- Dennis Xu

MAC OS connection issue on secure wireless network

2011-05-25 Thread Dennis Xu
in the morning. Usually they don't have problem using wireless on campus during the day. Sometime we do see users having this problem after roaming from one location to another on campus. The MACbooks are running version 10.6.7. Has anyone seen this problem as well? --- Dennis Xu Network Analyst, Computing

Re: [WIRELESS-LAN] MAC OS connection issue on secure wireless network

2011-05-26 Thread Dennis Xu
Thanks Jeff. I will open a TAC case and test 7.0.116. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Jeff Hagley hagl...@internet2.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Wednesday, May 25

Re: [WIRELESS-LAN] GD code version for Cisco 4402 WLC

2011-08-05 Thread Dennis Xu
We have upgraded three wism modules from 7.0.98 to 7.0.116 for about one month and we haven't seen any issues. The upgrade fixed some connectivity issues for MacBook. The TAC engineer couldn't identify the MacBook connectivity issue as a bug but the upgrade did fix it. --- Dennis Xu Network

Wi-Fi connection issue when switching SSIDs

2011-09-13 Thread Dennis Xu
for Windows especially when switching from open SSID to 802.1x SSID. This only happens when switching SSIDs. Has anyone else seen this issue? Thanks. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription

Re: [WIRELESS-LAN] Wi-Fi connection issue when switching SSIDs

2011-09-13 Thread Dennis Xu
Thanks Jimmy! Fast SSID change was disabled (default) on my controllers. I enabled it and did a few tests. That seems to have fixed the issue! --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: James

Re: [WIRELESS-LAN] Wi-Fi connection issue when switching SSIDs

2011-09-13 Thread Dennis Xu
More info about the Fast SSID feature.. This is TAC's answer about why it is disabled by default: It is disabled by default as a protection mechanism against DoS attacks from malicious clients. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120

Re: [WIRELESS-LAN] Issue with Microsoft NPS certs and ipads/iphones

2011-09-19 Thread Dennis Xu
We use the same certificate on two ACS servers for PEAP authentication to avoid the certificate warning when user connects to the 2nd ACS server. We haven't seen any issues with that. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217

Re: [WIRELESS-LAN] Issue with Microsoft NPS certs and ipads/iphones

2011-09-20 Thread Dennis Xu
, this may not work. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Bruce W Osborne bosbo...@liberty.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Tuesday, September 20, 2011 7:19:31 AM Subject: Re

Re: [WIRELESS-LAN] Cisco APs losing CAPWAP session

2012-02-01 Thread Dennis Xu
and we are considering that. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Dan Brisson dbris...@uvm.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Wednesday, February 1, 2012 12:31:02 PM Subject: Re

Re: [WIRELESS-LAN] Cisco Bonjour gateway webinar- anyone attend?

2012-07-26 Thread Dennis Xu
I think the Bonjour gateway solution does not rely on multicast to deliver Bonjour services. It is all unicast. The controller returns the service list to the client by unicast and the client connects to Apple TV by unicast as well. --- Dennis Xu Network Analyst, Computing and Communication

Re: [WIRELESS-LAN] SV: [WIRELESS-LAN] FWD: [WLAN] Fwd: Advance notice: Microsoft Windows 8 and Cisco centralised wireless incompatibility.

2012-08-30 Thread Dennis Xu
Does this problem happen when the WLAN is configured with WPA2/AES only? What if the WLAN is configured with WPA/TKIP and WPA2/AES? will the Windows 8 client connect with WPA/TKIP in this case? --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x

Verifiy PEAP server certificate on Win8

2012-09-21 Thread Dennis Xu
thumbprint. There is no way for users to verify certificate like this. How would you resolve this? Thanks. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 ** Participation and subscription information for this EDUCAUSE Constituent

Re: [WIRELESS-LAN] Wireless Design

2012-10-23 Thread Dennis Xu
exist? Thanks. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Bruce Boardman board...@syr.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Tuesday, October 23, 2012 11:55:31 AM Subject: Re

Re: [WIRELESS-LAN] Wireless Design

2012-10-23 Thread Dennis Xu
Yes ACE is radius session aware. Radius stickiness has been configured for ACS servers. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Bruce Boardman board...@syr.edu To: d...@uoguelph.ca, WIRELESS

Re: [WIRELESS-LAN] Turning off 802.11B and Android oddities

2012-11-27 Thread Dennis Xu
We have disabled B for several years. But we did not disable 6 9 for G. We haven't seen any issues. Kindle Fire definitely works here. I think the issue is related to the disable of 6 9. --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x

Re: [WIRELESS-LAN] Turning off 802.11B and Android oddities

2012-11-27 Thread Dennis Xu
12M: Mandatory 1,2,5.5,11M: Disabled All other data rates: Supported --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217 - Original Message - From: Eric T. Barnett ebarn...@astate.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent

Resources spent on rogue AP control

2013-04-10 Thread Dennis Xu
policies, would you mind share with me the size of your wireless network(number of APs) and the resources(number of FTEs) spent on this job? That will be very useful to us. Much appreciated! --- Dennis Xu Network Analyst, Computing and Communication Services University of Guelph 5198244120 x 56217

Re: [WIRELESS-LAN] WiSM-1 to WiSM-2 migration strategy....

2013-07-31 Thread Dennis Xu
VSS for WISMs. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Danny Eaton dannyea...@rice.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

Re: [WIRELESS-LAN] WiSM-1 to WiSM-2 migration strategy....

2013-07-31 Thread Dennis Xu
Sorry I missed one step 3) to upload the modified configuration to wism-2. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Dennis Xu d

Re: [WIRELESS-LAN] Cisco 7.5.102.0 and AppleTVs

2013-08-13 Thread Dennis Xu
I think the major mdns enhancement on 7.5 is that AP can forward mdns advertisements from wired side to controller. So wireless client can see Apple TV on wired as long as it is on the same vlan with the AP. http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn75.html#wp784178

Re: [WIRELESS-LAN] Cisco WLC dynamic channel assignment (DCA) interval

2013-10-03 Thread Dennis Xu
We set this to be 1 hour. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Jeffrey Sessler j...@scrippscollege.edu To: WIRELESS-LAN

Re: [WIRELESS-LAN] Cisco WLC dynamic channel assignment (DCA) interval

2013-10-04 Thread Dennis Xu
the default 10 minutes interval is too aggressive and 24 hours is too long. We started with 1 hour to see how it went and we haven't had any issues. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca

Wireless authentication issue after certificate renew

2013-10-10 Thread Dennis Xu
the certificate renewal process seamless. Has anyone experienced this issue as well and do you have any solutions? Thanks in advance. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca

Re: [WIRELESS-LAN] Wireless authentication issue after certificate renew

2013-10-23 Thread Dennis Xu
with our certificate provider Thawte and they said it is Apple's issue. Could you let me know how the CloudPath XpressConnect Wizard can avoid this issue? --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d

Re: [WIRELESS-LAN] Wireless authentication issue after certificate renew

2013-10-24 Thread Dennis Xu
Thanks Ryan for this information. I am interested to know how products like CloudPath XpressConnect can make this process seamless to users. If any XpressConnect customers can elaborate on this, that will be great! Thanks. --- Dennis Xu Analyst 3, Network Infrastructure Computing

BlackBerry Z10 issue with 802.1x authentication

2013-11-15 Thread Dennis Xu
certificates are configured on ACS. The Z10 can connect to our open SSID. Any advices? Thanks. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs ** Participation

Re: [WIRELESS-LAN] 802.11k

2013-11-20 Thread Dennis Xu
back this change. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Alan Nord an...@macalester.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU

Re: [WIRELESS-LAN] BlackBerry Z10 issue with 802.1x authentication

2013-11-20 Thread Dennis Xu
As I mentioned in another thread, this issue was caused by the implementation of 802.11k support. We are using Cisco WISM2s version 7.4.110.0. Dennis - Original Message - From: Dennis Xu d...@uoguelph.ca To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Friday, November 15, 2013 1:27:58 PM

Re: [WIRELESS-LAN] loadbalacing WPA2 802.1X traffic between controller and radius servers

2013-11-27 Thread Dennis Xu
it not working with some controllers. In the end, we had to deploy separate radius servers(in active/standby mode) for Eduroam. I would say the radius stickiness behind loadbalancer should work fine if you have good control over all the NAS devices. --- Dennis Xu Analyst 3, Network Infrastructure

Re: [WIRELESS-LAN] dropped connections on Macbooks with Cisco WLC 7.6.100.0

2014-01-24 Thread Dennis Xu
I haven't heard reports of this issue in our 7.4.110.0 environment. We have enabled Sticky PMKID Caching. Not sure if that makes any differences. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d

Re: [WIRELESS-LAN] Cisco Controller Code

2014-08-14 Thread Dennis Xu
Has anyone run the 7.4 MR3 Beta code 7.4.122.23? --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Eric T. Barnett ebarn...@astate.edu

Re: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

2014-09-08 Thread Dennis Xu
It sounds great. But I still have concerns about the interference. We have been educating people not to cause interference to campus WiFi network and then encouraging people to use Bluetooth for ATV just sounds like self-contradicting to me. Is it just me having this concern? --- Dennis Xu

Re: [WIRELESS-LAN] Apple TV BLE discovery when connected via wired

2014-09-08 Thread Dennis Xu
Yes the ATV is on wired but the client(who uses BLE to discovery ATV) is always on wireless, which means the campus WiFi network is around. So this Bluetooth thing could still be disruptive to WiFi. It doesn't scare me neither based on its low Tx power but still a concern. --- Dennis Xu

Re: [WIRELESS-LAN] guest wireless

2014-09-09 Thread Dennis Xu
. eduroam: WPA2/Enterprise. Only certain ports are opened(such as http/https, VPN, secure email ports, etc). Our goal is to make uog-wifi guest only by end of this year. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext

Re: [WIRELESS-LAN] iOS 8 drops tomorrow

2014-09-18 Thread Dennis Xu
wireless deployments. Anyone see the same issue? --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Jeffrey Sessler j...@scrippscollege.edu

Re: [WIRELESS-LAN] iOS 8 drops tomorrow

2014-09-18 Thread Dennis Xu
Actually there is not an option to add attachment in ios email app. I was just trying to attach a photo to the message and I did that by tapping on the email body area and selecting Insert photo or video. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services

Re: [WIRELESS-LAN] Cisco Security Advisory: GNU Bash Environmental Variable Command Injection Vulnerability

2014-09-29 Thread Dennis Xu
Good news. They just moved WLC to Not Vulnerable. --- Dennis Xu Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Eric T. Barnett ebarn...@astate.edu

Re: [WIRELESS-LAN] windows client intermittent drops of connection wlc 7.6

2014-10-02 Thread Dennis Xu
) - DHCP Address Assignment Required is checked The only big difference is the CCKM . Can you try to disable it? Dennis Xu - Original Message - From: Matt Ashfield (NBCC) matt.ashfi...@nbcc.ca To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Thursday, October 2, 2014 1:50:51 PM

some users can connect to open SSID but not the 802.1X SSID

2014-11-27 Thread Dennis Xu
to the open SSID. Has anyone had this issue? Thanks. Dennis Xu ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Re: [WIRELESS-LAN] New Device Activation WLAN

2015-01-15 Thread Dennis Xu
Thanks Curtis. Good to know this DNS ACL feature works with non-ISE third party NAC solutions. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs

Re: [WIRELESS-LAN] New Device Activation WLAN

2015-01-09 Thread Dennis Xu
successfully deployed the Cisco WLC DNS ACL feature? --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Trent Hurt

Re: [WIRELESS-LAN] PEAP cert question

2015-03-17 Thread Dennis Xu
certificates to the devices. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: Eric T. Barnett ebarn...@astate.edu

Re: [WIRELESS-LAN] Cisco 2702 APs and MacOS security error?

2015-03-30 Thread Dennis Xu
:703 TKIP MIC errors reported in EAPOL key msg from client 28:cf:da:ee:51:52 I opened a case with TAC. TAC required the debug client output but I have not been able to collect that yet. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS

LAP/WLC MIC lifetime expiration causes DTLS failure

2015-03-23 Thread Dennis Xu
https://tools.cisco.com/bugsearch/bug/CSCuq19142 --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs ** Participation and subscription information

Use Multicast Mode for WLC

2015-05-07 Thread Dennis Xu
to use it. So another concern is what if somebody start to use the same multicast group with the WLC-AP group and how will that affect the wireless infrastructure? Thanks! --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University

Eduroam authentication question with AD

2015-09-03 Thread Dennis Xu
AD domain does not match the main domain? If you have the same issue, what are your solutions? Thanks. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uogue

Re: [WIRELESS-LAN] Eduroam authentication question with AD

2015-09-03 Thread Dennis Xu
account team so they can communicate it via a Product Enhancement Request (PERS) to the developers. --- Too bad Cisco only fixed this for ISE, but not for ACS5. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS

client association faillure (Maximum number of clients reached on the AP Radio)

2015-09-20 Thread Dennis Xu
ients again(stopped purging the old clients) and we still get this trap from these two APs. It seems like a bug and TAC does not have a solution yet. Has anyone seen this issue in your environment? Thanks. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communi

Re: [WIRELESS-LAN] Cisco WLC software upgrade

2015-09-22 Thread Dennis Xu
have much less clients than 200(from the "show ap auto-rf 802.11b AP_name" command). We have opened a case but no solutions so far. A new bug ID CSCuq34201 has just been filled. --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Se

Cisco WLC CPU ACL

2015-12-15 Thread Dennis Xu
Has anyone implemented CPU ACL on Cisco WLCs and any lessons learned? I would like to apply CPU ACLs to protect WLC dynamic interfaces and hope it will not break anything. :) Thanks! --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS

Re: [WIRELESS-LAN] Wireless 802.1X client exclusions timeout issues

2016-06-02 Thread Dennis Xu
We have Cisco WISM2 controllers with client exclusion enabled at 30 seconds. From time to time, I do see some users in the blacklist but we never need to remove them manually. And I don't recall anyone ever called us for being blacklisted. Dennis Xu, MASc, CCIE #13056 Analyst 3, Network

Re: [WIRELESS-LAN] Zigbee products

2016-02-11 Thread Dennis Xu
Definitely Zigbee can interfere with WiFi as they work on the same frequency band. This paper has more studies: http://www.mobiusconsulting.com/papers/ZigBeeandWiFiInterference.pdf --- Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS

Re: [WIRELESS-LAN] WLC 5508 logging authentications

2016-03-03 Thread Dennis Xu
Hi John, You are right that WLCs do not log authentication sessions in syslog. Do you have Radius servers to authenticate wireless users? Radius server is the better place to collect authentication logs. Regards, Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing

Re: [WIRELESS-LAN] WLC 5508 logging authentications

2016-03-03 Thread Dennis Xu
in CallingStationID . We search in accounting logs because those give us the session start and stop times. Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs

Re: [WIRELESS-LAN] WLC 5508 logging authentications

2016-03-03 Thread Dennis Xu
. Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: "John York" <yo...@brcc.edu> To: WIRELESS-LAN@LISTS

Re: [WIRELESS-LAN] Who WiFi vendors does everyone use? REVISITED

2016-04-04 Thread Dennis Xu
University of Guelph 18,000 concurrent users Cisco WISM2 controllers 8.0 and 1000 c1131/1140/3602/3702APs Aruba 7240 controller and 70 225 APs(in pilot) Cisco Prime Infrastructure 3.0 and Aruba AirWave 8.0 Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing

Re: [WIRELESS-LAN] Turning off 2.4 on a select SSID?

2016-04-15 Thread Dennis Xu
. Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca www.uoguelph.ca/ccs - Original Message - From: "Ryan H Turner" <rhtur...@email.unc.edu>

RADIUS Servers Load Balancing

2016-07-06 Thread Dennis Xu
stickiness(by calling-station-ID). Has anyone deployed RADIUS load balancing without using stickiness? Thanks. Dennis Xu, MASc, CCIE #13056 Analyst 3, Network Infrastructure Computing and Communications Services(CCS) University of Guelph 519-824-4120 Ext 56217 d...@uoguelph.ca

Re: Cisco 1810W subtleties

2017-02-16 Thread Dennis Xu
ireless controllers to handle wired traffic so we did not go this way. Most of configuration steps above are just one time setup unless you need to create new wired vlans in residence which is rare in our case. Dennis Xu University of Guelph From: The EDUCAU

  1   2   >