Some of this is due to non-802.1x capable devices- iPhones, iPAQs that didn't ship with Odyssey clients, other oddballs. These account for a sizeable fraction of our non-compliant devices, but certainly not all.
Lee H. Badman Wireless/Network Engineer Information Technology and Services Syracuse University 315 443-3003 -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[EMAIL PROTECTED] On Behalf Of Lee, Steven Sent: Wednesday, February 27, 2008 10:31 AM To: [email protected] Subject: Re: [WIRELESS-LAN] 802.1x and Password issues! Pete, Thanks for sharing your experience with your migration. I'm just curious as to what contributed to the recent decline in compliance? Is it just the yearly churn of incoming students? or some other factor? Steve Lee -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[EMAIL PROTECTED] On Behalf Of Peter P Morrissey Sent: Wednesday, February 27, 2008 9:21 AM To: [email protected] Subject: Re: [WIRELESS-LAN] 802.1x and Password issues! > > PS: our 802.1x is optional. We still don't know if it's not successful > because our implementation is cumbersome, or just because users > want ultimate convenience ;-) It is very hard to get people to switch, but ultimate convenience was actually our main selling point. They used to have to log in via the web every time they connected. Now they just open up the laptop and their own. I've gotten a lot of good feedback about that. The hardest part was getting over the hump of initial config. We had to have a multi-pronged attack with a major support and marketing campaign. We had to impose a deadline backed up by a bandwidth penalty for those who did not switch. We got about 85% compliance. It may have fallen closer to 80% recently. We are looking to buy the IDEngines config tool which automates the config very nicely for multiple platforms. Pete Morrissey > > > ---------------------------------- > Philippe Hanset > University of Tennessee, Knoxville > Office of Information Technology > Network Services > 108 James D Hoskins Library > 1400 Cumberland Ave > Knoxville, TN 37996 > Tel: 1-865-9746555 > ---------------------------------- > > On Tue, 26 Feb 2008, Frank Bulk wrote: > > > Philippe: > > > > IIRC, there was an issue with some RADIUS servers that was causing the > > supplicant not to prompt the user to enter their new password. Is that > your > > concern? > > > > Regards, > > > > Frank > > > > -----Original Message----- > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > > [mailto:[EMAIL PROTECTED] On Behalf Of Philippe Hanset > > Sent: Tuesday, February 26, 2008 1:30 PM > > To: [email protected] > > Subject: [WIRELESS-LAN] 802.1x and Password issues! > > > > All, > > > > How do you deal with 802.1x (eg: WPA2 EAP-PEAP) when: > > > > - your campus has a 6 months password change policy and > > - your email and 802.1x are sharing the same password (AD or LDAP) and > > - your users are storing the password on the supplicant and > > - those users don't realize that when they change their password they > have > > to change their supplicant password as well? > > > > Experience, thoughts? > > > > Do you have a lot of calls in your help desk related to this? > > If you had this issue how did you solve it? > > > > Thanks, > > > > Philippe > > > > ---------------------------------- > > Philippe Hanset > > University of Tennessee, Knoxville > > Office of Information Technology > > Network Services > > ---------------------------------- > > > > On Thu, 21 Feb 2008, Jon Freeman wrote: > > > > > FYI - this configuration does not conform to the 802.11 > specifications. > > > > > > Regards, > > > Jon > > > 303-808-2666 > > > > > > > > > -----Original Message----- > > > From: Philippe Hanset [mailto:[EMAIL PROTECTED] > > > Sent: Thursday, February 21, 2008 12:43 PM Pacific Standard Time > > > To: [email protected] > > > Subject: Re: [WIRELESS-LAN] Using 4 channels rather then 3 for > the > > 2.4ghz wifi > > > > > > Nick, > > > > > > We have been doing 1-4-7-11 > > > (but 1-4-8-11 makes more sense) > > > since 2000 and even with 802.11g we still like it. > > > The loss that you get from overlapping is largely regained by > > > having a 4th channel. > > > Other sources advise to play with smaller cell and reducing the > milliwatts > > > emitted from the AP instead of using 4 channels! > > > CIROND published a paper about the usage of 4 channels as well, > > > (search for CIROND, 4 channels, 802.11b...) warning that though it > > > is acceptable with CCK, it might create > problems > > > with OFDM! > > > > > > Philippe > > > > > > > > > ---------------------------------- > > > Philippe Hanset > > > University of Tennessee, Knoxville Office of Information > > > Technology Network Services > > > 108 James D Hoskins Library > > > 1400 Cumberland Ave > > > Knoxville, TN 37996 > > > Tel: 1-865-9746555 > > > ---------------------------------- > > > > > > On Thu, 21 Feb 2008, Urrea, Nick wrote: > > > > > > > We have a large study room at UC Hastings which accommodates up to > 150 > > > > students. > > > > > > > > On average I see about 80-100 users using the wifi in the room. > > > > > > > > To load balance the wifi in the room I have setup 4 APs. > > > > > > > > Right now we use the 3 non-overlapping 2.4ghz channels, 1, 6, and > 11. > > > > > > > > The 4 APs are line of sight with each. > > > > > > > > Do you think it would be a good idea to go to 4 channels instead 3 > > > > > > > > Ex: (1, 4, 8, 11) > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ---- > > > > > > > > Nicholas Urrea > > > > > > > > Information Technology > > > > > > > > UC Hastings College of the Law > > > > > > > > [EMAIL PROTECTED] > > > > > > > > x4718 > > > > > > > > > > > > > > > > > > > > ********** > > > > Participation and subscription information for this EDUCAUSE > Constituent > > Group discussion list can be found at http://www.educause.edu/groups/. > > > > > > > > > > ********** > > > Participation and subscription information for this EDUCAUSE > Constituent > > Group discussion list can be found at http://www.educause.edu/groups/. > > > > > > > > > > ********** > > Participation and subscription information for this EDUCAUSE Constituent > > Group discussion list can be found at http://www.educause.edu/groups/. > > > > ********** > > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. > > > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
