Daniel Bennett wrote:
We are looking at technologies such as Radius, Cisco Clean Access, etc. to
require our wireless client to authenticate to our network. Currently we have
an open, unsecured wireless network. What are you Higher Ed institutions
implementing to make sure that only valid users are using your wireless
networks? If your policy is to do nothing then please indicate that as well.
Our wireless rolled out early, so it was totally unsecured and open.
When we implemented Clean Access, we made no distinction between wired
and wireless clients; they were all in the same pool.
Now we're using LWAPPs and are migrating the controllers to a different
subnet, so wireless clients will have a Clean Access server of their
own, separate from any wired segment but still part of the overall
structure.
For encrypted communications, we use VPN, as our laptop users needing
encrypted wireless traffic are also likely to need VPN from home or on
the road, and it's simpler this way.
--
Regards,
-- Cal Frye, Network Administrator, Oberlin College
www.calfrye.com, www.pitalabs.com
"Once lead this people into war and they will forget there ever was such
a thing as tolerance." -- Woodrow Wilson (1856 - 1924),
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.