We went through the transition when we started buying 802.11n devices.  For the
most part, we advertised this change as preparing our network for higher
wireless speeds with 802.11n.  

When we cut over to WPA2/AES only on our main SSID we additionally dropped
802.11b support.  We were finding that most of the devices that were doing TKIP
were also the 802.11b only devices.  When we finally pulled the trigger we only
had less than 15 complaints from our approximate 2500 wireless users.  

So if you haven't pulled the trigger on dropping 802.11b support yet, it may
be a good time to consider doing both.

Chris Wieringa
Senior Systems Engineer
Calvin Information Technology
Calvin College

>>> On 9/28/2011 at 8:57 AM, Lee H Badman <[email protected]> wrote:
> Going back in time, there was buzz about devices lacking the math 
> co-processing power and such needed to support AES when WPA2 became 
> available, so the TKIP thing took root. It is my conjecture that any device

> of any kind manufactured in the last few years that can run WPA/TKIP 
> (enterprise) can also happily do WPA2/AES (enterprise).
> 
> Of course, that doesn’t help with all of the toys that show up only able
to 
> do WPA-pre-share... sigh.
> 
> 
> 
> Lee H. Badman
> Wireless/Network Engineer
> Information Technology and Services
> Adjunct Instructor, iSchool
> Syracuse University
> 315 443-3003
> 
> 
> All these graphs showing everyone's N clients is making me feel way behind 
> the times. We still have TKIP allowed on WPA. Has anyone else recently gone

> through the transition of disabling TKIP in order to enable N? If so, what 
> issues did you run into with older equipment (both student and institution 
> owned)?
> We're a Cisco wireless shop, I've got WCS installed but haven't had time to

> set up any kind of reporting on it yet. I know the few times I've remembered

> to check there haven't been any TKIP clients, but I'll need more than just a

> few slices in time to be sure.
> --
> Nick Kartsioukas
> Cuesta College Computer Services
> 805-546-3248
> 

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to