We have a number of users who use iPod touch/iPad with no 3g and other such devices. At this point we just use dhcp fingerprinting for reporting purposes, but not for assigning different networks or denying access. This method just specifies IOS device, and can't tell the difference between an iPhone and an iTouch or if an ipad has 3g option... Can the vendor finger printing tell device difference? Otherwise if you could end up denying access to devices that don't have another method of access, and in the end providing our users with network access is why we have jobs.
Vote 1 for Cisco BU listening, I'm pretty sure it's a fair cost to get fingerprinting in. Though we run freeradius anyway. -- Jason Cook Technology Services The University of Adelaide, AUSTRALIA 5005 Ph : +61 8 8313 4800 e-mail: [email protected] CRICOS Provider Number 00123M -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Charlie Derr Sent: Thursday, 8 March 2012 5:27 AM To: [email protected] Subject: Re: [WIRELESS-LAN] School blocks Wi-Fi access to smartphones to address IP usage issues On 03/07/2012 01:17 PM, leo song wrote: > Assigning smart phones to specific subnets which has short DHCP lease > time doesn't seem like a long term or sustainable solution, we are > trying to implement PAT on campus wide wireless networks soon to address the > public IP shortage challenge, while keep fingers across for the tracking & > logging issues. > > On the other hand, I am just pondering whether those smart phone > really require campus wireless services in the long run, or they'd better off > to carrier? Some of us (probably the minority at this point) have lousy cell coverage on campus. > I am hoping there will be some in-depth analysis of research on this, > especially on the client expectations and costs comparison perspective. Certainly from the point of view of the user (student, faculty or staff), it's cheaper to spend less money on a smaller monthly data plan (or none at all?) and try to connect to wifi whenever possible if there's no extra charge from the school (or coffeshop, or ...) for wifi access. ~c > > On Wed, 2012-03-07 at 09:57 -0800, Pham, Loc wrote: >> Marcelo, >> The Aruba feature that allow fingerprint on the devices, do you have to >> pay extra for it to be functional ? >> >> I hope our Cisco BU is listening ;-))) >> >> Regards, >> >> Loc Pham, CCIE >> office 415-353-4492 >> IT Enterprise Security& Services >> UCSF Medical Center >> >> -----Original Message----- >> From: The EDUCAUSE Wireless Issues Constituent Group Listserv >> [mailto:[email protected]] On Behalf Of Marcelo Lew >> Sent: Thursday, February 02, 2012 10:17 AM >> To:[email protected] >> <mailto:[email protected]> >> Subject: Re: [WIRELESS-LAN] School blocks Wi-Fi access to smartphones >> to address IP usage issues >> >> Smartphones were killing us this quarter. While we only have 3500-3800 >> concurrent daily users, we have about 6500 devices connected. Most of these >> extra 3000 devices were smartphones that come online for less than a minute, >> and then go idle again. With our 30m DHCP renew times, we were exhausting >> our 5500 public IP pool for our main SSID. Instead of moving to private >> space (which most likely we will in the near future), we added 6 more class >> c subnets. We are now NOT running out of IPs, at least for a short while. >> We also thought of making the DHCP lease times very short (like 5 minutes), >> but our DHCP admin is uncertain what issues might arise from this. Another >> option we are thinking about, the new Aruba code allows fingerprinting >> devices before they are placed on a subnet, so we could put all smartphones >> in specific subnets with short lease times, and leave the rest of the >> devices (pads, netbook, notebooks, etc) on regular subnets with average DHCP >> lease times. >> >> Marcelo Lew >> Wireless Enterprise Administrator >> University Technology Services >> University of Denver >> Desk: (303) 871-6523 >> Cell: (303) 669-4217 >> Fax: (303) 871-5900 >> Email:[email protected] <mailto:[email protected]> >> >> >> >> -----Original Message----- >> From: The EDUCAUSE Wireless Issues Constituent Group Listserv >> [mailto:[email protected]] On Behalf Of Jonn Martell >> Sent: Thursday, February 02, 2012 9:22 AM >> To:[email protected] >> <mailto:[email protected]> >> Subject: Re: [WIRELESS-LAN] School blocks Wi-Fi access to smartphones >> to address IP usage issues >> >> I agree, the school newspaper only shows it from a user's perspective. >> "The smartphones are shutting down the network" while it's more"the >> network has run out of public address space and the use of private address >> space on this network is _______" >> >> We all know the major flaw in using private address space is logging and >> tracking but there are solutions to this. Shutting down access (by MAC >> block ID?) would not be one of mine. >> >> Jonn Martell, speaking as a network instructor and Director but not on >> behalf of the Universities I work at.... >> >> On Thu, Feb 2, 2012 at 8:00 AM, Frank Bulk<[email protected] >> <mailto:[email protected]>> wrote: >> > http://www.vsuspectator.com/2012/02/02/outage-linked-to-usage/ >> > >> > Looks like VSU had to make some hard choices and is blocking Wi-Fi >> > access by smartphones. Not sure why they couldn't add another RFC >> > 1918 block, but I'm sure there's more going on than the school paper >> > shared. >> > >> > Frank >> > >> > ********** >> > Participation and subscription information for this EDUCAUSE Constituent >> > Group discussion list can be found athttp://www.educause.edu/groups/. >> >> >> >> -- >> -- >> >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found athttp://www.educause.edu/groups/. >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> >> . >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found athttp://www.educause.edu/groups/. >> >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found athttp://www.educause.edu/groups/. > > -- > Leo Song, Senior Analyst & Cluster Lead Computing and Communication > Services - Networking and Security University of Guelph > (519) 824-4120 <callto:+1%28519%29%20824-4120> x 53181 > > > ********** Participation and subscription information for this > EDUCAUSE Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
