On the metrics, is there any way of showing how many of the Eduroam clients are bona ride visitors versus your own clients on the Eduroam SSID? That's the real delta I'm curious about in general- how many true visitors using it.
Thanks, Lee Lee H. Badman Network Architect/Wireless TME ITS, Syracuse University 315.443.3003 ________________________________________ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [[email protected]] on behalf of Jason Cook [[email protected]] Sent: Monday, November 12, 2012 11:33 PM To: [email protected] Subject: Re: [WIRELESS-LAN] eduroam question(s) We keep statistics for eduroam, have attached graphs of monthly unique users for viewing. May 2011 had a large spike, this was a single person who had a new randomly generated outer identity for every authentication. We have considered just using eduroam as an SSID, but there is definitely a preference internally to keep some branding in the air. We also border with another University, if we only offered eduroam then there could be some big issues for users who get good signal from both networks. The final point of interest on that is quality of service. Do people implement a different qos for eduroam over their own network? I'm not sure on implementing qos for radius assigned networks within 1 SSID, e.g. within wireless can vlan x be provided with a different qos than vlan y for a given SSID. Not something we've ever looked into. -- Jason Cook Technology Services The University of Adelaide, AUSTRALIA 5005 Ph : +61 8 8313 4800 -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Lee H Badman Sent: Tuesday, 13 November 2012 1:12 PM To: [email protected] Subject: Re: [WIRELESS-LAN] eduroam question(s) Also... Does anyone get a bit turned off about having yet another SSID in the air, or debranding your own in favor of pushing Eduroam as your SSID? Again, just wondering. Let's task Phillipe with figuring out a way to make the Eduroam underpinnings work automagically with any SSID we choose. Can we get that by Friday? On Nov 12, 2012, at 21:36, "Lee H Badman" <[email protected]> wrote: > Nah, just like to understand the benefit before making changes. Trying > to gage how many nomadic WLAN users are really roaming from school to > school, as opposed to users connecting to it on their own campus. > Seems like a fair exercise:) > > Sent from an Etch-a-Sketch. Please excuse squiggly lines. > > On Nov 12, 2012, at 19:44, "Hanset, Philippe C" <[email protected]> wrote: > >> On Nov 12, 2012, at 6:39 PM, Lee H Badman <[email protected]> wrote: >> >>> Does anyone keep stats on how much your Eduroam efforts get used? Like, >>> other than just being in the club, is it really providing benefits that an >>> easy-to-use guest network wouldn't? Not being snarky, but genuinely >>> wondering. >>> >> >> How can you beat instant authentication with encryption over the air? >> Even an open network doesn't give that! >> I walk on a campus and my phone automatically switches from 3G to >> Wi-Fi for Data, not hitting my less than adequate quotas >> >> You are the hardest man to convince Lee ;-) >> >> Philippe >> >> >> >>>> Our email addresses are [email protected] unless there are >>>> conflicts, in which case we use a middle initial or a suffix. >>>> >>>> Our official "UTCid" is a rather arbitrary string (3 letters, 3 >>>> numbers, where that came from don't ask me, it was back in the "no-SSNs" >>>> conversion). >>>> >>>> The directory key / userID is in fact the UTCid, and is typically >>>> used as a login for everything. It's also the Active Directory ID. >>>> >>>> And now the bonus... the AD domain is in fact utc.tennessee.edu >>>> (we're a "branch" of the state's tennessee.edu domain), so there's >>>> already some confusion as to using the tennessee.edu versus utc.edu. Even >>>> worse... >>>> there are root forest entries for [email protected] as well as >>>> @utc.tennessee.edu. And of course UTK started the whole eduroam >>>> thing, and they're already taking tennessee.edu as local :( >>>> although they still take utk.edu as well. >>>> >>>> So we more or less got stuck with [email protected] to avoid the >>>> domain/realm confusion with the big orange one. >>>> >>>> I would advise you rig up your local .1X to authenticate with your >>>> fully-qualified eduroam username, just so users can consistently >>>> login with the same credentials (assuming you're not using eduroam >>>> for production .1X). >>>> >>>> Jeff >>>> >>>> On 11/12/2012 6:11 PM, Julian Y Koh wrote: >>>>> So we're looking at an eduroam deployment here, and one question that has >>>>> come up is one of credentials. Here at NU, we have 2 identifiers - the >>>>> NetID and the alias. All of the directories and the like are keyed off >>>>> of the NetID, which does not have to be the same as the alias. Top-level >>>>> email addresses take the form <alias>@northwestern.edu. >>>>> >>>>> Under a basic default eduroam deployment, a user would use >>>>> <netid>@northwestern.edu as his/her username to authenticate to the >>>>> wireless network. This is not 100% ideal from an end user point of view, >>>>> though, since that could potentially lead to some confusion since at >>>>> least here, netid rarely is the same as alias. Obviously, at some >>>>> schools, netid = alias, so this is a moot point, but have other schools >>>>> encountered support/documentation issues because of this? >>>>> >>>>> As an alternative, has anyone looking into using a subdomain for the >>>>> realm? i.e., <netid>@eduroam.northwestern.edu? >>>>> >>>>> I tried going through the FAQs and documentation at >>>>> <http://www.eduroamus.org/>, and there is some mention of avoiding >>>>> subdomains at <http://www.eduroamus.org/node/29>. >>>>> >>>>> Personally, I think with good enough documentation we should be >>>>> able to do the standard <netid>@northwestern.edu without a lot of >>>>> trouble, but we also need to do due diligence and explore these >>>>> options. :) >>>>> >>>>> Thanks!! >>>>> >>>> >>>> ********** >>>> Participation and subscription information for this EDUCAUSE Constituent >>>> Group discussion list can be found at http://www.educause.edu/groups/. >>> >>> ********** >>> Participation and subscription information for this EDUCAUSE Constituent >>> Group discussion list can be found at http://www.educause.edu/groups/. >>> >> >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found at http://www.educause.edu/groups/. > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
