We are seeing more and more devices connecting via Bluetooth now at least for the initial discovery stage - this is worrying as it bypasses the security we have over who can connect to which device. I think this is a long term trend now at least on the Apple side...
From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Lee H Badman Sent: 04 March 2020 16:23 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass I wish all Enterprise vendors did this. Everything else feels like gratuitous complexity for the sake of having more to license. If the goal is "make it like at home" the notion of device registration smells funny. Although I yield this is not a simple discussion. ________________________________ From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Paul Smith <p.a.sm...@bristol.ac.uk<mailto:p.a.sm...@bristol.ac.uk>> Sent: Wednesday, March 4, 2020 10:35:57 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass That's exactly how our Aerohive private client groups work. One SSID across residences. Students get a PPSK and all devices using that key can talk to each other. Job done. Paul Smith Network Specialist (Wireless) University of Bristol IT Services 31 Great George St Bristol BS1 5QD I try to follow the University email charter - bristol.ac.uk/media-library/sites/hr/documents/wellbeing/email-charter.pdf From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Lee H Badman Sent: 04 March 2020 15:31 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass Just a quick aside on this: We are dealing with same questions for long term, but one thing that I think gets lost in these "solutions"- students don't register anything at home. Would be awesome if a bazillion PPSKs were available on same SSID. Here kid, your SSID is THIS, your password is THIS. Go to it. Nothing more needed and no one can see each other. All the casty stuff works with no network tricks. That would be the Holy Grail, to me. Lee Badman | Network Architect (CWNE#200) Information Technology Services (NDD Group) 206 Machinery Hall 120 Smith Drive Syracuse, New York 13244 t 315.443.3003 e lhbad...@syr.edu<mailto:lhbad...@syr.edu> w its.syr.edu SYRACUSE UNIVERSITY syr.edu From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Craig D Rice Sent: Wednesday, March 4, 2020 10:19 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] Device visibility in Aruba AirGroup + ClearPass We are an Aruba shop and are evaluating AirGroup + ClearPass to provide students a more home-like experience in their residence halls. That is, we would like students to be able to register and see only their registered devices. If a user registers a device in ClearPass, is that device visible to non-registered devices (or devices registered to another user) -- even if the devices are associated with the same AP? We have received conflicting answers from our Aruba SEs, account exec, and TAC, so we are hoping to learn how to limit device visibility from others who are using ClearPass. Thanks for your advice! Craig -- Craig D. Rice Director of Enterprise Infrastructure | IT [St. Olaf College] Office: +1-507-786-3631 1510 St. Olaf Avenue Northfield, MN 55057-1097 USA stolaf.edu <http://stolaf.edu/> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
