At Dartmouth, we use the free eduroam tool to onboard our PEAP/MS-CHAPv2 eduroam SSID, which is our only 802.1x WLAN. It works really well for us. Occasionally I argue for switching to EAP-TLS, at that point we’d switch to a tool that does the certificate provisioning.
thx, felix From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Lee H Badman <000000db5b77bd95-dmarc-requ...@listserv.educause.edu> Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Date: Wednesday, April 7, 2021 at 10:05 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] WLAN onboarding Hello everyone, hope your semesters are going along smoothly and that you are all staying healthy. As always- this message is not an invite for vendors to contact me. Looking out down our short timeline, we need to make a number of decisions about various aspects of our WLAN operations. One of these decision points is if/how to do the 802.1X onboarding after our current solution goes End of Everything at year’s end. To that end, I’m looking for any and all feedback on these questions: - If you are using PEAP/MS-CHAP v2, what is your onboarder of choice (even if none, with manual config as methodology)? -If you are doing PEAP-TLS, what is your onboarder of choice? -Have you recently piloted any onboarders that you just hate for any reason? -For those using eduroam as your 802.1X environment, have you found the free configuration tool to be reliable? Any downsides to using it at scale? Interested in 3rd party, native, whatever. Thanks as always, Lee Badman Lee Badman | Network Architect (CWNE#200) Information Technology Services (NDD Group) 206 Machinery Hall 120 Smith Drive Syracuse, New York 13244 t 315.443.3003 e lhbad...@syr.edu<mailto:lhbad...@syr.edu> w its.syr.edu Campus Wireless Policy: https://answers.syr.edu/display/network/Wireless+Network+and+Systems<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fanswers.syr.edu%2Fdisplay%2Fnetwork%2FWireless%2BNetwork%2Band%2BSystems&data=04%7C01%7Cfelix.windt%40DARTMOUTH.EDU%7C7cb6c22c50fb4e438e0f08d8f9ce3dfe%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C637534011487171947%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=EilADrTrK3CeglofZ54N1qU1iGDy8B0OvvYF6e3WezE%3D&reserved=0> SYRACUSE UNIVERSITY syr.edu ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=04%7C01%7Cfelix.windt%40DARTMOUTH.EDU%7C7cb6c22c50fb4e438e0f08d8f9ce3dfe%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C637534011487181939%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=CyZMYMuPIzXnYxL%2BaOLitxCoE6TyLX21o%2BxGuLHfjAA%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
