Re: [WIRELESS-LAN] MAC OS connection issue on secure wireless network

2011-05-26 Thread Dennis Xu
Thanks Jeff.

I will open a TAC case and test 7.0.116. 

---
Dennis Xu
Network Analyst, Computing and Communication Services
University of Guelph
5198244120 x 56217

- Original Message -
From: Jeff Hagley hagl...@internet2.edu
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Sent: Wednesday, May 25, 2011 10:51:13 AM
Subject: Re: [WIRELESS-LAN] MAC OS connection issue on secure wireless network

Dennis,
We had a similar problem earlier this year.  After talking with the TAC it was 
determined to be a known bug and they had us install a beta code release.  
Cisco has since released an update that is supposed to fix the problem, 
7.0.116.  I would try updating to that and seeing if your problem goes away, 
updating fixed it for me.  Thanks

Jeff Hagley, System Administrator
Internet2
1000 Oakbrook Dr., Suite 300
Ann Arbor, MI 48104
(734) 352-4247 - Office | (734) 652-4687 - Mobile
(734) 913-4255 - Fax

Visit our website: www.internet2.edu
Follow us on Twitter: www.twitter.com/internet2
Become a Fan on Facebook: www.internet2.edu/facebook

On May 25, 2011, at 6:57 AM, Dennis Xu wrote:

 We see this problem with MAC users on secure wireless network. When users 
 bring MACbook from home to campus, they cannot connect to campus secure 
 wireless network (WPA2 enterprise). From the debugs at WISMs(ver 7.0.98), we 
 see wisms send EAP requests to the client, but client never response to it. 
 The ACS server shows errors about authentication requests timeout. After 
 toggle the Airport off and on, we see the client response to EAP requests 
 immediately and they can connect successfully. This problem mostly happens 
 when the users arrive campus and open laptop first thing in the morning. 
 Usually they don't have problem using wireless on campus during the day. 
 Sometime we do see users having this problem after roaming from one location 
 to another on campus. The MACbooks are running version 10.6.7. Has anyone 
 seen this problem as well?
 
 ---
 Dennis Xu
 Network Analyst, Computing and Communication Services
 University of Guelph
 5198244120 x 56217
 
 **
 Participation and subscription information for this EDUCAUSE Constituent 
 Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Cisco outdoor mesh in use?

2011-05-26 Thread Lee H Badman
I've played with the outdoor mesh part of Cisco controller based wireless, but 
not in prod- tapping streetlight power, figuring out how to mount on poles that 
don't necessarily want thinks mounted on them, etc.  For those who gone the 
real mesh route in outdoor areas on campus- especially with Cisco, can you 
talk about success, frustration, and pain points? Obviously good design 
matters, but beyond that, what's the general satisfaction level?

Thanks-

Lee Badman



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



changing of the guards

2011-05-26 Thread Randall C Grimshaw
We are preparing to change the authentication server certificates on our 802.1x 
network. Can anyone please share their experience? Corner cases, OS 
mis-behavior, Client experience any other helpful tips.
Thank you in advance.

Randall Grimshaw rgrim...@syr.edu

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] Cisco outdoor mesh in use?

2011-05-26 Thread Mike King
I'm not at the campus that I hung Cisco 1505's on poles anymore, but I drive
by it everyday, and they are still there.

We were an early beta for the Airespace 1300's (Now Cisco 1505's), but the
mounting hardware doesn't change much.

There was a large aluminum bracket that mounted on the pole arm,
http://www.cisco.com/en/US/docs/wireless/access_point/1500/mounting/installation/guide/1500plmt.html
and a power tap that you took the light sensor off the street light, put
this on, and put the light sensor back in.

http://www.cisco.com/en/US/docs/wireless/access_point/1520/mounting/installation/guide/1520mountInst.html#wp40708

We signed a non-metered agreement with the power company that we paid a set
charge per month per pole.  They restricted us to poles that only had a
light arm, and wires that crossed the pole.   If the pole had a transformer,
had wires that branched (say at an intersection), or if they didn't like the
pole selection, we were barred from using the pole.

We had to replace the pole arms on two lights, because they were of an older
type, and the power company didn't think it would support the additional
weight.

Finally, when we did the installation, we were required to have an
electrician that was certified to work in the high voltage space actually do
the install.  Our state also requires a policy detail (minimum of 4 hours)
for any work that occurs in a public way.

We originally mounted in 2005, and I think we had to replace them in
2006-2007 with the actual 1505 model's because the 1300 were non-standard
(Each was custom built beta units) and could not run later versions of the
code.

They originally went up to support Bus Location Tracking (paid via a
transportation grant, IT didn't get the grant, we just provided the network
coverage).  I know just before I left, the Bus tracking had gone to the
wayside (Easier, better ways to do it) but we were pushing College ID Debit
card readers over IP out to local businesses.

I know they still use them, and when I managed them, they didn't really have
any problems that a better design would not have corrected.  (We were beta,
so site survey's, plus limited pole selection in the downtown area made
things a little dicey on one of the links)

Mounting on the poles is not usually the hard part.  It's getting permission
to be on the pole that is difficult.

Mike


On Thu, May 26, 2011 at 11:14 AM, Lee H Badman lhbad...@syr.edu wrote:

  I’ve played with the outdoor mesh part of Cisco controller based
 wireless, but not in prod- tapping streetlight power, figuring out how to
 mount on poles that don’t necessarily want thinks mounted on them, etc.  For
 those who gone the “real mesh” route in outdoor areas on campus- especially
 with Cisco, can you talk about success, frustration, and pain points?
 Obviously good design matters, but beyond that, what’s the general
 satisfaction level?



 Thanks-



 Lee Badman




  ** Participation and subscription information for this EDUCAUSE
 Constituent Group discussion list can be found at
 http://www.educause.edu/groups/.



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Dual radio APs, .11n on 2.4ghz radios or not?

2011-05-26 Thread Craig Simons
Design question for you all:

Currently we have b/g enabled on our 2.4ghz radios and a/n on our 5ghz radios 
as carrot to entice users to buy/use a 5ghz capable wireless adapter. However, 
even with band preferencing enabled (or steering depending on the vendor), we 
still have a 75/25% split of 2.4 to 5 users.

So my question is this, is there any point of enabling .11n on the 2.4 radio 
given that it will be in protection mode most of the time? As I can't really 
enable channel bonding on the 2.4 band to get the real speed increases of .11n, 
will users still get better performance overall. More importantly, would I get 
better performance in a user dense environment (more packets transmitted by 
.11n clients in the same time-slice thereby freeing up the channel for other 
clients, etc)?

I'm of the opinion that guaranteeing great wireless performance is a lost cause 
on the 2.4 band, but I'd like to tweak as many things as possible to get the 
best performance in dense areas.

Regards, 
 Craig

--
Craig Simons
Network Operations
Simon Fraser University
Burnaby BC, Canada
em. craigsim...@sfu.ca
ph. 778-782-8036
ce. 604-649-7977
tw. twitter.com/simonscraig
-- 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] Dual radio APs, .11n on 2.4ghz radios or not?

2011-05-26 Thread Rick Brown


  
  
Craig,

Enabling N on the 2.4 is not a lost cause and will help improve
performance if the coverage has been designed properly.  As of June
1st we are disabling 11B and all 11G rates below 12Mbps.  

In order to help steer people to the 5Ghz band we have created an
SSID that is only broadcast in that band and publicized it as higher
performance.

Rick




On 5/26/2011 2:22 PM, Craig Simons wrote:

  Design question for you all:

Currently we have b/g enabled on our 2.4ghz radios and a/n on our 5ghz radios as carrot to entice users to buy/use a 5ghz capable wireless adapter. However, even with band preferencing enabled (or steering depending on the vendor), we still have a 75/25% split of 2.4 to 5 users.

So my question is this, is there any point of enabling .11n on the 2.4 radio given that it will be in protection mode most of the time? As I can't really enable channel bonding on the 2.4 band to get the real speed increases of .11n, will users still get better performance overall. More importantly, would I get better performance in a user dense environment (more packets transmitted by .11n clients in the same time-slice thereby freeing up the channel for other clients, etc)?

I'm of the opinion that guaranteeing great wireless performance is a lost cause on the 2.4 band, but I'd like to tweak as many things as possible to get the best performance in dense areas.

Regards, 
 Craig

--
Craig Simons
Network Operations
Simon Fraser University
Burnaby BC, Canada
em. craigsim...@sfu.ca
ph. 778-782-8036
ce. 604-649-7977
tw. twitter.com/simonscraig
-- 

**
Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.




-- 
  
  

**
Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.