RE: Controlling Bonjour Zones

2013-06-05 Thread Jason Cook
Hi Peter,



Thanks for your response, it seems we are in a pretty similar state tech wise 
though you have a lot more TV's to deal with. Though we have not upgraded 
production  to 7.4 (using on our dev controller) so went straight to local  AP 
group for the one request we couldn't hold as it was required for teaching. 
Everyone else we have asked to be patient and so far that's working.  The local 
AP group is a real pain though, we already have enough of them to deal with 
which is another issue entirely.



Yeah the lack of battery in the ATV is a pain, we will probably do the same and 
connect them to wired or use a WPA2-PSK rather than dot1x.



After a discussion with our Cisco reps, the good news is that 7.5 has location 
based improvements which looks pretty good for what we want to achieve here. 
I'm not sure what detail I can provide apart from (something relevant is 
coming) so if you are interested get in contact with your local rep.



Regards



Jason



--

Jason Cook

Technology Services

The University of Adelaide, AUSTRALIA 5005

Ph: +61 8 8313 4800



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Peter Arbouin
Sent: Wednesday, 5 June 2013 3:16 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Controlling Bonjour Zones



Hello Jason,



We also use Cisco. Like you we found the bonjour gateway features worked, but 
did not provide location control. In some cases our academics have multiple 
AppleTV's in the one location and don't mind that they are all available.



In other locations, they only want to see the local Apple TV, so we have an 
ssid advertised with a name like ATV-P512 to let them know this is the apple tv 
for Building P room 512. This is a bit of a pain as we also have to create an 
ap-group for each apple tv.



We are using 802.1x and found that if the ATV is powered off, it does not store 
the time and has issues accepting a certificate. For this reason we connect the 
AppleTV using the wired port, on the same vlan that the ssid terminates on.



We actually had to turn off the bonjour gateway feature for these networks to 
achieve our goal. While this is not an ideal solution, it achieves the outcome 
we require.



Peter.



Peter Arbouin | Network Engineer
IT Networks | Information Technology Services
Queensland University of Technology
Level 3 | 88 Musk Avenue | Kelvin Grove Campus

Mob: 0402476892 | Ph: +61 7 3138 1030

Email: p.arbo...@qut.edu.auBLOCKED::mailto:bj.thomp...@qut.edu.au

CRICOS No. 00213J



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jason Cook
Sent: Monday, 27 May 2013 12:03 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Controlling Bonjour Zones



Hi,


We have Cisco wireless and are currently dev'ing up the bonjour gateway service 
release in 7.4. I know other vendors have similar workaround features and am 
interested see how people have gone with it, keen to hear from users of other 
vendors as well.



So far it all seems to work as advertised, was pretty easy setup with good 
control over what services you advertise. However I find there to be a lack of 
location control, and would like to know if anyone has implemented ways to 
control the location where the advertisements go.



For something like this we'd like to restrict the advertisements to location by 
building/level/room/AP, it will help it scale better for users devices when 
scrolling through the list of available devices to connect to like an Apple TV. 
Users in building 1 don't need to see an Apple TV in a meeting room in building 
2. Using separate SSID's is also not really a scalable solution... though does 
work of course with a dedicated subnet and multicast enabled.



We currently don't have building based networks, which would be one way to 
control advertisements. This is something we are planning, but are a while off 
yet, also the ability to go more granular than just buildings would be useful.



I've started a conversation with our local Cisco office, but am interested see 
what others may have done or believe could be useful for this.


Regards


Jason



--

Jason Cook

Technology Services

The University of Adelaide, AUSTRALIA 5005

Ph: +61 8 8313 4800

e-mail: jason.c...@adelaide.edu.aumailto:jason.c...@adelaide.edu.au



CRICOS Provider Number 00123M

---

This email message is intended only for the addressee(s) and contains 
information which may be confidential and/or copyright.  If you are not the 
intended recipient please do not read, save, forward, disclose, or copy the 
contents of this email. If this email has been sent to you in error, please 
notify the sender by reply email and delete this email and any copies or links 
to this email completely and 

RE: [WIRELESS-LAN] Non-802.1x devices on wireless...

2013-06-05 Thread Timothy Cappalli
Easiest and most effective thing to block is your single sign-on page J.



* *

*Tim Cappalli, *Network Engineer
LTS | Brandeis University
x67149 | (617) 701-7149
cappa...@brandeis.edu



*From:* Jeff Kell [mailto:jeff-k...@utc.edu]
*Sent:* Tuesday, June 04, 2013 8:29 PM
*To:* The EDUCAUSE Wireless Issues Constituent Group Listserv
*Cc:* Tim Cappalli
*Subject:* Re: [WIRELESS-LAN] Non-802.1x devices on wireless...



On 6/4/2013 8:20 PM, Tim Cappalli wrote:

We restrict some services on open. Also, as part of the registration
process, their device will be configured for eduroam and the open SSID will
be removed from their network list. They could hop back on if they want.
It's their choice.


If you have an open SSID, just be sure to make the service suck just
enough that anyone that can use the proper SSIDs, will want to use the
proper SSIDs.  You can restrict ports, protocols, bandwidth, whatever it
takes; but it has to be just adequate to cover the guest demands and just
inadequate enough to push your real users to your real SSID.

If you don't impose some restrictions, they'll use the easiest connection
everytime.

Jeff

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Non-802.1x devices on wireless...

2013-06-05 Thread Osborne, Bruce W (Network Services)
We use our open SSID for clients to register non-802.1X devices or provision 
802.1X with Cloudpath XpressConnect. Unregistered devices are captured using a 
combination of DHCP  DNS redirection. With our Aruba wireless, we redirect all 
DNS traffic to our captive portal DNS server, only allowing the outside access 
needed to provision the clients. You need a user account to register devices.

For Registered non-802.1X devices, we block our website  our Blackboard 
servers, since non-802.1X devices should not need those. Our current Guest 
wireless has a policy accept portal page and bandwidth speed restrictions to 
encourage the use of other SSIDS,



Bruce Osborne
Network Engineer
IT Network Services
 (434) 592-4229

Liberty University  |  Training Champions for Christ since 1971

From: Jeff Kell [mailto:jeff-k...@utc.edu]
Sent: Tuesday, June 4, 2013 8:29 PM
Subject: Re: Non-802.1x devices on wireless...

On 6/4/2013 8:20 PM, Tim Cappalli wrote:
We restrict some services on open. Also, as part of the registration process, 
their device will be configured for eduroam and the open SSID will be removed 
from their network list. They could hop back on if they want. It's their choice.

If you have an open SSID, just be sure to make the service suck just enough 
that anyone that can use the proper SSIDs, will want to use the proper SSIDs.  
You can restrict ports, protocols, bandwidth, whatever it takes; but it has to 
be just adequate to cover the guest demands and just inadequate enough to 
push your real users to your real SSID.

If you don't impose some restrictions, they'll use the easiest connection 
everytime.

Jeff
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Non-802.1x devices on wireless...

2013-06-05 Thread Peter P Morrissey
My only suggestion would be to be careful not to err on the side of suck. We 
did that for a while, but I really had a problem offering a service that 
sucks. It also struck me that it did not offer a welcoming environment  to 
our visitors. I agree that it is important to have incentives that gently steer 
non-guests towards the 802.1x service. Logging into a web page each time 
provides built in incentive. We also found that that limiting the time they are 
allowed to use the guest service, to the time it takes to get a temporary ID 
that can get them on 802.1x was the ideal, rather than cripple the service 
itself so that it was a frustrating experience for those who used it. We 
usually capture a phone number to cover attribution. The other advantage of the 
open SSID is that it is a good temporary solution for someone who has issues 
configuring their device for 1x. Some devices have difficulties (even using 
Xpressconnect). And when you think about it, maybe it isn't the end of the 
world if someone who can do 802.1x uses an open SSID. It happens all the time 
in coffee shops, hotels and airports all across the country.

Pete Morrissey

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jeff Kell
Sent: Tuesday, June 04, 2013 8:29 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Non-802.1x devices on wireless...

On 6/4/2013 8:20 PM, Tim Cappalli wrote:
We restrict some services on open. Also, as part of the registration process, 
their device will be configured for eduroam and the open SSID will be removed 
from their network list. They could hop back on if they want. It's their choice.

If you have an open SSID, just be sure to make the service suck just enough 
that anyone that can use the proper SSIDs, will want to use the proper SSIDs.  
You can restrict ports, protocols, bandwidth, whatever it takes; but it has to 
be just adequate to cover the guest demands and just inadequate enough to 
push your real users to your real SSID.

If you don't impose some restrictions, they'll use the easiest connection 
everytime.

Jeff
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Non-802.1x devices on wireless...

2013-06-05 Thread Timothy Cappalli
We’re also experimenting with the idea of a “nag page” when a known 802.1x
user decides to use open. Each time they connect from a browser-capable
device, they would see a page that shows the benefits of using eduroam and
what is restricted on open.



* *

*Tim Cappalli, *Network Engineer
LTS | Brandeis University
x67149 | (617) 701-7149
cappa...@brandeis.edu



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Peter P Morrissey
*Sent:* Wednesday, June 05, 2013 8:39 AM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] Non-802.1x devices on wireless...



My only suggestion would be to be careful not to err on the side of “suck.”
We did that for a while, but I really had a problem offering a service that
“sucks.” It also struck me that it did not offer a welcoming environment
 to our visitors. I agree that it is important to have incentives that
gently steer non-guests towards the 802.1x service. Logging into a web page
each time provides built in incentive. We also found that that limiting the
time they are allowed to use the guest service, to the time it takes to get
a temporary ID that can get them on 802.1x was the ideal, rather than
cripple the service itself so that it was a frustrating experience for
those who used it. We usually capture a phone number to cover attribution.
The other advantage of the “open” SSID is that it is a good temporary
solution for someone who has issues configuring their device for 1x. Some
devices have difficulties (even using Xpressconnect). And when you think
about it, maybe it isn’t the end of the world if someone who can do 802.1x
uses an open SSID. It happens all the time in coffee shops, hotels and
airports all across the country.



Pete Morrissey



*From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUWIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
*On Behalf Of *Jeff Kell
*Sent:* Tuesday, June 04, 2013 8:29 PM
*To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
*Subject:* Re: [WIRELESS-LAN] Non-802.1x devices on wireless...



On 6/4/2013 8:20 PM, Tim Cappalli wrote:

We restrict some services on open. Also, as part of the registration
process, their device will be configured for eduroam and the open SSID will
be removed from their network list. They could hop back on if they want.
It's their choice.


If you have an open SSID, just be sure to make the service suck just
enough that anyone that can use the proper SSIDs, will want to use the
proper SSIDs.  You can restrict ports, protocols, bandwidth, whatever it
takes; but it has to be just adequate to cover the guest demands and just
inadequate enough to push your real users to your real SSID.

If you don't impose some restrictions, they'll use the easiest connection
everytime.

Jeff

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: RF interference from 802.11

2013-06-05 Thread Voll, Toivo
Putting on my ex-physicist hat for a moment... Without knowing what the 
experiment is and how it and its room are shielded, it's hard to tell. That 
being said, giving the concerned faculty member the specs (power level, gain, 
frequencies) and offering to reduce the power or turn off one of the radios, or 
do a Let's try it out, and we'll turn it off if it does interfere? offer 
might work. It might also help to explain that enterprise Wi-Fi devices are 
pretty clean and do typically not radiate appreciably outside of their 
intended frequencies. Give them all the technical data necessary for them to 
make the judgment, and do it with some olive branches to avoid the impression 
that IT is running over the needs or desires of faculty but rather wants to 
work with them.

Considering that cordless phones and microwave ovens among others will cause 
just as much if not more interference on 2.4 GHz than a Wi-Fi AP, it seems to 
me that unless their surroundings have been specifically sanitized you'd not be 
introducing anything new, which could also be a point to make.

These, of course, are my personal opinions, not those of my employer.
--
Toivo Voll


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
Sent: Tuesday, June 04, 2013 5:23 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] RF interference from 802.11

Has anyone had to deal with researchers claiming that 802.11 RF causes 
interference with their laboratory experiments and apparatus?  We're getting 
rumblings out of our Physics department - they are trying to prevent APs from 
getting installed in their area because of what they say are highly sensitive 
devices that will be adversely affected.

My personal opinion iswell, I'll withhold that for now.  Anyone gone 
through this?  Thanks in advance!


-- 
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/
PGP Public Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: RF interference from 802.11

2013-06-05 Thread Chanowski, John
Because APs are a source of heat and potentially light, we have had requests 
from our Physics and Astronomy Departments that APs not be placed in certain 
temperature controlled and dark areas. Some researchers on the medical campus 
have also inquired about the effects of APs in their vicinity, but have not 
formally requested no installation or removal yet, so I think it is potentially 
a problem depending on the requirements of any particular research area.

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
Sent: Tuesday, June 04, 2013 5:23 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] RF interference from 802.11

Has anyone had to deal with researchers claiming that 802.11 RF causes 
interference with their laboratory experiments and apparatus?  We're getting 
rumblings out of our Physics department - they are trying to prevent APs from 
getting installed in their area because of what they say are highly sensitive 
devices that will be adversely affected.

My personal opinion iswell, I'll withhold that for now.  Anyone gone 
through this?  Thanks in advance!


-- 
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/
PGP Public Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Wow vision veos: Will products using Miracast be an alternative?

2013-06-05 Thread Hurt,Trenton W.
How have these types of devices effected your larger classrooms and the 
students trying to use the wifi in the same area that someone is miracast, air 
display, etc.?  Have the students seen/reported performance issues when someone 
is mirroring their display?

Thanks
Trent

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Johnson, Neil M
Sent: Tuesday, May 28, 2013 10:30 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wow vision veos: Will products using Miracast be an 
alternative?

We had a departmental IT person who insisted on trying SIX simultaneous 
Miracast connected TV's in the same classroom.

According to our spectrum analyzer, Two Miracast devices chew-up 80% - 90% of 
the available duty-cycle (they do this whether the display is static (Power 
Point Slide) or active (You-Tube stream)).

When we got to four Miracast connections we began to have picture quality 
issues, and bandwidth available for others in the area was near zero.

We talked him into using just one, and we recommended to campus that users 
avoid it, but there's not much we can do to stop it.

-Neil

--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-john...@uiowa.edu






On 5/28/13 6:54 AM, Joshua Coleman josh...@housing.ufl.edu wrote:

From my testing with a Nexus 4 and Netgear PTV-3000 using wireless and
miracast (while it may do horrible things to the sprectrum and destroy
batteries) it works fine.



Joshua Coleman | Network Infrastructure Engineer

University of Florida Department of Housing and Residence Education

PO Box 112100 | Gainesville, FL 32611-2100

office 352.392.2171 x12053 | fax 352.392.6819 | josh...@housing.ufl.edu

StrengthsQuest Top 5: Ideation, Strategic, Analytical, Adaptability,
Intellection - Find out more -
http://www.strengthsquest.com/content/141728/index.aspx

Please consider the environment before printing this email.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] on behalf of Jeff Kell
[jeff-k...@utc.edu]
Sent: Friday, May 24, 2013 11:38 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wow vision veos: Will products using Miracast
be an alternative?

On 5/24/2013 10:45 PM, Barron Hulver wrote:
 Will products using Miracast take hold and be an alternative?

 http://www.wi-fi.org/wi-fi-certified-miracast%E2%84%A2

In their FAQ...

 7.  How is Miracast related to Wi-Fi Direct?
 Wi-Fi Direct allows devices to connect directly to each other, without
 the need for a Wi-Fi
 AP, and often requiring just the push of a button. Wi-Fi Direct allows
 source and display
 devices to discover one another and provides the underlying
 device-to-device connectivity
 for Miracast.

Sounds like if you ALSO need wireless internet, you're SOL...

Jeff

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] RF interference from 802.11

2013-06-05 Thread Johnson, Neil M
We faced the same situation in a building with multiple tenants.
Researchers with labs didn't want wireless because they were concerned
that it would interfere with their equipment (They didn't want to spend
the money to shield the equipment) while people in the office spaces
wanted it.

The occupants were from two different colleges, so we told them they
needed to come up with a formal agreement on where they wanted wireless.
They never did, and I think we ended up putting wireless in the office
spaces eventually.

I feel your pain.

-Neil

-- 
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-john...@uiowa.edu






On 6/4/13 4:22 PM, Julian Y Koh kohs...@northwestern.edu wrote:

Has anyone had to deal with researchers claiming that 802.11 RF causes
interference with their laboratory experiments and apparatus?  We're
getting rumblings out of our Physics department - they are trying to
prevent APs from getting installed in their area because of what they say
are highly sensitive devices that will be adversely affected.

My personal opinion iswell, I'll withhold that for now.  Anyone gone
through this?  Thanks in advance!


-- 
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/
PGP Public Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] RF interference from 802.11

2013-06-05 Thread Heath Barnhart
I'd ask for some proof (nicely). If needed, you can get some spectrum 
analysis software to see what's actually happening in the RF space in 
their labs. Ultimately I'd leave it up to the occupants of the building 
to decide whether they want WiFi or not (and get the decision in writing).


Heath Barnhart, CCNA
ITS Network Administrator
Washburn University
Topeka, KS


On 06/04/2013 04:22 PM, Julian Y Koh wrote:

Has anyone had to deal with researchers claiming that 802.11 RF causes 
interference with their laboratory experiments and apparatus?  We're getting 
rumblings out of our Physics department - they are trying to prevent APs from 
getting installed in their area because of what they say are highly sensitive 
devices that will be adversely affected.

My personal opinion iswell, I'll withhold that for now.  Anyone gone 
through this?  Thanks in advance!


   


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] RF interference from 802.11

2013-06-05 Thread Tony Dallas
We had to deal with this also. The location in question was newly
constructed with 
shielding to prevent interference from the outside world to their very
sensitive 
equipment. The thing is, they requested an AP in that area that can be
turned on/off 
at their discretion. This goes against our policy but we made an exception
and 
installed an AP that they could unplug.
That AP's uptime (101d) matches the controllers uptime. So either they
have not 
run any test since then or they discovered no interference from wi-fi.
My guess is no interference.
  


Tony Dallas
University of Pa




On 6/4/13 5:22 PM, Julian Y Koh kohs...@northwestern.edu wrote:

Has anyone had to deal with researchers claiming that 802.11 RF causes
interference with their laboratory experiments and apparatus?  We're
getting rumblings out of our Physics department - they are trying to
prevent APs from getting installed in their area because of what they say
are highly sensitive devices that will be adversely affected.

My personal opinion iswell, I'll withhold that for now.  Anyone gone
through this?  Thanks in advance!


-- 
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/
PGP Public Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: [WIRELESS-LAN] RF interference from 802.11

2013-06-05 Thread Barron Hulver
The light on a Cisco lightweight access point can be turned off via the
command-line.  We've done this on the few APs we installed in a local
theater we own.  (Of course, you could just prime and paint over the light.)

Barron


Barron Hulver
Director of Networking, Operations, and Systems
Center for Information Technology
Oberlin College
148 West College Street
Oberlin, OH  44074
440-775-8702
http://www2.oberlin.edu/staff/bhulver/




On 6/5/13 9:29 AM, Chanowski, John wrote:
 Because APs are a source of ... potentially light, 
 we have had requests from our Physics and Astronomy Departments that APs not 
 be placed in certain ... dark areas

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
 Sent: Tuesday, June 04, 2013 5:23 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] RF interference from 802.11
 
 Has anyone had to deal with researchers claiming that 802.11 RF causes 
 interference with their laboratory experiments and apparatus?  We're getting 
 rumblings out of our Physics department - they are trying to prevent APs from 
 getting installed in their area because of what they say are highly sensitive 
 devices that will be adversely affected.
 
 My personal opinion iswell, I'll withhold that for now.  Anyone gone 
 through this?  Thanks in advance!
 
 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] RF interference from 802.11

2013-06-05 Thread Baugh, Craig
You can also turn them off through the controller. Use the Advanced tab of the 
individual access point.
Disable the LED state.
I have done this for many access point installed in student dorm rooms.

TCU Go Frogs!
//Craig Baugh


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barron Hulver
Sent: Wednesday, June 05, 2013 2:33 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] RF interference from 802.11

The light on a Cisco lightweight access point can be turned off via the 
command-line.  We've done this on the few APs we installed in a local theater 
we own.  (Of course, you could just prime and paint over the light.)

Barron


Barron Hulver
Director of Networking, Operations, and Systems Center for Information 
Technology Oberlin College
148 West College Street
Oberlin, OH  44074
440-775-8702
http://www2.oberlin.edu/staff/bhulver/




On 6/5/13 9:29 AM, Chanowski, John wrote:
 Because APs are a source of ... potentially light, we have had 
 requests from our Physics and Astronomy Departments that APs not be placed in 
 certain ... dark areas

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
 Sent: Tuesday, June 04, 2013 5:23 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] RF interference from 802.11
 
 Has anyone had to deal with researchers claiming that 802.11 RF causes 
 interference with their laboratory experiments and apparatus?  We're getting 
 rumblings out of our Physics department - they are trying to prevent APs from 
 getting installed in their area because of what they say are highly sensitive 
 devices that will be adversely affected.
 
 My personal opinion iswell, I'll withhold that for now.  Anyone gone 
 through this?  Thanks in advance!
 
 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] RF interference from 802.11

2013-06-05 Thread John York
Hmmm, the theater folks can paint the antennas with flat black lead-based paint 
or something.  We've had folks put metal inventory tags on top of the AP 
antennas--sigh.
John

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barron Hulver
Sent: Wednesday, June 05, 2013 2:33 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] RF interference from 802.11

The light on a Cisco lightweight access point can be turned off via the 
command-line.  We've done this on the few APs we installed in a local theater 
we own.  (Of course, you could just prime and paint over the light.)

Barron


Barron Hulver
Director of Networking, Operations, and Systems Center for Information 
Technology Oberlin College
148 West College Street
Oberlin, OH  44074
440-775-8702
http://www2.oberlin.edu/staff/bhulver/




On 6/5/13 9:29 AM, Chanowski, John wrote:
 Because APs are a source of ... potentially light, we have had 
 requests from our Physics and Astronomy Departments that APs not be placed in 
 certain ... dark areas

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
 Sent: Tuesday, June 04, 2013 5:23 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] RF interference from 802.11
 
 Has anyone had to deal with researchers claiming that 802.11 RF causes 
 interference with their laboratory experiments and apparatus?  We're getting 
 rumblings out of our Physics department - they are trying to prevent APs from 
 getting installed in their area because of what they say are highly sensitive 
 devices that will be adversely affected.
 
 My personal opinion iswell, I'll withhold that for now.  Anyone gone 
 through this?  Thanks in advance!
 
 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Re: Non-802.1x devices on wireless...

2013-06-05 Thread Green, William C
We are removing our open SSID for sponsored guests (and students/faculty/staff 
non-802.1x supporting devices) Friday.  It will be interesting to see what 
problems are generated.


We have had three SSIDs:   802.1x, open for sponsored guests (mostly), and an 
open commercial provider.  Sponsored guest may use 802.1x or open.  Unsponsored 
guests use the commercial provider.  Students/faculty/staff are supposed to use 
802.1x, and mostly do (the open SSID's web-redirect had login timeouts that 
were bothersome from a user perspective).  This spring the open sponsored 
guests network only had 0.47% of the client load -- most of those guests and 
not university.  One goal has been to get the loosely affiliated guests onto 
the commercial provider and off the university's networks.  So we end up with 
802.1x, open commercial provider, and an open help/landing directing to one of 
the other two and offering configuration assistance.




--
William C. Green  e-mail:  gr...@austin.utexas.edu
Director, Networking and Telecommunications   phone:   +1 512-475-9295
ITS (Information Technology Services) fax: +1 512-471-2449
University of Texas
1 University Station Stop C3800
Austin, TX  78712

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Non-802.1x devices on wireless...

2013-06-05 Thread Jason Cook
We have split non 802.1x devices into two categories. User devices like 
kindle's, and non-user/shared/infrastructure devices.



We do not provide wireless network for user devices due to a combination 
security concerns and/or too much management required  with solutions like 
hotspots, open networks, self registering etc. We have not seen a huge number 
of requests for this, so there's been no real need or push for us to develop a 
solution in this area.



For the rest we do provide a network. These devices might be building 
monitoring tools (temperature etc), shared devices like PC's on mobile trolleys 
that get wheeled around and used by anyone. We provide a WPA2-PSK, don't 
broadcast, only IT staff can enter the PSK and the device  also needs to be 
registered. There is only a handful of these... about 5. It may not be the most 
scalable solution but it certainly works for what our needs are at this stage. 
The mobile trolleys were a trial, we'd probably develop something around 
creating accounts in the dot1x space if that becomes common.



Regards



Jason



--

Jason Cook

Technology Services

The University of Adelaide, AUSTRALIA 5005

Ph: +61 8 8313 4800



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Danny Eaton
Sent: Wednesday, 5 June 2013 5:07 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Non-802.1x devices on wireless...



I seem to remember seeing some discussion a while ago about non 802.1x capable 
devices on wireless.  We're a Cisco wireless shop, and currently run 2, about 
to be 3 (with the addition of eduroam) SSID's.  Is anyone running a specific 
SSID for these non-802.1x capable devices?  Perhaps using WEP and MAC address 
authentication?  Feel free to contact me off list... I'm just trying to get 
some examples of best practice (or at least implemented practices) from other 
institutions.







   Respectfully,



   Danny Eaton



   Snr. Network Architect

   Networking, Telecommunications,  Operations

   Rice University, IT

   Mudd Bldg, RM #205

   Jones College Associate

   Staff Advisory Committee

   Employee Activities Subcommittee Chair

   Office - 713-348-5233

   Cellular - 832-247-7496

   dannyea...@rice.edumailto:dannyea...@rice.edu



   Soli Deo Gloria

   Matt 18:4-6



G.K. Chesterton, Christianity has not been tried and found wanting.  It's been 
found hard and left untried.









** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.