Re: [WIRELESS-LAN] ClearPass - not so clear anymore

2018-04-02 Thread Max McGrath 
Jason -

I'm curious what version of PacketFence you were running?  Also, if you
worked with Inverse, Inc. to set it up or if you set it up yourself?  If
you follow the development of PF, you'll know the clustering dramatically
improves with every major release.  Also, Inverse, Inc. offers phenomenal
support and know the software inside and out (no surprise there as they are
the developers!).

I only ask because we've been running PacketFence for our 802.1x and guest
networks (and wired network) for 5+ years without any major issues.  We run
in active/standby mode -- not cluster mode -- but do plan on moving to
cluster mode after 8.0 is released as it has a major clustering feature
we've been waiting on.

Max

--
Max McGrath  
Infrastructure and Security Manager
Carthage College
262-551- <(262)%20551->
mmcgr...@carthage.edu

On Mon, Apr 2, 2018 at 4:47 PM, Trinklein, Jason R 
wrote:

> We are considering clearpass for our guest network captive portal. We have
> a case of sticker shock, however…at a cost of nearly $50K, it seems
> expensive for a captive portal.
>
>
>
> What alternative solutions are people using? We are very happy with
> FreeRADIUS for wireless auth, but we need a robust captive portal that
> allows OAuth/social media login or validated email/sms login. We tried
> packetfence, but in cluster mode, it wasn’t reliable.
>
>
>
> --
>
> *Jason Trinklein*
>
> *Wireless Engineering Manager*
>
> College of Charleston
>
> 81 St. Philip Street | Office 311D | Charleston, SC 29403
> 
>
> trinkle...@cofc.edu | (843) 300–8009 <(843)%20300-8009>
>
> *From: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Hector J Rios <
> hr...@lsu.edu>
> *Reply-To: *The EDUCAUSE Wireless Issues Constituent Group Listserv <
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
> *Date: *Monday, April 2, 2018 at 5:23 PM
> *To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU"  E.EDU>
> *Subject: *[WIRELESS-LAN] ClearPass - not so clear anymore
>
>
>
> I’ve got two complaints about this product. One, it seems like with every
> patch or upgrade, this solution is getting worse and worse. This is
> disappointing because when we bought this solution two years ago it was
> rock solid. Second, due to the new licensing scheme, we are now exceeding
> our licensing capacity. How convenient for Aruba, right? As some of you
> might know, the new licensing scheme is based on concurrency. When we
> purchased the solution the licensing scheme was based on rolling averages.
> Yes, the new licensing scheme is attempting to make things simpler, but at
> a higher cost. Ask your rep how much a 25K server costs and you’ll see what
> I’m talking about.
>
>
>
> Hector Rios
>
> Louisiana State University
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/discuss
> .
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/discuss.
>
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] ClearPass - not so clear anymore

2018-04-02 Thread Rumford, Charles 
We are using PacketFence (in non-clustered mode) in a VM for handling out guest 
and device networks. I've been really happy with it, and the support from 
inverse is pretty awesome.

Our 802.1x network is powered by FreeRADIUS 3 with a Kerberos backend.

We have a in house built system that manages the MAC address registration and 
the MAC address blacklisting. It pushes the registrations down to the 
PacketFence server via API call, and the radius server pulls the blacklist via 
an API call on regular intervals. The captive portal for the black listed 
devices is also powered by PacketFence.

Sent from Nine

From: Ian Lyons 
Sent: Monday, April 2, 2018 18:10
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ClearPass - not so clear anymore

Jason
That price *was* real, many years ago.
I got a pair of 5000 user licenses for ~15k, last year.

Word of caution, I have seen some vendors that say they sell Cisco and Aruba 
products "forget' discounting on Aruba.

Shop around, that is not necessarily accurate.

Having said that, quantity of users and features where not mentioned.  50k or 
more users and all the features enabled.I can not speak to that.

Hector

I have had clearpass, on and off, for 6 years...it has always been concurrent 
usersyes to a rolling average, but not an immediate cut off if you exceed 
once or twice.

Can you elaborate?

Get Outlook for Android



From: Trinklein, Jason R
Sent: Monday, April 2, 17:48
Subject: Re: [WIRELESS-LAN] ClearPass - not so clear anymore
To: wireless-lan@listserv.educause.edu


We are considering clearpass for our guest network captive portal. We have a 
case of sticker shock, however…at a cost of nearly $50K, it seems expensive for 
a captive portal.

What alternative solutions are people using? We are very happy with FreeRADIUS 
for wireless auth, but we need a robust captive portal that allows OAuth/social 
media login or validated email/sms login. We tried packetfence, but in cluster 
mode, it wasn’t reliable.

--
Jason Trinklein
Wireless Engineering Manager
College of Charleston
81 St. Philip Street | Office 311D | Charleston, SC 29403
trinkle...@cofc.edu | (843) 300–8009
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Hector J Rios 
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Monday, April 2, 2018 at 5:23 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: [WIRELESS-LAN] ClearPass - not so clear anymore

I’ve got two complaints about this product. One, it seems like with every patch 
or upgrade, this solution is getting worse and worse. This is disappointing 
because when we bought this solution two years ago it was rock solid. Second, 
due to the new licensing scheme, we are now exceeding our licensing capacity. 
How convenient for Aruba, right? As some of you might know, the new licensing 
scheme is based on concurrency. When we purchased the solution the licensing 
scheme was based on rolling averages. Yes, the new licensing scheme is 
attempting to make things simpler, but at a higher cost. Ask your rep how much 
a 25K server costs and you’ll see what I’m talking about.

Hector Rios
Louisiana State University
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: ClearPass - not so clear anymore

2018-04-02 Thread Rob Harris 
Did you talk to your reps (direct, not partner) prior to the upgrade? They’ve 
always helped us when things like that happened and made sure we had what we 
needed.

[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Hector J Rios
Sent: Monday, April 2, 2018 5:23 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] ClearPass - not so clear anymore

I’ve got two complaints about this product. One, it seems like with every patch 
or upgrade, this solution is getting worse and worse. This is disappointing 
because when we bought this solution two years ago it was rock solid. Second, 
due to the new licensing scheme, we are now exceeding our licensing capacity. 
How convenient for Aruba, right? As some of you might know, the new licensing 
scheme is based on concurrency. When we purchased the solution the licensing 
scheme was based on rolling averages. Yes, the new licensing scheme is 
attempting to make things simpler, but at a higher cost. Ask your rep how much 
a 25K server costs and you’ll see what I’m talking about.

Hector Rios
Louisiana State University
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] ClearPass - not so clear anymore

2018-04-02 Thread Trinklein, Jason R 
We are considering clearpass for our guest network captive portal. We have a 
case of sticker shock, however…at a cost of nearly $50K, it seems expensive for 
a captive portal.

What alternative solutions are people using? We are very happy with FreeRADIUS 
for wireless auth, but we need a robust captive portal that allows OAuth/social 
media login or validated email/sms login. We tried packetfence, but in cluster 
mode, it wasn’t reliable.

--
Jason Trinklein
Wireless Engineering Manager
College of Charleston
81 St. Philip Street | Office 311D | Charleston, SC 29403
trinkle...@cofc.edu | (843) 300–8009
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 on behalf of Hector J Rios 
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 

Date: Monday, April 2, 2018 at 5:23 PM
To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" 
Subject: [WIRELESS-LAN] ClearPass - not so clear anymore

I’ve got two complaints about this product. One, it seems like with every patch 
or upgrade, this solution is getting worse and worse. This is disappointing 
because when we bought this solution two years ago it was rock solid. Second, 
due to the new licensing scheme, we are now exceeding our licensing capacity. 
How convenient for Aruba, right? As some of you might know, the new licensing 
scheme is based on concurrency. When we purchased the solution the licensing 
scheme was based on rolling averages. Yes, the new licensing scheme is 
attempting to make things simpler, but at a higher cost. Ask your rep how much 
a 25K server costs and you’ll see what I’m talking about.

Hector Rios
Louisiana State University
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

ClearPass - not so clear anymore

2018-04-02 Thread Hector J Rios 
I’ve got two complaints about this product. One, it seems like with every patch 
or upgrade, this solution is getting worse and worse. This is disappointing 
because when we bought this solution two years ago it was rock solid. Second, 
due to the new licensing scheme, we are now exceeding our licensing capacity. 
How convenient for Aruba, right? As some of you might know, the new licensing 
scheme is based on concurrency. When we purchased the solution the licensing 
scheme was based on rolling averages. Yes, the new licensing scheme is 
attempting to make things simpler, but at a higher cost. Ask your rep how much 
a 25K server costs and you’ll see what I’m talking about.

Hector Rios
Louisiana State University

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.