Re: [WIRELESS-LAN] wireless bridge for eduroam?

[Curtis, Bruce]

  I have connected a Mikrotik using EAP-TLS.

It appears to support PEAP also but I have not tested PEAP.


On Jun 29, 2018, at 9:12 AM, Joseph Bernard 
mailto:j...@clemson.edu>> wrote:

I haven’t looked in a few years, but is there a wireless ethernet bridge that 
support 802.1x/PEAP for something like eduroam?  There are times where we 
really don’t want people using wireless but installing cable takes time, so a 
temporary option would be nice.  This would NOT be a temporary become permanent 
thing, so it can be as ugly as possible.

Thanks,
Joseph Bernard

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

---
Bruce Curtis 
bruce.cur...@ndsu.edu
Certified NetAnalyst II701-231-8527
North Dakota State University


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] wireless bridge for eduroam?

[Joseph Bernard]

I actually have 2 of those sitting around from an old project.  I didn’t even 
think about trying them.  Thanks!

~Joseph B.


On 6/29/18, 10:18 AM, "The EDUCAUSE Wireless Issues Constituent Group Listserv 
on behalf of Cole, Kade"  wrote:

We have had success with the Ubiquiti NanoStation loco M5 connecting to 
eduroam. Make sure to use the latest firmware. 

Kade P. Cole - kc...@siue.edu - (618) 650-3377
Southern Illinois University Edwardsville - ITS
Network and Infrastructure - Network Engineer IV

> On Jun 29, 2018, at 9:12 AM, Joseph Bernard  wrote:
> 
> I haven’t looked in a few years, but is there a wireless ethernet bridge 
that support 802.1x/PEAP for something like eduroam?  There are times where we 
really don’t want people using wireless but installing cable takes time, so a 
temporary option would be nice.  This would NOT be a temporary become permanent 
thing, so it can be as ugly as possible.
>  
> Thanks,
> Joseph Bernard
>  



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Re: [WIRELESS-LAN] wireless bridge for eduroam?

[Cole, Kade]

We have had success with the Ubiquiti NanoStation loco M5 connecting to 
eduroam. Make sure to use the latest firmware. 

Kade P. Cole - kc...@siue.edu - (618) 650-3377
Southern Illinois University Edwardsville - ITS
Network and Infrastructure - Network Engineer IV

> On Jun 29, 2018, at 9:12 AM, Joseph Bernard  wrote:
> 
> I haven’t looked in a few years, but is there a wireless ethernet bridge that 
> support 802.1x/PEAP for something like eduroam?  There are times where we 
> really don’t want people using wireless but installing cable takes time, so a 
> temporary option would be nice.  This would NOT be a temporary become 
> permanent thing, so it can be as ugly as possible.
>  
> Thanks,
> Joseph Bernard
>  
> ** Participation and subscription information for this EDUCAUSE 
> Constituent Group discussion list can be found at 
> http://www.educause.edu/discuss.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



smime.p7s
Description: S/MIME cryptographic signature

Re: [WIRELESS-LAN] wireless bridge for eduroam?

[Matt Freitag]

I've never tried one but if you're an Aruba customer they've got something
for this:
https://www.arubanetworks.com/products/networking/access-points/501-wireless-client-bridge/

Matt Freitag
Network Engineer
Information Technology
Michigan Technological University
(906) 487-3696
https://www.mtu.edu/
https://www.mtu.edu/it


On Fri, Jun 29, 2018 at 10:14 AM Smith, Todd  wrote:

> Silex SX-BR-4600WAN2 is what we use for all kinds of devices that do not
> have wireless. We have been reasonably happy with results and fairly cheap
> as well.
>
>
>
> Todd Smith
>
> Charleston Area Medical Center
>
>
>
> *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:
> WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Joseph Bernard
> *Sent:* Friday, June 29, 2018 10:12
> *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
> *Subject:* [EXTERNAL] [WIRELESS-LAN] wireless bridge for eduroam?
>
>
>
> I haven’t looked in a few years, but is there a wireless ethernet bridge
> that support 802.1x/PEAP for something like eduroam?  There are times where
> we really don’t want people using wireless but installing cable takes time,
> so a temporary option would be nice.  This would NOT be a temporary become
> permanent thing, so it can be as ugly as possible.
>
>
>
> Thanks,
> Joseph Bernard
>
>
> --
>
> EXTERNAL EMAIL NOTICE: This email did not originate at CAMC, exercise
> CAUTION in clicking LINKS or opening ATTACHMENTS.
> If you are not familiar with the SENDER, then consider deleting this
> message. If there is any doubt of this email’s legitimacy, use the Manage
> Unwanted toolbar in Outlook to report it as a suspicious email.
>
> Original Sender: owner-wireless-...@listserv.educause.edu
> Originating Country Name: United States
>
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at 
> http://www.educause.edu/discuss
> [educause.edu]
> .
>
> --
> CONFIDENTIALITY NOTICE: The information contained in this message may be
> privileged and confidential. If this e-mail contains protected health
> information, you are hereby notified that any dissemination, distribution
> or copying of this communication is strictly prohibited, except as
> permitted by law. If you have received this communication in error, please
> notify the sender immediately by replying to this message and deleting it
> from your computer. Thank you
> ** Participation and subscription information for this EDUCAUSE
> Constituent Group discussion list can be found at
> http://www.educause.edu/discuss.
>
>

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: wireless bridge for eduroam?

[Smith, Todd]

Silex SX-BR-4600WAN2 is what we use for all kinds of devices that do not have 
wireless. We have been reasonably happy with results and fairly cheap as well.

Todd Smith
Charleston Area Medical Center

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joseph Bernard
Sent: Friday, June 29, 2018 10:12
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [EXTERNAL] [WIRELESS-LAN] wireless bridge for eduroam?

I haven’t looked in a few years, but is there a wireless ethernet bridge that 
support 802.1x/PEAP for something like eduroam?  There are times where we 
really don’t want people using wireless but installing cable takes time, so a 
temporary option would be nice.  This would NOT be a temporary become permanent 
thing, so it can be as ugly as possible.

Thanks,
Joseph Bernard


EXTERNAL EMAIL NOTICE: This email did not originate at CAMC, exercise CAUTION 
in clicking LINKS or opening ATTACHMENTS.
If you are not familiar with the SENDER, then consider deleting this message. 
If there is any doubt of this email’s legitimacy, use the Manage Unwanted 
toolbar in Outlook to report it as a suspicious email.

Original Sender: 
owner-wireless-...@listserv.educause.edu
Originating Country Name: United States
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
https://urldefense.proofpoint.com/v2/url?u=http-3A__www.educause.edu_discuss&d=DwIGaQ&c=2GaipCMI-4CXTl0y2l8grQS3faC7QKiDQZYpyUtD00M&r=7X-vXFH8lhperH4PHdmXwvaMvzUVeh5xfN49DSclJycHY5Xrcl5OPEMsSJsuPn4R&m=SiWMW2zKP4NN3dlgVBuTy6PB5ht550b0at2BEAGg2xQ&s=P01-SqsMRFVZu_djCRZVtS-CGBlTp0GdiceSxJPE6ME&e=
 
[https://urldefense.proofpoint.com/v2/url?u=http-3A__educause.edu&d=DwIGaQ&c=2GaipCMI-4CXTl0y2l8grQS3faC7QKiDQZYpyUtD00M&r=7X-vXFH8lhperH4PHdmXwvaMvzUVeh5xfN49DSclJycHY5Xrcl5OPEMsSJsuPn4R&m=SiWMW2zKP4NN3dlgVBuTy6PB5ht550b0at2BEAGg2xQ&s=_JXX03nptmVmYiSfjllXzrLN9PJq2p5tKEdt_nza8mc&e=].

==
CONFIDENTIALITY NOTICE: The information contained in this message may be 
privileged and confidential. If this e-mail contains protected health 
information, you are hereby notified that any dissemination, distribution or 
copying of this communication is strictly prohibited, except as permitted by 
law. If you have received this communication in error, please notify the sender 
immediately by replying to this message and deleting it from your computer. 
Thank you

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

wireless bridge for eduroam?

[Joseph Bernard]

I haven’t looked in a few years, but is there a wireless ethernet bridge that 
support 802.1x/PEAP for something like eduroam?  There are times where we 
really don’t want people using wireless but installing cable takes time, so a 
temporary option would be nice.  This would NOT be a temporary become permanent 
thing, so it can be as ugly as possible.

Thanks,
Joseph Bernard


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access points

[Rob Harris]

We’re not on 8.x yet, but we’ve ton a lot of research. Here’s what I understand 
(correct me if I’m wrong);

You can only use airmatch when there is a MM present

Arm and airmatch are not an either/or choice, arm will still do the job it 
normally does in real time, while airmatch will pool that data daily and make 
recommendations that will effect arm settings and thresholds (“raise this lower 
limit, lower this higher limit, allow these 2.4 radios to turn off” etc..).

Last I heard, airmatch doesn’t actually make changes unless you approve them, 
that’s a roadmap choice where you can allow it ranges of change and you’ll get 
a report daily.

Good luck!

[The Culinary Institute of America]
Robert Harris
Manager – Telecom, Networks, & AV Services
Culinary Institute of America
1946 Campus Drive
Hyde Park, NY
845-451-1681
www.ciachef.edu
Food is Life
Create and Savor Yours.™

Please consider the environment before printing this e-mail.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Lionel Shigemura
Sent: Thursday, June 28, 2018 10:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access 
points

I'm in the same boat.  Looking at a Summer upgrade to MM from 6.5.3.x.  I have 
inquired about moving from ARM to Airmatch for intermittent rogue events.  An 
optimized RF plan that's pushed out off-hours is a nice improvement over the 
limited ARM individual AP reactive options.  But, I can't get details on how 
Airmatch addresses anomalies immediately.  Are there any variables involved in 
an immediate radio config change other than DFS radar detection.

Moving to high density and dedicated APs per classroom has helped alleviate 
many problems.  I'm assuming using MM with Airmatch is preferred over ARM, 
generally speaking, but in real world situations, how does it address 
intermittent issues that move around Campus as they occur each day.

Overall, I'm very pleased with 6.5.x.x and AP-3xx.  Especially the re-designed 
AP-27x series.

Lionel Shigemura
UH - Leeward Community College
Information Technology Group - Networking
(808) 455-0486

CONFIDENTIALITY NOTICE: The contents of this email message and any attachments 
are intended solely for the addressee(s) and may contain confidential and/or 
privileged information and may be legally protected from disclosure. If you are 
not the intended recipient of this message or their agent, or if this message 
has been addressed to you in error, please immediately alert the sender by 
reply email and then delete this message and any attachments. If you are not 
the intended recipient, you are hereby notified that any use, dissemination, 
copying, or storage of this message or its attachments is strictly prohibited.

On Thu, Jun 28, 2018 at 11:46 AM, Harvard Townsend 
mailto:harvard.towns...@wheaton.edu>> wrote:
For those of you with Aruba wireless infrastructure, what are your experiences 
with running ArubaOS version 8.X plus the Mobility Master architecture with 
AP-115 access points? HPE/Aruba is telling us that model is supported 
(confirmed in the ArubaOS 8.2.0.0 release notes) and they are not aware of any 
issues. However, I heard from an Aruba reseller that a number of their 
customers, both commercial and higher ed, had significant issues when they 
upgraded to 8.X and moved to the mobility master architecture.  We purchased 
the MM license and want to make the jump to 8.2.1.1 from 6.5.3.4 this summer, 
but are hesitant given the rumor.  Have any of you experienced problems with 
AP-115s and Mobility Master?
Thanks,
--
Harvard Townsend
Director of Infrastructure & Security
Academic & Institutional Technology
Wheaton College, IL
Office:630.752.5528
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

RE: Aruba version 8 (Mobility Master) and AP-115 access points

[Bucklaew, Jerry]

To ALL:

   We also are moving to ArubaOS version 8.2.1.1 this summer, but we are a 
little further along.   We have 6,000 access points (as mix of 
214,215,314,315,325,324,205h,303h) and 8 7240 controllers.   We upgraded to the 
7420xm controllers and did a hardware appliance for the mobility 
master/standby.   We currently have 4 nodes up in a production cluster with 
about 3,000 ap’s on it. We are scheduled to complete the move by mid july.

For the most part it is working fine.It takes a while to get used to the 
new design/commands/config.   We have found that there are still some bugs in 
the mobility master GUI and it is difficult to do certain things with the GUI.  
  We built the mobility masters from scratch and used 90% cli.   Most of the 
commands are the same as version 6.x so once you understand your hierarchy it 
is easy to move stuff over via the cli.The cli is your friend.We have 
ran into a bunch of issues configuring interfaces and port channels in the gui 
so that is all done via the cli.   We do configure vlans, vlan interfaces, etc 
via the gui.  Once everything was built I do most changes/tweaks via the gui 
(system profiles is the main area to work in) but I still build the VAP and 
WLAN via the cli as it is just too difficult to do in the gui.

We also had to re-organize/re-design the overall system to take advantage of 
the clusters.  I combined subnets, made them larger and spread them across all 
nodes in the cluster.  Airwave is another issue as there is no way to split 
clusters across airwave servers and we have two.   So we are going to end up 
with unbalanced airwave servers, one for each cluster.  We also bridge some 
wired vlans through the controllers to get the “experience” and that seems to 
be working fine (as long as you exclude the vlans from the cluster).

Airgroup seems to be your pain point in version 8 right now.   I have heard 
version 8.3 has a bunch of airgroup issues and we have a case called in for 
8.2.1.1 for airgroup.   We are trying centralized with Clearpass so your 
mileage may vary.   We also ran into a bug with clerapass sending down a timer 
with a coa, the timer would expire but the coa would not work, still open.

But all our users seem to be happy and work fine for the most part.   We are 
doing to stick with version 8 and hopefully get the few issues worked out 
before semester start.   I do feel this is the summer to do it.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Harvard Townsend
Sent: Thursday, June 28, 2018 5:47 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Aruba version 8 (Mobility Master) and AP-115 access 
points

For those of you with Aruba wireless infrastructure, what are your experiences 
with running ArubaOS version 8.X plus the Mobility Master architecture with 
AP-115 access points? HPE/Aruba is telling us that model is supported 
(confirmed in the ArubaOS 8.2.0.0 release notes) and they are not aware of any 
issues. However, I heard from an Aruba reseller that a number of their 
customers, both commercial and higher ed, had significant issues when they 
upgraded to 8.X and moved to the mobility master architecture.  We purchased 
the MM license and want to make the jump to 8.2.1.1 from 6.5.3.4 this summer, 
but are hesitant given the rumor.  Have any of you experienced problems with 
AP-115s and Mobility Master?
Thanks,
--
Harvard Townsend
Director of Infrastructure & Security
Academic & Institutional Technology
Wheaton College, IL
Office:630.752.5528
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.