Re: [WIRELESS-LAN] ARuba VLAN pooling
We've also loved vlan pooling, and the distribution of clients across the /24's is excellent. As we start to see our vlans becoming highly utilized, we simply add another /24 to the pool and slowly the distribution evens out again, current users are not affected until they disconnect and reconnect at which point they'll likely receive a new vlan assignment, while new users immediately get hashed into the new algorithm. Garrett Harmon Network Engineer Office of Information Technology The Ohio State University 614.292.2122 (o) 614.747.5539 (c) On May 28, 2009, at 11:45 AM, Michael Dickson wrote: We find that Vlan Pooling does a really good job at "balancing" the users across our 24 client vlans. We have eighteen client vlans on our main SSID and I'm impressed with the even distribution this feature offers. If you have multiple local controllers make sure that the client vlans are properly configured on each controller for both L2 and L3. This will ensure that the clients can roam across "controller boundaries" with the same IP address. Also, we found it helpful to size each client vlan/subnet the same (again we use /24 subnets) Hope this helps. Mike *** Michael Dickson Network Analyst University of Massachusetts Network Systems and Services Ken Connell wrote: Assuming you you have multiple client side vlans already configured on your controller, you assign those vlans to the vap (currently your only specifying one vlan, just comma seperate and add another ). Now when a user associates, there is hash done on the client mac address and they are placed in a vlan based on the output of the hash. That mac will always hash out the same, and they will therefore always be put into the same vlan. Just be careful if you have any static clients or use reserved DHCP, cause once you add another vlan to the pool, they'll more than likely hash out to a diff vlan and therefore require a diff IP of course We've been using that since it was available and have no complaints. Ken Connell Intermediate Network Engineer Computer & Communication Services Ryerson University 350 Victoria St RM AB50 Toronto, Ont M5B 2K3 416-979-5000 x6709 *From*: Jason Appah *Date*: Thu, 28 May 2009 08:16:07 -0700 *To*: *Subject*: [WIRELESS-LAN] ARuba VLAN pooling What is this VLAN pooling? How does it work? ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/ . ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/ . -- BEGIN-ANTISPAM-VOTING-LINKS -- Teach CanIt if this mail (ID 879804209) is spam: Spam:https://antispam.osu.edu/b.php?c=s&i=879804209&m=307de3940232 Not spam:https://antispam.osu.edu/b.php?c=n&i=879804209&m=307de3940232 Forget vote: https://antispam.osu.edu/b.php?c=f&i=879804209&m=307de3940232 -- END-ANTISPAM-VOTING-LINKS ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] Student 802.1x
Tom, Our dorms are setup exactly like that, most machines now using their native supplicant will cache the credentials which will at least give the illusion of a single sign-on using the captive portal. The biggest problem we have helpdesk-wise is that we use different credentials for 802.1x and the Resnet captive portal. We are terminating the eap session on the controller and have had great success with it. You may need to play around with ssid/vlan/acl depending on what you mean by the students not being part of your domain, let me know if you'd like to discuss further! Garrett Harmon Network Engineer Office of Information Technology The Ohio State University 614.292.2122 (o) 614.747.5539 (c) On Jun 24, 2009, at 9:24 AM, Tom Parenti wrote: Hello All, We are looking to start doing 802.1x authentication on our student wireless. We are an Aruba customer and we use Cisco NAC. Today we have an open SSID. The students connect to the SSID, open a web browser and are redirected to the Cisco NAC log on page. We would like to continue with the single sign on with NAC if possible. I think that would mean the students would have to cache their credentials in the supplicant to get authenticated to the new 802.1x SSID. Student computers are not part of our domain. Has anyone had any experience setting up 802.1x with NAC? Thanks, Tom Tom Parenti Network Administrator Johnson & Wales University 8 Abbott Park Place Providence, RI 02903 (401) 598-1557 Spam Not spam Forget previous vote ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found athttp://www.educause.edu/groups/ . ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
wireless DHCP lease time
We're running into some issues at the ramp up of a quarter with our DHCP lease time attempting to utilize the /24's we currently pool for our main essid. We moved from 1hr. to 30 minutes, but are still running out of leases occasionally. For instance, we have 160 users in a /24, but due to the transient nature of wireless/classes leases that are used for a brief moment the cycle isn't quite efficient enough. What is everyone else using for wireless DHCP lease times? I know I can just add another /24 to the pool, but the networks are not being utilized enough. We want to try 15 minutes but are wondering if we will start to run into issues related with that? Your input is greatly appreciated!! Garrett Harmon Network Engineer Office of Information Technology The Ohio State University 614.292.2122 (o) 614.747.5539 (c) ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] wireless DHCP lease time
We're actually running mobile IP on our Aruba controllersand love itbut that doesn't really affect the iphone users that connect and update facebook then walk somewhere without coverage essentially trahsing that IP for another 29 minutes. In our most populated stack we have 10 /24's hence the hesitation to add more, but will likely have to. We're going to try 15 minute leases to try and gain a bit more utilization, along with adding another /24. Thanks for the input everyone! -Garrett On Sep 30, 2009, at 2:15 PM, Jason Appah wrote: Sounds like a great use case for ip mobility… what are you running for wireless controllers? From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU ] On Behalf Of Garrett Harmon Sent: Wednesday, September 30, 2009 11:09 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] wireless DHCP lease time We're running into some issues at the ramp up of a quarter with our DHCP lease time attempting to utilize the /24's we currently pool for our main essid. We moved from 1hr. to 30 minutes, but are still running out of leases occasionally. For instance, we have 160 users in a /24, but due to the transient nature of wireless/classes leases that are used for a brief moment the cycle isn't quite efficient enough. What is everyone else using for wireless DHCP lease times? I know I can just add another /24 to the pool, but the networks are not being utilized enough. We want to try 15 minutes but are wondering if we will start to run into issues related with that? Your input is greatly appreciated!! Garrett Harmon Network Engineer Office of Information Technology The Ohio State University 614.292.2122 (o) 614.747.5539 (c) ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/ . Spam Not spam Forget previous vote ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/ . ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] Ticket Master Wireless Scanners- Campus sporting Venues, Campus Wireless
Lee, We have hosted the ticket master wlan on our Aruba equipment for the past 5 years or so. They're currently using WEP on a layer 2 network that the ticket server also sits on, but have recently added WPA-PSK ability. Works well in our environment, worth noting the scanners require -60 to function optimally. Feel free to contact me to discuss any other details. Garrett Harmon Network Engineer - Wireless Office of the Chief Information Officer The Ohio State University 614.292.2122 On Sep 22, 2011, at 11:07 AM, Lee H Badman wrote: > Does anyone else have Ticket Master scanners in use, wirelessly checking > tickets for validity at your sporting venues that also have your campus > wireless in the facility? > > Are you running with Ticket master’s own WLAN as a competing wireless island > alongside yours, or were you able to adapt your WLAN to accommodate a TM SSID > and vlan? > > Thanks- > > Lee Badman > > > Spam > Not spam > Forget previous vote > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] Battery packs for portable AP setups?
We use these for surveys, get about a day of battery out of it easily, not sure if it'd work for your specific situation thought. http://www.terra-wave.com/shop/80211n-mimo-site-survey-battery-pack-p-1535.html Garrett Harmon Network Engineer - Wireless Office of the Chief Information Officer The Ohio State University 614.292.2122 On Apr 27, 2012, at 2:59 PM, Lee H Badman wrote: > Wondering if anyone has put together (or found commercially) a non-behemoth > battery solution for deploying mesh APs for X number of hours, for event > support? > > -Lee Badman > > > Spam > Not spam > Forget previous vote > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found > athttp://www.educause.edu/groups/. > ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
