iOS 8 issues?

2014-09-19 Thread Gogan, James P
We just got this wonderful tidbit from a local engineer with one of the major 
wi-fi vendors (would prefer to maintain anonymity); anybody else seeing this 
yet?

-- Jim Gogan / ITS Communication Technologies
UNC-Chapel Hill

=
FYI, ... A message from one of my other customers about ios 8.


We are seeing some wireless issues related to iOS 8 on iPhones.  It appears 
that Apple has set their devices to 'aggressively' roam between WiFi and 
carrier data networks.  The result is phones have a tendency to flap back and 
forth between the university's wireless network and the carrier's network (in 
my case Verizon's LTE network).  I have not seen this in previous Apple 
software releases.  Turning off cellular data seems to remedy the issue, but 
that forces the user to continually turn data services on and off as they come 
and go from campus.  We are also seeing more of a delay in the EAP 
authentication process on our WPA2-Enterprise network.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



anybody using Aruba's Tarpit Shielding feature?

2014-08-11 Thread Gogan, James P
Was wondering if anyone with a large Aruba deployment has enabled their Tarpit 
Shielding feature for dealing with rogue issues (full description below for 
anyone not familiar with it)?If so, is that working out for you?Has it 
caused problems for folks unrelated to rogue units?

Inquiring minds etc. etc. Thanks in advance!

-- Jim Gogan
ITS Communication Technologies
UNC-Chapel Hill


description:

Tarpit Shielding

The Tarpit Shielding feature is a type of wireless containment. Detected 
devices that are classified as rogues are contained by forcing client 
association to a fake channel or BSSID. This method of tarpitting is more 
efficient than rogue containment via repeated de-authorization requests. Tarpit 
Sheilding works by spoofing frames from an AP to confuse a client about its 
association. The confused client assumes it is associated to the AP on a 
different (fake) channel than the channel that the AP is actually operating on, 
and will attempt to communicate with the AP in the fake channel.

Tarpit Shielding works in conjunction with the deauth wireless containment 
mechanism. The deauth mechanism triggers the client to generate probe request 
and subsequent association request frames. The AP then responds with probe 
response and association response frames. Once the monitoring AP sees these 
frames, it will spoof the probe-response and association response frames, and 
manipulates the content of the frames to confuse the client.

A station is determined to be in the Tarpit when we see it sending data frames 
in the fake channel. With some clients, the station remains in tarpit state 
until the user manually disables and re-enables the wireless interface.


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Replacing ageing APs

2014-08-07 Thread Gogan, James P
Same here --- for a long time, our refresh budget consisted of whatever the 
Provost had available near the end of the fiscal year (yeah, THAT'S sustainable 
.); two years ago, we were finally able to get through an entirely new 
model for network funding that was based on a payroll tax (a fixed percentage 
of faculty-staff payroll budget per department) on all departments and a 
student fee re-allocation at the same rate as the payroll tax.   So far, so 
good.

What helped is that we didn't have to originate that payroll tax concept; our 
Campus Services unit had already gotten that concept approved to pay for the 
University's share of the town-and-gown bus system.   We just took advantage of 
the precedent.

I'm unable to provide the full advisory committee report that researched and 
recommended the new funding model to the Chancellor, but this link: 
http://its.unc.edu/commtechnology/communication-technologies/new-funding-model-faq/
  should give most of the details.

Now the challenge is managing expectations in terms of WHO'S getting upgraded 
each year.

-- Jim Gogan / ITS Comm Tech
UNC-Chapel Hill

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Daniel Eklund
Sent: Thursday, August 07, 2014 8:19 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Replacing ageing APs

Oli,

The University of Michigan has been in a similar position until recently.  We 
are moving toward a funding model whereby units will provide central IT with 
funding sufficient to cover their portion of the wired and wireless 
infrastructure on campus.  The initial refresh of WiFi is being provided by 
one-time funding.  We already do this for the core network on campus, as well 
as for our Internet connections, so we are pretty confident that this will move 
forward since everyone wants to have a reliable and up to date network.

--
Daniel Eklund
Network Planning Manager
ITS Communications Systems and Data Centers University of Michigan
734.763.6389


On Thu, Aug 7, 2014 at 4:00 AM, Oliver Elliott oliver.elli...@bristol.ac.uk 
wrote:
 Hi all

 I've been looking into EOLs and end of software support for some of 
 our older APs and was wondering what other institutions do to keep 
 their estate up to date. Up to now we've had very sparse funding for 
 wireless as it was always viewed as an add on service. A recent outage 
 (caused by buggy 7.6.120
 code) has shown just how important Wifi has become. Up to now APs have 
 been largely installed on an ad-hoc basis with funding from 
 departments or projects but this doesn't tend to account for EOL replacement.

 We're looking to apply for a formal replacement project based on 
 either rolling yearly replacement budget or a big bang approach every few 
 years.

 So, how do you guys handle this problem?

 Oli
 --
 Oliver Elliott
 Network Specialist
 IT Services
 University of Bristol
 e: oliver.elli...@bristol.ac.uk
 t: 0117 92 (87861)
 ** Participation and subscription information for this 
 EDUCAUSE Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


time for the annual wifi will kill us response

2014-04-09 Thread Gogan, James P
Well, it's that time of year again, wherein we get the following contact from 
one faculty member or staff member (out of tens of thousands of students, 
faculty and staff):


 I am an adjunct faculty member and I would like to have a meeting with 
someone that is charge of the WiFi system on the UNC-CH campus. I believe that 
there is a significant health risk to all students and faculty around this type 
of radiation. I would like the opportunity to bring solid research and 
professionals before you to present the materials.  This cannot be ignored. The 
liability is too great to all of the students and faculty.



And just like folks that come up with scientific studies that there's no 
climate change and the Earth is 7,000 years old, of course he has research 
links to back his claims.



Before I go digging out what studies and replies we've used in past years when 
this has come up, I was wondering (a) how many of you also have to deal with 
this and (b) has there been anything more recent in terms of research we can 
point to than what I dug up years ago?



Thanks in advance



-- Jim Gogan / ITS Comm Tech

Univ of North Carolina at Chapel Hill


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Google Glass experiences

2014-03-06 Thread Gogan, James P
Quick question:
what have folks found so far re: connecting Google Glass to campus wireless?
what works/what (more likely) doesn't?

-- Jim Gogan / UNC-Chapel Hill

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] interesting design recommendation from ......

2012-11-30 Thread Gogan, James P
Following up on the note below from my colleague, the full explanation from the 
Aruba exec was as follows:

(I) wanted to let you know that Aruba is not discontinuing support for 
WEP/TKIP.The Wi-Fi Alliance was planning to enforce discontinuation of 
WEP/TKIP - which would have required us to follow suit - but they backed down 
under pressure from end users. Since there's no longer a WFA requirement to 
remove WEP/TKIP, we will continue to support it.

So there it is.If anyone else had also heard from their Aruba support that 
WEP/TKIP was going away in 2013, that's not happening now.

Two thoughts on that:

(1)nice that user pressure can have an impact

(2)I'm kinda ambivalent about the fact that WEP/TKIP WILL continue to be 
supported.It was actually better for us being able to tell departments 
sorry, you FINALLY have to upgrade your old equipment 'cause the manufacturer 
is pulling the plug.There's only so much authority we have and being able 
to say we can't works better than saying we won't

Maybe if I don't tell folks  .. h.

-- Jim Gogan / UNC-CH

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lane, Todd
Sent: Thursday, November 29, 2012 5:33 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

I was contacted by Aruba after they saw my post below and advised Aruba is not 
discontinuing support for WEP/TKIP.

Todd Lane
University of North Carolina at Chapel Hill

From: Lane, Todd Lane todd_l...@unc.edumailto:todd_l...@unc.edu
Reply-To: EDUCAUSE Listserv 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Date: Thursday, November 29, 2012 3:36 PM
To: EDUCAUSE Listserv 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

Mike,
This is what we're being told by Aruba.
WEP / TKIP will be unsupported starting in a future release. I believe it will 
be 6.2.
ArubaOS 6.2 has a target date for June 2013


Todd Lane
University of North Carolina at Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike King
Sent: Wednesday, November 28, 2012 9:54 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

Unfortunately James,

I don't see support for WEP / TKIP going away anytime soon.

WEP was broken in August of 2001.  That was 11 years ago.  WPA2 has been 
available since June 2004.  That was 7 years ago.  WPA with TKIP was Only 
published as a temporary measure, until WPA2 was ratified, and was supposed to 
cease being used when WPA2 was published.  Yea, that didn't happen.

No vendor want's to lose a sale because they weren't backward compatible.

Only you (the operator of the network) has the power to draw the line in the 
sand, and say we will only support WPA2.  (Let me know how that works out, 
since I would love to try that)

Mike



On Wed, Nov 28, 2012 at 9:42 AM, Gogan, James P 
go...@email.unc.edumailto:go...@email.unc.edu wrote:
We continue to see 75% or more of our user population hanging on with 2.4 
devices .  frustrating. have to continue to engineer for the bulk of 
users being 2.4 for the foreseeable future.

And while I'm venting - we're STILL having a hell of a time getting all of the 
departments that utilize utility monitoring devices, ticket scanners, classroom 
touch panels, etc. that ONLY support WEP and/or TKIP to upgrade their devices.  
 In some cases, the response has been we'll upgrade if you pay for it; we 
keep telling them they're going to be screwed when the vendors drop support for 
those protocols.   Oh, well - such is life with responsibility without 
authority.

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Lee H Badman
Sent: Wednesday, November 28, 2012 9:28 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

Seems like there should be a bit more to the discussion... power levels, 
designing for 5 GHz and disable a 2.4 GHz radio or three along the way if too 
many, etc- expected % of clients expected in 5 vs 2.4 versus just a number of 
clients, etc.



-Lee


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gogan, James P
Sent: Wednesday, November 28, 2012 9:23 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] interesting design recommendation from ..

We currently have a mix of Cisco (legacy) and Aruba (last two years) APs

question about EAP-TTLS/PAP config

2012-11-30 Thread Gogan, James P
Can someone from a large institution using EAP-TTLS with PAP (preferably going 
to Kerberos) follow up with me off-list?
If you're using SecureW2 as your supplicant, even better.

I've got a question that I'd rather not pose to the full list.

Thanks in advance.

-- Jim Gogan / Univ of North Carolina at Chapel Hill

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



interesting design recommendation from ......

2012-11-28 Thread Gogan, James P
We currently have a mix of Cisco (legacy) and Aruba (last two years) APs 
(although we're good at keeping any given building single brand, as much as 
possible). We've generally gone with an engineering rule of thumb of 20-30 
clients per access point.

We've noticed issues with channel flapping and inadequate load balancing on our 
Aruba APs in large classrooms where we have, based on our client per AP 
engineering, large numbers of APs.After an on-site visit from an Aruba 
engineer, his comment was that we have TOO MANY APs in our classrooms and high 
density areas.His recommendation (using the Aruba AP135s) was that we 
design based on 80 clients per AP (minimum 50, average 80, max 100), and to 
design based on 50 clients per AP for the older AP125s.

I'd be curious to know what others think about that recommendation -- seems 
pretty significantly different from everything we've been told and designed for 
in the past.   (BTW, the engineer also noted that he's not a sales guy and the 
sales guys would suggest differently -- figures).

Thoughts?

-- Jim Gogan
ITS-Networking
Univ of North Carolina at Chapel Hill



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: interesting design recommendation from ......

2012-11-28 Thread Gogan, James P
We continue to see 75% or more of our user population hanging on with 2.4 
devices .  frustrating. have to continue to engineer for the bulk of 
users being 2.4 for the foreseeable future.

And while I'm venting - we're STILL having a hell of a time getting all of the 
departments that utilize utility monitoring devices, ticket scanners, classroom 
touch panels, etc. that ONLY support WEP and/or TKIP to upgrade their devices.  
 In some cases, the response has been we'll upgrade if you pay for it; we 
keep telling them they're going to be screwed when the vendors drop support for 
those protocols.   Oh, well - such is life with responsibility without 
authority.

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Wednesday, November 28, 2012 9:28 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

Seems like there should be a bit more to the discussion... power levels, 
designing for 5 GHz and disable a 2.4 GHz radio or three along the way if too 
many, etc- expected % of clients expected in 5 vs 2.4 versus just a number of 
clients, etc.



-Lee


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gogan, James P
Sent: Wednesday, November 28, 2012 9:23 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] interesting design recommendation from ..

We currently have a mix of Cisco (legacy) and Aruba (last two years) APs 
(although we're good at keeping any given building single brand, as much as 
possible). We've generally gone with an engineering rule of thumb of 20-30 
clients per access point.

We've noticed issues with channel flapping and inadequate load balancing on our 
Aruba APs in large classrooms where we have, based on our client per AP 
engineering, large numbers of APs.After an on-site visit from an Aruba 
engineer, his comment was that we have TOO MANY APs in our classrooms and high 
density areas.His recommendation (using the Aruba AP135s) was that we 
design based on 80 clients per AP (minimum 50, average 80, max 100), and to 
design based on 50 clients per AP for the older AP125s.

I'd be curious to know what others think about that recommendation -- seems 
pretty significantly different from everything we've been told and designed for 
in the past.   (BTW, the engineer also noted that he's not a sales guy and the 
sales guys would suggest differently -- figures).

Thoughts?

-- Jim Gogan
ITS-Networking
Univ of North Carolina at Chapel Hill


** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: interesting design recommendation from ......

2012-11-28 Thread Gogan, James P
I think the operative words there are recent client --- we have many 
departments that purchase network-attached devices (scanners, utility monitors, 
touchpanels, etc.) that are expected to last for 7-10 years (or longer). 
Within the state budgeting system, there is no ability to amortize equipment or 
build up a life-cycle/refresh reserve (all unused dollars at the end of each 
fiscal year are reverted to the state treasury) - as such, it's all based on 
ability to get one time new-equipment funds -- hence the last for 7-10 years 
(or longer) environment.

Makes life interesting ..

-- jg / UNC

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Osborne, Bruce W
Sent: Wednesday, November 28, 2012 11:14 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

Mike,

Here at Liberty University, we only support WPA2-Enterprise and an open SSID 
that only permits non-802.1X devices registered by the user. We place some 
restrictions on the open network to encourage the use of the WPA2-Enterprise 
network.

The sole exception is a hidden WEP network for some old Cisco wireless phones. 
Once they are retired, that network will disappear.

When we supported WPA2-Personal, we only allowed AES encryption with no issues 
at all. Why allow TKIP, except for migration to AES? I have not seen any recent 
client that does not support WPA2, except for these old Cisco phones on a 
non-Cisco wireless network.

Bruce Osborne
Network Engineer
IT Network Services

(434) 592-4229

LIBERTY UNIVERSITY
Training Champions for Christ since 1971

From: Mike King [mailto:m...@mpking.com]
Sent: Wednesday, November 28, 2012 9:54 AM
Subject: Re: interesting design recommendation from ..

Unfortunately James,

I don't see support for WEP / TKIP going away anytime soon.

WEP was broken in August of 2001.  That was 11 years ago.  WPA2 has been 
available since June 2004.  That was 7 years ago.  WPA with TKIP was Only 
published as a temporary measure, until WPA2 was ratified, and was supposed to 
cease being used when WPA2 was published.  Yea, that didn't happen.

No vendor want's to lose a sale because they weren't backward compatible.

Only you (the operator of the network) has the power to draw the line in the 
sand, and say we will only support WPA2.  (Let me know how that works out, 
since I would love to try that)

Mike



On Wed, Nov 28, 2012 at 9:42 AM, Gogan, James P 
go...@email.unc.edumailto:go...@email.unc.edu wrote:
We continue to see 75% or more of our user population hanging on with 2.4 
devices .  frustrating. have to continue to engineer for the bulk of 
users being 2.4 for the foreseeable future.

And while I'm venting - we're STILL having a hell of a time getting all of the 
departments that utilize utility monitoring devices, ticket scanners, classroom 
touch panels, etc. that ONLY support WEP and/or TKIP to upgrade their devices.  
 In some cases, the response has been we'll upgrade if you pay for it; we 
keep telling them they're going to be screwed when the vendors drop support for 
those protocols.   Oh, well - such is life with responsibility without 
authority.

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Lee H Badman
Sent: Wednesday, November 28, 2012 9:28 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] interesting design recommendation from ..

Seems like there should be a bit more to the discussion... power levels, 
designing for 5 GHz and disable a 2.4 GHz radio or three along the way if too 
many, etc- expected % of clients expected in 5 vs 2.4 versus just a number of 
clients, etc.



-Lee


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Gogan, James P
Sent: Wednesday, November 28, 2012 9:23 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] interesting design recommendation from ..

We currently have a mix of Cisco (legacy) and Aruba (last two years) APs 
(although we're good at keeping any given building single brand, as much as 
possible). We've generally gone with an engineering rule of thumb of 20-30 
clients per access point.

We've noticed issues with channel flapping and inadequate load balancing on our 
Aruba APs in large classrooms where we have, based on our client per AP 
engineering, large numbers of APs.After an on-site visit from an Aruba 
engineer, his comment was that we have TOO MANY APs in our classrooms and high 
density areas.His recommendation (using the Aruba AP135s) was that we 
design based on 80 clients per AP (minimum 50, average 80, max 100), and to 
design based on 50 clients per AP for the older

RE: Xpressconnect and Windows 8

2012-10-24 Thread Gogan, James P
We've not gotten XpressConnect to work happily with Windows 8 yet, so I'm 
interested in this as well.Have sent an email to Cloudpath Support on this, 
but I'm guessing all Windows 8 questions are awaiting the official Friday 
release.

-- Jim Gogan / UNC-Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Peter P Morrissey
Sent: Wednesday, October 24, 2012 8:47 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Xpressconnect and Windows 8

I'm curious if anyone has gotten Windows 8 devices configured for 1x, using 
Xpressconnect. I realize there are lots of issues with
Windows 8 drivers that make this complicated, so I'm just wondering how it is 
working when the drivers are capable.
Thanks,
Pete Morrissey

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



FreeRADIUS performance question

2012-08-22 Thread Gogan, James P
A question for folks with relatively large 802.1x (greater than 15,000 unique 
clients) wi-fi deployment (EAP-TTLS) with a FreeRADIUS infrastructure using 
Kerberos as the backend authentication .

- how many FreeRADIUS servers do you deploy?, and
- have you changed any of the default eap.con/radius.conf performance 
parameters/values?

The good news is that we've started the year with a lot more folks finally 
using the 802.1x network than the last academic year.
The bad news is that we're getting long delays in connecting/authenticating -- 
not just a wireless issue as we're also getting lots of RADIUS server FAILED 
traps from our VPN concentrators throughout the day since the semester started 
(using the same RADIUS servers as the 1x wireless deployment)

We've also been seeing in the last three days HUGE numbers of:
Aug 22 19:25:00 calvin radiusd[21691]: Discarding duplicate request from client 
Wireless8021XResNET port 32769 - ID: 76 due to unfinished request 253745
Aug 22 19:25:00 calvin radiusd[21691]: Discarding duplicate request from client 
Wireless8021XResNET port 32769 - ID: 140 due to unfinished request 253705
Aug 22 19:25:00 calvin radiusd[21691]: Discarding duplicate request from client 
Wireless8021XResNET port 32769 - ID: 85 due to unfinished request 253758
and
Aug 19 03:30:14 calvin radiusd[3507]: Login incorrect: [anonymous] (from client 
Wireless8021XResNET port 29 cli 68-a8-6d-ae-fc-5d)
Aug 19 03:31:15 calvin radiusd[3507]: Login incorrect: [anonymous] (from client 
Wireless8021XResNET port 29 cli 28-6a-ba-6a-9d-6e)
Aug 19 03:31:35 calvin radiusd[3507]: Login incorrect: [anonymous] (from client 
Wireless8021XResNET port 29 cli c8-bc-c8-2e-52-13)
Aug 19 03:32:13 calvin radiusd[3507]: Login incorrect: [anonymous] (from client 
Wireless8021XResNET port 29 cli 10-40-f3-29-60-2c)

which, from what we can discern from the wonderful world of google, may be 
related to a slow database, although our Kerberos folks don't see any issues 
on their end.

Any thoughts? Responses to the two questions above would be appreciated ... 
thanks!!

-- Jim Gogan / Univ of North Carolina at Chapel Hill


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



selectively disabling wireless in classrooms

2011-09-23 Thread Gogan, James P
Well, it's that time of year again 

the time when we get calls from a handful of faculty who want the ability to 
disable the wireless access point that covers their classroom during specific 
class periods (they also want cellular coverage disabled during those times -- 
yeah, right ..).When I point out that the AP that covers their 
classroom may also provide coverage for the one next door, or that with a 
controller-based architecture, shutting off one access point would likely just 
increase the signal coverage area of adjacent APs, the response I usually get 
back is well, I KNOW that other universities are doing it, so  FIX IT.

So, let me ask my biennial question: what ARE other universities doing in this 
regard?I was specifically given U of Michigan as an example.Anyone know 
what they're doing? Any successful implementation details from anyone 
dealing with this issue are welcome.And yes, I am biting my tongue to not 
say teach more engagingly.

Thanks in advance!

-- Jim Gogan / Univ of North Carolina

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] ATT WiFi

2011-07-21 Thread Gogan, James P
This actually wouldn't be a bad thing for places like the stadium and dean dome 
if we can manage channel interference

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Dewitt Latimer
Sent: Thursday, July 21, 2011 12:29 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ATT WiFi

As a person who travels to many campuses, I can tell you that having my iPhone 
auto-associate with a campus WiFi is a whole lot nicer than having to bug my 
hosts to sponsor me for a guest wireless account.

So I think the real way to look at this is (1) how many guests do you have to 
your campus, (2) do you care about them, (3) is your wireless guest 
registration system self sponsored and simple, or a real PIA?

You don't necessarily have to overlay the ATT ssid over your whole campus 
either. You can hit (say) the performing arts, campus hotel and conference, 
etc. But that's more of a political outcome than technical. If you go through 
the hassle of a couple of buildings, you might as well do them all.

Also, ATT almost always brings their own commodity bandwidth to the bargaining 
table. So depending on how many guests you have anyway, you can off load some 
of their data to their pipe.

-d


On Thu, Jul 21, 2011 at 12:16 PM, Lee H Badman 
lhbad...@syr.edumailto:lhbad...@syr.edu wrote:
Ryan-

Do you feel there has been any real value to OSU, or any downside?

Thanks-


Lee H. Badman
Wireless/Network Engineer
Information Technology and Services
Adjunct Instructor, iSchool
Syracuse University
315 443-3003tel:315%20443-3003


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Holland, Ryan C.
Sent: Wednesday, July 20, 2011 1:34 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] ATT WiFi

We have it here at OSU, and it works adequately. Nothing special. Just a L2 
handoff from our equipment to theirs.

==
Ryan Holland
Network Engineer, Wireless
Office of the Chief Information Officer
The Ohio State University
614-292-9906tel:614-292-9906   holland@osu.edumailto:holland@osu.edu

Submit a Kudos to an OCIO 
employee!http://www.surveygizmo.com/s/514095/giveociokudos

On Jul 20, 2011, at 1:17 PM, Steve Hess wrote:

Anyone have experience with the ATT WiFi product?  Upper management is looking 
into it here.  My understanding is they will use our existing Aruba 
infrastructure to propagate the signal.  Curious for input from others on 
direct experience and technical considerations (in general and as relates to 
Aruba specifically).


Thanks,

Steve

--

-

Steve Hess

Network Administrator

Wheaton College

Phone: 508-286-3404tel:508-286-3404

Fax: 508-286-8270tel:508-286-8270

-



Spamhttps://antispam.osu.edu/b.php?i=1228228303m=da5d14dd5179c=s
Not spamhttps://antispam.osu.edu/b.php?i=1228228303m=da5d14dd5179c=n
Forget previous 
votehttps://antispam.osu.edu/b.php?i=1228228303m=da5d14dd5179c=f
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.




No virus found in this message.
Checked by AVG - www.avg.comhttp://www.avg.com
Version: 10.0.1390 / Virus Database: 1518/3776 - Release Date: 07/20/11
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Interference in dorms.

2011-07-21 Thread Gogan, James P
That kinda begs the question then what DO you do about Wii's (for example)?
Do you have 1-2 Mbps disabled?

-- Jim Gogan
   UNC-Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Fairlie
Sent: Thursday, July 21, 2011 1:31 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

Yep, that was our experience with Wii's.

Through experimentation we saw that once the Wii joined, if you disabled 2mpbs, 
they'd stay on...but they couldn't join if 2mbps wasn't on initially. Really 
weird

Timothy J. Fairlie - Director
Network/User/Telecommunication Services (N.U.T.S)
Rider Universityfair...@rider.edumailto:fair...@rider.edu

- Rick Coloccia coloc...@geneseo.edumailto:coloc...@geneseo.edu wrote:
 Be careful disabling 2 mbps.  We were told at the Cisco conference in a 
 wireless class just last week that the Wiis require 2mbps to successfully 
 find and join the wireless network. I have not personally verified this, but 
 the source is reliable...

 -Rick

 On 7/21/2011 12:58 PM, Johnson, Neil M wrote:
We are struggling with the same issues. We are finding that X-boxes and PS3s 
generate lots of interference (they use a proprietary 2.4 protocol between the 
joysticks and console).


This summer we've added over 100 AP to the dorms, moved several, changed our 
AP's antenna configuration, disabled 1 and 2 Mbps data rates, and are 
implementing channel layering (Meru)  to try and address the issue.


We are also planning on being more aggressive at getting rid of student 
installed wireless AP's.


We are considering adding a 5GHz only SSID in the dorms to encourage users to 
use 5 GHz ( we do have band steering enabled, but a dedicated SSID would insure 
that devices only use 5GHz and not fall back to 2.4).


We'll see what happens.


-Neil


--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-john...@uiowa.edumailto:neil-john...@uiowa.edu




 From: Lay, Daniel dl...@samford.edumailto:dl...@samford.edu
 Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Date: Thu, 21 Jul 2011 11:16:29 -0500
 To: 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] Interference in dorms.





Last year we had several students that would complain about poor wireless 
coverage in their rooms. It was usually followed by the comment that they did 
not have this problem at home or in other areas of the campus. After performing 
various test and wireless scans I am of the opinion that a good portion of 
these problems were introduced by the students themselves by bringing in 
various devices that emit 2.4 interference. I am curious about how any of you 
guys have addressed this problem and informed the students of these potential 
interferences. Have any of you added a section to orientation that discusses 
the problem of interference and did it have good results. Did any of you do a 
poster campaign with good results or did you issue a Faraday cage to each 
student to store their stuff in (yes that was a joke). I can only see this 
problem getting worse with wireless printers and game consoles that all have a 
potential to cause interference. I am open to any ideas and or suggestions. 
Thanks.

Daniel Lay
Networking Specialist
Samford University

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. ** Participation and subscription 
information for this EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



--

Rick Coloccia, Jr.

Network Manager

State University of NY College at Geneseo

1 College Circle, 119 South Hall

Geneseo, NY 14454

V: 585-245-5577

F: 585-245-5579



CIT will never ask for your password or other confidential information via 
email.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Interference in dorms.

2011-07-21 Thread Gogan, James P
Yeah, that's what we do as well, but every year, I swear we have the same 
discussion re: these devices (which seems to be growing larger - recently had 
reports - that were confirmed - of a model of Visio TV that won't connect 
without the 1-2 Mbps rate)

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Timothy J. Fairlie
Sent: Thursday, July 21, 2011 2:40 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

like Neil, we ended up telling them to get the wired adapter

On 7/21/2011 2:36 PM, Gogan, James P wrote:
That kinda begs the question then what DO you do about Wii's (for example)?
Do you have 1-2 Mbps disabled?

-- Jim Gogan
   UNC-Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Fairlie
Sent: Thursday, July 21, 2011 1:31 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

Yep, that was our experience with Wii's.

Through experimentation we saw that once the Wii joined, if you disabled 2mpbs, 
they'd stay on...but they couldn't join if 2mbps wasn't on initially. Really 
weird

Timothy J. Fairlie - Director
Network/User/Telecommunication Services (N.U.T.S)
Rider Universityfair...@rider.edumailto:fair...@rider.edu

- Rick Coloccia coloc...@geneseo.edumailto:coloc...@geneseo.edu wrote:
 Be careful disabling 2 mbps.  We were told at the Cisco conference in a 
 wireless class just last week that the Wiis require 2mbps to successfully 
 find and join the wireless network. I have not personally verified this, but 
 the source is reliable...

 -Rick

 On 7/21/2011 12:58 PM, Johnson, Neil M wrote:
We are struggling with the same issues. We are finding that X-boxes and PS3s 
generate lots of interference (they use a proprietary 2.4 protocol between the 
joysticks and console).


This summer we've added over 100 AP to the dorms, moved several, changed our 
AP's antenna configuration, disabled 1 and 2 Mbps data rates, and are 
implementing channel layering (Meru)  to try and address the issue.


We are also planning on being more aggressive at getting rid of student 
installed wireless AP's.


We are considering adding a 5GHz only SSID in the dorms to encourage users to 
use 5 GHz ( we do have band steering enabled, but a dedicated SSID would insure 
that devices only use 5GHz and not fall back to 2.4).


We'll see what happens.


-Neil


--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-john...@uiowa.edumailto:neil-john...@uiowa.edu




 From: Lay, Daniel dl...@samford.edumailto:dl...@samford.edu
 Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Date: Thu, 21 Jul 2011 11:16:29 -0500
 To: 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] Interference in dorms.





Last year we had several students that would complain about poor wireless 
coverage in their rooms. It was usually followed by the comment that they did 
not have this problem at home or in other areas of the campus. After performing 
various test and wireless scans I am of the opinion that a good portion of 
these problems were introduced by the students themselves by bringing in 
various devices that emit 2.4 interference. I am curious about how any of you 
guys have addressed this problem and informed the students of these potential 
interferences. Have any of you added a section to orientation that discusses 
the problem of interference and did it have good results. Did any of you do a 
poster campaign with good results or did you issue a Faraday cage to each 
student to store their stuff in (yes that was a joke). I can only see this 
problem getting worse with wireless printers and game consoles that all have a 
potential to cause interference. I am open to any ideas and or suggestions. 
Thanks.

Daniel Lay
Networking Specialist
Samford University

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. ** Participation and subscription 
information for this EDUCAUSE Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



--

Rick Coloccia, Jr.

Network Manager

State University of NY College at Geneseo

1 College Circle, 119 South Hall

Geneseo, NY 14454

V: 585-245-5577

F: 585-245-5579



CIT will never ask for your password or other confidential information via 
email.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription

RE: [WIRELESS-LAN] Interference in dorms.

2011-07-21 Thread Gogan, James P
Marketing's understanding of how wireless works: 
http://dilbert.com/strips/comic/2010-04-24/

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Thursday, July 21, 2011 2:55 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

This is where media hype on BYOD being something we all have to live with, 
support, and wirelessly accommodate starts to feels silly. Dorm rooms are only 
so big, and for devices that can’t do secure WLAN, a jack is never very far 
away for us, and we too have disallowed lower data rates for years.

It gets thornier for 100% wireless/no Ethernet environments, for sure. If need 
be, you could certainly accommodate the toys and lesser-capable wireless 
devices all day long, but it comes at an overall performance penalty and 
certainly throws the marketing math askew (Ten times faster! 20 times the 
range! Tastes great! Less filling!) which is fine, if you are willing to live 
with it. Wireless is a technology where it’s hard to have it all at the exact 
same instant in time, and it’s even harder to explain why this is the case to 
people.

One man’s opinion on a hot day.

-Lee


Lee H. Badman
Wireless/Network Engineer
Information Technology and Services
Adjunct Instructor, iSchool
Syracuse University
315 443-3003


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Gogan, James P
Sent: Thursday, July 21, 2011 2:44 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

Yeah, that's what we do as well, but every year, I swear we have the same 
discussion re: these devices (which seems to be growing larger - recently had 
reports - that were confirmed - of a model of Visio TV that won't connect 
without the 1-2 Mbps rate)

-- jg

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]mailto:[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]
 On Behalf Of Timothy J. Fairlie
Sent: Thursday, July 21, 2011 2:40 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

like Neil, we ended up telling them to get the wired adapter

On 7/21/2011 2:36 PM, Gogan, James P wrote:
That kinda begs the question then what DO you do about Wii's (for example)?
Do you have 1-2 Mbps disabled?

-- Jim Gogan
   UNC-Chapel Hill

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tim Fairlie
Sent: Thursday, July 21, 2011 1:31 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Interference in dorms.

Yep, that was our experience with Wii's.

Through experimentation we saw that once the Wii joined, if you disabled 2mpbs, 
they'd stay on...but they couldn't join if 2mbps wasn't on initially. Really 
weird

Timothy J. Fairlie - Director
Network/User/Telecommunication Services (N.U.T.S)
Rider Universityfair...@rider.edumailto:fair...@rider.edu

- Rick Coloccia coloc...@geneseo.edumailto:coloc...@geneseo.edu wrote:
 Be careful disabling 2 mbps.  We were told at the Cisco conference in a 
 wireless class just last week that the Wiis require 2mbps to successfully 
 find and join the wireless network. I have not personally verified this, but 
 the source is reliable...

 -Rick

 On 7/21/2011 12:58 PM, Johnson, Neil M wrote:
We are struggling with the same issues. We are finding that X-boxes and PS3s 
generate lots of interference (they use a proprietary 2.4 protocol between the 
joysticks and console).


This summer we've added over 100 AP to the dorms, moved several, changed our 
AP's antenna configuration, disabled 1 and 2 Mbps data rates, and are 
implementing channel layering (Meru)  to try and address the issue.


We are also planning on being more aggressive at getting rid of student 
installed wireless AP's.


We are considering adding a 5GHz only SSID in the dorms to encourage users to 
use 5 GHz ( we do have band steering enabled, but a dedicated SSID would insure 
that devices only use 5GHz and not fall back to 2.4).


We'll see what happens.


-Neil


--
Neil Johnson
Network Engineer
The University of Iowa
Phone: 319 384-0938
Fax: 319 335-2951
Mobile: 319 540-2081
E-Mail: neil-john...@uiowa.edumailto:neil-john...@uiowa.edu




 From: Lay, Daniel dl...@samford.edumailto:dl...@samford.edu
 Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Date: Thu, 21 Jul 2011 11:16:29 -0500
 To: 
 WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] Interference in dorms.





Last

Experiences with Cypress Envirosystems wireless product?

2011-05-23 Thread Gogan, James P
Our Utilities folks are looking at deploying the Cypress Envirosystems Wireless 
Pneumatic Thermostat system on campus for remote temperature monitoring and 
control. As is so often (too often?) the case with systems like these, (a) 
they use the 2.4GHz DSSS band (frequencies from 2.407 to 2.467 Ghz) and (b) 
they're not 802.11/Wi-Fi technologies, but rather their own wireless technology.

Their literature maintains that Extensive testing has shown that our wireless 
solution has no discernable impact on other wireless technologies, such as 
Bluetooth and Wi-Fi, but for some reason, I tend to discount vendor testing 
that doesn't include all of their test methodologies or results.

So, have any of you all had any experience with these devices and, if so, seen 
any impacts either from these devices on wi-fi or from wi-fi systems on these 
devices?   (We get the blame no matter which way the impact.)  According to the 
vendor, these systems are deployed at UCal-Berkeley, Clemson, Stanford and 
UCLA, so if there are any folks from those institutions out there, please let 
me know your experiences (or if you were even aware that these were out there).

As always, thanks in advance!

-- Jim Gogan
Director, Networking / ITS
University of North Carolina at Chapel Hill

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Android devices and DHCP issue

2010-11-16 Thread Gogan, James P
Was wondering how many other folks have run into the Android device/DHCP issue 
well summarized by the Princeton folks 
(http://www.net.princeton.edu/android/android-stops-renewing-lease-keeps-using-IP-address-11236.html)
 and what folks were doing about this.Rather surprising that it's still an 
on-going/open issue even though a case was opened on this about two months ago.

Quick summary for those that haven't noticed: a large number of Android devices 
(both 2.1 and 2.2 firmware) don't try to renew their DHCP lease, but keep using 
the address anyway.   DHCP server thinks the address is available, offers it to 
other clients, clients discover address is in use and send DHCPDECLINE, lease 
is abandoned and so on.

What have folks found to be the best way to deal with those devices, short of 
an electromagnetic pulse?

-- Jim Gogan
   ITS Comm Tech
   Univ of North Carolina at Chapel Hill

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Alternatives to XpressConnect

2010-04-22 Thread Gogan, James P
Like others, I'll throw in my $.02 here and indicate that not just something 
similar but, in fact, XpressConnect from CloudPath has INDEED been very 
beneficial here on our campus. With the diversity of desktop configurations 
and systems that we have, the seamless configuration of Windows PCs, Macs, 
Ubuntu systems, iPhones/iPod Touches/iPads with a single common-interface tool 
(and great support, by the way) for consistent deployment of 
802.1X/WPA2-Enterprise cannot be beat.

Great product - classic example of you get what you pay for.

-- Jim Gogan
   Univ of North Carolina at Chapel Hill

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Jethro R Binks
Sent: Thursday, April 22, 2010 5:57 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Alternatives to XpressConnect

On Fri, 16 Apr 2010, Kevin Ehlers wrote:

 We're looking at deploying WPA/WPA2 and we think that something similar 
 to XpressConnect from CloudPath would be very beneficial.  However, in 
 searching I have been unable to determine if there are any vendors 
 offering a similar service.  Does anyone know of a competitor to 
 CloudPath in this area?
 
 Our current options are 1) writing our own application + all of the 
 benefits and drawbacks that go with a homegrown solution, and 2) a 
 vendor supported tool to configure client's machines.
 
 Any suggestions or alternatives are welcome.

To: The EDUCAUSE Wireless Issues Constituent Group Listserv
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Date: Thu, 11 Mar 2010 08:49:58 + (GMT)
Subject: Re: [WIRELESS-LAN] Automating WPA Setup

On Tue, 9 Mar 2010, Julian Y. Koh wrote:

 At 10:38 AM -0600 3/9/10, Williams, Mr. Michael wrote:
 We have tutorials available for our users, but our helpdesk folks still
 have to spend a lot of time manually configuring the wireless supplicant
 for some of our less tech savvy users.Does anyone have a solution to
 this problem?

 Here at NU, our Technology Support Services coded up a Windows utility that
 we use for this purpose.

 http://www.it.northwestern.edu/oncampus/wireless/wireless-connections/

Here's another tool that might be of interest:

  http://sourceforge.net/projects/su1x/

Jethro.


.  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .  .
Jethro R Binks
Computing Officer, IT Services, University Of Strathclyde, Glasgow, UK

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Princeton determines cause of an iPad problem

2010-04-20 Thread Gogan, James P
So far, the majority of the iPads we've seen have the 7c:6d:62 prefix that 
we've also seen on some iPhones, MacBook Pros, iPod Touches, iMac, etc.; have 
also seen some d8:30:62 on iPads that we've also seen on iPod Touches

So, t'ain't all that unique, unfortunately.

-- Jim Gogan
   Univ of North Carolina at Chapel Hill

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Hao, Justin C
Sent: Tuesday, April 20, 2010 10:43 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Princeton determines cause of an iPad problem

The ipads we've seen before actually have a different oui prefix than  
the rest of apple's products. Don't know how unique though.

---
Justin Hao
j...@austin.utexas.edu
University of Texas
ITS - Networking

On Apr 20, 2010, at 9:28 PM, Ryan Holland holland@osu.edu wrote:

 If the iPad is like the rest of Apple's product line, there's no way  
 to distinguish it from other Apple products based on mac address.

 --
 Ryan Holland
 Network Engineer, Wireless
 Office of the Chief Information Officer
 The Ohio State University
 614-292-9906   holland@osu.edu

 On Apr 20, 2010, at 9:34 PM, Frank Bulk wrote:

 Another idea is provide long(er) lease times just to the Apple  
 iPads, based
 on OUI.

 Frank

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 [mailto:wireless-...@listserv.educause.edu] On Behalf Of Jeffrey  
 Sessler
 Sent: Monday, April 19, 2010 10:28 AM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: [WIRELESS-LAN] Princeton determines cause of an iPad  
 problem

 It would seem that Princeton could temporarily (or permanently)  
 avoid the
 problem, and thus all the media hype and blocking of the iPads, by  
 simply
 increasing their DHCP lease time from their stated 1-3 hour time to
 something more reasonable. Unless your base of devices include a  
 large
 number of drive-bys (devices seen only once and never again), I'm  
 not sure
 that a lease time of 1-3 hours will result in better DHCP IP  
 address pool
 use than say a lease time of 24 hours.

 We toyed with extremely short leases years ago but found they  
 resulted it
 various device anomalies. We now run with lease times of at least  
 24 hours
 and our average IP address consumption changed very little.

 Jeff

 Zeller, Tom S  04/18/10 8:54 PM 
 http://www.net.princeton.edu/announcements/ipad-iphoneos32-stops-renewing-le
 ase-keeps-using-IP-address.html

 iPad gets DHCP lease.  If iPad happens to be sleeping during the  
 renewal
 time it awakens and uses the IP number forever (until shut down of  
 unit or
 WiFi or going out of range)

 Tom Zeller
 Indiana University

 **
 Participation and subscription information for this EDUCAUSE  
 Constituent
 Group discussion list can be found at http://www.educause.edu/ 
 groups/.

 **
 Participation and subscription information for this EDUCAUSE  
 Constituent
 Group discussion list can be found at http://www.educause.edu/ 
 groups/.

 **
 Participation and subscription information for this EDUCAUSE  
 Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/ 
 .


 -- 
 BEGIN-ANTISPAM-VOTING-LINKS
 --

 Teach CanIt if this mail (ID 1028524510) is spam:
 Spam:https://antispam.osu.edu/b.php?i=1028524510m=8e500edfb024c=s
 Not spam:https://antispam.osu.edu/b.php?i=1028524510m=8e500edfb024c=n
 Forget vote: https://antispam.osu.edu/b.php?i=1028524510m=8e500edfb024c=f
 --
 END-ANTISPAM-VOTING-LINKS


 **
 Participation and subscription information for this EDUCAUSE  
 Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/ 
 .

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Princeton determines cause of an iPad problem

2010-04-19 Thread Gogan, James P
There was an interesting study done at Ga Tech about 3 years ago 
(http://conferences.sigcomm.org/imc/2007/papers/imc17.pdf) on DHCP lease time 
optimization -- don't know if anyone has done anything more with this research 
or similar studies elsewhere, but would be interesting to know if there was.

-- Jim Gogan
   Univ of North Carolina at Chapel Hill

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Jeffrey Sessler
Sent: Monday, April 19, 2010 11:28 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Princeton determines cause of an iPad problem

It would seem that Princeton could temporarily (or permanently) avoid the 
problem, and thus all the media hype and blocking of the iPads, by simply 
increasing their DHCP lease time from their stated 1-3 hour time to something 
more reasonable. Unless your base of devices include a large number of 
drive-bys (devices seen only once and never again), I'm not sure that a lease 
time of 1-3 hours will result in better DHCP IP address pool use than say a 
lease time of 24 hours.


We toyed with extremely short leases years ago but found they resulted it 
various device anomalies. We now run with lease times of at least 24 hours and 
our average IP address consumption changed very little. 


Jeff

 Zeller, Tom S  04/18/10 8:54 PM 
http://www.net.princeton.edu/announcements/ipad-iphoneos32-stops-renewing-le
ase-keeps-using-IP-address.html

iPad gets DHCP lease.  If iPad happens to be sleeping during the renewal
time it awakens and uses the IP number forever (until shut down of unit or
WiFi or going out of range)

Tom Zeller
Indiana University

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


question about PoE midspan devices

2010-03-08 Thread Gogan, James P
I know this question has been asked before, but it wasn't anything that was on 
our radar at the time and experiences may have evolved over time.

We have a possible need for PoE midspan devices, not so much for APs, but for 
security cameras (which could number in the thousands before they're done) -- 
many of them to be located in buildings without any PoE Ethernet switches and 
with no life-cycle network funds on the horizon.

Ideally, I'd like something that's SNMP-manageable and has ssh (ok, I'll settle 
for telnet) capability.   8-16 ports would be nice.

Anything like that out there these days and, if so, what's the experience been 
with them?
Thanks in advance.

-- Jim Gogan
   Director, Networking
   Univ of North Carolina at Chapel Hill

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.