RE: [WIRELESS-LAN] Wireless Only in Student Housing?

2018-08-24 Thread Linchuan Yang
Dear Daniel

We have done this to most of our residence buildings for more than three years.

Before, we gave them wired connection and IP phones. We found that many jacks 
in the rooms were broken, and we spent a lot to do the maintenance on the jacks 
and phones.

Three years ago, we concluded that almost every student in the residence has a 
cell phone, and they do not need the wired connection anymore because they are 
using laptops and mobile devices. So we disabled all of the wireless 
connection, and only enable the jacks if they have special request. This also 
help us to reduce the number of switches in the residence.

You’d better make a good pre-site survey for the wireless coverage in your new 
building ( I spent almost two weeks to do the site survey in the construction 
stage of our new residence), and leave some buffer because after students 
moving in, the furniture and human body can block or absorb some signal. And it 
will not be easy to add more Aps later.

In the past three years, we do not have any major problem for the network 
connection in the residence except the interference from personal rogue routers 
and wireless printers.

Hope it can help for your decision.

Have a good weekend.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS - Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Daniel Wurst
Sent: August-24-18 2:12 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless Only in Student Housing?

Hi All,

We are looking into building a new student housing building and are considering 
going Wifi only for network connectivity. We were wondering if anyone else has 
gone the route of only allowing network connectivity via wireless. If so, can 
you share your experience, lessons learned, and advice.

Thank you,

Dan
--
Daniel Wurst
Network Engineer
Denison University
wur...@denison.edu<mailto:wur...@denison.edu>
740-587-6229

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



RE: About the SMS gateway provider

2018-07-27 Thread Linchuan Yang
Thank you, Lee and Max

Have a nice weekend.

Yours,
Linchuan Yang (Antony)
MEng, ACMP
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 On Behalf Of Lee H Badman
Sent: July-27-18 10:23 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] About the SMS gateway provider

Twilio is cheap, awesome, easy.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
On Behalf Of Linchuan Yang
Sent: Friday, July 27, 2018 9:23 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: [WIRELESS-LAN] About the SMS gateway provider

Dear All

We are studying sending the guest receipt to the clients by SMS message. If you 
have the similar service, could you please recommend the service provider 
(Canadian company is preferred).

Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
MEng, ACMP
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



About the SMS gateway provider

2018-07-27 Thread Linchuan Yang
Dear All

We are studying sending the guest receipt to the clients by SMS message. If you 
have the similar service, could you please recommend the service provider 
(Canadian company is preferred).

Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
MEng, ACMP
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



RE: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication

2017-11-01 Thread Linchuan Yang
Dear All

Thank you for your information. The problem can be fixed by the new release 
today, IOS11.1

Have a nice day.

Yours,​
Linchuan Yang (Antony)
MEng, ACMP
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Becker, Jason
Sent: October-31-17 11:53 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication


We are seeing the same issue here on our Cisco deployment.  I've been telling 
users to reboot or forget it and reconnect unfortunately.  After this they've 
been good, but  I see your point with several certs.





Jason


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Cappalli, Tim (Aruba Security) <t...@hpe.com<mailto:t...@hpe.com>>
Sent: Tuesday, October 31, 2017 9:33:35 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication

Just curious. Why aren't you using the same EAP server certificate across all 
of your RADIUS servers?


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> 
on behalf of Linchuan Yang 
<linchuan.y...@concordia.ca<mailto:linchuan.y...@concordia.ca>>
Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Date: Tuesday, October 31, 2017 at 10:28 AM
To: 
"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>>
Subject: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication

Dear All

Good morning. All of our IOS users start having authentication problem after 
they upgrading to IOS 11. The devices keep asking the user name and password. 
The only way we can fix for now is that “forget” the old profile, and manually 
create a new one, after trusting the certificate, the IOS 11 devices can 
connect to the wireless network. However, we have more than three radius 
servers, if the clients go to other buildings, they have to do this again. In 
some case, the clients have to repeat the procedure every morning when they 
come back to the office.

We noticed that some related discussion on Cisco and Apple Communities. But 
there is not any solution for it. Do you have the same problem for your 
wireless network? Could you please give us some suggestions?

​Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
MEng, ACMP
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.



The materials in this message are private and may contain Protected Healthcare 
Information or other information of a sensitive nature. If you are not the 
intended recipient, be advised that any unauthorized use, disclosure, copying 
or the taking of any action in reliance on the contents of this information is 
strictly prohibited. If you have received this email in error, please 
immediately notify the sender via telephone or return mail.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



IOS 11 problem with eap-mschapv2/peap authentication

2017-10-31 Thread Linchuan Yang
Dear All

Good morning. All of our IOS users start having authentication problem after 
they upgrading to IOS 11. The devices keep asking the user name and password. 
The only way we can fix for now is that “forget” the old profile, and manually 
create a new one, after trusting the certificate, the IOS 11 devices can 
connect to the wireless network. However, we have more than three radius 
servers, if the clients go to other buildings, they have to do this again. In 
some case, the clients have to repeat the procedure every morning when they 
come back to the office.

We noticed that some related discussion on Cisco and Apple Communities. But 
there is not any solution for it. Do you have the same problem for your 
wireless network? Could you please give us some suggestions?

​Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
MEng, ACMP
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.



RE: [WIRELESS-LAN] About the Guest wireless network and account

2016-09-08 Thread Linchuan Yang
Thank you so much for all of your information ☺

Have a good evening.

Yours,​
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tony Skalski
Sent: September-08-16 3:18 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account

Prior to this year, we had open guest SSID with a captive portal where users 
had to accept an AUP every 8 hours. This year we removed the captive portal and 
merged it with another SSID that was used for consoles and other devices that 
do not support 802.1x. The new guest SSID is open and effectively outside our 
firewall.

ajs

On Thu, Sep 8, 2016 at 1:59 PM, Thomas Carter 
<tcar...@austincollege.edu<mailto:tcar...@austincollege.edu>> wrote:
We use PacketFence as well; while faculty, staff, and student accounts are tied 
to AD, guest accounts reside only in packetfence. What is nice for us is 
accounts can have limited time frames and limited expirations to help prevent 
abuse.

Thomas Carter
Network & Operations Manager
Austin College

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>]
 On Behalf Of Max McGrath
Sent: Thursday, September 8, 2016 1:09 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account

We use PacketFence (https://packetfence.org/) as our NAC.  It has built-in 
guest functionality and works fairly well.  Guests can register either via SMS 
or email.

Max

--
Max McGrath 
[https://static.licdn.com/scds/common/u/img/webpromo/btn_profile_greytxt_80x15.png]
 <https://www.linkedin.com/pub/max-mcgrath/1b/3a6/a21>
Network Administrator
Carthage College
262-552-5512
mmcgr...@carthage.edu<mailto:mmcgr...@carthage.edu>

On Thu, Sep 8, 2016 at 1:01 PM, Linchuan Yang 
<linchuan.y...@concordia.ca<mailto:linchuan.y...@concordia.ca>> wrote:
Dear All

We are doing research for the wireless Guest network. Currently, we create temp 
employee account for the Guests in our AD and using a separate captive portal 
for the Guest login. For the group Guests (e.g. external event), we allow them 
to share the same guest account.

However, we found that it’s not easy to manage and track the temp wireless 
guest accounts. Could you please share how your institute setup and manage the 
wireless guest network and the accounts?

​Thank you, and have a good afternoon.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664<tel:%28514%29848-2424%20ext.%207664>

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.



--
Tony Skalski
Systems Administrator
a...@stolaf.edu<mailto:a...@stolaf.edu>
507-786-3227
St. Olaf College
Information Technology
1510 St. Olaf Avenue
Northfield, MN55057-1097

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



About the Guest wireless network and account

2016-09-08 Thread Linchuan Yang
Dear All

We are doing research for the wireless Guest network. Currently, we create temp 
employee account for the Guests in our AD and using a separate captive portal 
for the Guest login. For the group Guests (e.g. external event), we allow them 
to share the same guest account.

However, we found that it’s not easy to manage and track the temp wireless 
guest accounts. Could you please share how your institute setup and manage the 
wireless guest network and the accounts?

​Thank you, and have a good afternoon.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: Cisco WLC5508

2016-03-24 Thread Linchuan Yang
Dear Sturm

We were running the code 8.0.121 on our 5508 controllers. However, one of the 
controllers started rebooting every two or three days after the reading week. 
The cisco engineer told us that the controller hit a bug CSCuw52341 (WLC crash 
with RRM task RRM-CLNT-5_0 is due to a bug CSCuw52341), and suggested us to 
upgrade to an engineer code (version 8.1.131.13) to fix this bug. We have run 
this code on all of our 5508 controllers for about two weeks, and did not have 
any problem. Furthermore, if you plan to do the hyperlocation with the AC wave 
two Aps, you’d better upgrade to the code 8.1 or higher.

Have a nice day.

Yours,​
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mathieu Sturm
Sent: March-24-16 8:19 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Cisco WLC5508

What is the preferred/stable release for a Cisco WLC 5508?
I’m planning on updating this summer.

AP’s 2800,1810 and 3800 series support is required.

Sturm Mathieu
Hoofdmedewerker Netwerkbeheer
--
[http://www.hogent.be/www/assets/Image/maillogo.png]

Hogeschool Gent
Directie Financiën en ICT
Valentin Vaerwyckweg 1
9000 Gent
HoGent.be

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



About the NetScaler Gateway RADIUS Authentication

2015-09-29 Thread Linchuan Yang
Dear All

Good morning. Does anybody familiar with the NetScaler Gateway RADIUS 
Authentication on AD domain controller? If yes, could  you please explain the 
advantage and disadvantage for NetScaler Gateway radius authentication compare 
with the commercial radius server (e.g. Cisco ISE, Aruba clearpass)?

​Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: WLC 5508 Reboots- 8.0.110.0 Code

2015-03-18 Thread Linchuan Yang
Dear Lee

We had the same issue. And Cisco engineer suggested to downgrade to version 7 
because all of the codes in version 8 have this bug. We are waiting for an 
update that they solve this bug in version 8.

Have a nice day.​
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: March-18-15 9:53 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] WLC 5508 Reboots- 8.0.110.0 Code

Sigh… just kick me.

Our latest Cisco WLAN fun comes in the form of 5508 spontaneous reboots on 
8.0.110.0 code. Has anyone else on the list experienced this?

I do find this Support Community thread:  
https://supportforums.cisco.com/discussion/12411926/wlc-5508-automatically-restarting-twice-week#comment-10362606

And this related bug: https://tools.cisco.com/bugsearch/bug/CSCuq74491

Have had one reboot today, and found that another had done so last week quick 
enough where monitoring and alerting didn’t catch it. Now going through all of 
them to see if there might have been others missed.

TAC case open and I see that 8.0.110.0 is no longer available to download, with 
8.0.115.0 “recommended”.

-Lee Badman



Lee Badman
Wireless/Network Architect
ITS, Syracuse University
315.443.3003
(Blog: http://wirednot.wordpress.com)



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] OS X 10.10.1

2014-11-20 Thread Linchuan Yang
Thank you, Kees

This is very helpful for us, I will forward it to our support team.

Have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kees Pronk
Sent: November-20-14 8:28 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] OS X 10.10.1

Hello Antony,

This bug-id article has been riddling WPA2-ent Wi-Fi SSID's for years :  
http://support.apple.com/en-us/HT203841 I found the workaround mentioned very 
effective! AFAIK still exists in all the OS X releases.
Apart from that you might want to disable IPv6 for OS X (mixed messages about 
that)
and you might want to check this solution (not vendor specific):
http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Mac-OS-X-Lion-MacBook-Air-issue/m-p/34351#M14041

~Kees

On 19 Nov 2014, at 17:00, Linchuan Yang 
linchuan.y...@concordia.camailto:linchuan.y...@concordia.ca wrote:


Dear All

Many clients from our University reported the same issue, some of them 
downloaded the patch, and it does not help. However, some clients said that 
they can connect with the eduroam network without any problem. In our 
environment, we use the same configuration for both eduroam and campus 
internal SSID. Could you provide any suggestion?

Have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]On Behalf Of James Andrewartha
Sent: November-18-14 9:20 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] OS X 10.10.1

From: Trent Hurt trent.h...@louisville.edumailto:trent.h...@louisville.edu
http://support.apple.com/kb/DL1779

In our brief testing it hasn't solved the problem. I'm not sure why it breaks, 
but when it does 802.1X isn't established, and the AP is sending EAP Identity 
packets but the laptop isn't responding. Hitting Connect next to the 802.1X 
appears to kill the supplicant, reassociates once or twice and then 
authenticates successfully. I turned on the extra logging available in Wireless 
Diagnostics (which has gotten even better than in 10.9, check it out), and the 
supplicant doesn't even log anything when those packets are received, although 
they are noted at the kernel layer.

So it still looks broken, and like it's a supplicant issue to me. Has anyone 
else tried it out?

Thanks,

--
James Andrewartha
Network  Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found 
athttp://www.educause.edu/groups/.

Disclaimer ( http://www.avans.nl/over-avans/e-mail-disclaimer )
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] OS X 10.10.1

2014-11-19 Thread Linchuan Yang
Dear All

Many clients from our University reported the same issue, some of them 
downloaded the patch, and it does not help. However, some clients said that 
they can connect with the eduroam network without any problem. In our 
environment, we use the same configuration for both eduroam and campus 
internal SSID. Could you provide any suggestion?

Have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of James Andrewartha
Sent: November-18-14 9:20 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] OS X 10.10.1

From: Trent Hurt trent.h...@louisville.edumailto:trent.h...@louisville.edu
http://support.apple.com/kb/DL1779

In our brief testing it hasn't solved the problem. I'm not sure why it breaks, 
but when it does 802.1X isn't established, and the AP is sending EAP Identity 
packets but the laptop isn't responding. Hitting Connect next to the 802.1X 
appears to kill the supplicant, reassociates once or twice and then 
authenticates successfully. I turned on the extra logging available in Wireless 
Diagnostics (which has gotten even better than in 10.9, check it out), and the 
supplicant doesn't even log anything when those packets are received, although 
they are noted at the kernel layer.

So it still looks broken, and like it's a supplicant issue to me. Has anyone 
else tried it out?

Thanks,

--
James Andrewartha
Network  Projects Engineer
Christ Church Grammar School
Claremont, Western Australia
Ph. (08) 9442 1757
Mob. 0424 160 877
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Question about the connection of iphone users (eduroam)

2014-03-10 Thread Linchuan Yang
Dear All

Good morning. We noticed that most our iphone clients connect to the eduroam 
SSID automatically when they step into the campus (not our normal SSID for 
students, faculty, and staff). And the encryption and security settings are 
same between these two SSIDs. These clients have to manually change the 
wireless configuration on the iphones, and they can connect to our normal SSID.

We are using Cisco WLCs, and other devices (e.g. laptops, Android, etc.) do not 
have this problem.

Do you have the similar issue with your wireless network? Is there any 
connection strategies of iphone?

Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Question about the connection of iphone users (eduroam)

2014-03-10 Thread Linchuan Yang
Dear All

Thank you for your suggestion.

Have a good evening.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Cisco VS. Aruba

2013-08-01 Thread Linchuan Yang
Dear All

We are planning to upgrade our whole wireless network. Could you please comment 
based on your experience which one is better:

1. Cisco Prime Infrastructure  VS.  Aruba Airwave
2. Cisco ISE  VS.  Aruba ClearPass

Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Question about the signal strength of cisco Aironet 3602E on 5GHz

2013-04-30 Thread Linchuan Yang
Dear All

We found that the signal strength of cisco Aironet 3602E (with omni directional 
antenna AIR-ANT2524DW-R)  on 5GHz is quite unstable (2.4GHz is good). I am 
using a HP win7 laptop, and sitting 5 meters away from the AP. Usually the 
signal strength on the laptop is only one or two bars (out of 5). However, I 
use some third party application (e.g. Xirrus, Ekahau), the signal strength is 
-47 (almost same value as shown on the controller). Do you have the similar 
problem? Is it a bug of Win7 or Cisco WLC (We are using version 7.2.111.3)?

Have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Question about the signal strength of cisco Aironet 3602E on 5GHz

2013-04-30 Thread Linchuan Yang
Thank you, Chris and Jimmy

In fact, I configured the power level of 5GHz to level 1. And I think this 
maybe the issues with the display of the signal strength. However, with 3602I 
and other model, we do not see the similar problem.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Murphy
Sent: April-30-13 11:54 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Question about the signal strength of cisco Aironet 
3602E on 5GHz

Are you seeing actual performance issues, or just issues with the display of 
signal strength?

-Chris




Hi.  Are you using RRM to manage the radios?  If so what is the reported power 
output RRM is setting?  If you manually set power to max do you get a 
performance increase?  We have both 3602i and 3602e series with dipoles you 
mention with no issues.  We are running 7.2 code currently but plan to goto 7.5 
later this summer.

-Jimmy

University of Michigan


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Question about the Captive portal freeradius configuration

2013-04-17 Thread Linchuan Yang
Dear All

We are using freeradius connecting to AD for wireless authentication. However, 
for the captive portal configuration on freeradius, we are still using LDAP.

Is it possible to change LDAP to AD for the captive portal configuration? If 
yes, could you please provide a sample code in /raddb/sites-enabled/default or 
other files?

Thank you.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



About the eduroam configuration on Freeradius

2013-02-15 Thread Linchuan Yang
Dear All

Do you use different  radius servers for your local SSID and eduroam SSID?

Currently, we are using the same radius servers for both of SSID, and we found 
that some of our local users login with eduroam SSID inside our campus.

We want to block our local users (both user...@concordia.ca and user123)to 
login with eduroam SSID, could you please explain how to modify the proxy.conf 
or other configuration files on Freeradius (Linux version)?

Furthermore, we want to block user...@concordia.ca to login with our local 
SSID, and let user123 login with our local SSID.

Thank you, and have a nice weekend.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Question about Cisco 7920/7921 wireless phone with Aironet 3602 Lightweight Access Points

2013-01-18 Thread Linchuan Yang
Dear All

Good morning. Does anybody know that if Cisco 7920/7921 wireless phone can work 
with Aironet 3602 Lightweight Access Point? I tested, and all of them could not 
connect to Aironet 3602. The phones are using Lightweight Extensible 
Authentication Protocol (LEAP) authentication, and we use Cisco 5508 controller 
with version 7.2.103.0

Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Wireless in Residence Halls

2012-12-19 Thread Linchuan Yang
Dear David

We installed Aps in the corridor of the residence halls, and they can cover the 
rooms on both sides. Two years ago, we found that some Aps were disconnected 
every 2 or 3 days without any reason. Then we discovered that some students 
unplugged the cables and they wanted to reboot the Aps to get better 
connection :(

In the last wireless upgrade, we put all Aps (with internal antennas) in the AP 
enclosures, and hide the jacks inside. We also installed many Aps in the study 
rooms and lounges. After that, no one complaint and no unreasonable 
disconnection anymore. 

Hope this could help your decision.

Merry Christmas and Happy holidays to Everyone!

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of David Robertson
Sent: December-19-12 8:37 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless in Residence Halls

We are looking at how we install wireless in our Residence Halls for coverage.  
Currently we only place access points in the hallways, but are looking at 
moving them into the rooms for better coverage. We were wondering if anyone 
else has put the access points in the rooms and if they have seen a reduction 
in wireless complaint or if there have been issues with students playing with 
or disconnecting the access points.

David R.

--
David Robertson
Service Delivery Manager
Network Engineering Technology
George Mason University
Voice: 703-993-2443
Fax: 703-993-3505

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Cisco ISE?

2012-11-14 Thread Linchuan Yang
Dear Eric and Lee

May I know what kind of license did you buy for your ISE (Base, advanced 
5-year, or wireless 5-year)? Do you separate different roles (staff, student, 
guest) of the wireless clients using ISE? We have around 50,000 staff and 
students, and the maximum simultaneous user is around 9,000 now. If we want to 
use ISE, what kind of license should we buy? I noticed that the wireless 
license is quite expensive and has to be renewed every 5 years!

Thank you and have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric T. Barnett
Sent: November-13-12 11:13 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

I'm curious. We're using ISE for WPA2/PEAP as well, but our GoDaddy cert keeps 
giving cert errors on pretty much anything. What cert are you using? Or is this 
normal?

Thanks,
Eric

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Schwab, Charles A.
Sent: Friday, November 09, 2012 12:24 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco ISE?

How are you implementing mac authentication?

Charlie

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@listserv.educause.edu] On Behalf Of Joe Roth
Sent: Tuesday, November 06, 2012 9:19 PM
To: 
WIRELESS-LAN@listserv.educause.edumailto:WIRELESS-LAN@listserv.educause.edu
Subject: Re: [WIRELESS-LAN] Cisco ISE?

We are running Cisco ISE for wireless only, it was implemented over the summer. 
We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for 
early next week.

We are using it to support both a WPA2/PEAP SSID, as well as a mac 
authenticated gaming SSID. We are not using the supplicant, endpoint 
compliance, SGA or guest pieces.

If you want anything more specific feel free to send some questions my way.

On Tue, Nov 6, 2012 at 2:08 PM, Lee H Badman 
lhbad...@syr.edumailto:lhbad...@syr.edu wrote:
Is anyone yet using Cisco ISE? To what degree of feature set?

Thanks,

Lee

Lee H. Badman
Network Architect/Wireless TME
ITS, Syracuse University
315.443.3003tel:315.443.3003

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



--
Joe Roth
Networking Group
Binghamton University
Ph. 607-777-7528
Fax 607-777-4009
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Favorite 802.3af injector for Cisco?

2012-10-29 Thread Linchuan Yang
Dear Nathan

We use PowerDsine (http://www2.microsemi.com/powerdsine/), and it can save lots 
of power injectors, and you can power cycle the Aps remotely.

Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Nathan Hay
Sent: October-29-12 9:03 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Favorite 802.3af injector for Cisco?

Does anyone have a favorite non-Cisco POE injector that they use with Cisco 
APs?  Specifically for use with the 1042.

Thanks,

Nathan

Nathan Hay
Network Engineer | NOC
WinWholesale Inc.


*
This email message and any attachments is for use only by the named 
addressee(s) and may contain confidential, privileged and/or proprietary 
information.  If you have received this message in error, please immediately 
notify the sender and delete and destroy the message and all copies.  All 
unauthorized direct or indirect use or disclosure of this message is strictly 
prohibited.  No right to confidentiality or privilege is waived or lost by any 
error in transmission. 
*

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Disconnection of Android 4 deivces

2012-10-12 Thread Linchuan Yang
Thank you, all

I asked the Android 4.0.3 client to download the XpressConnect app, and his 
device connected to the network right away after running the app. 

Mike, what configuration issue do you think on the network side? We are using 
Cisco WiSM1, WPA2-Enterprise with PEAP-MSCHAPv2 authentication.

Thank you.

Linchuan

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chuck Anderson
Sent: October-12-12 9:05 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Disconnection of Android 4 deivces

I regularly have issues on both of my Android devices (Droid 4 running Android 
v2.3.6, SGT 10.1 running Android v4.0.4) where I have to manually 
disconnect/reconnect very often.  We are using Juniper/Trapeze access points 
and controllers with EAP-TLS (certificates only, no user/pass auth) 
authentication.

Chuck

On Fri, Oct 12, 2012 at 08:22:40AM -0400, Mike King wrote:
 Just to expand on Bruce's comment.
 
 That posting references Android Cupcake, version 1.5, with a note that 
 it was fixed in Android Donut, version 1.6
 
 Android has been extremely stable on WPA2-Enterprise since 2.3 (and 
 later versions of 2.2).
 
 What's your Wireless infrastructure, and how do you have your SSID 
 configured.  It might be a configuration issue.
 
 Mike
 
 On Fri, Oct 12, 2012 at 7:50 AM, Osborne, Bruce W bosbo...@liberty.eduwrote:
 
   That link is from late 2008 and early 2009, not Android 4.
 
  ** **
 
  The later postings mention certificate trust issues and Android 
  4.0.3 That is a client configuration issue. I notice that comment 
  361 refers to using Cloudpath XpressConnect to configure the client 
  as a solution. All XpressConnect does is properly configure the 
  802.1X client. If XpressConnect can configure the client properly, 
  there may be a UI bug, but the client can be properly setup to 
  function. Since vendors modify the UI so extensively, a UI bug would 
  not be surprising.
 
  ** **
 
  BTW, Cloudpath XpressConnect is a great product for getting a wide 
  variety of unmanaged clients set up for your 802.1X network.
 
  ** **
 
  We use XpressConnect and I am not aware of any issues with Android 
  4.
 
  ** **
 
  *Bruce Osborne*
 
  *Network Engineer*
 
  *IT Network Services*
 
   
 
  *(434) 592-4229*
 
   
 
  *LIBERTY UNIVERSITY*
 
  *Training Champions for Christ since 1971*
 
  ** **
 
  *From:* Linchuan Yang [mailto:linchuan.y...@concordia.ca]
  *Sent:* Thursday, October 11, 2012 11:38 AM
  *Subject:* Disconnection of Android 4 deivces
 
  ** **
 
  Dear All
 
  ** **
 
  Good morning. We received many complains about the disconnection of 
  Android 4 (or later) devices. The clients report that the connection 
  continues for 5 to 10 minutes, then they could not connect to the 
  wireless network anymore, and they have to reboot the device to get 
  a new connection. I searched the internet, and found Android 4 has 
  problem with PEAP mschapv2: “the mschapv2 setting is not saved and 
  it always reverts to none”. 
  (http://code.google.com/p/android/issues/detail?id=1386)
 
  ** **
 
  Do you have the similar issue, and how do you solve it.
 
  ** **
 
  Thank you, and have a nice day.
 
  ** **
 
  Yours,
 
  Linchuan Yang (Antony)
 
  Wireless Networking Analyst
  Network Assessment and Integration,
  IITS-Concordia University
  Tel: (514)848-2424 ext. 7664

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


Disconnection of Android 4 deivces

2012-10-11 Thread Linchuan Yang
Dear All

Good morning. We received many complains about the disconnection of Android 4 
(or later) devices. The clients report that the connection continues for 5 to 
10 minutes, then they could not connect to the wireless network anymore, and 
they have to reboot the device to get a new connection. I searched the 
internet, and found Android 4 has problem with PEAP mschapv2: the mschapv2 
setting is not saved and it always reverts to none. 
(http://code.google.com/p/android/issues/detail?id=1386)

Do you have the similar issue, and how do you solve it.

Thank you, and have a nice day.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: High Number of Disconnections - Mac 10.5 and up

2012-09-19 Thread Linchuan Yang
Dear All

Could you please provide the links on the forums of Apple website, and
other official evidence that shows IPv6 is the main reason for this
problem? Some clients of ours have the same issue, we are using Cisco
wireless network.

Thank you.

Yours,
Linchuan Yang (Antony)
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664



From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Russ Leathe
Sent: September-18-12 4:10 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

Yes, indeed.  We found that IPv6 was on by default.  The theory is, it
would try to get  an IPv6  DHCP first, timeout, grab an IPv4, then retry
IPv6. In doing so, disconnect.

From Terminal,

networksetup  –setv6off Wi-Fi

Disconnects are a major problem with OSX 10.5 and above…just read the
forums on Apples site.




From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Londono, Hernan
Sent: Tuesday, September 18, 2012 3:44 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up

I would like to know if anyone is having an issue with a lot of
disconnection for Mac computers with OS versions 10.5 and up. We are an
Aruba deployment (M3 controllers and AP-105s/125s). For the past 3 weeks
we have seen a high amount of disconnections where about 90% have been
tracked Apple notebooks with the latest OS versions. I’d be grateful to
hear if anyone one is having, of has had the same issue recently, and any
possible recommendations to address the issues.


HERNAN LONDONO
Associate CIO
Barry University


** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Wireless Site Survey cost

2011-03-14 Thread Linchuan Yang
Dear John

 

You can buy the Ekahau Site survey card (including the software). It's
around 5000$, and you can do the site survey by yourself. The only thing you
need is configuring a stand along AP, and use it in the site survey.

 

Yours,

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

  _  

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan
Sent: March 14, 2011 12:42 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless Site Survey cost

 

I know this is a crazy question with tons of variables but I am trying to at
least get an idea of what it would cost to do a wireless survey in our
residence halls.  We have 7 buildings built over the years with a variety of
construction materials.  Each building has 3-4 floors.  We have a total of
1100 students living on campus.  

 

Has anyone had a commercial wireless survey done and if so can you give me
any idea of what I would be looking at?

 

My intention is to do this via an Internship so I do not really want to shop
this out and put vendors through the paces.  I just want to give an estimate
of what it would cost the college if we were to have a commercial provider
do the work.

 

John Kaftan 

Infrastructure Manager

Utica College

315.792.3102

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Windows 7 64-bit WPA2 Connectivity Issues

2010-09-28 Thread Linchuan Yang
Many of our windows 7 clients have this problem. We found a solution: in the
Network Properties, go to the Security tab, there is a button named
Advanced settings.  Play with the check box of Specify authentication
mode: some clients should check it, and others should uncheck it.

 

Good luck!

 

Yours,

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

  _  

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of WALLACE, DAVID
Sent: September 28, 2010 4:34 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Windows 7 64-bit WPA2 Connectivity Issues

 

Anyone experiencing any issues with Windows 7 64 bit machines staying
connected to WPA2-AES enabled WLAN.  Specifically the client associates and
authenticates properly, is assigned an IP.  Shortly afterwords client is
repeatedly prompted to enter their credentials. Disabling the client wlan
interface seems to mitigate this for some time, but symptoms return, and
interrupt client while connected to wireless network. 

 

Running Cisco Lite weight ap's on WISM's, and stand alone controllers etc.
Running 7.0.98.0 code.  Not seeing issues with XP or Vista machines.  Only
common denominator so far has been 64 bit Windows 7 OS.  Doesn't seem to
matter if it's Enterprise or Home version. 

 

Thanks in advanced.  

 

David Wallace

Network Design Engineer

Kent State University

Phone:330-672-0379

dwall...@kent.edu

 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Please help: blocking MAC address from WCS to all controllers with Special Role

2010-04-16 Thread Linchuan Yang
Dear All

 

We also want to assign one staff to block and unblock the baleful wireless
MAC addresses. Furthermore, this person should not configure other features
on both WCS and controllers.

 

However, in order to modify the disabled clients' template, the person also
has the right to modify other Templates through WCS.

 

Dose anybody know how to achieve the following purposes:

1.  Narrow down the right of the person that he/she only can modify the
disabled clients' template ( or do this through command line);

2.  Log everything this guy did on both WCS and all controllers.

 

Thank you, and have a nice day.

 

Yours,

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

  _  

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Dustin Deadwyler
Sent: April 14, 2010 12:31 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Please help: blocking MAC address from WCS to
all controllers

 

This is my first time posting here, so I hope this helps.

 

On the WCS home page, mouse over the Configure tab and click Controller
Template Launch Pad.  Scroll down to the Security heading and click on
Disabled clients.  Pull down the menu on the right side of the screen and
select Add Template and click Go.  Add a template name, MAC address, and a
Description.  Click Save and then apply it to any controller you want to
block the MAC on.

 

 

Dustin

 

 

 

- Original Message - 

From: Linchuan mailto:lichu...@alcor.concordia.ca  Yang 

To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Sent: Wednesday, April 14, 2010 12:17 PM

Subject: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all
controllers

 

Dear all

 

We want to block MAC address through WCS to all controllers. However, WCS
only sends this information to the current controller which the client is
associated on, and does not block the MAC address on other controllers.

 

Does anybody know how to do the global blocking through WCS or other way? If
it's possible, can we block multiple MAC addresses to all controllers at the
same time?

 

Thank you, and have a nice day.

 

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



Please help: blocking MAC address from WCS to all controllers

2010-04-14 Thread Linchuan Yang
Dear all

 

We want to block MAC address through WCS to all controllers. However, WCS
only sends this information to the current controller which the client is
associated on, and does not block the MAC address on other controllers.

 

Does anybody know how to do the global blocking through WCS or other way? If
it's possible, can we block multiple MAC addresses to all controllers at the
same time?

 

Thank you, and have a nice day.

 

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all controllers

2010-04-14 Thread Linchuan Yang
Thank you, Dustin

 

I did not use this feature before. Now I got it.

 

Have a nice day.

 

Yours,

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

  _  

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Dustin Deadwyler
Sent: April 14, 2010 12:31 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Please help: blocking MAC address from WCS to
all controllers

 

This is my first time posting here, so I hope this helps.

 

On the WCS home page, mouse over the Configure tab and click Controller
Template Launch Pad.  Scroll down to the Security heading and click on
Disabled clients.  Pull down the menu on the right side of the screen and
select Add Template and click Go.  Add a template name, MAC address, and a
Description.  Click Save and then apply it to any controller you want to
block the MAC on.

 

 

Dustin

 

 

 

- Original Message - 

From: Linchuan mailto:lichu...@alcor.concordia.ca  Yang 

To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU 

Sent: Wednesday, April 14, 2010 12:17 PM

Subject: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all
controllers

 

Dear all

 

We want to block MAC address through WCS to all controllers. However, WCS
only sends this information to the current controller which the client is
associated on, and does not block the MAC address on other controllers.

 

Does anybody know how to do the global blocking through WCS or other way? If
it's possible, can we block multiple MAC addresses to all controllers at the
same time?

 

Thank you, and have a nice day.

 

Linchuan Yang (Antony)

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 

** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/. 



**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] 1140 Cisco APs

2009-11-09 Thread Linchuan Yang
Hi, Kristina

We did a test with Cisco 1142 AP. From the results (same location, 12 feet),
the coverage of vertical mounting (on the wall) and horizontal mounting
(under the ceiling) are almost the same. Please consult with Cisco about the
mounting position of 1140 AP; I think both of them are suitable for 1140.

Linchuan Yang

Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Kristina Gasca
Kelly
Sent: November 9, 2009 1:14 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 1140 Cisco APs

We are a Cisco shop and have begun discussing the deployment of 802.11n 
APs in our environment. We currently have 22 WiSMs and approx 1100 APs 
(1240s and 1230s).

Currently there are two Cisco flavors of APs the 1252 and 1140. We are 
shying away for the 1250 series because of the power draw limitation 
with our current PoE switches. We don't want to start using injectors 
again or buy all new 3560e switches! However the 1140s were designed to 
be hung from the ceiling and we only hang wall mounted APs.

Has anyone else installed 1140s on the wall, and if so, did you have to 
change your design methodology?

Thanks, Kristina

-- 
~~
Kristina Gasca Kelly
Network Operations Manager
North Carolina State University
Communication Technologies
919.515.0107 (office)
919.515.1641 (fax)
krist...@ncstate.net
~~ 

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Self-assigned IP on Macs

2009-10-29 Thread Linchuan Yang
We encountered the same issue. However, not all snow leopard clients have
this problem. Some of them work well; some of them could not get IP address
from DHCP server occasionally; and some of them could not get IP address for
the whole day. We contacted with Apple, they said they noticed this problem,
and a new patch will be published in the middle or end of November.

Linchuan Yang
Wireless Networking Analyst
Network Assessment and Integration,
IITS-Concordia University
Tel: (514)848-2424 ext. 7664


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Anthony Croome
Sent: October 28, 2009 6:26 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs

Update for my uni's problem.

Our engineers are 100% convinced it's a MAC OS issue.  We are not sure when
the problem was introduced.

When it is working we see the discover, offer, ack, in the DHCP daemon logs.
Then at a random, intermittent time the DHCP daemon will decide to stop
listening to dhcp packets being received on wireless, it logs the discover
but not the offer. 
Wireshark is showing the offers being received but the DHCP daemon doesn't
log them.
There is no difference in the contents of the DHCP offer when it is working
vs when it isn't.

We are going to escalate it to Apple, as there isn't anything else we can
see to try.

Anthony






-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Friday, 16 October 2009 10:16 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs

Has anyone gotten any approved  suggestions for how to deal with these
Apple issues from Cisco, beyond just trying things that seem to sometimes
help?

It is frustrating how the friendly and trouble-free Apple devices tend to be
the least friendly and most troubling devices on the WLAN. A little bit of
techno-irony to this:)

-Lee

From: The EDUCAUSE Wireless Issues Constituent Group Listserv
[wireless-...@listserv.educause.edu] On Behalf Of Jeffrey Sessler
[j...@scrippscollege.edu]
Sent: Thursday, October 15, 2009 7:56 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs

In 6.0, the code for world-mode didn't make it into the controller, but I
believe it's in the AP's IOS commands, so it can be toggled but takes a
little more effort.


Jeff

 Garry Peirce  10/15/09 2:16 PM 
Perhaps I was erroneous in equating the two through a Cisco doc referencing
DTPC to world-mode.
'When you enable Dynamic Transmit Power Control (DTPC), access points add
channel and transmit power information to beacons. (On access points that
run Cisco IOS software, this feature is called world mode.)'

DTPC does appear to be CCX related, so it is likely irrelevant with regard
to the mentioned Apple/Broadcom bug.

Running 6.0.182,
'config 802.11a world-mode' is not an available option.
'config 802.11a dtpc' is.
'show 802.11a' will show the status of DTPC.

I'll inquire w/Cisco.


--




 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 [mailto:wireless-...@listserv.educause.edu] On Behalf Of Matt Grover
 Sent: Thursday, October 15, 2009 2:51 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs

 It's under:

 show 802.11a(or b)

 -Matt

 Bob Richman wrote:
  So, how about the show command that displays the current setting?
 
  -Original Message-
  From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 [mailto:wireless-...@listserv.educause.edu] On Behalf Of Matt Grover
  Sent: Thursday, October 15, 2009 1:21 PM
  To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
  Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs
 
  Actually, if you are talking about specifically world-mode it's
 under:
 
  CLI:  config 802.11a world-mode
  orconfig 802.11b world-mode
 
  -Matt
 


 --
 
 Matt Grover === University of Florida
 Sr. Network Engineer=== http://net-services.ufl.edu
 m...@ufl.edu=== Florida Lambda Rail
 (352)273-1061   === http://www.flrnet.org/
 

 **
 Participation and subscription information for this EDUCAUSE
 Constituent Group discussion list can be found at
 http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent
Group discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE