RE: [WIRELESS-LAN] Wireless Only in Student Housing?
Dear Daniel We have done this to most of our residence buildings for more than three years. Before, we gave them wired connection and IP phones. We found that many jacks in the rooms were broken, and we spent a lot to do the maintenance on the jacks and phones. Three years ago, we concluded that almost every student in the residence has a cell phone, and they do not need the wired connection anymore because they are using laptops and mobile devices. So we disabled all of the wireless connection, and only enable the jacks if they have special request. This also help us to reduce the number of switches in the residence. You’d better make a good pre-site survey for the wireless coverage in your new building ( I spent almost two weeks to do the site survey in the construction stage of our new residence), and leave some buffer because after students moving in, the furniture and human body can block or absorb some signal. And it will not be easy to add more Aps later. In the past three years, we do not have any major problem for the network connection in the residence except the interference from personal rogue routers and wireless printers. Hope it can help for your decision. Have a good weekend. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS - Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv On Behalf Of Daniel Wurst Sent: August-24-18 2:12 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Wireless Only in Student Housing? Hi All, We are looking into building a new student housing building and are considering going Wifi only for network connectivity. We were wondering if anyone else has gone the route of only allowing network connectivity via wireless. If so, can you share your experience, lessons learned, and advice. Thank you, Dan -- Daniel Wurst Network Engineer Denison University wur...@denison.edu<mailto:wur...@denison.edu> 740-587-6229 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: About the SMS gateway provider
Thank you, Lee and Max Have a nice weekend. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv On Behalf Of Lee H Badman Sent: July-27-18 10:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] About the SMS gateway provider Twilio is cheap, awesome, easy. From: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> On Behalf Of Linchuan Yang Sent: Friday, July 27, 2018 9:23 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: [WIRELESS-LAN] About the SMS gateway provider Dear All We are studying sending the guest receipt to the clients by SMS message. If you have the similar service, could you please recommend the service provider (Canadian company is preferred). Thank you, and have a nice day. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
About the SMS gateway provider
Dear All We are studying sending the guest receipt to the clients by SMS message. If you have the similar service, could you please recommend the service provider (Canadian company is preferred). Thank you, and have a nice day. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication
Dear All Thank you for your information. The problem can be fixed by the new release today, IOS11.1 Have a nice day. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Becker, Jason Sent: October-31-17 11:53 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication We are seeing the same issue here on our Cisco deployment. I've been telling users to reboot or forget it and reconnect unfortunately. After this they've been good, but I see your point with several certs. Jason From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Cappalli, Tim (Aruba Security) <t...@hpe.com<mailto:t...@hpe.com>> Sent: Tuesday, October 31, 2017 9:33:35 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication Just curious. Why aren't you using the same EAP server certificate across all of your RADIUS servers? From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Linchuan Yang <linchuan.y...@concordia.ca<mailto:linchuan.y...@concordia.ca>> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Tuesday, October 31, 2017 at 10:28 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [WIRELESS-LAN] IOS 11 problem with eap-mschapv2/peap authentication Dear All Good morning. All of our IOS users start having authentication problem after they upgrading to IOS 11. The devices keep asking the user name and password. The only way we can fix for now is that “forget” the old profile, and manually create a new one, after trusting the certificate, the IOS 11 devices can connect to the wireless network. However, we have more than three radius servers, if the clients go to other buildings, they have to do this again. In some case, the clients have to repeat the procedure every morning when they come back to the office. We noticed that some related discussion on Cisco and Apple Communities. But there is not any solution for it. Do you have the same problem for your wireless network? Could you please give us some suggestions? Thank you, and have a nice day. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. The materials in this message are private and may contain Protected Healthcare Information or other information of a sensitive nature. If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
IOS 11 problem with eap-mschapv2/peap authentication
Dear All Good morning. All of our IOS users start having authentication problem after they upgrading to IOS 11. The devices keep asking the user name and password. The only way we can fix for now is that “forget” the old profile, and manually create a new one, after trusting the certificate, the IOS 11 devices can connect to the wireless network. However, we have more than three radius servers, if the clients go to other buildings, they have to do this again. In some case, the clients have to repeat the procedure every morning when they come back to the office. We noticed that some related discussion on Cisco and Apple Communities. But there is not any solution for it. Do you have the same problem for your wireless network? Could you please give us some suggestions? Thank you, and have a nice day. Yours, Linchuan Yang (Antony) MEng, ACMP Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: [WIRELESS-LAN] About the Guest wireless network and account
Thank you so much for all of your information ☺ Have a good evening. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tony Skalski Sent: September-08-16 3:18 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account Prior to this year, we had open guest SSID with a captive portal where users had to accept an AUP every 8 hours. This year we removed the captive portal and merged it with another SSID that was used for consoles and other devices that do not support 802.1x. The new guest SSID is open and effectively outside our firewall. ajs On Thu, Sep 8, 2016 at 1:59 PM, Thomas Carter <tcar...@austincollege.edu<mailto:tcar...@austincollege.edu>> wrote: We use PacketFence as well; while faculty, staff, and student accounts are tied to AD, guest accounts reside only in packetfence. What is nice for us is accounts can have limited time frames and limited expirations to help prevent abuse. Thomas Carter Network & Operations Manager Austin College From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Max McGrath Sent: Thursday, September 8, 2016 1:09 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account We use PacketFence (https://packetfence.org/) as our NAC. It has built-in guest functionality and works fairly well. Guests can register either via SMS or email. Max -- Max McGrath [https://static.licdn.com/scds/common/u/img/webpromo/btn_profile_greytxt_80x15.png] <https://www.linkedin.com/pub/max-mcgrath/1b/3a6/a21> Network Administrator Carthage College 262-552-5512 mmcgr...@carthage.edu<mailto:mmcgr...@carthage.edu> On Thu, Sep 8, 2016 at 1:01 PM, Linchuan Yang <linchuan.y...@concordia.ca<mailto:linchuan.y...@concordia.ca>> wrote: Dear All We are doing research for the wireless Guest network. Currently, we create temp employee account for the Guests in our AD and using a separate captive portal for the Guest login. For the group Guests (e.g. external event), we allow them to share the same guest account. However, we found that it’s not easy to manage and track the temp wireless guest accounts. Could you please share how your institute setup and manage the wireless guest network and the accounts? Thank you, and have a good afternoon. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664<tel:%28514%29848-2424%20ext.%207664> ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. -- Tony Skalski Systems Administrator a...@stolaf.edu<mailto:a...@stolaf.edu> 507-786-3227 St. Olaf College Information Technology 1510 St. Olaf Avenue Northfield, MN55057-1097 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
About the Guest wireless network and account
Dear All We are doing research for the wireless Guest network. Currently, we create temp employee account for the Guests in our AD and using a separate captive portal for the Guest login. For the group Guests (e.g. external event), we allow them to share the same guest account. However, we found that it’s not easy to manage and track the temp wireless guest accounts. Could you please share how your institute setup and manage the wireless guest network and the accounts? Thank you, and have a good afternoon. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: Cisco WLC5508
Dear Sturm We were running the code 8.0.121 on our 5508 controllers. However, one of the controllers started rebooting every two or three days after the reading week. The cisco engineer told us that the controller hit a bug CSCuw52341 (WLC crash with RRM task RRM-CLNT-5_0 is due to a bug CSCuw52341), and suggested us to upgrade to an engineer code (version 8.1.131.13) to fix this bug. We have run this code on all of our 5508 controllers for about two weeks, and did not have any problem. Furthermore, if you plan to do the hyperlocation with the AC wave two Aps, you’d better upgrade to the code 8.1 or higher. Have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mathieu Sturm Sent: March-24-16 8:19 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Cisco WLC5508 What is the preferred/stable release for a Cisco WLC 5508? I’m planning on updating this summer. AP’s 2800,1810 and 3800 series support is required. Sturm Mathieu Hoofdmedewerker Netwerkbeheer -- [http://www.hogent.be/www/assets/Image/maillogo.png] Hogeschool Gent Directie Financiën en ICT Valentin Vaerwyckweg 1 9000 Gent HoGent.be ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
About the NetScaler Gateway RADIUS Authentication
Dear All Good morning. Does anybody familiar with the NetScaler Gateway RADIUS Authentication on AD domain controller? If yes, could you please explain the advantage and disadvantage for NetScaler Gateway radius authentication compare with the commercial radius server (e.g. Cisco ISE, Aruba clearpass)? Thank you, and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: WLC 5508 Reboots- 8.0.110.0 Code
Dear Lee We had the same issue. And Cisco engineer suggested to downgrade to version 7 because all of the codes in version 8 have this bug. We are waiting for an update that they solve this bug in version 8. Have a nice day. Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman Sent: March-18-15 9:53 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] WLC 5508 Reboots- 8.0.110.0 Code Sigh… just kick me. Our latest Cisco WLAN fun comes in the form of 5508 spontaneous reboots on 8.0.110.0 code. Has anyone else on the list experienced this? I do find this Support Community thread: https://supportforums.cisco.com/discussion/12411926/wlc-5508-automatically-restarting-twice-week#comment-10362606 And this related bug: https://tools.cisco.com/bugsearch/bug/CSCuq74491 Have had one reboot today, and found that another had done so last week quick enough where monitoring and alerting didn’t catch it. Now going through all of them to see if there might have been others missed. TAC case open and I see that 8.0.110.0 is no longer available to download, with 8.0.115.0 “recommended”. -Lee Badman Lee Badman Wireless/Network Architect ITS, Syracuse University 315.443.3003 (Blog: http://wirednot.wordpress.com) ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] OS X 10.10.1
Thank you, Kees This is very helpful for us, I will forward it to our support team. Have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kees Pronk Sent: November-20-14 8:28 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] OS X 10.10.1 Hello Antony, This bug-id article has been riddling WPA2-ent Wi-Fi SSID's for years : http://support.apple.com/en-us/HT203841 I found the workaround mentioned very effective! AFAIK still exists in all the OS X releases. Apart from that you might want to disable IPv6 for OS X (mixed messages about that) and you might want to check this solution (not vendor specific): http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/Mac-OS-X-Lion-MacBook-Air-issue/m-p/34351#M14041 ~Kees On 19 Nov 2014, at 17:00, Linchuan Yang linchuan.y...@concordia.camailto:linchuan.y...@concordia.ca wrote: Dear All Many clients from our University reported the same issue, some of them downloaded the patch, and it does not help. However, some clients said that they can connect with the eduroam network without any problem. In our environment, we use the same configuration for both eduroam and campus internal SSID. Could you provide any suggestion? Have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU]On Behalf Of James Andrewartha Sent: November-18-14 9:20 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] OS X 10.10.1 From: Trent Hurt trent.h...@louisville.edumailto:trent.h...@louisville.edu http://support.apple.com/kb/DL1779 In our brief testing it hasn't solved the problem. I'm not sure why it breaks, but when it does 802.1X isn't established, and the AP is sending EAP Identity packets but the laptop isn't responding. Hitting Connect next to the 802.1X appears to kill the supplicant, reassociates once or twice and then authenticates successfully. I turned on the extra logging available in Wireless Diagnostics (which has gotten even better than in 10.9, check it out), and the supplicant doesn't even log anything when those packets are received, although they are noted at the kernel layer. So it still looks broken, and like it's a supplicant issue to me. Has anyone else tried it out? Thanks, -- James Andrewartha Network Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found athttp://www.educause.edu/groups/. Disclaimer ( http://www.avans.nl/over-avans/e-mail-disclaimer ) ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] OS X 10.10.1
Dear All Many clients from our University reported the same issue, some of them downloaded the patch, and it does not help. However, some clients said that they can connect with the eduroam network without any problem. In our environment, we use the same configuration for both eduroam and campus internal SSID. Could you provide any suggestion? Have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of James Andrewartha Sent: November-18-14 9:20 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] OS X 10.10.1 From: Trent Hurt trent.h...@louisville.edumailto:trent.h...@louisville.edu http://support.apple.com/kb/DL1779 In our brief testing it hasn't solved the problem. I'm not sure why it breaks, but when it does 802.1X isn't established, and the AP is sending EAP Identity packets but the laptop isn't responding. Hitting Connect next to the 802.1X appears to kill the supplicant, reassociates once or twice and then authenticates successfully. I turned on the extra logging available in Wireless Diagnostics (which has gotten even better than in 10.9, check it out), and the supplicant doesn't even log anything when those packets are received, although they are noted at the kernel layer. So it still looks broken, and like it's a supplicant issue to me. Has anyone else tried it out? Thanks, -- James Andrewartha Network Projects Engineer Christ Church Grammar School Claremont, Western Australia Ph. (08) 9442 1757 Mob. 0424 160 877 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Question about the connection of iphone users (eduroam)
Dear All Good morning. We noticed that most our iphone clients connect to the eduroam SSID automatically when they step into the campus (not our normal SSID for students, faculty, and staff). And the encryption and security settings are same between these two SSIDs. These clients have to manually change the wireless configuration on the iphones, and they can connect to our normal SSID. We are using Cisco WLCs, and other devices (e.g. laptops, Android, etc.) do not have this problem. Do you have the similar issue with your wireless network? Is there any connection strategies of iphone? Thank you, and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Question about the connection of iphone users (eduroam)
Dear All Thank you for your suggestion. Have a good evening. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Cisco VS. Aruba
Dear All We are planning to upgrade our whole wireless network. Could you please comment based on your experience which one is better: 1. Cisco Prime Infrastructure VS. Aruba Airwave 2. Cisco ISE VS. Aruba ClearPass Thank you, and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Question about the signal strength of cisco Aironet 3602E on 5GHz
Dear All We found that the signal strength of cisco Aironet 3602E (with omni directional antenna AIR-ANT2524DW-R) on 5GHz is quite unstable (2.4GHz is good). I am using a HP win7 laptop, and sitting 5 meters away from the AP. Usually the signal strength on the laptop is only one or two bars (out of 5). However, I use some third party application (e.g. Xirrus, Ekahau), the signal strength is -47 (almost same value as shown on the controller). Do you have the similar problem? Is it a bug of Win7 or Cisco WLC (We are using version 7.2.111.3)? Have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Question about the signal strength of cisco Aironet 3602E on 5GHz
Thank you, Chris and Jimmy In fact, I configured the power level of 5GHz to level 1. And I think this maybe the issues with the display of the signal strength. However, with 3602I and other model, we do not see the similar problem. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Murphy Sent: April-30-13 11:54 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Question about the signal strength of cisco Aironet 3602E on 5GHz Are you seeing actual performance issues, or just issues with the display of signal strength? -Chris Hi. Are you using RRM to manage the radios? If so what is the reported power output RRM is setting? If you manually set power to max do you get a performance increase? We have both 3602i and 3602e series with dipoles you mention with no issues. We are running 7.2 code currently but plan to goto 7.5 later this summer. -Jimmy University of Michigan ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Question about the Captive portal freeradius configuration
Dear All We are using freeradius connecting to AD for wireless authentication. However, for the captive portal configuration on freeradius, we are still using LDAP. Is it possible to change LDAP to AD for the captive portal configuration? If yes, could you please provide a sample code in /raddb/sites-enabled/default or other files? Thank you. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
About the eduroam configuration on Freeradius
Dear All Do you use different radius servers for your local SSID and eduroam SSID? Currently, we are using the same radius servers for both of SSID, and we found that some of our local users login with eduroam SSID inside our campus. We want to block our local users (both user...@concordia.ca and user123)to login with eduroam SSID, could you please explain how to modify the proxy.conf or other configuration files on Freeradius (Linux version)? Furthermore, we want to block user...@concordia.ca to login with our local SSID, and let user123 login with our local SSID. Thank you, and have a nice weekend. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Question about Cisco 7920/7921 wireless phone with Aironet 3602 Lightweight Access Points
Dear All Good morning. Does anybody know that if Cisco 7920/7921 wireless phone can work with Aironet 3602 Lightweight Access Point? I tested, and all of them could not connect to Aironet 3602. The phones are using Lightweight Extensible Authentication Protocol (LEAP) authentication, and we use Cisco 5508 controller with version 7.2.103.0 Thank you, and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Wireless in Residence Halls
Dear David We installed Aps in the corridor of the residence halls, and they can cover the rooms on both sides. Two years ago, we found that some Aps were disconnected every 2 or 3 days without any reason. Then we discovered that some students unplugged the cables and they wanted to reboot the Aps to get better connection :( In the last wireless upgrade, we put all Aps (with internal antennas) in the AP enclosures, and hide the jacks inside. We also installed many Aps in the study rooms and lounges. After that, no one complaint and no unreasonable disconnection anymore. Hope this could help your decision. Merry Christmas and Happy holidays to Everyone! Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of David Robertson Sent: December-19-12 8:37 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Wireless in Residence Halls We are looking at how we install wireless in our Residence Halls for coverage. Currently we only place access points in the hallways, but are looking at moving them into the rooms for better coverage. We were wondering if anyone else has put the access points in the rooms and if they have seen a reduction in wireless complaint or if there have been issues with students playing with or disconnecting the access points. David R. -- David Robertson Service Delivery Manager Network Engineering Technology George Mason University Voice: 703-993-2443 Fax: 703-993-3505 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Cisco ISE?
Dear Eric and Lee May I know what kind of license did you buy for your ISE (Base, advanced 5-year, or wireless 5-year)? Do you separate different roles (staff, student, guest) of the wireless clients using ISE? We have around 50,000 staff and students, and the maximum simultaneous user is around 9,000 now. If we want to use ISE, what kind of license should we buy? I noticed that the wireless license is quite expensive and has to be renewed every 5 years! Thank you and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Eric T. Barnett Sent: November-13-12 11:13 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Cisco ISE? I'm curious. We're using ISE for WPA2/PEAP as well, but our GoDaddy cert keeps giving cert errors on pretty much anything. What cert are you using? Or is this normal? Thanks, Eric From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Schwab, Charles A. Sent: Friday, November 09, 2012 12:24 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Cisco ISE? How are you implementing mac authentication? Charlie From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@listserv.educause.edu] On Behalf Of Joe Roth Sent: Tuesday, November 06, 2012 9:19 PM To: WIRELESS-LAN@listserv.educause.edumailto:WIRELESS-LAN@listserv.educause.edu Subject: Re: [WIRELESS-LAN] Cisco ISE? We are running Cisco ISE for wireless only, it was implemented over the summer. We are currently at version 1.1.0.665 with an upgrade to 1.1.2 planned for early next week. We are using it to support both a WPA2/PEAP SSID, as well as a mac authenticated gaming SSID. We are not using the supplicant, endpoint compliance, SGA or guest pieces. If you want anything more specific feel free to send some questions my way. On Tue, Nov 6, 2012 at 2:08 PM, Lee H Badman lhbad...@syr.edumailto:lhbad...@syr.edu wrote: Is anyone yet using Cisco ISE? To what degree of feature set? Thanks, Lee Lee H. Badman Network Architect/Wireless TME ITS, Syracuse University 315.443.3003tel:315.443.3003 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. -- Joe Roth Networking Group Binghamton University Ph. 607-777-7528 Fax 607-777-4009 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Favorite 802.3af injector for Cisco?
Dear Nathan We use PowerDsine (http://www2.microsemi.com/powerdsine/), and it can save lots of power injectors, and you can power cycle the Aps remotely. Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Nathan Hay Sent: October-29-12 9:03 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Favorite 802.3af injector for Cisco? Does anyone have a favorite non-Cisco POE injector that they use with Cisco APs? Specifically for use with the 1042. Thanks, Nathan Nathan Hay Network Engineer | NOC WinWholesale Inc. * This email message and any attachments is for use only by the named addressee(s) and may contain confidential, privileged and/or proprietary information. If you have received this message in error, please immediately notify the sender and delete and destroy the message and all copies. All unauthorized direct or indirect use or disclosure of this message is strictly prohibited. No right to confidentiality or privilege is waived or lost by any error in transmission. * ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Disconnection of Android 4 deivces
Thank you, all I asked the Android 4.0.3 client to download the XpressConnect app, and his device connected to the network right away after running the app. Mike, what configuration issue do you think on the network side? We are using Cisco WiSM1, WPA2-Enterprise with PEAP-MSCHAPv2 authentication. Thank you. Linchuan -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chuck Anderson Sent: October-12-12 9:05 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Disconnection of Android 4 deivces I regularly have issues on both of my Android devices (Droid 4 running Android v2.3.6, SGT 10.1 running Android v4.0.4) where I have to manually disconnect/reconnect very often. We are using Juniper/Trapeze access points and controllers with EAP-TLS (certificates only, no user/pass auth) authentication. Chuck On Fri, Oct 12, 2012 at 08:22:40AM -0400, Mike King wrote: Just to expand on Bruce's comment. That posting references Android Cupcake, version 1.5, with a note that it was fixed in Android Donut, version 1.6 Android has been extremely stable on WPA2-Enterprise since 2.3 (and later versions of 2.2). What's your Wireless infrastructure, and how do you have your SSID configured. It might be a configuration issue. Mike On Fri, Oct 12, 2012 at 7:50 AM, Osborne, Bruce W bosbo...@liberty.eduwrote: That link is from late 2008 and early 2009, not Android 4. ** ** The later postings mention certificate trust issues and Android 4.0.3 That is a client configuration issue. I notice that comment 361 refers to using Cloudpath XpressConnect to configure the client as a solution. All XpressConnect does is properly configure the 802.1X client. If XpressConnect can configure the client properly, there may be a UI bug, but the client can be properly setup to function. Since vendors modify the UI so extensively, a UI bug would not be surprising. ** ** BTW, Cloudpath XpressConnect is a great product for getting a wide variety of unmanaged clients set up for your 802.1X network. ** ** We use XpressConnect and I am not aware of any issues with Android 4. ** ** *Bruce Osborne* *Network Engineer* *IT Network Services* *(434) 592-4229* *LIBERTY UNIVERSITY* *Training Champions for Christ since 1971* ** ** *From:* Linchuan Yang [mailto:linchuan.y...@concordia.ca] *Sent:* Thursday, October 11, 2012 11:38 AM *Subject:* Disconnection of Android 4 deivces ** ** Dear All ** ** Good morning. We received many complains about the disconnection of Android 4 (or later) devices. The clients report that the connection continues for 5 to 10 minutes, then they could not connect to the wireless network anymore, and they have to reboot the device to get a new connection. I searched the internet, and found Android 4 has problem with PEAP mschapv2: “the mschapv2 setting is not saved and it always reverts to none”. (http://code.google.com/p/android/issues/detail?id=1386) ** ** Do you have the similar issue, and how do you solve it. ** ** Thank you, and have a nice day. ** ** Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Disconnection of Android 4 deivces
Dear All Good morning. We received many complains about the disconnection of Android 4 (or later) devices. The clients report that the connection continues for 5 to 10 minutes, then they could not connect to the wireless network anymore, and they have to reboot the device to get a new connection. I searched the internet, and found Android 4 has problem with PEAP mschapv2: the mschapv2 setting is not saved and it always reverts to none. (http://code.google.com/p/android/issues/detail?id=1386) Do you have the similar issue, and how do you solve it. Thank you, and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: High Number of Disconnections - Mac 10.5 and up
Dear All Could you please provide the links on the forums of Apple website, and other official evidence that shows IPv6 is the main reason for this problem? Some clients of ours have the same issue, we are using Cisco wireless network. Thank you. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Russ Leathe Sent: September-18-12 4:10 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up Yes, indeed. We found that IPv6 was on by default. The theory is, it would try to get an IPv6 DHCP first, timeout, grab an IPv4, then retry IPv6. In doing so, disconnect. From Terminal, networksetup setv6off Wi-Fi Disconnects are a major problem with OSX 10.5 and above just read the forums on Apples site. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Londono, Hernan Sent: Tuesday, September 18, 2012 3:44 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] High Number of Disconnections - Mac 10.5 and up I would like to know if anyone is having an issue with a lot of disconnection for Mac computers with OS versions 10.5 and up. We are an Aruba deployment (M3 controllers and AP-105s/125s). For the past 3 weeks we have seen a high amount of disconnections where about 90% have been tracked Apple notebooks with the latest OS versions. Id be grateful to hear if anyone one is having, of has had the same issue recently, and any possible recommendations to address the issues. HERNAN LONDONO Associate CIO Barry University ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Wireless Site Survey cost
Dear John You can buy the Ekahau Site survey card (including the software). It's around 5000$, and you can do the site survey by yourself. The only thing you need is configuring a stand along AP, and use it in the site survey. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 _ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan Sent: March 14, 2011 12:42 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Wireless Site Survey cost I know this is a crazy question with tons of variables but I am trying to at least get an idea of what it would cost to do a wireless survey in our residence halls. We have 7 buildings built over the years with a variety of construction materials. Each building has 3-4 floors. We have a total of 1100 students living on campus. Has anyone had a commercial wireless survey done and if so can you give me any idea of what I would be looking at? My intention is to do this via an Internship so I do not really want to shop this out and put vendors through the paces. I just want to give an estimate of what it would cost the college if we were to have a commercial provider do the work. John Kaftan Infrastructure Manager Utica College 315.792.3102 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Windows 7 64-bit WPA2 Connectivity Issues
Many of our windows 7 clients have this problem. We found a solution: in the Network Properties, go to the Security tab, there is a button named Advanced settings. Play with the check box of Specify authentication mode: some clients should check it, and others should uncheck it. Good luck! Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 _ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of WALLACE, DAVID Sent: September 28, 2010 4:34 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Windows 7 64-bit WPA2 Connectivity Issues Anyone experiencing any issues with Windows 7 64 bit machines staying connected to WPA2-AES enabled WLAN. Specifically the client associates and authenticates properly, is assigned an IP. Shortly afterwords client is repeatedly prompted to enter their credentials. Disabling the client wlan interface seems to mitigate this for some time, but symptoms return, and interrupt client while connected to wireless network. Running Cisco Lite weight ap's on WISM's, and stand alone controllers etc. Running 7.0.98.0 code. Not seeing issues with XP or Vista machines. Only common denominator so far has been 64 bit Windows 7 OS. Doesn't seem to matter if it's Enterprise or Home version. Thanks in advanced. David Wallace Network Design Engineer Kent State University Phone:330-672-0379 dwall...@kent.edu ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Please help: blocking MAC address from WCS to all controllers with Special Role
Dear All We also want to assign one staff to block and unblock the baleful wireless MAC addresses. Furthermore, this person should not configure other features on both WCS and controllers. However, in order to modify the disabled clients' template, the person also has the right to modify other Templates through WCS. Dose anybody know how to achieve the following purposes: 1. Narrow down the right of the person that he/she only can modify the disabled clients' template ( or do this through command line); 2. Log everything this guy did on both WCS and all controllers. Thank you, and have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 _ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Dustin Deadwyler Sent: April 14, 2010 12:31 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all controllers This is my first time posting here, so I hope this helps. On the WCS home page, mouse over the Configure tab and click Controller Template Launch Pad. Scroll down to the Security heading and click on Disabled clients. Pull down the menu on the right side of the screen and select Add Template and click Go. Add a template name, MAC address, and a Description. Click Save and then apply it to any controller you want to block the MAC on. Dustin - Original Message - From: Linchuan mailto:lichu...@alcor.concordia.ca Yang To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Wednesday, April 14, 2010 12:17 PM Subject: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all controllers Dear all We want to block MAC address through WCS to all controllers. However, WCS only sends this information to the current controller which the client is associated on, and does not block the MAC address on other controllers. Does anybody know how to do the global blocking through WCS or other way? If it's possible, can we block multiple MAC addresses to all controllers at the same time? Thank you, and have a nice day. Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Please help: blocking MAC address from WCS to all controllers
Dear all We want to block MAC address through WCS to all controllers. However, WCS only sends this information to the current controller which the client is associated on, and does not block the MAC address on other controllers. Does anybody know how to do the global blocking through WCS or other way? If it's possible, can we block multiple MAC addresses to all controllers at the same time? Thank you, and have a nice day. Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all controllers
Thank you, Dustin I did not use this feature before. Now I got it. Have a nice day. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 _ From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Dustin Deadwyler Sent: April 14, 2010 12:31 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all controllers This is my first time posting here, so I hope this helps. On the WCS home page, mouse over the Configure tab and click Controller Template Launch Pad. Scroll down to the Security heading and click on Disabled clients. Pull down the menu on the right side of the screen and select Add Template and click Go. Add a template name, MAC address, and a Description. Click Save and then apply it to any controller you want to block the MAC on. Dustin - Original Message - From: Linchuan mailto:lichu...@alcor.concordia.ca Yang To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Sent: Wednesday, April 14, 2010 12:17 PM Subject: [WIRELESS-LAN] Please help: blocking MAC address from WCS to all controllers Dear all We want to block MAC address through WCS to all controllers. However, WCS only sends this information to the current controller which the client is associated on, and does not block the MAC address on other controllers. Does anybody know how to do the global blocking through WCS or other way? If it's possible, can we block multiple MAC addresses to all controllers at the same time? Thank you, and have a nice day. Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] 1140 Cisco APs
Hi, Kristina We did a test with Cisco 1142 AP. From the results (same location, 12 feet), the coverage of vertical mounting (on the wall) and horizontal mounting (under the ceiling) are almost the same. Please consult with Cisco about the mounting position of 1140 AP; I think both of them are suitable for 1140. Linchuan Yang Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Kristina Gasca Kelly Sent: November 9, 2009 1:14 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] 1140 Cisco APs We are a Cisco shop and have begun discussing the deployment of 802.11n APs in our environment. We currently have 22 WiSMs and approx 1100 APs (1240s and 1230s). Currently there are two Cisco flavors of APs the 1252 and 1140. We are shying away for the 1250 series because of the power draw limitation with our current PoE switches. We don't want to start using injectors again or buy all new 3560e switches! However the 1140s were designed to be hung from the ceiling and we only hang wall mounted APs. Has anyone else installed 1140s on the wall, and if so, did you have to change your design methodology? Thanks, Kristina -- ~~ Kristina Gasca Kelly Network Operations Manager North Carolina State University Communication Technologies 919.515.0107 (office) 919.515.1641 (fax) krist...@ncstate.net ~~ ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
RE: [WIRELESS-LAN] Self-assigned IP on Macs
We encountered the same issue. However, not all snow leopard clients have this problem. Some of them work well; some of them could not get IP address from DHCP server occasionally; and some of them could not get IP address for the whole day. We contacted with Apple, they said they noticed this problem, and a new patch will be published in the middle or end of November. Linchuan Yang Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Anthony Croome Sent: October 28, 2009 6:26 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs Update for my uni's problem. Our engineers are 100% convinced it's a MAC OS issue. We are not sure when the problem was introduced. When it is working we see the discover, offer, ack, in the DHCP daemon logs. Then at a random, intermittent time the DHCP daemon will decide to stop listening to dhcp packets being received on wireless, it logs the discover but not the offer. Wireshark is showing the offers being received but the DHCP daemon doesn't log them. There is no difference in the contents of the DHCP offer when it is working vs when it isn't. We are going to escalate it to Apple, as there isn't anything else we can see to try. Anthony -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman Sent: Friday, 16 October 2009 10:16 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs Has anyone gotten any approved suggestions for how to deal with these Apple issues from Cisco, beyond just trying things that seem to sometimes help? It is frustrating how the friendly and trouble-free Apple devices tend to be the least friendly and most troubling devices on the WLAN. A little bit of techno-irony to this:) -Lee From: The EDUCAUSE Wireless Issues Constituent Group Listserv [wireless-...@listserv.educause.edu] On Behalf Of Jeffrey Sessler [j...@scrippscollege.edu] Sent: Thursday, October 15, 2009 7:56 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs In 6.0, the code for world-mode didn't make it into the controller, but I believe it's in the AP's IOS commands, so it can be toggled but takes a little more effort. Jeff Garry Peirce 10/15/09 2:16 PM Perhaps I was erroneous in equating the two through a Cisco doc referencing DTPC to world-mode. 'When you enable Dynamic Transmit Power Control (DTPC), access points add channel and transmit power information to beacons. (On access points that run Cisco IOS software, this feature is called world mode.)' DTPC does appear to be CCX related, so it is likely irrelevant with regard to the mentioned Apple/Broadcom bug. Running 6.0.182, 'config 802.11a world-mode' is not an available option. 'config 802.11a dtpc' is. 'show 802.11a' will show the status of DTPC. I'll inquire w/Cisco. -- -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Matt Grover Sent: Thursday, October 15, 2009 2:51 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs It's under: show 802.11a(or b) -Matt Bob Richman wrote: So, how about the show command that displays the current setting? -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Matt Grover Sent: Thursday, October 15, 2009 1:21 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Self-assigned IP on Macs Actually, if you are talking about specifically world-mode it's under: CLI: config 802.11a world-mode orconfig 802.11b world-mode -Matt -- Matt Grover === University of Florida Sr. Network Engineer=== http://net-services.ufl.edu m...@ufl.edu=== Florida Lambda Rail (352)273-1061 === http://www.flrnet.org/ ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE