RE: [WIRELESS-LAN] Anyone having issues with Prime Infrastructure 1.4 halting?

2014-01-09 Thread Voll, Toivo
We’re not seeing halting, though are working a couple of other issues with 
Cisco. We also have both patches applied. Note that neither patch shows up when 
you check the version on the GUI, it still claims 1.4.0.45. Ours is a single PI 
install with 18k+ concurrent clients, almost 4000 APs and 14 controllers.

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kitri Waterman
Sent: Thursday, January 09, 2014 2:31 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Anyone having issues with Prime Infrastructure 1.4 
halting?

There's a patch and then what Cisco is labeling as 1.4.1.

I'm not saying patching will help, but rather wondering if we're running into 
the same issue you are?

# sh ver

Version information of installed applications
-

Cisco Prime Network Control System
--
Version : 1.4.0.45
Patch: Cisco Prime Network Control System Version: CSCui77571_2 -- Patch
Patch: Cisco Prime Network Control System Version: 
Update-1_39_for_version_1_4_0_45 -- 1.4.1


On 1/9/14 9:58 AM, Lee H Badman wrote:
Hmmm. I’m intrigued… we only saw (and see) one patch available in downloads.  
We’re on 1.4.0.45.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kitri Waterman
Sent: Thursday, January 09, 2014 12:08 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Anyone having issues with Prime Infrastucture 1.4 
halting?

Lee,

What version of PI 1.4 are you running? Do you have both patches installed?


Kitri Waterman
--
University of Oregon


On 1/9/14 6:34 AM, Lee H Badman wrote:
We’re two nights into a repeating condition after an upgrade to PI 1.4- it just 
hangs. It seems the NMS Server service is stopping itself. We have 3 PI boxes- 
all have the same behavior.

Has anyone else seen the same?

Thanks-

Lee Badman

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: Social media credentials for guest access?

2013-12-11 Thread Voll, Toivo
My thoughts (not speaking for my employer) are right along the same lines. The 
analytics are nice, but if they’re of interest to departments or colleges, the 
same data can likely be gleaned from the university’s own records. On the other 
hand, in public venues (sports arenas, outreach events, college expos, campus 
tours) it might still be worthwhile.

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Tuesday, December 10, 2013 2:59 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Social media credentials for guest access?

Hello to the Group-

Among WLAN vendors and portal provider, the usage of social media login as an 
acceptable guest network sign-in mechanism is getting more common. I get the 
appeal for retail/hospitality WLANs that ultimately will Target marketing at 
you based on these credentials, but I’m not digging it myself for use in higher 
ed because of the “anyone can come up with a BS social media sign-in” factor. 
At the same time, to dismiss any system that uses social media means narrowing 
down your choices for guest access when you’re shopping, and so I wonder…

Are any schools using guest access that is based on social media login? How’s 
it working out for you, and have you ever regretted the choice?


Thanks-

Lee Badman



** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: Wireless NAT Tools for tracking DMCA reports

2013-10-07 Thread Voll, Toivo
For those institutions that are blocking P2P – do you have resident 
students/staff/faculty, and how are they taking it? There seem to be are a fair 
bit of applications that use P2P protocols, such as Blizzard’s update service, 
and I just ran into ASUS distributing driver downloads that way (as an 
alternative option to direct download). What other, if any, restrictions do you 
place on residential Internet use?

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Wednesday, October 02, 2013 2:02 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wireless NAT  Tools for tracking DMCA reports

Block all P2P. Helps out greatly☺


RE: [WIRELESS-LAN] Cisco PI 1.3 patch fix chrome issues

2013-09-06 Thread Voll, Toivo
We applied the 1.4 patch, and it seems to have fixed the issue. (The patch is 
very terse in display, though, so just be patient since it’ll have to stop and 
restart the NCS system. It’ll print something once it’s done. ~20 minutes in 
our case, we have a large DB.)

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Alan Nord
Sent: Friday, September 06, 2013 10:05 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Cisco PI 1.3 patch fix chrome issues

Anyone apply this patch?  I see that it is no longer available on the download 
site.

On Thu, Sep 5, 2013 at 11:39 AM, Hurt,Trenton W. 
trent.h...@louisville.edumailto:trent.h...@louisville.edu wrote:
Cisco published a patch yesterday that fixes the google chrome frame issue.

software.cisco.com/download/release.html?mdfid=284652876flowid=39423softwareid=284272933release=1.3.0relind=AVAILABLErellifecycle=reltype=allhttp://software.cisco.com/download/release.html?mdfid=284652876flowid=39423softwareid=284272933release=1.3.0relind=AVAILABLErellifecycle=reltype=all

Sent from my iPhone



--
Alan Nord, CCNA
Infrastructure Manager
Information Technology Services
Macalester College
1600 Grand Avenue
St. Paul, MN 55105
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: Alternatives to Bonjour

2013-08-28 Thread Voll, Toivo
A number of no-name vendors as well as Crestron, InFocus etc. have devices that 
you attach to a TV or projector. They display the device’s name/IP/and a 
rolling code. All the ones we’ve tried need a proprietary client – typically 
you browse to the name/IP shown to download it – which you then use to connect 
to the IP or name of the device, enter the code as the password, and you can 
share your screen. Some have four-way Hollywood squares etc.

Some of these devices are wireless with the usual caveats (can’t do WPA2/EAP), 
but typically you can disable wireless, and some devices are wired only, so 
your clients use the existing wireless infrastructure without mDNS/Bonjour.

The price varies widely from $100-$1999, and none of the devices we’ve demoed 
seem quite fully baked yet, and there’s a lot of “oh, the IOS/Android client 
isn’t quite done yet” vaporware. Also, the video quality for showing real video 
instead of just powerpoint varies a lot.

And then you have stuff like Barco Clickshare which combines the worst of both 
worlds. It doesn’t use Bonjour, but instead must be set up as its own AP.
--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chanowski, John
Sent: Wednesday, August 28, 2013 1:19 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Alternatives to Bonjour

Does anyone know of an apparatus/application that allows mirroring/streaming to 
a TV screen wirelessly that does not depend on Bonjour or equivalent protocols 
and instead relies on more enterprise friendly protocols? Does anyone know if 
anything like this is being developed?
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: RF interference from 802.11

2013-06-05 Thread Voll, Toivo
Putting on my ex-physicist hat for a moment... Without knowing what the 
experiment is and how it and its room are shielded, it's hard to tell. That 
being said, giving the concerned faculty member the specs (power level, gain, 
frequencies) and offering to reduce the power or turn off one of the radios, or 
do a Let's try it out, and we'll turn it off if it does interfere? offer 
might work. It might also help to explain that enterprise Wi-Fi devices are 
pretty clean and do typically not radiate appreciably outside of their 
intended frequencies. Give them all the technical data necessary for them to 
make the judgment, and do it with some olive branches to avoid the impression 
that IT is running over the needs or desires of faculty but rather wants to 
work with them.

Considering that cordless phones and microwave ovens among others will cause 
just as much if not more interference on 2.4 GHz than a Wi-Fi AP, it seems to 
me that unless their surroundings have been specifically sanitized you'd not be 
introducing anything new, which could also be a point to make.

These, of course, are my personal opinions, not those of my employer.
--
Toivo Voll


-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Julian Y Koh
Sent: Tuesday, June 04, 2013 5:23 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] RF interference from 802.11

Has anyone had to deal with researchers claiming that 802.11 RF causes 
interference with their laboratory experiments and apparatus?  We're getting 
rumblings out of our Physics department - they are trying to prevent APs from 
getting installed in their area because of what they say are highly sensitive 
devices that will be adversely affected.

My personal opinion iswell, I'll withhold that for now.  Anyone gone 
through this?  Thanks in advance!


-- 
Julian Y. Koh
Acting Associate Director, Telecommunications and Network Services
Northwestern University Information Technology (NUIT)

2001 Sheridan Road #G-166
Evanston, IL 60208
847-467-5780
NUIT Web Site: http://www.it.northwestern.edu/
PGP Public Key:http://bt.ittns.northwestern.edu/julian/pgppubkey.html

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] Disabling 802.11b speeds

2013-03-19 Thread Voll, Toivo
It can’t do WPA2 EAP, but it can connect to open networks (assuming the 
default/mandatory data rate is 1 / 2 Mbps.)

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ian McDonald
Sent: Tuesday, March 19, 2013 10:57 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Disabling 802.11b speeds

I wasn’t under the impression that a wii could connect to an enterprise 
wireless network? Am I wrong?

--
ian


RE: [WIRELESS-LAN] Wireless in Residence Halls

2012-12-19 Thread Voll, Toivo
Our experience matches that of a lot of other schools. Initially, for budget 
reasons, a few buildings got APs in the hallways, but that's a suboptimal RF 
design and will not work properly, and we quickly moved away from that and 
instead tackled the hassles of trying to get APs into rooms and suites. This 
also made for natural small cells, which are pretty important. Things like 
NetFlix and Hulu are popular uses of the network, and when streamed over 
wireless, you have to start limiting users per AP.

The additional benefit of putting the APs in non-public areas to us as well was 
accountability, so that if damage were to occur, housing could bill the 
residents. Luckily, we also have not seen notable loss or damage. We use Cisco 
APs and small locks to affix them to their brackets, but no protective 
coverings beyond that. The Cisco brackets also make the cables inaccessible, so 
we haven't dealt with students unplugging anything*. We and our residence staff 
were concerned about vandalism initially, but everyone has been pleasantly 
surprised. In some of our new buildings each suite has a small mechanical 
closet for water heaters etc. and that turned out to be a good place for the 
AP, as it's reachable from the hallway and not reachable by the residents, but 
still basically in the suite. If there's new construction or renovation, 
doesn't hurt to have a chat with the architect or engineer to see if they have 
any ideas.

The biggest complaint we have received regarding the access points in rooms was 
that the blinking light bothered residents, so in the residence halls we've 
turned off the LED indicators.

Also, 5 GHz is a must. There's no way to get 2.4 GHz to work reliably, the lack 
of channels for tiling and microwaves, game controllers and other endless 
amounts of 2.4 GHz devices see to that, and we strongly encourage students to 
get dual-band cards or systems.

In buildings where we have blanket wireless coverage, the use of wired 
connections by residents has almost completely vanished even when there's a hot 
and ready jack right in their room, so there's an obvious strong preference of 
wireless among the student population. This can maybe be translated into a cost 
savings to justify the Wifi install.

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

*In some of our older classrooms where we rigged wireless using existing jacks 
that were accessible, we repeatedly had to go and plug them back in because 
people would ignore any amount of don't unplug / don't touch signage or 
common sense. Based on that experience, if your jacks / AP jacks are 
accessible, I'd certainly recommend some kind of enclosure that keeps 
enterprising self-help fingers off them.

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of David
 Robertson
 Sent: Wednesday, December 19, 2012 8:37 AM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] Wireless in Residence Halls
 
 We are looking at how we install wireless in our Residence Halls for
 coverage.  Currently we only place access points in the hallways, but
 are looking at moving them into the rooms for better coverage. We were
 wondering if anyone else has put the access points in the rooms and if
 they have seen a reduction in wireless complaint or if there have been
 issues with students playing with or disconnecting the access points.
 
 David R.
 
 --
 David Robertson
 Service Delivery Manager
 Network Engineering Technology
 George Mason University
 Voice: 703-993-2443
 Fax: 703-993-3505
 
 **
 Participation and subscription information for this EDUCAUSE Constituent
 Group discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] measuring wireless availability?

2012-12-18 Thread Voll, Toivo
Had a similar question thrown at me a while back. It might be useful to explain 
to the person asking some of the various metrics you might be able to measure, 
and which ones would look good, which ones would look bad, and so forth. We 
were asked for coverage %, among other things, and had to clarify whether this 
meant academic buildings, occupied space, all space, dual-band, 802.11n or what.
--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jamie Savage
Sent: Tuesday, December 18, 2012 3:51 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] measuring wireless availability?

Hi,

  We’ve been approached from above to provide an availability % of our wireless 
service on campus.   We’re not sure what is meant by ‘availability’ and have 
pushed the question back for clarification.   On the assumption that they’re 
asking for availability stats from a users perspective….that’s a tough one.   
The fact that our wireless infrastructure equipment may be up 98.5% of the time 
does not mean that users are experiencing a quality service 98.5% of the time 
in all locations.  Just wondering if anyone has come up with a reasonable way 
of looking at this in order to provide a number that's meaningful.

...thanks in advance..J


Jamie Savage  |  Senior Communications Technician  |  University Information 
Technology

010 Steacie Science Building  |  York University  |  4700 Keele St. ,  Toronto 
ON  M3J 1P3 Canada

T: 416.736.2100 x22605  |  F: 416.736.5830  |  
jsav...@yorku.camailto:jsav...@yorku.ca  |  www.yorku.cahttp://www.yorku.ca/

York UIT will NEVER send unsolicited requests for passwords or other personal 
information via email.  Messages requesting such information are fraudulent and 
should be deleted.http://www.yorku.ca/ ** Participation and 
subscription information for this EDUCAUSE Constituent Group discussion list 
can be found at http://www.educause.edu/groups/.


RE: wireless as network standard?

2012-11-29 Thread Voll, Toivo
That has been one of our concerns as well. People increasingly (due to some 
internal budget / property accounting rule changes) are getting laptops and 
devices they can take off-campus, and our desktop management group has been 
starting to look at solutions which “phone home” for patches and upgrades and 
inventory control – those would at least somewhat ameliorate the lack of WoL.

Residence halls are almost all wireless, even if wired is available. Faculty 
and staff offices are still all wired to PCs. Imaging and backups and all the 
virtualized applications and cloud based computing works better when users are 
on Gigabit instead of contending for airtime, but this of course again depends 
heavily on your users. Faculty and staff doing video editing is completely 
different from a professor that only ever uses email and downloads the 
occasional article.

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John York
Sent: Thursday, November 29, 2012 9:48 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] wireless as network standard?

Our main problem with wireless-only was not having a good wake on LAN so we 
could push patches and upgrades.
Thanks
John

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Ashfield, Matt (NBCC)
Sent: Thursday, November 29, 2012 9:40 AM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] wireless as network standard?

Just curious if anyone has taken the leap and decided to only run wires where 
needed (ie, labs, servers, printers) and go wireless as the standard for the 
majority of their users.
From the perspective of having old buildings, with aging/out-of-date wiring and 
hardware, it certainly seems like a viable option. Obviously wired connections 
will always have a place in the network, but since all our students use wifi as 
their primary connection method, why not the staff?

Thoughts/input appreciated.

Thanks


Matt
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: Apple Petition

2012-07-06 Thread Voll, Toivo
Also, for me, the lack of support for WPA2-Enterprise is a head-scratcher. If 
they go through the trouble of supporting the rest of the encryption schemes, 
and obviously support it on a bunch of their other products, why randomly leave 
it out of some products? I’d prioritize that a bit more, personally.

--
Toivo Voll
Network Engineer
Information Technology Communications
University of South Florida



RE: gaming consoles

2012-05-17 Thread Voll, Toivo
A couple of observations, in no order of importance:
-Getting people to buy the dual-band wireless adapters, instead of 2.4 GHz 
–only ones, for consoles that aren’t natively wireless.
-NAT will kill a lot of games. Unless there’s a magic way to support uPnP in an 
enterprise wireless system, you may have to put the consoles on public address 
space or come up with some other workaround, or give people limited 
functionality (unless you already enforced NAT on the wired consoles and people 
are used to it.)
-Wiis have been a problem, and require slowest 802.11b rates. Some Nintendos 
also didn’t work well with some load balancing algorithms. We’ve told Wii users 
to pay up for the wired adapter, as we can’t support them on wireless anymore. 
(Which, of course, is opposite of what you want to do.)

-Toivo, speaking for himself.


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kellogg, Brian D.
Sent: Thursday, May 17, 2012 2:35 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] gaming consoles

We’ll be moving to an Aruba wireless solution this summer which will give us a 
lot of capabilities we haven’t had.  One of the objectives is to allow gaming 
consoles on the wireless network in order to eventually remove wired ports from 
the dorms.

Has anyone put together some information on what is needed to get the consoles 
on the WLAN that would be will to share it?  I believe the Wii may require 
1Mbps and 2Mbps (which obviously sucks for dense deployments).  Wondering if 
this is true and what other caveats there may be with other consoles that 
others have come across.

Thanks,
Brian
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support for instructors.

2012-02-22 Thread Voll, Toivo
I assume this also correlates with the size of client subnets and your 
supported data rates. We're using /22s, so are a bit concerned.

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Mike Goebel
Sent: Wednesday, February 22, 2012 11:09
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support 
for instructors.

Has anyone actually tracked how much bandwidth/usage Bonjour coughs up 
across their wlan infrastructure? I haven't analyzed it, and while it 
could be bandwidth hungry, it appears to me that will be more with 
device to device.

I'm playing devils advocate here, but is a 6 meg stream on an N access 
point both ways really going to be crunching anyone? I'd be worried 
about G yes, but N with a gig uplink?

I do find it unnerving that all the bonjour devices are able to find 
each other and potentially create a lot of traffic, but 99.9% of the 
time I don't see anyone working any access point very hard.

Mike Goebel
Network Programmer
Office of Information Technology
Western Michigan University
Phone: 269-387-0453
Email: michael.goe...@wmich.edu

On 2/22/2012 10:18 AM, Kellogg, Brian D. wrote:
 We will need Bonjour in order to allow faculty members to mirror their 
 iPads/WhateverAppleProductElse to an AppleTV in a classroom for presentations 
 wirelessly.  Presently we block all mcast and bcast on our WLAN due to the 
 channel use overhead this incurs (anywhere from 10% to 20%).  We'll be moving 
 to Aruba this summer where enabling bcast and mcast is not an all or nothing 
 endeavor I believe.  I think Aruba is integrating some stuff into their 
 controller code to help with this problem or already has it.  Someone who 
 knows more about Aruba can correct me if I'm wrong.

 -Brian

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Brian David
 Sent: Wednesday, February 22, 2012 10:11 AM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: You knew it was coming...Airplay/Apple TV support for 
 instructors.

 We are faced with the same issues here at BC... We are starting to block it 
 for all students but have not for the Faculty.
 Could you give more details on what apps the faculty needed bonjour for?
 -Brian

 Brian J David
 Network Systems Engineer
 Boston College


 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Brian Helman
 Sent: Wednesday, February 22, 2012 9:54 AM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support 
 for instructors.

 Agreed.  We are blocking bonjour between buildings, but not within.  I wanted 
 to block within, but there are apps out there that the faculty want to use 
 that require it.  That was the compromise I settled on... looking forward to 
 802.11ac now.

 I thought my days of dealing with AppleTalk, IPX and Netbeui were done.

 -Brian

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Kellogg, Brian D.
 Sent: Tuesday, February 21, 2012 5:21 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: [WIRELESS-LAN] You knew it was coming...Airplay/Apple TV support 
 for instructors.

 Had an Apple rep in recently and he stated Apple (Bonjour) has come a long 
 way since Appletalk on their network protocols.  I wanted to believe him and 
 then I tried to use it on our campus.  LAN only protocol that relies on mDNS 
 registration to bridge networks assuming all your end devices support it of 
 course.  Reminds me of LAN/SOHO only protocols I worked with a decade ago.  
 Why not allow the device being mirrored to specify the device you want to 
 mirror to by IP address or FQDN.  I don't think I'm asking for too much from 
 the man but, alas, perhaps I am.


 Disappointed yet again by Apple network protocols, Brian

 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
 [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
 Sent: Tuesday, February 21, 2012 4:57 PM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: Re: You knew it was coming...Airplay/Apple TV support for 
 instructors.

 Would be interesting to contemplate a petition or similar from the Educause 
 members to Apple requesting that they catch up to the fact that their toys 
 are invading the enterprise, that the enterprise doesn't run on AirPorts, and 
 therefor they might develop towards the enterprise WLAN, Then again, I doubt 
 they'd give a rip.

 It's a shame that the sexiest devices on the planet have such shallow network 
 development behind them.

 -Lee


 
 From: The EDUCAUSE Wireless 

RE: [WIRELESS-LAN] Playstation 3's

2011-12-13 Thread Voll, Toivo
We saw this with Torches and PS3s as well. The bug referred to in the 
discussion thread, CSCtn74703, I believe lists the fixed-in versions for both. 
Turning off aggressive load balancing may also fix the issue.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Helzerman, James
Sent: Tuesday, December 13, 2011 14:27
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Playstation 3's

We found a similar problem with the Blackberry Torch awhile ago on 7.0.98.0 and 
load balancing.  Essentially with aggressive load balancing between APs turned 
on, clients that passively scan have a hard time connecting.  I am not sure if 
the PS3 actively or passively scans for wireless networks or if any of the PS3 
firmware has changed.  Here is a link to the bug id and code versions that fix 
the passive scan problem.  It might be worth checking out in the lab to see if 
it helps.

https://supportforums.cisco.com/thread/2091932

-Jimmy


James Helzerman
Wireless Network Engineer
University of Michigan
ITS Communications Systems and Data Centers
4251 Plymouth Road,
Building 2, #2224
Ann Arbor, Michigan 48105
Phone: 734-615-9541
Cell: 734-972-5095



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Watters, John
Sent: Tuesday, December 13, 2011 1:57 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Playstation 3's
We have been running 7.0.98.0 since it came out with load balancing from the 
beginning. No complaints that I am aware of re PS3s. And, I know that we have a 
lot of them in our dorms. Some are wired (their option), but the big majority 
is wireless.




-jcw [cid:image001.jpg@01CCB9A5.327E1D50]

-
John WattersUA: OIT  205-348-3992


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Wandell
Sent: Tuesday, December 13, 2011 12:40 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Playstation 3's

All,

we have recently turned load balancing back on on our network and have had some 
complaints
about students Playstation 3's not being able to connect wirelessly. We are 
running 7.0.98.0
on our controllers and WCS is at 7.0.172.0. Has anyone else run into this 
problem?

Thanks

Chris Wandell

Binghamton University
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
inline: image001.jpg

RE: Game Console Wireless Connection Problems

2011-11-09 Thread Voll, Toivo
Depending on your firmware revision, there may be an issue with BlackBerry 
Torches and Aggressive Load Balancing. We believe this is the same issue that 
kept PS3s from seeing our wireless LAN. The Bug ID is CSCtn74703 and has been 
fixed in latest controller firmware releases, like 7.0(220.0).

Obviously, if you're not using aggressive load balancing, you're running into 
something else.

We're also trying to explain to gamers that they get lower latency, more 
reliable connections (not flaking out when the roommate goes to microwave a 
burrito), and higher bandwidth if they bother plugging in a wire, but 
apparently we're not all that convincing.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida




-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Reilly Steele
Sent: Wednesday, November 09, 2011 12:48
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Game Console Wireless Connection Problems

I am a student employee at Western Washington University ResTek and we are 
having trouble getting PS3s connected to our wireless network.

We have just rolled out the first phase of our wireless project this year 
covering half of our residence halls with wireless service. We have three SSIDs 
one secure with 802.1x/WPA2, one open with web auth, and one open that only 
associates with client MACs that have been registered on our website. The last 
SSID is the one we use for browserless devices and game consoles. Initially we 
could not successfully connect Wiis or PS3s to this wireless SSID. We fixed the 
Wii problem by enabling the 2Mb transfer speed on the APs that the Wii seems to 
prefer however this did not fix our PS3 connection issue. If you have had any 
trouble, luck, tricks or tips for getting PS3s working on your wireless 
networks I would love to hear about them.

This is the hardware we are running currently:
  1  Cisco Wireless Control System (WCS)
  1  Cisco 3310 Mobility Services Engine (MSE)
  3  Cisco 5508 Wireless LAN Controllers (WLC)
426  Cisco AIR-CAP3502I-A-K9 A/B/G/N APs

Thanks!
-Reilly Steele


Reilly Steele
ResTek Network Consultant
Western Washington Universtiy
reilly.ste...@wwu.edu

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: Logos

2011-11-02 Thread Voll, Toivo
Poor Lee. We got one too, very recently :-)

[cid:image002.png@01CC9942.900A30E0]

As to the original thread, we’re using FreeRADIUS with a load balancer in 
front. Around 9000-10,000 concurrent users, but relatively few of those are on 
WPA.
There are some backends that can be problematic with FreeRADIUS 
performance-wise, I understand, so it may also matter whether you’re going 
against LDAP, AD, etc.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida




From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Wednesday, November 02, 2011 09:15
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] New Cisco WLC 7.0.220.0 not supported in NCS

While I can’t really add anything to the thread, I will admit to being jealous 
that Trent has a cool logo.





From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hurt,Trenton William
Sent: Tuesday, November 01, 2011 3:24 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] New Cisco WLC 7.0.220.0 not supported in NCS

Found this odd that there is a version of WCS that supports this new code, but 
not NCS.


http://www.cisco.com/en/US/docs/wireless/ncs/1.0/release/notes/NCS_RN1.0.1.html#wp175137



Trent

Trenton Hurt, CCNP(W), CCNA(W), CCNA(V), CCNA(R/S)
Wireless Network Administrator
University of Louisville
Phone (502) 852-1513
FAX (502) 852-1424
[cid:image001.png@01CC9942.115ED2A0]

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
inline: image001.pnginline: image002.png

RE: [WIRELESS-LAN] Netanalyzr tool and wireless network latency

2011-10-18 Thread Voll, Toivo
Another super-cool thing about Netalyzr is that if you share the whole URL it 
gives you after the test, you get the stored results (that’s what the ID is 
for). So you can run it and give the results to a help desk, or have your 
mother run it and send you the link so you can see what it means. I’ve been 
pointing people to it a lot when I suspect they’re having NAT or such trouble 
from remote locations. Also, it’s fun to run in conference hotels and see just 
how atrocious the results are.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Wright, Donald
Sent: Tuesday, October 18, 2011 14:48
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Netanalyzr tool and wireless network latency

We had a user complain that the network snappiness is not the same on 
wireless (802.11g) as it is on his gig wired connection. Yeah, I know.
In any case, he determined this by running the below Berkely Netanalyzr tool 
while connected to wireless. This seems to be telling him that although his 
connection speed is pretty good, his uplink/downlink is buffering and could 
have dropped packet issues (see below).
We get basically the same report when we checked this, however we were able to 
download a debian ISO while streaming some music with no problem. I think the 
buffering message may be normal, and likely would get worse as the AP gets 
busy. I'll do further testing myself, but I'm interested if anyone else has 
used this tool, and is this even a valid tool for measuring wireless 
performance ? Of note, I haven't seen the buffer issue when testing on 802.11n, 
but I need to get more test points there as well.

The tool gives a lot of useful information, very cool. Unfortunately, it runs 
as a java applet, so no iPads or Galaxy support.
http://netalyzr.icsi.berkeley.edu/


RE: [WIRELESS-LAN] Disappointing numbers of 5ghz clients

2011-09-28 Thread Voll, Toivo
And here’s ours. We’re mostly dual-band, but not all N, and Band Select is 
enabled. Note the number of 802.11b clients.

[cid:image003.png@01CC7DD2.EF4B10A0]

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida


inline: image003.png

RE: Wifi Support Staff

2011-07-26 Thread Voll, Toivo
We have 200+ buildings, and some 3000 APs. We have four network engineers and 
two operations technicians. Two of the four engineers have a bit more 
familiarity with wireless, but nobody that’s mainly a wireless engineer. 
Operations handles installing APs for small projects, replacing broken ones 
etc. There’s a separate help desk that assists users in configuring wireless 
and does basic troubleshooting. In new construction projects, we’ve lately been 
getting the contractors to hang the APs for us.

Not speaking in an official capacity or for my employer in any way, my opinion 
is that our staffing level is not enough, and having someone dedicated for 
wireless is a good idea. Larger scale wireless is totally undoable without 
centralized management, and even centrally managed (controller based) wireless 
is sufficiently complex that it really would warrant a full-time job to make 
sure it’s done right. When something goes wrong, it’s invaluable to have 
someone on staff that’s familiar with what’s under the hood in the system and 
can figure out configuration anomalies and is comfortable with troubleshooting 
tools.

A lot also depends on the complexity of your environment (size of mobility 
domain, SSIDs, VLANs, authentication, guest access, VoIP / Video support 
expectations, location etc.) Our setup is relatively simple, but the 
engineering staff also does a lot of other things that take up time (DNS, DHCP, 
RADIUS, MRTG, NAGIOS etc.)

-Toivo

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Brian Deem Williams
Sent: Tuesday, July 26, 2011 01:33
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wifi Support Staff


Hi guys,


Just as an inquiry I would like to know what kind of support staff other 
universities have for their Wi-Fi environment.  Is there a formula that you use 
(i.e.  X number of users = Y number of staff, or X number of access points = Y 
number of staff)?  We have grown almost exponentially in the last couple of 
years (From 300 access points to 1000+ access points, 2000+ access points total 
planned within the next 12 months) and I’m curious as to the number of staff 
members dedicated to supporting the wifi (both from an engineering standpoint 
and from a helpdesk point of view) that other educational facilities have 
deemed necessary.  Any input would be greatly appreciated!

Thanks,

Brian D Williams
Network Engineering
IST – Georgia State University
bwilli...@gsu.edu
404.413.4450

“The definition of insanity is doing the same thing over and over again and 
expecting different results” - Einstein





RE: [WIRELESS-LAN] Dual radio APs, .11n on 2.4ghz radios or not?

2011-05-27 Thread Voll, Toivo
We’re also running into similar issues with purpose-built PDAs, of the type 
used to scan tickets and inventory etc. Also, I seem to recall that Nintendo DS 
will not associate if it doesn’t see the 1 Mbps rates. How other universities 
are dealing with discontinuing support to existing devices would be interesting 
to hear – or if there’s a technical solution someone has devised for this.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jeremy Brake
Sent: Friday, May 27, 2011 16:29
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Dual radio APs, .11n on 2.4ghz radios or not?

Rick,

What are you doing for Wii users?  The last time I checked they required the 
lowest G speeds in order to associate.  Please tell me they fixed it with a new 
code release for the Wii’s….

http://www.networkworld.com/community/blog/dropping-legacy-80211-support-your-infrastruc



Jeremy


From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Rick Brown
Sent: Thursday, May 26, 2011 2:07 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Dual radio APs, .11n on 2.4ghz radios or not?

Craig,

Enabling N on the 2.4 is not a lost cause and will help improve performance if 
the coverage has been designed properly.  As of June 1st we are disabling 11B 
and all 11G rates below 12Mbps.

In order to help steer people to the 5Ghz band we have created an SSID that is 
only broadcast in that band and publicized it as higher performance.

Rick





RE: [WIRELESS-LAN] Wireless Site Survey cost

2011-03-22 Thread Voll, Toivo
You can certainly set dBm limits for signal and survey, or data rate limits, or 
client density limits, and survey with those. However, there are aspects that 
just require one to have knowledge or a feel, of campus.

For example: Where do people typically congregate and use laptops? Which 
students typically are heavy users of data and which aren’t? Why is one outdoor 
seating area really popular and another one isn’t, and might that hold for the 
students two years from now? Do the MIS or Geography students work on large 
databases wirelessly from their study lounge?  Where ARE the study lounges, 
sanctioned and ad-hoc in the first place, and where will they be next year? Are 
you expected to cover a given space for special events where you have hundreds 
of users, but only a few times a year?  Etc, etc.

Typical site surveys with well-thought out criteria as basis for planning are 
certainly useful, especially in the administrative (corporate) spaces, but once 
you get into the academics you have to put in a lot more external information 
to make use of them beyond the basic coverage aspect.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan
Sent: Tuesday, March 22, 2011 15:12
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wireless Site Survey cost

So I hate to dig this up again but nobody really responded to Jeff Sessler’s 
post “Given the need for designs based on capacity rather than coverage, do 
those who've done site surveys previously feel they are still worth the 
trouble?”

Seems to me wireless surveys are for determining coverage which is something we 
can easily measure.  We can require that an area will have no less than -68 dBm 
signal and do the survey to determine what it will take.  However, if folks are 
saying that in a high density area like a ResHall just providing coverage is 
not enough and we must go much denser what good is the survey?  If coverage is 
not enough then how do we determine our density?  Is it just by feel?

Up until now I figured I was not going to do a survey.  I figured for the cost 
of the survey I could buy an additional 30-50 APs.  When pulling wire I’d have 
facilities leave a 20’ coil and pull double the wire I originally guessed based 
on past experience.  Then we would just “Throw it up” and see what happens.  If 
we move slowly and do a ResHall at a time we should be able to get a feel for 
it.

Now I have a shot at doing a survey this summer after the fact by using 
students from a nearby University that has a MS in Networking as an internship. 
 The cost is much less than a professional survey but I have to ask if it is 
still worth it if capacity is what we are going for?

Perhaps I should be looking at a different internship.  There is certainly 
plenty to do around here.


John Kaftan
Infrastructure Manager
Utica College
315.792.3102

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan
Sent: Wednesday, March 16, 2011 8:16 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wireless Site Survey cost

I have everyone held back to 2 Mbs on wireless.  That seems to be a good number 
for now.  Nobody is complaining and it helps to keep their experience 
consistent.  They can watch a Netflix movie with that.  I imagine Netflix would 
use more bandwidth if it could.  I have not tested though.



On 3/16/2011 6:28 PM, Brian Helman wrote:
If people are building new dorms, I’d definitely run copper to any common rooms 
if you support any gaming consoles.  Honestly though, we have a good density of 
wiring even in the dorms and I’m pretty close to shutting down or at least 
limiting the bandwidth available for video on the wireless network.  Netflix, 
Flash and Youtube are killing it (not to mention our Internet connection).

-Brian

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Joel Coehoorn
Sent: Tuesday, March 15, 2011 10:30 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Wireless Site Survey cost

Agree I wouldn't run new port-per-pillow drops, but I wouldn't ditch existing 
drops (just update the switching) and anywhere you have apartment-style living 
I would put a wired port in the common space for game consoles/blu-ray/smart 
tvs/etc. Those who actually use the ports will be the few who know enough to 
know why it's better, and they also tend to be your heaviest users. It's nice 
to get some of the gaming and netflix traffic out of your airspace.

On Mar 15, 2011 7:50pm, John Kaftan 
jkaf...@utica.edumailto:jkaf...@utica.edu wrote:
 Thanks, but I have purchased already.  We will be doing this backwards.  We 
 are 

RE: [WIRELESS-LAN] AP Enclosure

2011-03-17 Thread Voll, Toivo
We don’t always have open access to the hallways either without a chaperone, so 
the difference between hallway and room in many residence halls wasn’t that 
major. Also, the hallways are straight, so all the APs would end up within 
line-of-sight of each other, which isn’t good for RRM algorithms, and 
staggering them around the rooms improves not only RRM and coverage but also 
things like location accuracy. Finally, as Joe pointed out, if something in a 
hallway gets damaged, nobody’s responsible. If an AP in a given student’s room 
gets damaged, they’re liable for it because it’s part of the structure of their 
room.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of John Kaftan
Sent: Thursday, March 17, 2011 12:32
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] AP Enclosure

I have always thought we would install in the hallways.  For those of you who 
have said they install in student rooms I’d like to understand when and why you 
do so.  I’ve assumed that we would want to always have access in case an AP 
goes south.


John Kaftan
Infrastructure Manager
Utica College
315.792.3102


RE: Wifi and spectrometers?

2011-02-22 Thread Voll, Toivo
We haven't heard of any complaints or design constraints, though we've 
occasionally asked -- I don't know whether there are those specific kind of 
spectrometers, though, or the details. I'd be very interested in hearing about 
people's experiences in this area as well, as we have some large science 
buildings that we'll be putting more wireless in shortly.

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Lee H Badman
Sent: Tuesday, February 22, 2011 11:02
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wifi and spectrometers?

We're about to take the campus wireless into some new areas and getting some 
concern voiced about possible negative impact on both noble gas and IR 
spectrometers. Before I start researching a defense, has anyone else already 
been down this road?

Lee Badman

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Any experiences with Cisco 3500-series CleanAir access points?

2011-02-21 Thread Voll, Toivo
We switched over to the Cisco 3500 series from the 1142 series pretty much as 
soon as they were available. The added cost vs. the ability to troubleshoot 
wireless issues, especially in areas into which we can't just physically go, 
such as residence halls, is well worth it. There could definitely be WCS 
improvements in presenting the information and logging it, but even so the new 
details on microwave ovens, cordless phones etc. is very cool when someone 
calls and complains about wireless being slow/down/spotty. 

We have 321 3500s in service today and no problems (that we haven't seen with 
the other models.)

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida




-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Barron Hulver
Sent: Friday, February 18, 2011 14:18
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Any experiences with Cisco 3500-series CleanAir access 
points?

Does anyone have any experiences with the Cisco 3500-series CleanAir 
access points?  We have a small project (about 40 access points) coming 
up and I'm thinking about deploying these as a pilot instead of the 
1142s that we would normally deploy.  I've discussed this will one of my 
people who handles our wireless deployments (Art Ripley) and he thinks 
we should.

For background, we have most of the campus covered in wireless and a 
couple of years ago we started deploying for performance instead of 
coverage (more access points per square foot).  We have nine Cisco WLCs 
(a mix of 4404-100s and 5508s) and a mix of 1131 and 1142 access points. 
  We do not use WCS.  Instead, we (Nathan Broome and I) have  developed 
our own wireless management software.  This has worked well for us but 
I'm wondering if I should move to an off-the-shelf package when 
deploying the 3500s.  Any thoughts on this?

I've arranged a meeting with our local Cisco sales office next week and 
this will be one of the topics I want to discuss.

Thanks,

Barron

Barron Hulver
Director of Networking, Operations, and Systems
Center for Information Technology
Oberlin College
148 West College Street
Oberlin, OH  44074
440-775-8798
http://www2.oberlin.edu/staff/bhulver/

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: Wireless for lab / staff PCs?

2011-01-18 Thread Voll, Toivo
We allow authentication based on machine certificates (EAP-TLS). Works fine in 
XP/Vista/7, but setup is a bit of a pain, so we only do this for machines where 
it’s absolutely necessary. In general when people come to us for wireless labs, 
we advice against relying on wireless for a lab, or convince them to have a LAN 
connection in the docking cart so the machines can be managed while they’re 
docked/charging.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Jason Chan
Sent: Tuesday, January 18, 2011 10:05
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Wireless for lab / staff PCs?

Hi all,

Has anyone deployed wireless connection to the lab / staff PCs (i.e. PCs joined 
to the domain)? How do you authenticate the users to the network and how do you 
manage those PCs? The main issue we have is that the wireless connection is not 
active until the users authenticated to our wireless captive portal.  That 
prevents the users from logging into the Windows login page and gives us a hard 
time to apply patches / manage those PCs. Would EAP-TLS possible in this case? 
How do you manage the certificates? Another possible solution I can think of is 
to create another SSID for all the lab PCs and authenticate based on the MAC 
addresses.

Any suggestions would be appreciated.

Jason

--
Jason Chan
Intermediate Network Administrator
Information  Instructional Technology Services
University of Toronto Scarborough
Phone: (416) 208-4768
Email: jason.c...@utsc.utoronto.camailto:jason.c...@utsc.utoronto.ca

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Blackberry Torch Wifi w/ Cisco lightweight aps

2011-01-06 Thread Voll, Toivo
There was a discussion on this list earlier on that, end of October 2010. We 
were advised that we needed to turn off load balancing on the APs (we’re 
running Cisco controller-based wireless), but none of the users with 
misbehaving Torches ever made themselves available again for follow-up testing. 
Several people seemed to have run into this issue, though.
Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Trenton W Hurt
Sent: Thursday, January 06, 2011 15:35
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Blackberry Torch Wifi w/ Cisco lightweight aps

Has anyone been successful at getting one of these blackberries associated to 
any of their wlans?  I have tried multiple torches on different ssid's and I 
get the same message on the device about failure to associate.  I have tried on 
both our secure network and our open guest network, but neither seem to work.  
Other blackberries, work fine on both of our ssid's.

Thanks,

Trent


Trenton Hurt
Wireless Network Administrator
University of Louisville
Phone (502) 852-1513
FAX (502) 852-1424
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Mount hidden or in plain view in dorms?

2010-12-02 Thread Voll, Toivo
We at the University of South Florida ran into something similar. In response, 
we just turned off the lights via software (Cisco) on the residence hall APs 
(and came up with a little web tool to turn lights on, off, or blink them a few 
times for field personnel to use when they were trying to find a given AP.) 
Another argument for dark APs was that they're less noticeable without pretty 
lights, and hence less likely to be stolen, although we haven't really had a 
problem with that either, lights or no lights.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Ed Furia
Sent: Thursday, December 02, 2010 16:00
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Mount hidden or in plain view in dorms?

Here at Indiana University we have had exposed access points in dorms for a 
number of years with little or no vandalism. We did have one interesting 
problem. In some areas access points are installed in student rooms. We found 
that some of these access points were being disconnected at night due to the 
annoying nature of the blinking activity lights. Black electrical tape solved 
that problem.

ed...

On Dec 2, 2010, at 2:41 PM, Tamarack Birch-wheeles wrote:

 We have many exposed access points here at PSU, including in our dorms. We 
 haven't had any instances of vandalism or theft of access points in the 6 
 years I've been here.
 
 --
 Tamarack Birch-wheeles
 Network Engineer
 Portland State University - Networking and Telecommunications
 Phone: (503)725-3201
 
 
 On Thu, Dec 2, 2010 at 11:33 AM, Fleming, Tony t.flem...@tcu.edu wrote:
 Crew,
 
 We hide our access points above ceiling grids. Our logic is the devices are 
 out of site and less prone to vandalism (in fact we have had zero vandalism).
 
 One concern that has been expressed by our wireless team is the congestion 
 above the ceiling grid – pipes, HVAC ducting, lighting and cables. It is 
 logical that all of these obstructions do not help RF propagation and create 
 sources of interference.
 
  
 My question for you guys:
 
 Did any of you change your mounting locations from above ceiling grid to 
 below the grid (visible)?
 
 Did you notice substantial signal improvement?
 
 What is the vandalism rate?
 
 Did your facilities/administrative folks express any concerns 
 about the AP visibility?
 
  
  
 ** Participation and subscription information for this EDUCAUSE 
 Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/.
 
 
 ** Participation and subscription information for this EDUCAUSE 
 Constituent Group discussion list can be found at 
 http://www.educause.edu/groups/.
 

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] WiFi blockers in classrooms

2010-11-18 Thread Voll, Toivo
You may want to check with your public safety folks before you go Faraday cage 
your rooms. They may have something to say about blocking RF in a classroom. 
Cell phones not working is a life safety concern, and first responder radio 
systems not working even more so.

-Toivo

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Nick Kartsioukas
Sent: Thursday, November 18, 2010 16:53
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] WiFi blockers in classrooms

On Thu, 18 Nov 2010 20:52:58 +, Methven, Peter J
p.j.meth...@hw.ac.uk said:
 If you have some lead laying around, you could line the rooms and turn
 the APs off during lecture times... But as other respondents have said
 it's not really a technology issue, you design your WIFI for full
 coverage for a reason.

Not lead, but a grounded conductive mesh:
http://en.wikipedia.org/wiki/Faraday_cage
Use something with a fine enough mesh to block 5GHz (.5 spacing is
smaller than 1/4wavelength at 5GHz), line all surfaces of the room
(floor, ceiling, walls).  Turn off the APs in that room when they aren't
needed.  Side benefit: Cellular telephone signals are also blocked!
Of course, installing said mesh is not going to be a quick or easy task.

Hmm...I wonder if wireless location services would provide a mechanism
to allow or deny access based on a client's location?
--
Nick Kartsioukas
Cuesta College Computer Services
805-546-3248

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


BlackBerry trouble?

2010-10-20 Thread Voll, Toivo
We've been getting reports of Blackberry Torches being unable to associate to 
our wireless (Cisco) network. Has anyone else seen this? The devices won't even 
associate to an open SSID.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida




RE: [WIRELESS-LAN] BlackBerry trouble?

2010-10-20 Thread Voll, Toivo
We’re largely N and band steering (Client Band Select) is on, but as said, 
clients are failing to associate even to a completely open, no encryption 
whatsoever SSID. We’ll try turning off band steering in the lab and see if that 
fixes it, thanks for all the quick help!

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman
Sent: Wednesday, October 20, 2010 13:14
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] BlackBerry trouble?

Makes you glad it’s all standards-based, eh?

-Lee

Lee H. Badman
Wireless/Network Engineer
Information Technology and Services
Adjunct Instructor, iSchool
Syracuse University
315 443-3003



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Trent Fierro
Sent: Wednesday, October 20, 2010 11:22 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] BlackBerry trouble?


We've seen problems and some searches point to encryption problems (some say 
the Torch likes WEP, some say WPA2).  Still testing.

One person on Crackberry mentioned that someone said at Blackberry said the 
phone doesn't like N routers. Funny.

http://forums.crackberry.com/f209/torch-wifi-just-fyi-522848/

Trent

-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Reynolds, Walter
Sent: Wednesday, October 20, 2010 8:08 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] BlackBerry trouble?

You need to turn load balancing off on the RADIOs for the workaround.  This 
only affects Blackberry Torches for some reason.
There is an open TAC case on this though I do not know what that is offhand but 
turning off load balancing has been the only way we found to get the devices to 
connect.
---
Walter Reynolds
Principal Systems Security Development Engineer
ITS Communications Systems and Data Centers
University of Michigan
(734) 615-9438


 -Original Message-
 From: The EDUCAUSE Wireless Issues Constituent Group Listserv
 [mailto:wireless-...@listserv.educause.edu] On Behalf Of Voll, Toivo
 Sent: Wednesday, October 20, 2010 10:57 AM
 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
 Subject: [WIRELESS-LAN] BlackBerry trouble?

 We've been getting reports of Blackberry Torches being unable to associate to 
 our
 wireless (Cisco) network. Has anyone else seen this? The devices won't even
 associate to an open SSID.

 Toivo Voll
 Network Administrator
 Information Technology Communications
 University of South Florida


**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



No virus found in this message.
Checked by AVG - www.avg.comhttp://www.avg.com
Version: 10.0.1136 / Virus Database: 422/3208 - Release Date: 10/20/10
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Active Directory and LDAP at the same time. Or... just LDAP with 802.1x.

2010-10-14 Thread Voll, Toivo
That’s pretty much what we did at USF too, works well.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Mike Wiseman
Sent: Tuesday, October 12, 2010 16:17
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Active Directory and LDAP at the same time. Or... 
just LDAP with 802.1x.

LDAP *can* be used as the directory for PEAPv0/MS-Chapv2 - there's some 
documentation for this at:

http://rnd.feide.no/2007/08/21/feide_and_eduroam/#id862569

My institution does not run a central AD and when we went to implement Eduroam, 
we implemented an LDAP environment to store the NTLMv2 hash  for 802.1X. The 
goal was to eliminate the need for 3rd party supplicants. We did need to 
populate the LDAP with the hash since the Kerberos backend since the NTLM v2 
hash was not available in our existing authentication infrastructure.

Mike



Mike Wiseman
Manager, Information Security
Information + Technology Services
University of Toronto

 


Here’s the backdrop for my questions:

For 802.1x authentication on the WLAN, we use PEAP w/ MS-CHAPv2, against our AD 
environment. This works wonderfully and always has.

The rub- we have a set of users not in AD- they are in our ED (LDAP). I’ll 
thank you not to ask why.

These LDAP credential folk cannot use the 802.1x setup as it is, as they are 
not in AD. LDAP lookups aren’t possible because PEAP w /MS-CHAPv2 doesn’t work 
with LDAP.

Potential options:

- add support for TTLS/PAP against LDAP on a new SSID (yuck)
- add support for TTLS/PAP on current SSID to make it support two EAP types 
(never done it here)
- insist that everyone be AD (politics)
- insist that everyone be in LDAP and go to TTLS/PAP globally

This is not a terribly important issue right now, but looking down the road it 
will come up and so I’d like to get my thoughts lined up.

Does anyone else use a single SSID with two EAP types? Or have AD and LDAP both 
at play in any other way? Anyone using TTLS/PAP that can comment on it’s 
suitability and reliability versus PEAP w/ MS-CHAPv2?


Thanks-

Lee Badman

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 


RE: Student Wireless Satisfaction Survey

2010-10-07 Thread Voll, Toivo
We haven’t sent out a survey per se, but we do have a feedback form including a 
freeform comment box that follows our captive web portal registration as well 
as an email alias. We’ve gotten some pretty decent information from the form, 
especially about where faculty and students want to see more wireless, which 
wasn’t always where we would have thought they did.

The “survey” itself consists of two questions, ease of registration and 
wireless coverage, so it’s probably a bit more rudimentary than what you’re 
looking for.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Fleming, Tony
Sent: Thursday, October 07, 2010 09:18
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Student Wireless Satisfaction Survey

Crew,
We are in the process of evaluating two vendor wireless solutions. At this 
point we have take two very similar dorms and deployed one vendor solution in 
each location.   After performing a technical evaluation by IT staff, we 
thought it might be worthwhile sending a survey to the students in each dorm to 
evaluate their wireless satisfaction and experience.

I am curious. Have any of you sent out a wireless satisfaction survey to your 
students? If so, did it give you a reasonable picture of the state of your 
wireless networks?

Would any of you be willing to share your survey questions with me privately?

Thank you
Tony
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.


RE: DHCP lease times?

2010-09-14 Thread Voll, Toivo
University of South Florida is at 15 minutes for unencrypted networks, one hour 
for WPA2 authenticated networks.

Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Marcelo Lew
Sent: Monday, September 13, 2010 17:47
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] DHCP lease times?

What do you guys use for DHCP lease times on your wireless networks (external 
DHCP server)?
We have an issue were our DHCP server (Cisco) reports subnets almost full, 
however, the Aruba Controller shows plenty IPs available. I think the issue 
might be related with devices getting on the network for a very short time, 
going off line, but the DHCP server still holds that lease. We have lease times 
set at 1hour for the wireless network.
Shorter lease times maybe?

Thanks,

Marcelo

Marcelo Lew
Wireless Enterprise Administrator
University Technology Services
University of Denver
Desk: (303) 871-6523
Cell: (303) 669-4217
Fax:  (303) 871-5900
Email: m...@du.edu

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/. 


Re: [WIRELESS-LAN] WLAN Authentication

2010-07-15 Thread Voll, Toivo
Ideally 802.1x/WPA(2), with captive web portal for guest access. In reality, a 
large number of non-guest users also use web portal and unsecured web, either 
because host OSes make WPA configuration unduly burdensome/difficult, or don't 
support enterprise WPA (as opposed to PSK-WPA) at all.


On Jul 14, 2010, at 19:44 , Trent Fierro wrote:


Customers are using a variety of methods that others have mentioned. For 
authentication most are using AD, some are using LDAP, separate guest stores 
are making it easier for guest access.

-   .1X wireless access (supplicants are built-in to Microsoft OS and 
others). Role determines VLAN access
-   Some schools are using Web portals for students, staff, administration
-   Separate guest web portals and VLAN access is popular (nothing is added 
to the endpoint)
-   Dorm access is either portal or the same .1X config with different 
privileges

Regards,
Trent


Trent Fierro
Dir of Marketing
408.748.0902  x116
www.avendasys.com
http://twitter.com/Avenda_Systems

Security without Boundaries



From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Perry Mizota
Sent: Wednesday, July 14, 2010 4:15 PM
To: 
WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] WLAN Authentication


I am doing research on behalf of a Silicon Valley-based startup company that is 
developing a solution for higher ed students.  We are trying to understand how 
student authentication happens on a campus WLAN.  Do students receive a unique 
ID and then log in via a browser-based login screen, or do they have to put 
software onto their computers (a la VPNs)?

Based on some secondary research we have conducted, it seems like most 
colleges/universities are using the browser-based approach and that the VPN 
approach is not common.  What are your experiences in this area?

Much thanks in advance,
Perry Mizota
Consultant
pe...@abovethenoise.commailto:pe...@abovethenoise.com

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found 
athttp://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found 
athttp://www.educause.edu/groups/.


Toivo Voll
Information Technology Communications
University of South Florida




**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Voll, Toivo
We benchmarked a Cisco 1142 and an Aruba AP125 (both controller based) a while 
back. They had basically identical performance, although they did vary a bit 
depending on how many concurrent traffic streams you had, how many clients you 
had, whether traffic was uni- or bi-directional etc. One vendor was better at 
one thing, the other at another, but neither did clearly better or worse at the 
end.

Obviously, you run into issues such as being able to utilize both 2.4 and 5 Ghz 
bands to spread the load, possible interference from within or outside of the 
room, client capabilities etc. If the client doesn't have enough chains, 
there's not much you can do on the AP end to change that. One big tweak is to 
kill all the slower legacy protocols and transmit rates if you can, and 
minimize any multicast / broadcast traffic making it onto the air. Also, if you 
can deploy multiple APs to further reduce the number of clients per AP / 
channel, the more bandwidth you have per client.

Also, considering you're within a room, you probably do not want to be running 
full power, so even 15.4W of PoE ought to allow for all chains to operate with 
both vendors, but you might want to confirm that.

--
Toivo Voll
University of South Florida
Information Technology Communications




-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Tom Lowry
Sent: Thursday, April 08, 2010 2:41 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] 802.11n AP recommendations

We have a robotics research group that wants the highest-speed wireless 
connections possible.  All the equipment is in the same room -- approximately 
50'x 50'.

Many consumer grade 802.11n APs seem to top out at well below 100Mbps.  If 
anyone can recommend equipment that can achieve higher throughput, please let 
me 
know.  I won't say price is no object, but we need to consider the options.

Thanks,
Tom Lowry
Department of Computer Science
University of Arizona

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Encryption and Authentication

2009-12-23 Thread Voll, Toivo
Your choices may be limited if you plan to run 802.11n. At least Cisco reads 
the specs as mandating that you must do WPA2 / AES on 802.11n, other types 
(TKIP, WPA) will bump you off 802.11n rates. 

Also consider what your user population is. XP may need a hotfix applied to do 
WPA2. A lot of older systems, WVoIP phones, barcode scanners, Crestron-type 
room controls etc. may be limited to WEP or WPA.

--
Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida



-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of David Blahut
Sent: Wednesday, December 23, 2009 14:25
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Encryption and Authentication

Greetings,

We are beginning to deploy encrypted wireless and I am looking for some 
words of wisdom.  Mainly what method you used and what reasons as to why 
you chose said method or any reason you wish you had not.

We have looked at many of the different flavors of EAP but are unsure of 
any clear advantage of one over the other.

We are a Cisco LWAPP shop with Cisco ACS playing the role of RADIUS with 
open LDAP in the back-end.

Any advice would be helpful; any thing to look out for, any gotchas, any 
show stoppers, and any success stories.

Thanks,
David

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.


RE: [WIRELESS-LAN] Restricting of wireless access in classrooms

2009-12-02 Thread Voll, Toivo
Consider what happens if the professor moves class, cancels class, lets people 
out early, or someone decides to skip class and work on a project for something 
else in a study area nearby, or is in on-campus dorms sick, trying to access 
class material online, or any number of similar scenarios. I don't see how 
these kinds of restrictions are workable - we've told our faculty that the 
wireless coverage serves people outside of just their classroom, and we cannot 
disable wireless for just one classroom - it is up to the instructor to police 
the class if they do not want computers or internet used. That being said, 
we've seen very few requests like this.

-Toivo Voll
(Not speaking for my employer or offering official policy.)

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Peter P Morrissey
Sent: Wednesday, December 02, 2009 2:37 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Restricting of wireless access in classrooms

Interesting. So if you could find a way to populate the access policy based 
upon the user's schedule of classes, you could deny them access to the wireless 
network during class times. The problem is that some professors encourage 
Internet access during class, so you would have to have an opt in by a 
professor/class preference.
You could do it by AP, but what if that AP serves multiple classrooms?
And, what if the student connects to an AP from an adjoining building?

I know of one professor who has their TA's patrol the classroom and  monitor 
what the students are doing. That may actually be cheaper, and more effective 
than a technical solution.

Peter M.

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Chris Drever
Sent: Wednesday, December 02, 2009 2:26 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Restricting of wireless access in classrooms

The Aruba wireless system has everything you need to control user access to the 
internet including: Per user session based firewall policy with time of day 
access, NAT, Routing, bandwidth rate limiting and the ability to kill access to 
rogue access points. We are quite pleased with its features.

Chris Drever - PSU Networking

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of Urrea, Nick
Sent: Wednesday, December 02, 2009 2:03 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] Restricting of wireless access in classrooms

I'm compiling research to give to our Faculty Technology Committee.
My question is has anybody successfully implemented a solution that restricts 
access to wireless internet in classrooms?
Also if you have tried and were not successful in restricting wireless access 
in classrooms let me know. Why didn't the solution work.
No opinions please about how students can just go buy a mobile broadband card 
from a cellular carrier, or installing microwaves in the classrooms, or that 
teaching techniques should improve.



Nicholas Urrea
Information Technology
UC Hastings College of the Law
urr...@uchastings.edu
x4718

** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.
** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.



RE: [WIRELESS-LAN] WLAN Deployment-High number of users

2009-05-15 Thread Voll, Toivo
LWAPP does bring significant benefits. Whether they're worth the cost is 
another matter.
1) Radio Resource Management. The system will figure out how to properly 
interleave channels and set power levels for minimum interference. It's not 
100% perfect, but I wager it's better than almost any human can do and can 
respond to changing conditions.
2) No more manual firmware updates, configuration back-ups etc. All the AP 
management is centralized; if one goes down or catches the flu it's all on a 
central console.
3) Roaming. You can have multiple subnets, one SSID, and when users move from 
an AP in one subnet to the other, the controller(s) handle the roaming 
transparently to the user. With autonomous APs the client loses connectivity, 
has to re-dhcp and all that. Depending on your physical environment this can be 
a big one.
4) Security, authentication etc. stuff.

Downside: unless you can get two controllers, you have a single point of 
failure: controller goes, and you no longer have a wireless network anywhere.

You have two subnet/vlan sizing issues; the subnet presented to the wireless 
users and the network on which the management interface on the APs sits. 
Neither should be too big; you want to keep broadcast traffic low on the radio 
side so that broadcasts don't end up eating up all your air time; you want to 
keep broadcast traffic low on the wired side because the APs (especially old 
ones) have some issues with broadcast loads. Because all user traffic is 
tunneled to the controller, it really doesn't matter what network an AP is on, 
though, from the wired side as long as it can talk to the controller.

Unless you have outdoor coverage from light poles and such or a campus with no 
wired backbone, I don't see much use for mesh.

I'd stay away from multiplying SSIDs. We're using a single SSID university-wide 
to lessen customer confusion and reduce help desk load.

Other factors: 1200-series and 1100-series APs can all be converted from 
autonomous to LWAPP - investment protection. Past that, if you're looking at 
having to fork-lift hardware (old vxWorks APs) Aruba is a pretty solid option 
too at very similar price.

--
Toivo Voll
Network Administrator
Information Technology Communications
University of South Florida




-Original Message-
From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
[mailto:wireless-...@listserv.educause.edu] On Behalf Of reflect ocean
Sent: Friday, May 15, 2009 1:52 PM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: [WIRELESS-LAN] WLAN Deployment-High number of users

Hi I run a medium-sized wifi network.We are cisco shop
(autonommous access points).Recently wifi users number have reached
limits we didn't expect.Because of that,we had to adjust our subnet
network in order to support more users associated to the only SSID our
wireless network use.

I've been looking for alternative to create another ssid and associate
it to another different subnet but I can't find any related to.

Our wireless lan is currently reaching 1000 users or so.I'm not very
confortable with the idea  of having such number of users in wireless subnet.
We have deployed around 60 cisco autonomous acess points throughout
the campus and this subnet is firewalled and routed in our core switch
which is a hope away to accessing Internet.It's very simple design.
What would be a recommended deployment in this case with a growing
number of users?
Would deploying lwap bring any advantage to this design? We want to
keep a single ssid and mobility for wireless users.
Would mesh network bring any benefit?

Thank you

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.