Re: [WIRELESS-LAN] anyone using radius to assign vlans on wireless?

2006-09-27 Thread David Spindler
We tried it with Cisco's APs, but it is not fully supported yet through the WLSM, (it should work in standalone mode). It's also supposed to work with the WiSM (but we haven't tested it yet). --David Phone: 512-475-9299(w) 512-775-8033(c) Public Key at :

RE: [WIRELESS-LAN] anyone using radius to assign vlans on wireless?

2006-09-27 Thread Robinson, Ronald
We have been doing this for over a year now. We have all Cisco's APs and ACS/RADIUS server which authenticates to our AD directory (it also worked with our LDAP directory). It has been working quite well so far, but there are a few caveats, it does not work with the mobility network functionality

Frequent reassociations/reauthentications in 802.1x WLAN

2006-09-27 Thread Shumon Huque
We rolled out a WPA/802.1x authenticated WLAN to our student residences this semester. We're using EAP-TTLS with PAP as the inner authentication protocol. The EAP servers are a set of centralized RADIUS servers that perform Kerberos5 password verification to our KDCs in the backend. We've

Re: [WIRELESS-LAN] Frequent reassociations/reauthentications in 802.1x WLAN

2006-09-27 Thread Julian Y. Koh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 At 4:15 PM -0400 9/27/06, Shumon Huque wrote: A large number of users seem to be repeatedly authenticating, some of them as frequently as every 30 seconds or every few minutes. Some debugging revealed that these users are frequently oscillating their

Re: [WIRELESS-LAN] Frequent reassociations/reauthentications in 802.1x WLAN

2006-09-27 Thread Michael Griego
On Sep 27, 2006, at 3:15 PM, Shumon Huque wrote: Is frequent reassociation the normal behavior in a dense deployment of APs? I can understand that it might be for highly mobile stations like wireless VoIP phones. But our environment is composed of mostly stationary wireless laptops in student

Re: [WIRELESS-LAN] Frequent reassociations/reauthentications in 802.1x WLAN

2006-09-27 Thread Shumon Huque
On Wed, Sep 27, 2006 at 04:49:54PM -0500, Michael Griego wrote: On Sep 27, 2006, at 3:15 PM, Shumon Huque wrote: Is frequent reassociation the normal behavior in a dense deployment of APs? I can understand that it might be for highly mobile stations like wireless VoIP phones. But our

Re: [WIRELESS-LAN] Frequent reassociations/reauthentications in 802.1x WLAN

2006-09-27 Thread Shumon Huque
On Wed, Sep 27, 2006 at 03:41:23PM -0500, Julian Y. Koh wrote: This is exactly the problem that I referred to in my recent post of 9/18 (More fun with RADIUS). We are working on adjusting the power levels and channel assignments of the various APs in the problem areas to cut down the

RE: [WIRELESS-LAN] Frequent reassociations/reauthentications in 802.1x WLAN

2006-09-27 Thread Frank Bulk
Shumon: Vendors have bandied about different authentication rates for RADIUS servers. What kinds of rates are you seeing, 50 auths/sec reasonable? Frank -Original Message- From: Shumon Huque [mailto:[EMAIL PROTECTED] Sent: Wednesday, September 27, 2006 3:16 PM To: