RE: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Danner, Mearl
IAS policies on the same SSID. Fac/Staff/Domain Computers (no students joined) get one VLAN and their own IP range with no acl's applied. Students get another with an acl to protect our domain ports from virus We can use knowledge of the IP ranges to configure bandwidth filtering, NAT addresse

Re: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Philippe Hanset
Tom, One detail that I forgot to mention. It seems obvious but we got bitten by it many times! Make sure to use Gigabit ports on switches that uplink the APs. And if you use a midspan power-injector, also make sure that it supports Gigabit Ethernet! Philippe Univ. of TN On Apr 8, 2010, at 2:40

Re: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Jason Cook
We use radius to assign different subnets to users based on AD attributes. We also allow technology staff the option of choosing their network by simply adding a domain to their login. It's not a real domain on our network, just something the radius script looks for. The primary use for that is

Re: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Jason Cook
We are also a cisco shop and have both 1142 and 1252 AP's on capwap. We've also recently evaluated Meru wireless gear and found it very competitive. You will definitely want to investigate user devices to ensure throughput. For desktops we have older 2.4 only Belkin USB's (F5D8051) that work

RE: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Voll, Toivo
We benchmarked a Cisco 1142 and an Aruba AP125 (both controller based) a while back. They had basically identical performance, although they did vary a bit depending on how many concurrent traffic streams you had, how many clients you had, whether traffic was uni- or bi-directional etc. One vend

Re: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Philippe Hanset
Tom, We have had good success with Aruba AP-125, running in MIMO 3X3 and channel bonding enabled at 5 GHz (40 Mhz channels): about 175 Mbps of net throughput with the Atheros Chipset that could do MIMO 3X3 and could do Short Guard Interval. Caveat: The AP has to be great, but the station sho

RE: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Bruce Marshall
Hello, We needed to wireless enable a math lab for a 100 workstations and we ended up using 4 Aruba A/P's and controller running 802.11N. We are seeing throughput in excess of 200meg at the workstations and they have experienced no issues with them. We have them secured with Certificates on both

RE: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Lee H Badman
Sorry- meant to say early 11n Mac, not early Mac. -Original Message- From: Lee H Badman Sent: Thursday, April 08, 2010 3:21 PM To: 'The EDUCAUSE Wireless Issues Constituent Group Listserv' Subject: RE: [WIRELESS-LAN] 802.11n AP recommendations Tom, I have played with Cisco 11n on a

RE: [WIRELESS-LAN] 802.11n AP recommendations

2010-04-08 Thread Lee H Badman
Tom, I have played with Cisco 11n on a fat 1140 (not CAPWAP) and it does pretty well- like a true 130 Mbps throughput testing with an older early Mac in simple testing. Nice enterprise-class AP and when not CAPWAP can be used stand-alone (no controller dependency). -Lee -Original Mes

802.11n AP recommendations

2010-04-08 Thread Tom Lowry
We have a robotics research group that wants the highest-speed wireless connections possible. All the equipment is in the same room -- approximately 50'x 50'. Many consumer grade 802.11n APs seem to top out at well below 100Mbps. If anyone can recommend equipment that can achieve higher thro

Re: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread heath.barnhart
With the current design, yes the AD clients would be in a separate SSID but not for that reason. It more of separating student and faculty traffic into different networks. Any faculty or staff member can use the encrypted wireless for their use, it just happens that most are using university la

RE: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Nikhil Kumar
Here at Pacific, we do have a unique SSID for AD clients. Our users authenticate with the Radius server which is tied with AD. All our wireless controllers point to the Radius server for authentication before allowing access. thanks, Nik University of the Pacific From: The EDUCAUSE Wi

RE: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Lee H Badman
Thanks, Heath and everyone else. Do you who are doing wireless AD use a unique SSID for full AD wireless clients, or use the magic of RADIUS and AD to divvy users up? -Lee From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listse

Re: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread heath.barnhart
We've been doing this for about a year now and like Mearl said it pretty much just works. There are two main issues I've seen: 1. Signal Strength/Quality can really effect how well the process goes on first login. If the user's profile already exists on the system and the system is just gettin

Re: [WIRELESS-LAN] iPad Experiences

2010-04-08 Thread heath.barnhart
Good one Lee. I almost face-palmed before I saw who the poster was. Heath On 4/7/2010 11:01 AM, Lee H Badman wrote: In response to Apple's guidance, we've given out the user name and password to our wireless management system so IPad users can configure our access points as they need to fix