Re: [WIRELESS-LAN] share 802.1x experience? (Eduroam Question)

2010-08-19 Thread Oliver Gorwits
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 19/08/2010 17:45, Lee H Badman wrote: > Good summary. On the topic of Eduroam- any sense of real demand and > usage for the service? As a partial answer... we now use Eduroam (and hence 802.1X) as the primary service for members of our institution,

Re: [WIRELESS-LAN] share 802.1x experience?

2010-08-19 Thread Oliver Gorwits
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Randy, On 19/08/2010 15:04, Randall C Grimshaw wrote: > But now you need a supplicant piece of software on the client to create > the tunnel. Microsoft includes one if you choose their AD backend as the > ultimate source of authentication. Just a

Re: [WIRELESS-LAN] share 802.1x experience? (Eduroam Question)

2010-08-19 Thread James J J Hooper
On 19/08/2010 17:45, Lee H Badman wrote: Phillipe- Good summary. On the topic of Eduroam- any sense of real demand and usage for the service? Thanks- Lee Hi Lee, We are in the UK, but some stats for you: 1) People visiting Bristol in the last month is on the diagram here: http://www.wirele

Re: [WIRELESS-LAN] share 802.1X experience? (Eduroam Question)

2010-08-19 Thread Philippe Hanset
Lee, Since the installed base is not big in the US (15 institutions), it's hard to gauge a real demand/usage. I can give number like "thousands of authentications" but in term of unique users it is not more than 20-30 per week. We did provide eduroam at the last Internet2 member meeting and got

RE: [WIRELESS-LAN] share 802.1x experience? (Eduroam Question)

2010-08-19 Thread Lee H Badman
Phillipe- Good summary. On the topic of Eduroam- any sense of real demand and usage for the service? Thanks- Lee From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Philippe Hanset Sent: Thur

Re: [WIRELESS-LAN] share 802.1x experience?

2010-08-19 Thread Philippe Hanset
Kay, Just a few heads up: -Definitely do WPA2 -The choice of EAP method is important. EAP-PEAP with AD as the backend makes life easier, though you can create a SAMBA front end to LDAP if you want (there is documentation on eduroamus.org) -The choice of the CA seems to matter in how smooth the

RE: share 802.1x experience?

2010-08-19 Thread Randall C Grimshaw
The early adopters will remember that insecure protocols were widely used and in some cases still are (excuse me for not listing them). So you need an encrypted transport while the packets are in the air. 802.1x provides the foundation for this if correctly implemented using WPA2 AES (note recen

Re: [WIRELESS-LAN] share 802.1x experience?

2010-08-19 Thread Matthew Gracie
Kay Sandacz wrote: > Hey folks. > > > > Anyone care to share experience in rolling out 802.1x? We’re looking > only at wireless just now. Support issues or user experience would be > particularly helpful. > > > > And did anyone attempt to run 802.1x on a previously existing SSID? We're a

Re: [WIRELESS-LAN] Wireless for Exams

2010-08-19 Thread Ryan Holland
Neil, We have a couple of professors that are spearheading a move towards using wireless for exams. We have added additional capacity to several classrooms to facilitate this endeavor. The professors have said this has been largely successful. In a class of ~250-300 students, the students are g

RE: share 802.1x experience?

2010-08-19 Thread Kay Sandacz
Hey Bryn, We're planning on deploying eduroam three days after the 802.1x rollout. Nonetheless, we have communications to prepare for the 802.1x rollout, so I'm looking for end user experience, things that could have been done better, things that worked in that scenario right now. And yes, we

RE: share 802.1x experience?

2010-08-19 Thread Bryn Jones
Hi Kay I don't know whether you are aware of 'eduroam' (http://www.eduroamus.org/eduroam_international_map), which is a shared authentication infrastructure in Higher Education? We used the introduction of the 'eduroam' SSID onto campus here in Leeds as a method of introducing 802.1x onto our

What is 802.1x

2010-08-19 Thread BBrown
We just published a column under this heading if anyone is interested, per Kay's question about 802.1x: http://www.networkworld.com/research/2002/0506whatisit.html Regards, __ B O B B R O W N Online Executive Editor, News T: 508.766.5418 N

share 802.1x experience?

2010-08-19 Thread Kay Sandacz
Hey folks. Anyone care to share experience in rolling out 802.1x? We're looking only at wireless just now. Support issues or user experience would be particularly helpful. And did anyone attempt to run 802.1x on a previously existing SSID? Thanks, -kay- Kay Sandacz, Assistant Director Data