RE: Certs for EAP-PEAP

2011-10-20 Thread Osborne, Bruce W
Jason, If you are terminating EAP on the Aruba controller, I believe you are correct. If you terminate EAP on the RADIUS server, you can use 2048 bit certs with the Aruba controller. That's what we are currently doing with 3.4.x. For a Microsoft NPS server with a Microsoft CA, you need to use

Re: [WIRELESS-LAN] Certs for EAP-PEAP

2011-10-20 Thread Hanset, Philippe C
Jason et al., One heads up: with 2048 bit certs make sure that you have the Framed-MTU flag in RADIUS set to something like 1400 bytes Reference: http://www.eduroamus.org/node/29 read the last paragraph. It applies for regular campus 1x and eduroam Philippe Univ. of TN On Oct 19, 2011, at

[WIRELESS-LAN] Meru Controller Ver 3.6.1MR4 OSX 10.6.8-10.7+

2011-10-20 Thread Young, Ryan
All, Wondering if anyone using a Meru Controller running 3.6.1MR4 or lower are seeing the same issues. We are seeing between 300ms to as long as Timed out ping times on computers running 10.6.8 - 10.7+ inside our Meru network. Our Pc's as well as our 10.6.4 clients have network ping times of

Betr.: [WIRELESS-LAN] Problem with auth, Aruba, Bradford, and IAS

2011-10-20 Thread Kees Pronk
Hi David, Not using Aruba or IAS, but in these cases the radius environment is suspect no. 1. Have ther e been recent MS updates for the IAS software and / or server OS? best regards, Kees. David Ziemba david.zie...@coloradocollege.edu 10/19/2011 12:31 So, We've been noticing some

Re: Certs for EAP-PEAP

2011-10-20 Thread Jason Healy
On Oct 20, 2011, at 11:33 AM, Steve Bohrer wrote: OS X requires that the cert be manually trusted for EAP (even if it's signed by a trusted root authority) your post makes it seem as if it is by design. Do you know why Macs won't automagically trust even official paid-for certs for EAP?