Re: [WIRELESS-LAN] Eduroam technical questions

2012-11-14 Thread Arran Cudbard-Bell
The problem comes in implementing the ban. Some institutions allow an anonymous outer identity for the EAP tunnel, which, so long as it contains enough information for routing can contain an arbitrary user id. You ban one and the user can just change it and still get access. You never get to

Point to Point or Point to Multipoint Radio Solutions

2012-11-14 Thread Christina Klam
Hello, We are looking into PtP or PtMP solutions to connect our main campus to a guest house that is less than 1 mile away and another test site that is 3.7 mi away . Because of trees, we cannot do a direct line of sight, but believe we can use a NLOS (near-line-of-sight). Does anyone have a

Re: [WIRELESS-LAN] Point to Point or Point to Multipoint Radio Solutions

2012-11-14 Thread nphay
Look at Ubiqity Networks. They have lots of options. I have used their Bullet line. Don't use their POE injectors with the bullets though, they fail alot. I don't have handy what I used for POE back then. Nathan Hay Network Engineer | NOC WinWholesale Inc. From: Christina Klam

Re: [WIRELESS-LAN] eduroam question(s)

2012-11-14 Thread Julian Y Koh
On Nov 13, 2012, at 09:11 , Hanset, Philippe C phan...@utk.edu wrote: For sanity, we will only pass to you *.northwestern.edu or other domains that you own and would like to be resolved e.gnorthwestern-1.edu Are there any stats available as to how many institutions are using a different

Re: [WIRELESS-LAN] Eduroam technical questions

2012-11-14 Thread Craig Simons
Our approach is to block MAC addresses of banned machines directly on the switch port using vendor specific features on our switching gear. However, as the Radius requests are still created by your own equipment (which would presumably have MAC address Calling-Station-Id information), you could

RE: [WIRELESS-LAN] Cisco ISE?

2012-11-14 Thread Linchuan Yang
Dear Eric and Lee May I know what kind of license did you buy for your ISE (Base, advanced 5-year, or wireless 5-year)? Do you separate different roles (staff, student, guest) of the wireless clients using ISE? We have around 50,000 staff and students, and the maximum simultaneous user is

RE: [WIRELESS-LAN] Cisco ISE?

2012-11-14 Thread Lee H Badman
We are not ISE users at this point in Syracuse- I too was inquiring of others, not speaking firsthand. -Lee From: Linchuan Yang [mailto:linchuan.y...@concordia.ca] Sent: Wednesday, November 14, 2012 1:14 PM To: The EDUCAUSE Wireless Issues Constituent Group Listserv Cc: Lee H Badman Subject:

RE: [WIRELESS-LAN] Eduroam technical questions

2012-11-14 Thread Lee H Badman
Can always block MAC on WLAN too. Simple, nuclear, elegant.     -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Craig Simons Sent: Wednesday, November 14, 2012 1:13 PM To:

anyone using Aerohive?

2012-11-14 Thread Ashfield, Matt (NBCC)
Been hearing a few things about Aerohive, but not a whole lot of discussion on here. Has anyone looked at it? What are your impressions? Thanks Matt Ashfield New Brunswick Community College ** Participation and subscription information for this EDUCAUSE Constituent Group discussion

Re: [WIRELESS-LAN] anyone using Aerohive?

2012-11-14 Thread Larry Dougher
I'm also interested to know what others have to say about Aerohive. Thanks, *Larry Dougher* Director of Technology* *Technology Department http://wsesu.net/technology Windsor Southeast Supervisory Union http://wsesu.net 127 State Street, Windsor, VT 05089 Email ldoug...@wsesu.net | Twitter

Re: [WIRELESS-LAN] anyone using Aerohive?

2012-11-14 Thread Barros, Jacob
We have a few deployed at an apartment style building outside our physical cabling plant range. So far it's been a great solution. It overcame a few density and coverage issues, so kudos there. Management interface is web based and hosted and that works well. My only negative is the sticker

RE: [WIRELESS-LAN] anyone using Aerohive?

2012-11-14 Thread Ashfield, Matt (NBCC)
Thanks for the reply. I am a bit surprised at the sticker price comment. It was my understanding that it'd be quite a bit cheaper than the conventional centralized/controller based solutions? From: The EDUCAUSE Wireless Issues Constituent Group Listserv

Re: [WIRELESS-LAN] anyone using Aerohive?

2012-11-14 Thread Barros, Jacob
Depends on what you chose to factor in to the cost and which model you choose. We are an Aruba shop and we use the 'low end' AP's (and happy with them at that). If you compare an AP93 to the HiveAP121, the AP93 is way less. Choose to factor in the cost of the controller and licensing and the

Re: [WIRELESS-LAN] Eduroam technical questions

2012-11-14 Thread Arran Cudbard-Bell
On 14 Nov 2012, at 18:24, Lee H Badman lhbad...@syr.edu wrote: Can always block MAC on WLAN too. Simple, nuclear, elegant. And completely ineffective if the user has any technical skill whatsoever. shinyhead:freeradius-server-master arr2036$ ifconfig en0 en0:

Re: [WIRELESS-LAN] Eduroam technical questions

2012-11-14 Thread Frank Sweetser
On 11/14/2012 5:55 PM, Arran Cudbard-Bell wrote: On 14 Nov 2012, at 18:24, Lee H Badman lhbad...@syr.edu wrote: Can always block MAC on WLAN too. Simple, nuclear, elegant. And completely ineffective if the user has any technical skill whatsoever. To be fair, most users don't. The last

Re: [WIRELESS-LAN] eduroam question(s)

2012-11-14 Thread Hanset, Philippe C
Julian, I can answer that for you. All Universities connected to the eduroam-US server are only using domains that they own, and in the form *.domainowned.edu. Some use multiple domains (e.g. utk.edu and tennessee.edu), but all are owned by the University. Best, Philippe Hanset