Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-20 Thread Ciesinski, Nick
r mailto:yahya.ja...@kaust.edu.sa>> Sent: Thursday, August 16, 2018 9:24 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] eduroam ssid on RTS Hi Nancy, To be exact, what kind of info do you want? How to setup eduroam? How to setu

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-20 Thread Hunter Fuller
Makes perfect sense, thanks for clarifying! On Mon, Aug 20, 2018 at 10:43 AM Philippe Hanset < 005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote: > Hunter, > > You are correct. > I was comparing 802.1X without a Web portal (A la eduroam) to a Web based > SSID with a portal and a timeou

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-20 Thread Philippe Hanset
Hunter, You are correct. I was comparing 802.1X without a Web portal (A la eduroam) to a Web based SSID with a portal and a timeout. (which is what I have seen in buses with Wi-Fi very often) Many OSes will not switch your Internet routing in your phone to Wi-Fi unless access to the Internet is

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-17 Thread Hunter Fuller
On Fri, Aug 17, 2018 at 2:45 PM Philippe Hanset < 005cd62f91b7-dmarc-requ...@listserv.educause.edu> wrote: > I wouldn't use 802.1X for that project, and that is coming from the > eduroam guys :( > > if using 802.1X (eduroam or local) in the bus… even people with decent > data plans that could

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-17 Thread Philippe Hanset
ce W > (Network Operations) mailto:bosbo...@liberty.edu>> > Sent: Friday, August 17, 2018 7:27 AM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > Subject: Re: [WIRELESS-LAN] eduroam ssid on RTS > > We are an Aruba shop. For s

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-16 Thread Philippe Hanset
Hello Nancy, eduroam in a bus, this is exciting! 3 things that come to my mind as far as eduroam is concerned for your design: 1) Not helpful, more of a heads up: The connector agreement with Internet2 asks to not connect Wi-Fi networks that you don't own/control (in this case you are runni

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-16 Thread James Helzerman
f Yahya M. Jaber < > yahya.ja...@kaust.edu.sa> > *Sent:* Thursday, August 16, 2018 9:24 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] eduroam ssid on RTS > > > Hi Nancy, > > > > To be exact, what kind of info do you wan

Re: [WIRELESS-LAN] eduroam ssid on RTS

2018-08-16 Thread Joseph Bernard
behalf of "Watson,Nancy A" Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv Date: Thursday, August 16, 2018 at 8:37 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: [WIRELESS-LAN] eduroam ssid on RTS ​I am involved in a joint project with RTS to run

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Curtis K. Larsen
vulnerability for another >>> institutions' users on my >>> campus. >>> >>> -Curtis >>> >>> >>> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: >>> > How would you disable PEAP on the eduroam SSID? I've nev

RE: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Turner, Ryan H
p Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen Sent: Tuesday, June 21, 2016 11:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid Philippe, I agree with you that EAP-TLS is by far the best way to avoid Evil Twin attacks. I also

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Curtis K. Larsen
t mitigate that same vulnerability for another >>>> institutions' users on my >>>> campus. >>>> >>>> -Curtis >>>> >>>> >>>> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: >>>>> How would

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeremy Mooney
stitutions, but I cannot mitigate that same vulnerability for another > >>> institutions' users on my > >>> campus. > >>> > >>> -Curtis > >>> > >>> > >>> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: > >>>>

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeremy Mooney
disable PEAP on the eduroam SSID? I've never noticed a >> > setting for that. >> > >> > -Original Message- >> > From: The EDUCAUSE Wireless Issues Constituent Group Listserv >> > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeremy Mooney
lity for another > >> institutions' users on my > >> campus. > >> > >> -Curtis > >> > >> > >> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: > >> > How would you disable PEAP on the eduroam SSID? I've never noticed a &

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Jeffrey D. Sessler
, 2016 at 6:20 PM To: "wireless-lan@listserv.educause.edu" Subject: Re: [WIRELESS-LAN] eduroam ssid David, To clarify, eduroam is not a standard, but a trust fabric to roam between research and education institutions. eduroam requires IEEE 802.1X (which is a well used standard at

Re: [WIRELESS-LAN] eduroam ssid

2016-06-21 Thread Philippe Hanset
n Behalf Of Curtis K. >>> Larsen >>>> Sent: Monday, June 20, 2016 5:19 PM >>>> To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU >>>> Subject: Re: [WIRELESS-LAN] eduroam ssid >>>> >>>> Yes it does work. That's the problem - PEAP is vulne

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
"Curtis K. Larsen" <mailto:curtis.k.lar...@utah.edu>> > Date: 6/20/16 6:04 PM (GMT-07:00) > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <mailto:WIRELESS-LAN@listserv.educause.edu> > Subject: Re: [WIRELESS-LAN] eduroam ssid > > The PEAP vulnerability is on

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Jason Cook
E.EDU] On Behalf Of Philippe Hanset Sent: Tuesday, 21 June 2016 7:27 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid Jason et al., https://www.eduroam.org/wp-content/uploads/2016/05/eduroam_Compliance_Statement_v1_0.pdf The compliance statement doesn’t requ

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Schuette, David
o: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid The PEAP vulnerability is only mitigated by requiring EAP-TLS and disabling PEAP. (It may help a little to recommend the CAT tool or similar, but not much) We've recommended similar tools for 9 years - I know the take

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Curtis K. Larsen
urtis >> >> >> On Mon, June 20, 2016 3:50 pm, Chuck Enfield wrote: >> > How would you disable PEAP on the eduroam SSID? I've never noticed a >> > setting for that. >> > >> > -Original Message- >> > From: The EDUCAUSE Wireless Issu

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
EAP on the eduroam SSID? I've never noticed a > > setting for that. > > > > -Original Message- > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > > <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Jeremy Mooney
e: > > How would you disable PEAP on the eduroam SSID? I've never noticed a > > setting for that. > > > > -Original Message- > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Matthew Newton
On Mon, Jun 20, 2016 at 05:50:51PM -0400, Chuck Enfield wrote: > How would you disable PEAP on the eduroam SSID? I've never noticed a > setting for that. Easy on the RADIUS server - reject if EAP-Message matches /^0x19/. Not that anyone should do that for non-local accounts. That's a who

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
erv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen > Sent: Monday, June 20, 2016 5:19 PM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: Re: [WIRELESS-LAN] eduroam ssid > > Yes it does work. That's the problem - PEAP is vulnerable to Evil Twin > atta

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Curtis K. Larsen
reless Issues Constituent Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen > Sent: Monday, June 20, 2016 5:19 PM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: Re: [WIRELESS-LAN] eduroam ssid > > Yes it does work. That's th

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Philippe Hanset
ices > The University of Adelaide, AUSTRALIA 5005 > Ph: +61 8 8313 4800 > > -Original Message- > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen > Sent: Saturday, 18 J

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Chuck Enfield
PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid Yes it does work. That's the problem - PEAP is vulnerable to Evil Twin attacks so we are disabling PEAP. Doing that on eduroam would break all institutions that still offer it. Leaving it enabled exposes us

RE: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Curtis K. Larsen
From: Johnson, Neil M [neil-john...@uiowa.edu] Sent: Monday, June 20, 2016 2:52 PM To: Curtis K. Larsen Cc: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] eduroam ssid eduroam should work with just about any authentication method that uses EAP (PEAP,TLS,TTLS) etc. So if your are say movi

Re: [WIRELESS-LAN] eduroam ssid

2016-06-20 Thread Johnson, Neil M
ill >> >> r...@unc.edu<mailto:r...@unc.edu> >> +1 919 445 0113 Office >> +1 919 274 7926 Mobile >> >> >> >> From: The EDUCAUSE Wireless Issues Constituent Group Listserv >> [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of B

RE: [WIRELESS-LAN] eduroam ssid

2016-06-19 Thread Jason Cook
Technology Services The University of Adelaide, AUSTRALIA 5005 Ph    : +61 8 8313 4800 -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Curtis K. Larsen Sent: Saturday, 18 June 2016 12:49 AM To: WIREL

Re: [WIRELESS-LAN] eduroam ssid

2016-06-17 Thread Curtis K. Larsen
fice > +1 919 274 7926 Mobile > > > > From: The EDUCAUSE Wireless Issues Constituent Group Listserv > [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Becker, Jason > Sent: Thursday, June 16, 2016 11:45 PM > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: [WIRELESS-LAN]