Re: [WIRELESS-LAN] AD over Wireless- A little more

2010-05-14 Thread Mike King
on a mobile so this will be brief. non-domain machines, when user password expires. test this. differnt radius servers handle this good and bad. test you logon scripts if you have any. On 5/14/10, Lee H Badman wrote: > Revisiting a topic from a few weeks ago. > > We have successfully got fu

Re: [WIRELESS-LAN] AD over wireless

2010-04-12 Thread Mike King
ent:* Thursday, April 08, 2010 1:16 PM > > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] AD over wireless > > > > IAS policies on the same SSID. > > Fac/Staff/Domain Computers (no students joined) get one VLAN and their own > IP range with no a

RE: [WIRELESS-LAN] AD over wireless

2010-04-12 Thread John York
ues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of heath.barnhart Sent: Thursday, April 08, 2010 11:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] AD over wireless We've been doing this for about a year now and like Mearl said

RE: [WIRELESS-LAN] AD over wireless

2010-04-09 Thread Lee H Badman
heath.barnhart Sent: Thursday, April 08, 2010 2:22 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] AD over wireless With the current design, yes the AD clients would be in a separate SSID but not for that reason. It more of separating student and faculty traffic into different

RE: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Danner, Mearl
, NAT addresses and other things in our systems. Mearl From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman Sent: Thursday, April 08, 2010 11:01 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] AD over wir

Re: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Jason Cook
M *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU *Subject:* Re: [WIRELESS-LAN] AD over wireless We've been doing this for about a year now and like Mearl said it pretty much just works. There are two main issues I've seen: 1. Signal Strength/Quality can really effect how well the process

Re: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread heath.barnhart
up? -Lee *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] *On Behalf Of *heath.barnhart *Sent:* Thursday, April 08, 2010 11:49 AM *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU *Subject:* Re: [WIRELESS-LA

RE: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Nikhil Kumar
Wireless Issues Constituent Group Listserv [mailto:wireless-...@listserv.educause.edu] On Behalf Of Lee H Badman Sent: Thursday, April 08, 2010 9:01 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] AD over wireless Thanks, Heath and everyone else. Do you who are doing

RE: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread Lee H Badman
-...@listserv.educause.edu] On Behalf Of heath.barnhart Sent: Thursday, April 08, 2010 11:49 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] AD over wireless We've been doing this for about a year now and like Mearl said it pretty much just works. There are two main issues I&#x

Re: [WIRELESS-LAN] AD over wireless

2010-04-08 Thread heath.barnhart
We've been doing this for about a year now and like Mearl said it pretty much just works. There are two main issues I've seen: 1. Signal Strength/Quality can really effect how well the process goes on first login. If the user's profile already exists on the system and the system is just gettin

Re: [WIRELESS-LAN] AD over wireless

2010-04-07 Thread Jason Cook
Hi Lee, We've had pretty similar success to Mike & Mearl though we use user auth even for domain computers. Using Single Sign on which is built into Vista/W7 (and group policy configured) we have set to authenticate to wireless before authenticating to AD so an IP is received before anything

Re: [WIRELESS-LAN] AD over wireless

2010-04-07 Thread Mike King
Hi Lee, As for question #2, Yes. Computer authentication is easily done, assuming your RADIUS Servers supports it. I know FreeRADIUS, FUNK, and IAS all natively support it. I'll also recommend the same thing as Mearl did with the GPO. We do push Wireless configs out with GPO's here, and for th