Great question. As of now, we do not have NAC applied on wireless. This may change in the future, and we're likely to encounter the same difficulties. We do have it enabled on VPN, and our staff using handhelds are encountering this very issue.
If we were looking to deploy this wider spread, I would end up discussing with Aruba the feasibility of distinguishing handhelds from phones. There's likely to be something that acts as a signature for those devices. ========== Ryan Holland Network Engineer, Wireless Office of the Chief Information Officer The Ohio State University 614-292-9906 holland....@osu.edu On Feb 16, 2011, at 9:47 AM, leo song wrote: > Hi, Ryan. > > Just an OT question. > > We deployed Cisco NAC on our wireless network which is "NOT" available to > handheld devices, mainly because they cannot install Cisco NAC agent on > handheld devices, and Cisco cannot differentiate the handheld devices from > the rest laptop world and to apply different policy, ie, no NAC agent > required, full network access, etc. > > Just wondering what is your case over there? How do you differentiate the > Laptop and handheld devices? thanks. > > -----Original Message----- > From: Holland, Ryan C. <holland....@osu.edu> > Reply-to: The EDUCAUSE Wireless Issues Constituent Group Listserv > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > Subject: Re: [WIRELESS-LAN] Android and WPA2? > Date: Wed, 16 Feb 2011 09:32:24 -0500 > > Russ, > > I encountered a Samsung Captivate that was using an incorrect subnet mask, > i.e., ignoring the mask received in the DHCPOFFER. This resulted in the > device ARPing for addresses outside of its subnet, which in turn, it did not > receive responses for. The user symptom was that DHCP succeeded, but no > traffic beyond that passed. If you're looking at pcaps, look for excessive or > questionable ARP traffic. > ========== > Ryan Holland > Network Engineer, Wireless > Office of the Chief Information Officer > The Ohio State University > 614-292-9906 holland....@osu.edu > > > On Feb 16, 2011, at 9:14 AM, Russ Leathe wrote: >> Aruba 5.0.3 >> Impulse Safeconnect >> >> We started to have a problem with all Androids on our Aruba Wireless Network. >> >> We connect, obtain an IP using WPA2. However, no data is passed. I have >> tickets open with both vendors, but I just wanted to reach out and ask if >> you have experienced this with the Android, and if there are any 'fixes'. >> >> I'm running wireshark now to see if anything stands out. >> >> Thanks >> >> Russ >> ********** >> Participation and subscription information for this EDUCAUSE Constituent >> Group discussion list can be found at http://www.educause.edu/groups/. >> >> >> -- >> BEGIN-ANTISPAM-VOTING-LINKS >> ------------------------------------------------------ >> >> Teach CanIt if this mail (ID 1156435022) is spam: >> Spam: >> Not spam: >> Forget vote: >> ------------------------------------------------------ >> END-ANTISPAM-VOTING-LINKS >> >> > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > > -- > Leo Song, Senior Analyst & Cluster Lead > Computing and Communication Services - Networking and Security > University of Guelph > (519) 824-4120 x 53181 > > Spam > Not spam > Forget previous vote > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
