Jake, AES is definitely what you want to use, and with modern equipment it will actually be less intensive on your hardware since there is some key-caching advantage with 802.11i/WPA2.
But another question is: are you doing PSK for the whole campus? Giving the same passphrase to all your users? (if you do, don't worry too much about TKIP VS AES) I have also heard that some OSes don't deal well with a blank space in the SSID, but I have never seen this for myself. Best, Philippe www.eduroamus.org On Jan 24, 2013, at 12:59 PM, Daniel Westacott <dw...@umn.edu> wrote: > Jake: > > TKIP has been broken. A long time ago. > > This article > http://wifinetnews.com/archives/2010/06/say_goodbye_to_wep_and_tkip.html > talks of it being removed from the WiFi certification,the article was from > 2010. > > We run SSID's with spaces, and have been doing it for years. > > /daniel/ > daniel westacott > Networking and Telecommunications > University of Minnesota. > > > > > > On Thu, Jan 24, 2013 at 11:43 AM, Barros, Jacob <jkbar...@grace.edu> wrote: >> I feel silly asking this question but value your opinions. We recently had >> some authentication errors that caused me to open a support case. The >> engineer I was working with eluded to the fact that having a space in my >> SSID name could be contributing to the problem though not the root. He also >> inferred that using TKIP instead of AES would cut processing requirements on >> the controller and therefore grant better performance. I have not been able >> to confirm his opinions from those I have asked (including other engineers >> from the same company) nor in print. >> >> We are using a single SSID for most of our campus, 'Grace WiFi' WPA2-PSK >> AES. Theoretically, should I get better performance (or less overhead) from >> 'Grace-WiFi' WPA2-PSK TKIP? >> >> Leaving the vendor/company out of this conversation, will you please comment >> on whether or not these changes will make a difference? I would love to >> either substantiate or debunk this theory. >> >> >> >> Jake Barros | Network Administrator | Office of Information Technology >> Grace College and Seminary | Winona Lake, IN | 574.372.5100 x6178 >> ********** Participation and subscription information for this EDUCAUSE >> Constituent Group discussion list can be found at >> http://www.educause.edu/groups/. > > ********** > Participation and subscription information for this EDUCAUSE Constituent > Group discussion list can be found at http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
