Profile

CommunityPlatform_1350x900.jpg

Bruce Osborne

Edit My Profile

My Content

1 to 20 of 44 total

RE: Update on preconference workshop in Chicago next week

Posted By Bruce Osborne 10-11-2023 06:44:03 AM
Found In Egroup: Network Management \ view thread
Are there any online resources (recording, presentation) available for reference? Thanks, Bruce Osborne Liberty University

RE: Door Access Control Systems

Posted By Bruce Osborne 06-15-2023 07:40:10 AM
Found In Egroup: Network Management \ view thread
I am not directly involved, but for years, Liberty University has used RS2. That may be another product to research. Bruce Osborne IT Campus Networking Liberty University

RE: Securew2 increases

Posted By Bruce Osborne 06-07-2023 05:50:42 AM
Found In Egroup: Wireless Local Area Networking \ view thread
A number of years ago, we researched onboarding, looking at moving to a different vendor. We are an Aruba shop with wireless, ClearPass, & Airwave / Central On Premises. We are a Cisco shop for wired switches. We looked at CloudPath XpressConnect, the CloudPath RADIUS offering, and ClearPass Onboard. ...

RE: Wireless Guest Access

Posted By Bruce Osborne 05-24-2023 12:21:07 PM
Found In Egroup: Network Management \ view thread
We use ClearPass Guest (currently with a custom portal) for Guest Self-Registration. Using either our portal or the built-in logic, you may have the user register & automatically be logged in with that Guest Account. If you use MAC Address caching, it works as long as the Account is active. We do ...

RE: Linux - Automated PKI Enrollment

Posted By Bruce Osborne 05-13-2023 03:51:16 AM
Found In Egroup: Network Management \ view thread
You say they are currently managed. How are you currently accomplishing this? Bruce Osborne Sent from my iPhone

RE: 6G - what has your approach been to SSID advertising

Posted By Bruce Osborne 03-17-2023 11:54:25 AM
Found In Egroup: Wireless Local Area Networking \ view thread
Actually we are both wrong ☹ B.2. eduroam SPs IEEE 802.11 wireless networks MUST broadcast the SSID "eduroam". If there is more than one eduroam SP at the same location, an SSID starting with "eduroam-" MAY be used. From the global eduroam Compliance Statement https://www.eduroam.org/wp-content ...

RE: 6G - what has your approach been to SSID advertising

Posted By Bruce Osborne 03-17-2023 06:17:53 AM
Found In Egroup: Wireless Local Area Networking \ view thread
"eduroam6G" I know that was just an example, but, by my understanding, it would need to be something like 6G-eduroam. I think SSIDs have to be eduroam or end in -eduroam. ------------------------------ Any information posted here is based on my personal experience & opinions. This is not an official ...

RE: Account access & data security concerns

Posted By Bruce Osborne 03-03-2023 09:53:25 AM
Found In Egroup: Identity and Access Management \ view thread
Here, for our IT staff. we have separate accounts (based on username+department code) that have special administrative access. If somebody leaves that department, all the special access is in a central place and can be deleted. Perhaps something similar would work for you. ------------------------------ ...

RE: NetMan and WLAN invite you.....

Posted By Bruce Osborne 03-01-2023 09:10:01 AM
Found In Egroup: Network Management \ view thread
We are nowhere near being able to give any assessment of COP yet.

RE: NetMan and WLAN invite you.....

Posted By Bruce Osborne 03-01-2023 08:31:32 AM
Found In Egroup: Network Management \ view thread
COP is not Cloud. Aruba Central is HPE / Aruba's cloud solution. COP is Central On Prem which is a system using on premises servers instead of the cloud. Confusingly, the login is still branded as HPE GreenLake, their cloud service. CP is designed as a replacement for Airwave. I believe. We are ...

RE: An open letter to vendors and manufacturers:

Posted By Bruce Osborne 02-28-2023 06:19:01 AM
Found In Egroup: Network Management \ view thread
i whole heartedly agree. If a vendor tried that on us, management would support IT and we would view that as confirmation we made the correct choice and would discourtage others fro even looking at them for solutions. At least, that is my personal opinion on that matter, ------------------------------ ...

RE: Cisco vs Mist vs Aruba

Posted By Bruce Osborne 10-27-2022 06:10:34 AM
Found In Egroup: Wireless Local Area Networking \ view thread
If you are moving to ClearPass I highly recommend you consider Aruba wireless. ClearPass is designed to support Aruba AirGroup for AirPlay, etc. with Apple devices. We have been using Aruba wireless since 2008 after a 2 year cpmparison with Cisco wireless at that time. We were one of the first Aruba ...

RE: Clearpass with Cisco WLC?

Posted By Bruce Osborne 10-13-2022 07:58:58 AM
Found In Egroup: Wireless Local Area Networking \ view thread
ClearPass AirGroup is specific tor Aruba Wireless providing their Bonjour services solution, Cisco WLC has its own Bonjour services. Bruce Osborne Senior Network Engineer Network Operations - Campus Networking (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-22-2022 09:55:27 AM
Found In Egroup: Wireless Local Area Networking \ view thread
In a given area, muliple SSIDs are in the same L2 domain because they need to share time in the same air space. One SSID beaconing support for slower data rates slows the beaconing for all SSIDs, using more of the shared time for Wi-Fi overhead, reducing the maximum goodput (usable bandwidth)) of clients. ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-21-2022 01:36:50 PM
Found In Egroup: Wireless Local Area Networking \ view thread
EAP-PEAP-MSCHAPv2 uses NTLM password hash for passwords. ------------------------------ Any information posted here is based on my personal experience & opinions. This is not an official communication from my employer. Bruce Osborne Network Engineer Liberty University Lynchburg VA United States -- ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-21-2022 12:51:18 PM
Found In Egroup: Wireless Local Area Networking \ view thread
The password prompting happens at the OS level for every connection. The onboarding process is immaterial. ------------------------------ Any information posted here is based on my personal experience & opinions. This is not an official communication from my employer. Bruce Osborne Network Engineer ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-15-2022 11:47:03 AM
Found In Egroup: Wireless Local Area Networking \ view thread
In our TLS planning, for personal devices, the certificate uses the user's email as the identity. 1. You can associae an authentication with a user who opens a ticket. 2. auth logs comtsin the user's information 3. EAP-TLS works on all those devices. ------------------------------ Any information posted ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-15-2022 11:17:13 AM
Found In Egroup: Wireless Local Area Networking \ view thread
Jon, Assumning you plan on makeing the TLS move with ClearPass, reach out to us when you are ready. Hopefully we will have already worked through the "gotchas". ------------------------------ Any information posted here is based on my personal experience & opinions. This is not an official communication ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-15-2022 09:18:25 AM
Found In Egroup: Wireless Local Area Networking \ view thread
You can just as easily onboard enterprise devices usinf Intune & JAMF using SCEP calls. We have successfully tested JAMF and have documentation on doing that with Intune. ------------------------------ Any information posted here is based on my personal experience & opinions. This is not an official ...

RE: 802.1x Prompting Wireless Architecture Questions

Posted By Bruce Osborne 09-15-2022 08:41:06 AM
Found In Egroup: Wireless Local Area Networking \ view thread
Currently, when we onboard for PEAP-MSCHAPv2 ( & eventually TLS) we have the client trust the RADIUS server certificate chain, not the server certificate. Users that click directly on a PEAP-MSCHAPv2 SSID trust the server certificate. Just trusting the certificate chain &allows us to replace the server ...