Future Directions for University of Nebraska Wireless Networking

Size: px

Start display at page:

Download "Future Directions for University of Nebraska Wireless Networking"

Cecilia Hampton
5 years ago
Views:

University of Nebraska - Lincoln DigitalCommons@University of Nebraska - Lincoln Innovation in Pedagogy and Technology Symposium Information Technology Services 2018 Future Directions for University

1 University of Nebraska - Lincoln DigitalCommons@University of Nebraska - Lincoln Innovation in Pedagogy and Technology Symposium Information Technology Services 2018 Future Directions for University of Nebraska Wireless Networking Brian Cox University of Nebraska at Kearney, bcox@nebraska.edu Jay Wilmes University of Nebraska - Lincoln, jwilmes@nebraska.edu Follow this and additional works at: Part of the Curriculum and Instruction Commons, Educational Methods Commons, Higher Education Commons, Instructional Media Design Commons, and the Online and Distance Education Commons Cox, Brian and Wilmes, Jay, "Future Directions for University of Nebraska Wireless Networking" (2018). Innovation in Pedagogy and Technology Symposium This Article is brought to you for free and open access by the Information Technology Services at DigitalCommons@University of Nebraska - Lincoln. It has been accepted for inclusion in Innovation in Pedagogy and Technology Symposium by an authorized administrator of DigitalCommons@University of Nebraska - Lincoln.

2 High Level objectives eduroam On Boarding/NU Connect NU Guest

3 Introduction Ryan Wendel - Wireless Engineer 10yrs Brian Cox - Wireless Engineering Manager

4 Introduction Why are we here?

5 Current Status UNL Wireless traffic in Lincoln -174 TB / wk One access point alone 1.25 TB - Equivalent to 417 hours of Netflix on one AP 37,000 + clients connect to UNL-Air daily 50K total clients connect daily in Lincoln Some Access Points get 150+ clients associating

6 Current Status UNK Wireless traffic in Kearney TB April ,800 + clients connected 9,132,000 Sessions Average session length 11 minutes Average client passes 33 MB each session 5,600 guest connections guest access has been restricted

7 Current Status UNO Wireless traffic in Omaha Last 4 weeks 65 TB - no housing traffic only campus traffic Peak about 8000 clients connected simultaneously 49,300 unique clients Only 1.56% currently use eduroam 45% are Apple devices 84% of UNO connect with a guest connection

8 High Level Objectives Faculty/Students/Staff connect on all campuses the same Common tool set to simplify management / Support Reliable / Cost effective / Proven Vendor agnostic multiple vendors to support Reduce the number of SSID s to 3 across campuses - UNL-Air, UNKGuest, UNOSecure etc.

9 Common State Current SSID s Eduroam UNL-Wireless-Registration UNOGuest UNOSecure iclass BECIGuest CECPartner UNKGuest UNL-AIR-E UNL-Guest GetConnected@UNK LiedTS NUPolice fantm UNCA UNKGamebox UNL-AIR UNL-Conference Proposed eduroam NU Connect NU Guest

10 What does this mean? eduroam primary secure SSID x/WPA2 Enterprise NU Guest Guest access SSID common security / port rules / access limits NU Connect On boarding SSID simplify user authentication NU Connect used by IoT as well

11 Eduroam How does it work? How can I connect to eduroam?

12 Manual Method eduroam requirements to securely connect: 1) Select the eduroam SSID 2) Must choose security type (WPA2 Enterprise) 3) Authentication set to PEAP 4) Must check box for Validate server certificate & install certificate 5) Check box to Connect to these servers 6) Enter List of valid servers 7) Must make sure the Secured password (EAP-MSCHAP v2) is the selected for the Authentication Method

13 Manual method (cont.) 8) Must make sure the Automatically use my Windows logon name and password is UNCHECKED 9) In the eduroam Wireless Network Properties window click on the Advanced settings box check the box specify authentication mode: and choose User authentication from the pull-down menu 10) In the Windows Security window type in your My UNL id and and the My UNL id password -At this point you should be connected to eduroam - Steps vary depending on operating system (Windows vs. Mac)

14 On boarding So how do we simplify this process?

On boarding The On boarding simplifies this to a two-step process 1) Associate to NU-Connect SSID - Browser automatically re-directs client to the on boarding application & detects

15 On boarding The On boarding simplifies this to a two-step process 1) Associate to NU-Connect SSID - Browser automatically re-directs client to the on boarding application & detects the devices OS 2) Run the application enter credentials automatically installs certificate & modifies settings as defined Device is now securely authenticated & connected to eduroam

16 On boarding

20 On boarding IoT Headless devices wireless devices that cannot support enterprise security - Authenticated user must register MAC addresses first - NU-Connect is their SSID - We limit what device types can connect to this SSID - Anything that is ios, OS-X, Windows, Linux, and Android is limited to the on boarding application splash page

21 On boarding IoT devices

22 Guest devices NU-Guest Same process as what is at Lincoln and Kearney Splash page that guests will sign up for an account Cell number address

23 Benefits What are the benefits? 1. Universal user experience 2. Encrypted client traffic 3. Less confusion and user interaction 4. Increased wireless efficiency

24 Next steps Challenges Implementation timeline

25 Challenges Networking alignment Common Hardware Management tools Campus specific use case of wireless Eduroam UNMC Funding Policies Security, access, authentication Other OneIT initiatives Working campus minimize disruption Communications

26 Implementation Depends. Objective to complete by EOY

27 Contacts: Ryan Wendel Jay Wilmes Jaime Young Brian Cox

28 Questions? NU Common Wireless

How to connect to Wi-Fi

41 How to connect to Wi-Fi LSBU uses the eduroam service to connect Wi-Fi devices. Once you are set up you will automatically be connected whenever you are in range. Wireless Internet access is available