Supporting Those OTHER Dorm Devices on Wi-Fi

Size: px

Start display at page:

Download "Supporting Those OTHER Dorm Devices on Wi-Fi"

MargaretMargaret Berry
6 years ago
Views:

1 Supporting Those OTHER Dorm Devices on Wi-Fi Survey general statistics Total Respondents: 165 -Originated by Lee Badman Syracuse University

2 1. Are you satisfied that your dorm WLAN strategy meets the overall needs of students in a way that is scalable, supportable, and acceptable to campus IT policies? Question Type: Single Choice Total Respondents: 165 No 46.06%, 76 Yes 53.94%, 89

3 2. With your WLAN in the dorms, how many of these atypical client devices do you officially support on Wi-Fi? Question Type: Multiple Choice Total Respondents: 165 Total (% & freq col) % (165) Smart TV 55.76% 92 Gaming Console 64.24% 106 Student Printers 24.24% 40 Chromecast/Nexus Player 33.94% 56 Roku 49.09% 81 Amazon Firestick 36.97% 61 Apple TV 55.15% 91 Google Glass 15.15% 25 Smart Plugs, student IP cameras, etc 13.33% 22

4 2. With your Cisco WLAN in the dorms, how many of these atypical client devices do you officially support on Wi-Fi? Slides 38 to 38 Question Type: Multiple Choice Total Respondents: 165 Total (% & freq col) % (165) Other 22.42% 37 NONE 29.70% 49

5 2. With your Cisco WLAN in the dorms, how many of these atypical client devices do you officially support on Wi-Fi? Question Type: Multiple Choice Total Respondents: 165 Smart TV Gaming Console 55.76% 64.24% Student Printers 24.24% Chromecast/Nexus Player 33.94% Roku 49.09% Amazon Firestick 36.97% Apple TV 55.15% Google Glass Smart Plugs, student IP cameras, etc Other NONE 15.15% 13.33% 22.42% 29.70%

6 3. Do you allow wireless routers in the dorm? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) No 87.88% 145 Yes 12.12% 20

7 4. Do you have an open (no encryption) SSID of any sort in the dorms? Question Type: Single Choice Total Respondents: 165 Yes- but only for gadgets (not laptops, Total (% & freq col) % (165) 18.18% 30 No 42.42% 70 Yes- for everything 39.39% 65

8 4. Do you have an open (no encryption) SSID of any sort in the dorms? Question Type: Single Choice Total Respondents: 165 Yes- for everything 39.39%, 65 Yes- but only for gadgets (not laptops, 802.1X-capable mobile devices) 18.18%, 30 No 42.42%, 70

9 5. Do you allow students to self-register devices by MAC address? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) Yes 52.12% 86 No 47.88% 79

10 6. If you do allow self-registration of devices, do you have a mechanism to keep 802.1X-capable devices out of the self-registration path? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) yes 18.18% 30 no 38.79% 64 NA 43.03% 71

11 7. Do you use a PSK SSID in the dorms for student devices? Question Type: Single Choice Total Respondents: 165 yes, for normal client devices AND the gad... Total (% & freq col) % (165) 15.76% 26 no 70.30% 116 yes, but ONLY for gadgets 13.94% 23

12 8. If you have an open or PSK SSID in the dorm, does it have permissions to reach campus resources, or Internet only? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) Internet only 20.00% 33 Some campus resources 26.06% 43 All campus resources 16.97% 28 NA 36.97% 61

13 9. Do you limit how many Wi-Fi devices can be used by each resident (either live or registered)? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) No limit 87.27% or less 0.61% 1 6 or less 8.48% or less 3.64% 6

14 10. If eduroam is NOT your main SSID, do you broadcast eduroam in your residence halls? Question Type: Single Choice Total Respondents: 165 We don't advertise eduroam in the dorms 9.70%, 16 We advertise eduroam in the dorms 37.58%, 62 We don't have eduroam 52.73%, 87

15 11. Where you have a MAC self-registration portal, you are using: Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) Cisco ISE 6.67% 11 Aruba Clearpass 13.33% 22 Homebrew/other 36.97% 61 We do not have a MAC selfregistration por % 62 Cloudpath Xpressconnect SE 5.45% 9

16 12. If you are using a MAC registration mechanism, is it fully self-serve or does an IT staff member have to approve each device? Question Type: Single Choice Total Respondents: 165 NA 35.15%, 58 Self-serve, 100% 56.97%, 94 IT Staff must approve 7.88%, 13

17 13. Do you treat your dorm WI-Fi environment EXACTLY the same as your campus Wi-Fi for client/device access? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) yes 72.12% 119 no 27.88% 46

18 14. Do you use 802.1X on dorm switch ports accessed by students? Question Type: Single Choice Total Respondents: 165 We're wireless only in dorms 9.70%, 16 Yes 20.00%, 33 No 70.30%, 116

19 Question Type: Text Total Respondents: 165 What works, what doesn t, frustrations, blah blah blah?

20 Getting the community on board is the toughest. They want it all with no regard for security DHCP fingerprints works to a degree. we are still looking at ways to try and handle these devices 2.4 ghz devices are the biggest frustration. a big pain point is not having the ability to effectively and securely support Multicast-type services (Not multicast but the services). Easier deployment of IPv6 would also be a huge win on the WLAN. 9/11/

21 a) We're using Aruba's AirGroup to allow users to "find" their own devices across VLAN's. It works fine, but getting our user support folks to answer questions intelligently about it is pure hell. b) Clearpass is a great technology, but the documentation and support for it stink. Cloudpath XpressConnect ES in combination with Clearpass seems to be a winner, though a little tricky to config initially. We're using that combination this Fall for the first time. Built our own menu system that combines a path to MAC registration with default 802.1x registration and uses a dedicated onboarding-only SSID. Advertisement of the registration process ; getting that process down to 3 steps ; having a limited number of IT Staff in dorms on first-year student move in day ; coordination between Network Operations and HelpDesk for process/procedure/what devices have issues this year 9/11/

22 Aerohive's PPSK solution works very well. Similar to other vendors unique or individualized pre-shared key networks. We previously allowed students to selfreport MAC addresses to us via our help desk and we would then check the manufacturer of the MAC and either deny the whitelisting of it or whitelist it to connect to an open network. That was replaced by the PPSK network. Aruba Clearpass works great. At this point I wish our dorm would move away from having APs in the hallway. I wish we would port forth more of a unified way to get printers under control. I wish we would collapse our controller based networks into one (campus and dorm). It must also be noted that I said we do not support anything on the wireless network outside of phones/laptops. However we do support AppleTVs if it is Gen3 and wired but client is wireless. Biggest frustration are the continuing onslaught of devices that do not work well on a large, flat wireless network. They're all designed to be used on small, isolated networks. 9/11/

23 Being that this is the start of the school year, the biggest pain is personal wifi devices such as wireless AP's, wireless printers, gaming devices that have wifi turned on and pretty much anything that causes interferences with our signal. The one thing that does help us is the ability for students to get some of these devices on the wifi with device MAC registration and the use of our PSK network. Even though it does create some help desk calls, I believe overall it cuts down on the amount of tickets more so. Biggest frustration is allowing access only to a users own devices, and not others. e.g. apple tv and iphones/ipads and airplay or other inter device linking. Possible S.D.N. involvement but nothing developed yet. Biggest frustration is housing promising the world but only supplying resources to support a few. 9/11/

24 Biggest frustration is management's resistance to installing APs in the rooms. APs down the hall do not provide sufficient signal to small lower power devices. Biggest frustration? Students who don't read and follow directions. Probably 75% of our support calls come from that. :-) Biggest frustration? Trying to keep up! Biggest Frustrations - Funding. Keeping rogue interference (wireless printers, rogue APs, etc...) devices to a minimum is a constant battle. Educating students to purchase 5ghz capable devices. Biggest frustrations are rogue wireless routers. We cannot force users to remove them until we implement a method of MAC registration on our semi-open SSID. Biggest frustrations are rogues and printers and any device that has the ability to interfere with our network. Biggest frustrations? Narrative questions which cannot be empty. 9/11/

25 BonJour is the source of our largest headache. We need for people to print and send/screen to Bon Jour devices. But, we want to control the amount of this traffic so that other traffic streams do not suffer. We want to allow people to contain sharing to just their friends and family but allow anyone to access other resources. We have two divergent requirements which are hard to define and thus hard to implement. Campus Student affairs makes policy for Internet access/experience within the dorms. They just flip the bill and have Campus OIT run the equipment. We have little input on how wireless is accessed and have had to rely of a safeconnect NAC to register clients for many years now. Its not horrible but the SSID itself is open. Were considering adding Eduroam to the Dorms. We have a few challenges to complete that process. chromecast = challenge Airplay may not scale with clearpass Chromecast sucks. 9/11/

26 Clearpass was a major factor in choosing Aruba for us. Being able to let students register their own devices saves us a ton of time. Airgroup for DLNA/Apple TV/and such also allows us to actually support those "home" type devices. The devices I didn't check above are just ones we haven't seen yet. We could probably support them fine. Coverage Need for density in the deployment but lack of funding to get there Still too many devices using the 2.4GHz channels Currently we do not support non-802.1x wireless devices. Dealing with multi-device interactions for a given student usually around airplay/casting from a phone/tablet to a smart device connected to the TV. Currently we have no method to insure all of a given student's devices are in the same broadcast space. 9/11/

27 Density Coverage. Devices that are not recognized properly. XboxOne shows up as a Windows 8 device. We do not limit currently as we are a rural located institution. Accommodating other devices is done manually, and since we are a small school, we can easily make those changes. Difficulty in "profiling" atypical devices. We still have to manually enter OUI's to restrict what can be registered. We are questioning whether this is worth it anymore and if we should remove the profiling and allow anything to be MAC registered. Education and Pamphlets about proper usage seems to help a lot in reducing frustration with our students. 9/11/

28 Encouraging use of wired network for challenging devices works well. Aruba ClearPass self-registration and support for devices like Apple TVs works well. Biggest frustration is wireless printers and other such devices that enable wifi by default and cause interference Bradford Network Sentry is a pain Linux machines can be finicky 9/11/

29 Engaging students and good communication can solve a lot of your problems; as for the challenging devices, the students will always bring them on Campus and we will try to accommodate them. At the end of the day, the Campus represents their new home for the next four years. Every new device is taken on a case by case basis. No real words of wisdom here. Lots of frustrations obviously, spending time trying to make SOHO equipment try to work in a enterprise environment. Expectation that what works at home will work in our much larger shared environment. Frustrations: 2.4ghz only devices, printers that make their own SSID's by default, Wifi direct, lousy drivers. Game stations and Network TV's are allowed on the Wired but only through MAC registration through Cisco NAC. Biggest frustration is trying to figure out how to accomadate IoT devices that aren't 802.1x compatible. 9/11/

30 Having a non-broadcast, open (mac-address must be provided first in order to get a dhcp lease) SSID for those devices that are dumb to any type of security measure has been handy. Hardly ideal, but handy. Having a policy to use the university issued address as a means of registering to get access to the registration portal was a bit of a cock up in hindsight. Not all students had been issued the address required before they arrived on campus. Management knows best eh? Honestly, we have limited inhouse dev options and, before Cloudpath, there is zero chance we could fully support these devices. Largest frustration is still simply ideal coverage and dealing with wireless printers. I find trying to educate users on why we can't do something instead of just saying no, goes a long way in helping them understand why. 9/11/

31 I got nothing... I think having a open-ssid as a starting point for all and a place for non-802.1x devices to land is good. Also using the same subnet or some type of mdns system (clearpass, Cisco) is useful. I wish we could outlaw printers in dorms. If a device does not support WPA2-Enterprise and there for can't connect to our regular WLAN we don't generally do anything for it. If it doesn't support a login prompt, we don't support it... (roku,chrome sticks) Interference is always an issue. Some self=registered devices don't fingerprint well, and must be manually added. 9/11/

32 It makes life complicated Just a lot of printers broadcasting on 2.4Ghz... Lee, Some of the answers above sound slightly contradictory so I'll elaborate further. Also I'm in the UK by the way. When we only had wired access we had a MAC registration process. Adding wireless the devices sit on the same set of VLANs so even though 802.1X is on the wireless, MAC registration is required as well. This is also the reason we don't advertise eduroam in dorms at the moment as the setup is different. The extra MAC registration process provides an advantage in that we use it to assign DHCP reservations for each device. We are fortunate in that we have a class B public IP address range and are a fairly small institution so can still accomodate all devices on public IP. The DHCP reservation makes it much easier to deal with copyright complaints as the IP leads straight to a student registration - we don't need to worry about tracing NAT logs etc. There is a self-registration limit of 5 devices - users can self-delete old devices but >5 live requires staff. 9/11/

33 16. Do you support multi-cast over Wi-Fi in the dorms? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) Yes 29.70% 49 No 70.30% 116

34 16. Do you support multi-cast over Wi-Fi in the dorms? Question Type: Single Choice Total Respondents: 165 Yes 29.70%, 49 No 70.30%, 116

35 17. How many students do you support in your reverential environments? Question Type: Single Choice Total Respondents: 165 Total (% & freq col) % (165) 500 or less 9.09% 15 1,000 or less 13.33% 22 5,000 or less 57.58% 95 10,000 or less 13.94% 23 20,000 or less 3.64% 6 20, % 4

36 17. How many students do you support in your reverential environments? Question Type: Single Choice Total Respondents: ,000 or less 3.64%, 6 20, %, or less 9.09%, 15 10,000 or less 13.94%, 23 1,000 or less 13.33%, 22 5,000 or less 57.58%, 95

AIRPLAY AND AIRPRINT ON CAMPUS NETWORKS AN ARUBA AIRGROUP SOLUTION GUIDE

AIRPLAY AND AIRPRINT ON CAMPUS NETWORKS AN ARUBA AIRGROUP SOLUTION GUIDE Table of Contents Warning and Disclaimer... 3 Introduction... 4 What is Zero Configuration Networking (zeroconf)?... 5 WLANs and