Higher Education

Reply
This is an open group. Sign in and click the "Join Group" button to become a group member and start posting.
Occasional Contributor II

Re: Top clearpass features for the educaton vertical

Do you use eduroam at your University/college?
They have something called eduroam cat which helps with getting people on.

Re: Top clearpass features for the educaton vertical

Anyways what i want to offer is the correct way not the most affordable :)

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: Top clearpass features for the educaton vertical

no they dont have that.

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Contributor I

Re: Top clearpass features for the educaton vertical


@NightShade1 wrote:

If its a computer which is on a domain let say a student which bring a laptop of the work, then it will try using his credentials for it.   It wont be automatically just like it...

 

cheers

Carlos


Depending on the version of Windows, behavior is a little diffrent, but generally speaking, Windows will try to pass the current user credentials, and when those fail, it will prompt for the user to enter some other credential.

 

It is true that quickconnect takes away that problem, but I can tell you we have been doing it this way for about 3 years, no quickconnect, no clearpass (NPS for three years, testing clearpass now), and it works.

Re: Top clearpass features for the educaton vertical

We are trying to sell a clearpass :)

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Contributor I

Re: Top clearpass features for the educaton vertical


@NightShade1 wrote:

We are trying to sell a clearpass :)

 

Cheers

Carlos


Well, you can use clearpass as the radius server instead of NPS, and no additional licenses are needed for student access. It has many benefits when it comes to ease of authentication troubleshooting, powerful ways to profile and pass back roles to the aruba controller, etc.

 

They will only need enough Guest licenses to service true campus visitors.

Aruba

Re: Top clearpass features for the educaton vertical

Carlos,

 

You have many different options. One thing to always put into consideration is security.

I have a lot of different college and universities using all or some of the features.

 

Scenario 1

 

Staff- onboard

Students PC mobile- .1x

Student Gaming/Apple TV/etc. Mactrac  (No guest lic are used)

Guest Captive portal

 

Scenario 2

 

Staff/Student - .1x using quickconnect

Student Gaming/Apple TV/etc. Mactrac  (No guest lic are used)

Guest Captive portal

 

Scenario 3

 

Staff- Onboard

Students – Guest captive portal with AD credentials (No guest lic are used)

Student Gaming/Apple TV/etc. Mactrac  (No guest lic are used)

Guest Captive portal

 

And there are many more. The reason I brought up security is that if they are not concerned with the data going over the air the easiest way is Scenario 3. The students and the guest can use the CP and you can enable mac caching.

 

Some customers will deploy .1x and guest to start off and move to TLS. They like not having to worry about putting in passwords when they connect or password expirations which makes it easier for both students and Staff, but again it all comes down to cost.

 

You can give Derin (My UK counterpart) a call and he can also work through all the scenarios, but the first few things I would talk to the customer about to narrow down the options is

 

# 1 Security

 

# 2 Ease of use

 

# 3 Cost

 

 

 

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Super Contributor I

Re: Top clearpass features for the educaton vertical

As a reference point using Troy?s excellent summary, we are currently practicing scenario 2 with an eye towards scenario 1. FWIW...
==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Highlighted

Re: Top clearpass features for the educaton vertical

GREAT summery Troy thank you very much!

 

Looks more clear now.

Question about scanario 1 on the students part.

it is 802.1x with onboarding for students? so the student dont have to configure anything.   I mean like a one time process and that they dont have to do it anymore?

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: Top clearpass features for the educaton vertical

Another question Troy 

How come on scenario 3 no guest license is used?, if you using clearpass guest and also using mac caching isnt that consume one guest license? or in what way you mean normal NPS without clearpass with active directory  and the NPS being the radius server of that aaa profile?

 

Cheers

Carlos 

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: