Upload
benjamin-fletcher
View
215
Download
2
Embed Size (px)
Citation preview
Secure Wireless
Integration
How CFCC is integrating secure wireless access into its production environment
Scott McNeil ∙ Assistant Network Administrator ∙ Cape Fear Community College
Why?
• Faculty requesting greater mobility options
• Staff also requesting greater mobility options
• Department heads wanting greater classroom flexibility
• Can help control costs in new construction and/or renovations
How?
• Active Directory integration• 802.1X enterprise authentication• Role based access• Machine authentication
802.1X Authentication
• PEAP with MSCHAPv2– When configured properly is every bit as
secure as EAP/TTLS but can be deployed without special provisioning
– However some kind of provisioning is still recommended for laptops/notebooks
– For laptops, configuration can be added to imaging or be pushed out via AD group policy
– Android and Apple iOS devices super easy to provision
CFCC’s Solution
• Lightweight, controller based access points
• Aruba Networks ClearPass™• Active Directory integration• Aruba Networks AirWave™ server for
monitoring, system analytics over time, analytic report generation and wireless intrusion detection/prevention
Questions ∙ Discussion