Main Nav

Participate in this Group

Search This Group

January 28, 2013 | Mearl Danner

We use Monitis.

 

http://portal.monitis.com/

 

Can monitor connections and has agents to monitor thinks like CPU, disk space, etc.

 

Mearl Danner

Systems Programmer

Samford University Technology Services

http://www.samford.edu

 

January 18, 2013 | Listserv Anonymous User
Message from mark.duling@biola.edu

I don't know the answer since I've never used pruning, but my impression is that it isn't used that much anymore.  Bridging fails open while routing fails closed, so I think the trend of limiting L2 domains with L3 switches (routers) limits the usefulness of VTP generally.


January 16, 2013 | Peter Morrissey

Can anyone recommend ISP services in Manhattan? We’ve been using a “Business Class” service which is sometimes more like “cable guy” class.

 

Thanks,

Pete Morrissey

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

January 14, 2013 | Peter Morrissey

We use a Visualware product called: MyConnection Server. If someone has complaints, we send them a link to the speedtest, and they can send us the results. We also use it ourselves after an install. It is a pretty cheap annual cost. It is a nice way to quickly get some objective results beyond: “the network is slow.”

 

Pete Morrissey

 

January 14, 2013 | Brian Helman

Hey everyone,

 

We’re opening discussions in our network group on whether we should be using local accounts or AD/LDAP/RADIUS to access the management consoles of our network gear.  I see pros and cons of both.   

 

Opinions?

 

-Brian

 

____________________________________
Brian Helman, M.Ed |  Director, ITS/Networking Services | (: 978.542.7272

Salem State University, 352 Lafayette St., Salem Massachusetts 01970

GPS: 42.502129, -70.894779

 

********** Participation and subscription information for this EDUCAUSE Constituent...
January 12, 2013 | James Shuttlesworth
We work with a vendor (campus televideo) to help support our distribution network, we work very closely with them though. We have a mix of legacy coax and Singlemode fiber to distribute. Singlemode is a requirement - I don't think you can use multimode at all. however the infrastructure terminations do not need to be angle polish, use the same flat polish terminations we use for data, but use jumper cables (APC -> Flat) to connect to the RF equipment - it works fine so long as you account for the small DB loss you get from the flat connections. In a couple of places where we had a number of jumps to make we did some fusion splices to keep loss down. Dealing with analog RF over fiber is a different experience than dealing with data - performance can be somewhat subjective, 'snow' can be caused by dirt on a terminator and chasing it down is fairly labor intensive - a DB meter, Microscope and a ton of prep wipes are very useful tools (the optical signal level meter is essential...
January 11, 2013 | Bruce Entwistle

We are reviewing the use of the Xunlei download manager, http://en.wikipedia.org/wiki/Xunlei,  on our campus network.   The current question is, is this being used for legitimate purposes or another way of illegally sharing copyrighted material.  I would be interested to know what others have found about its use and what steps, if any, have been taken.

 

Thank you

Bruce Entwistle

Network Manager

University of Redlands

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/...
January 11, 2013 | Listserv Anonymous User
Message from a.cudbardb@freeradius.org

Hi All, A while back there was some discussion about the current krb5 module in FreeRADIUS being single threaded, and that it may no longer be necessary for it to be single threaded. It transpires that both MIT and Heimdal libraries are now thread safe, MIT since either 1.4.x or 1.4.4 (unsure) and Heimdal since around 0.7 (documentation is fuzzy). I can't test beyond compiling the code against the kerberos library, and maybe setting up a test KDC/TGS. But for this to be put into the stable branch it really needs to be tested under load, against a range of keberos implementations. Were looking for volunteers, preferably a mix of deployments using either MIT or Heimdal. The new module should just drop in for any v2.1.x deployment once compiled, as it doesn't use any new core API functions. Change list: * Both - Check that krb5 library was compiled with threading support on startup. * Both - Clone context on each request to...
January 10, 2013 | Listserv Anonymous User
Message from boschetm@ipfw.edu

I've just started looking into that myself. I know on our switches we can send the ELIN number to the phone from the switch. But I don't know about the alias.


Michael Boschet, Jr.
Senior Network Systems Administrator
Indiana Purdue Fort Wayne
boschetm@ipfw.edu
Office:  (260) 481-5747

>>> Peter P Morrissey <ppmorris@SYR.EDU> 01/10/13 12:56 PM >>>

(OK, hijack alert)

. We’ve been thinking about using the network drop label/port alias to help with e911 when we move to VoIP. (Very likely Lync). Is there a way using say LLDP-MED to communicate that to the phone, which can communicate its location to a server. It would also assume that you have a good database of where all of your network drops are located, and I...

January 9, 2013 | Lee Badman
Wondering if anyone has implemented wired 802.1x as a form of NAC, and if you could briefly describe how you’re using it. Also, would be interested in the administrative burden you feel it either adds or removes.
 
Thanks-
 
Lee Badman
Network Architect
Syracuse University
 
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

January 4, 2013 | Lee Badman
From Cisco’s 7.4 Controller Code release notes:
 
•Support for Application Visibility and Control (AVC) is introduced. AVC classifies applications using Cisco's Deep Packet Inspection (DPI) techniques with Network-Based Application Recognition (NBAR) engine and provides application-level visibility and control into Wi-Fi network. After recognizing the applications, the AVC feature allows you to either drop or mark the traffic.
Using AVC, the controller can detect more than 1000 applications. AVC enables you to perform real-time analysis and create policies to reduce network congestion, costly network link usage, and infrastructure upgrades.
•Support for NetFlow protocol is introduced. The NetFlow protocol provides information about network users and applications, peak usage times, and traffic routing. The NetFlow protocol collects IP...
January 3, 2013 | Nicholas Urrea

We are replacing the wireless in one of our buildings and I was wondering what POE-Edge switches should I buy. I am going to have about 180 APs in the building. We are a Cisco shop but I am open to buying another brand.  

 

---
Nicholas Urrea
UC Hastings College of the Law

Network and Systems Engineer
Information Technology
e: urrean@uchastings.edu
ext: 4718
helpdesk:
e: helpdesk@uchastings.edu
ph: 415-581-8802

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://...
January 2, 2013 | Peter Morrissey

I was wondering if anyone had used any of the ManageEngine products and what your experience has been with them. They look compelling on paper, but then don’t they all. J

 

Pete Morrissey

Director of Networking

Syracuse University

 

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

December 28, 2012 | Joe Marentette
We are researching alternatives to purchasing more throughput for our I1 connection, specifically web caching technologies. With a very competent in-house network systems crew, we tend to prefer open source solutions and tailor products as needed. At the moment we are interested in configuring WCCP on our handful of Nexus 7k's and using Linux (Ubuntu 12.04 LTS) running Squid as the caching engines. 1. Has anyone setup WCCP using non-Cisco caching engines? 2. Better alternatives to Squid for an open source caching application? 3. Can you provide some network statistics of your caching server in respect to number of estimated users? 4. Any other information you can think of? Thank you very much, -- Joe Marentette Network Engineer Washington University in St. Louis Network Services & Support 314-935-7031 jmarentette@wustl.edu ********** Participation and subscription information for this EDUCAUSE Constituent Group...
December 18, 2012 | Listserv Anonymous User
Message from rrichman@nd.edu

We are beginning a project to upgrade our core and distribution layers on campus. So items that are looking at is the ability to dual home buildings to the distribution layer.

Our current environment is cisco cat6509s for the core layer 3 and cat6509s for the distribution layer that homes the building.

One item we currently use is each distribution router/switch has a cisco firewall service module that we use in transparent mode to create 'zones' for staff, student, services, infrastructure devices, etc.  Endpoints are placed on the network in the appropriate zone using Clean Access server.

The challenge we are looking at is how we would utilize something like Cisco Nexus in the distribution layer that would allow us to dual home buildings with the vPC feature, but this leaves us with the FW layer that does not fit...

December 18, 2012 | Listserv Anonymous User
Message from dannyeaton@rice.edu

We’re testing Cayuse in a small setting right now, and are seeing some odd issues due to our firewall NAT timeout (users having to log back in within seconds due to the public IP on the NAT has changed).  Our border is the SRX 5800 (HA-cluster), and we’ve had little success in altering the “inactivity-timeout” so far.  If anyone else has seen similar issues, then please contact me off-list.  Thanks!  If your university uses Cayuse, I’d like to talk about any challenges you had. 

 

 

               Danny Eaton

 

               Office - 713-348-5233

...
December 12, 2012 | Lee Badman

http://tolu.na/SeAnHp

 

Results shared this Friday. Approaching the 170 respondent mark.

 

-Lee

 

Lee H. Badman

Network Architect/Wireless TME

Information Technology and Services (ITS)

Syracuse University

315 443-3003

 

 

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

December 12, 2012 | Pete Hoffswell
Sorry folks.  Must have been a long day yesterday - 

I mean ANYCAST, not unicast!  Thanks for catching that, Michael @ berkeley.

I am currently researching anycast controls within our Cisco infrastructure using IP SLA features.

Our topology (multiple sites, each with their own DNS server) will play well with anycast DNS.  I think that our current project to create high-availability SSO (Single Sign-On) infrastructure may benefit from ANYCAST as well.



-
Pete Hoffswell - Network Manager
pete.hoffswell@davenport.edu
http://www.davenport.edu
616-732-1101



December 11, 2012 | Pete Hoffswell
I was fortunate enough to sit in on a session about using UNICAST for high availability web servers.  It was last week, at the Merit Networker's Summit in Ypsilanti, MI.

Here's a copy of the presentation for your review:


I interested in hearing anyone's stories about using unicast for DNS redundancy and beyond.

Interesting solution!  Are you doing it?


December 11, 2012 | Adam Nave
Is anyone currently using virtual load balancers (such as the F5 BIG-IP LTM Virtual Edition or the A10 SoftAX) in a production role? They seem like good solutions for the budget-conscious and smaller institutions that don't have SSL offloading needs or high throughput. Any tips or comments? 

Thanks in advance,

--Adam

--
Adam Nave, CISSP
Linux/Unix Systems Administrator
Macalester College


********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

February 14, 2012 | Listserv Anonymous User
Message from charles.bombard@ccv.edu

Anyone have some tips on multicast streaming with an NCAST to the WAN? Multicasting beyond locally is beyond my expertise.

 

I have a brand new PR702R that I have streaming fine to those on my subnet, but need to be able to allow viewing from the other WAN connected CCV centers. Any assistance is appreciated.

 

-Charlie

 

==========================================

 

Charles Bombard

Assistant Chief Technology Officer

Community College of Vermont

1 Abenaki Way

Winooski, VT 05404

802.654.0665

...

November 15, 2012 | Chris Mielke
We currently run Cisco ACS 4.2 for wireless authentication (as well as VPN) to support WPA2 enterprise. The source database is Active Directory, which we are in the process of upgrading to the Windows 2008 R2 functional level. ACS 4.2.1 will not work in a 2008 R2 AD environment, so we are looking at our options for RADIUS. Obviously, Cisco would love to sell us ISE for tens of thousands of dollars, and the guest access/security options would prove helpful, but it is difficult to justify the cost. What are other people using…Microsoft NPS? 

One requirement is that we need the ability to restrict SSID access based on group membership (i.e. students can only connect to the student SSID). We do this using the wlan-id attribute in ACS right now.

Thanks,

Chris Mielke

NETWORK ENGINEER 3

COMPUTER...

September 3, 2012 | Bradley Kauffman

Hello list members,

 

We recently upgraded our Internet bandwidth to 500 Mbps and were hard pressed to test it to see if the Internet Service Provider actually provided us with that amount of bandwidth.  The traditional web-based test sites (ie. speedtest.net) typically top out at 100Mbps.

 

Does anyone have a different test available or a more reliable way to test your bandwidth?  We would like to make sure we actually are getting that amount without having to wait for our usage graphs to show us.

 

Thanks,

Brad

 

 

Bradley A. Kauffman

Systems Administrator

IT Services

Albright College

...
February 22, 2012 | Peter Morrissey

We are looking to provide multiple 10 Gig connections to some of our buildings. Can any end users recommend a building switch that provides two 10 Gig connections as well as at least one gigabit connection along with the usual PoE gig copper ports.

 

Thanks,

Pete M.

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

July 30, 2012 | Kate Robinson
Hello- Western State College is considering replacing it's Juniper UAC. We have looked at both Impulse Safe Connect and Aruba ClearPass. Does anyone have any recommendations, good or bad, for either of these products? Thanks for any advice you can offer. Kate Robinson Network Administrator IT Services Taylor Hall 125 970-943-3123 -----Original Message----- From: The EDUCAUSE Network Management Constituent Group Listserv [mailto:NETMAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Fabri Sent: Thursday, July 26, 2012 8:27 AM To: NETMAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [NETMAN] Cisco 3750X Switches
April 5, 2012 | Jason Hall
Hello. We are currently using Bradford on our campus for NAC. We often receive complaints about how difficult the registration process is and why we require antivirus since "Mac's never get viruses." This has prompted us to start researching the future of NAC. What are other schools doing in this area? If you have gone away from using a NAC, what approach are you using now to get the similar functionality? How do you authenticate guest users? How do you disable access for those students who violate policy? Looking forward to the feedback, Jason -- Jason R. Hall Denison University Network Engineer hallj@denison.edu Desk: 740-587-6229 Cell: 740-973-5754 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
February 20, 2013 | Listserv Anonymous User
Message from paul.keck@usg.edu

On Tue, Feb 19, 2013 at 01:33:27PM -0500, Benjamin Parker wrote: > Hi All, > We are in the planning phases of a new data center. Part of this will be making changes to clean up and organize our wire. What color schemes do you use and would you make any changes after the fact? At another job a while back I made the attempt to standardize on cable colors in a small server room. I bought 100 each of red, yellow, and blue, half 3ft and half 6ft. I don't remember exactly which ones I ran out of first, but since it was a rush I ended up having to use some grey cables I had around and then ask the money guy for more cash. While waiting for cash I then ran out of some other length/color and the money guy wanted to know why I needed money for cables when I had 200 cables in a box. Again I was in a rush and used some cables of the wrong color because I had little choice. After another failed appeal to the money guys, I started using...
September 7, 2012 | John Kaftan
Can anyone recommend an affordable alternative for an edge router?  Now that we are beyond the 100 Mb barrier the price of Gb routing is a shocker, especially when we only have 2 entries in our routing table.

We have a multi-hommed internet connection VIA BGP but I hate to drop $20k on two routers that are just passing packets along and not having to make any major routing decisions.

Thanks

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

November 29, 2011 | Listserv Anonymous User
Message from shess@wheatonma.edu

Hypothetical:
Would you (do you) share Network/Telephone closet space (with all the attendant electronic equipment housed in such a room) with non-IT owned/operated server equipment? 

If yes to above, would you also say yes:
In a scenario where those servers are co-maintained by faculty and department-employed students? 
In a space that also housed door-access and video-camera surveillance equipment?


Comments and best practices welcome


Thanks,

Steve

-- ----------------------------- Steve Hess Network Administrator Wheaton College Phone: 508-286-3404 Fax: 508-286-8270 ----------------------------- ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www....
September 14, 2012 | Peter Morrissey

We have been getting complaints of youtube intermittent performance issues. We’ve eliminated local problems. Someone discovered that a lot of the streaming was coming from a server in Taiwan. It looks like youtube determines the preferred server as I can see in Wireshark the server being queried by the client via DNS. We have registered a complaint and I’m sure Google will be all over it shortly. J

 

Has anyone else dealt with this. My impression is that youtube just isn’t always reliable for lots of reasons at home or here.

Faculty use it during class and seem to be surprised when it doesn’t perform well. It is a shame though, because there is a lot of great content.

 

Pete M.

********** Participation and subscription information for this EDUCAUSE Constituent Group...
April 13, 2012 | Chris L. Davis

Sorry for the cross posting.  Normally try to avoid it.  I posted on Security and there wasn’t much of a response.  So I thought I might try here. 

 

Anyone have any experience and willing to chat via email or phone?  I can summarize if there is any interest. 

 

I’d love to know how long you’ve used them, bandwidth and population sizes, how you are utilizing the box, what protections you have active, if you are using Application based rules, etc.  Good things, not so good things. 

 

Thanks.

Chris

 

Chris Davis

CIS Security Manager

The Principia

********** Participation and...
February 22, 2012 | Lee Badman

Wondering if anyone in the groups is using large scale NAT (say 50K private IPs translating to X public IPs) with any sort of appliance kind of thing? I know you can NAT directly from certain routers but curious about other options.

 

-Lee Badman

 

Lee H. Badman

Wireless/Network Engineer

Information Technology and Services

Adjunct Instructor, iSchool

Syracuse University

315 443-3003

 

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/....
February 7, 2012 | William E. Kline

Hi,

 

We are a Cisco shop and must stay that….

 

We have some limited funds to upgrade some of our edge network switches in our student residence halls.  We currently have Cisco 2950’s fed by 1G links.  Our main campus uses, and is suggesting, Cisco 3750X switches.  Because of cost and a somewhat unclear understanding of the need for these, we are looking more towards the Cisco 2960S as a lead switch into the closet.  We are looking to convert from 1G to 10G into the stack.

 

Any input would be appreciated.

 

Bill

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at...
November 30, 2011 | Lee Badman

We have a somewhat potentially exotic challenge to try to solve. Will anyone admit to having tried this sort of low-cost solution in a production networking role, leveraging only voice grade cable?

 

http://www.netsys.com.tw/products/vdsl2/nv600l.htm

 

Regards,

 

Lee H. Badman
Wireless/Network Engineer, ITS
Adjunct Instructor, iSchool
Syracuse University
315.443.3003
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

March 28, 2013 | Listserv Anonymous User
Message from mark.duling@biola.edu

Hi Keith,

Well at the least I'd say OSPF or anycast isn't something we'd do soon, because we're still building out redundancy in our core infrastructure and such, and we're not even at our own planned ideal point with DNS as we'd planned it out a couple of years ago.  We do have redundant DNS of course (actually Infoblox).

I guess I was partly in amazement that BIND has an opaque forwarder logic and couldn't quite believe it, and also partly wondering if there were an easy way to improve the situation incrementally for the rare circumstance I mentioned.  I still can hardly believe BIND has an internal operating logic that is apparently entirely opaque unless you use a sniffer on the dns server.

But in the less than near future we're always open to using anything that would help us build a more resilient core, internet, and dns...
February 20, 2013 | John Miller
Hello everyone, We're doing a full-on overhaul of our authoritative DNS here at Brandeis, and we're trying to figure out how much of our infrastructure to put out in the cloud. We're evaluating different services right now, and would like your thoughts: - Do you host any of your DNS infrastructure with a cloud provider (UltraDNS, Dyn, Amazon Route 53, Rackspace, etc.)? - If so, whom? - How easy is it to use? - Are you satisfied with pricing? - What does your traffic profile look like--# queries, # hosted zones? - Do you also host DNS internally? - How do you handle internal-only DNS (management vlans, windows dynamic update, etc.)? - If you act as a slave for other universities/other nameservers, is that information housed in the cloud as well? Any feedback you can provide would be greatly appreciated! John -- John Miller Systems Engineer Brandeis University johnmill@brandeis.edu ********** Participation and...
January 28, 2013 | Mearl Danner

We use Monitis.

 

http://portal.monitis.com/

 

Can monitor connections and has agents to monitor thinks like CPU, disk space, etc.

 

Mearl Danner

Systems Programmer

Samford University Technology Services

http://www.samford.edu

 

January 14, 2013 | Brian Helman

Hey everyone,

 

We’re opening discussions in our network group on whether we should be using local accounts or AD/LDAP/RADIUS to access the management consoles of our network gear.  I see pros and cons of both.   

 

Opinions?

 

-Brian

 

____________________________________
Brian Helman, M.Ed |  Director, ITS/Networking Services | (: 978.542.7272

Salem State University, 352 Lafayette St., Salem Massachusetts 01970

GPS: 42.502129, -70.894779

 

********** Participation and subscription information for this EDUCAUSE Constituent...
January 3, 2013 | Nicholas Urrea

We are replacing the wireless in one of our buildings and I was wondering what POE-Edge switches should I buy. I am going to have about 180 APs in the building. We are a Cisco shop but I am open to buying another brand.  

 

---
Nicholas Urrea
UC Hastings College of the Law

Network and Systems Engineer
Information Technology
e: urrean@uchastings.edu
ext: 4718
helpdesk:
e: helpdesk@uchastings.edu
ph: 415-581-8802

 

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://...
November 16, 2012 | David Ziemba

All,

 

We’ve had a strange report from our Athletics division. The report is the Daktronics wireless scoreboards and shot-clocks freeze, but eventually reconnect and catch-up. This building just went through an extensive renovation where the previous system was used, but only the scoreboards were wireless, and not the shot-clocks. The Daktronics control console the official uses seems only to broadcast the signal one-way with no board or shot-clock return acknowledgements.

 

We’ve gone down with a R&S FSH323, and found the 2.4 is bursting at the seams. We had disabled the 2.4Ghz frecency on our campus Aruba system throughout the building, and although the clocks didn’t freeze as much, they still continue to freeze and loose time.

 

Daktronics...

Group Leaders

Calvin College
Davenport University

Related to this Group...

Close
Close


Annual Conference
October 15–18, 2013
Save the date!

Events for all Levels and Interests

Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.

Close

EDUCAUSE Institute
Leadership/Management Programs
Explore More

Career Center

Leadership and Management Programs

EDUCAUSE Institute
Advanced Programs
Project Management

 

Fellowships and Awards

Fellowships
Awards Programs

Getting Involved

Mentoring
Volunteer
Speak at an Event

 

 

Jump Start Your Career Growth

Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.

 

Close
Close

Get on the Higher Ed IT Map

Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
 

 

Close

2013 Strategic Priorities

  • Connected Learning
  • Enterprise IT
  • Foundations


Learn More >

Uncommon Thinking for the Common Good™

EDUCAUSE is the foremost community of higher education IT leaders and professionals.