Secure Wireless

Integration

How CFCC is integrating secure wireless access into its production environment

Scott McNeil ∙ Assistant Network Administrator ∙ Cape Fear Community College

Why?

• Faculty requesting greater mobility options

• Staff also requesting greater mobility options

• Department heads wanting greater classroom flexibility

• Can help control costs in new construction and/or renovations

How?

• Active Directory integration• 802.1X enterprise authentication• Role based access• Machine authentication

802.1X Authentication

• PEAP with MSCHAPv2– When configured properly is every bit as

secure as EAP/TTLS but can be deployed without special provisioning

– However some kind of provisioning is still recommended for laptops/notebooks

– For laptops, configuration can be added to imaging or be pushed out via AD group policy

– Android and Apple iOS devices super easy to provision

CFCC’s Solution

• Lightweight, controller based access points

• Aruba Networks ClearPass™• Active Directory integration• Aruba Networks AirWave™ server for

monitoring, system analytics over time, analytic report generation and wireless intrusion detection/prevention

Questions ∙ Discussion