Re: WPA problem and eduroam

[Tomasz Wolniewicz <twoln@xxxxxx>]

Mohacsi Janos wrote:
> I would change the order:
> SSID eduroam1 with WPA/TKIP + WPA2/AES
> SSID eduroam with WPA2/AES ony
>
> I would keep eduroam1 for compatibility reason - if somebody has
> problem from WPA2/AES they can switch back to eduroam1 ....
To do this would require a serious policy change and would completely
break down the service. All eduroam TKIP users would suddenly lose
connectivity.
Doing it the other way round - adding a new "better" SSID would give the
users an option to configure this new connection, while still keeping
the old one.
This way they would have something new without giving up the old. Also
you will never achieve all sites changing their settings on eduroam, so
you will never have a "clean" solution. The new SSID would be
implemented from scratch so the institutions only used it if they wanted
to start the AES-only service.

Tomasz


-- 
Tomasz Wolniewicz    
          twoln@xxxxxx        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika     Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576