Why use AirEUD?
We plan to continue making the AirEUD network available so long as it
meets the needs of our users. Obviously the wider reach (to other
buildings across GSFC) will be a major advantage of the CNE-offered
networks. So we expect that even people who continue to use AirEUD will
want to use the other networks in other places.
Why bother to continue using AirEUD?
- We support a secure network for older laptops.
The WPA2 protocol (used by the staff CNE network) requires "AES encryption"
which is usually provided in hardware by the wireless card, not by the
operating system. If you have an older wireless card (e.g., an Airport
card, not an Airport Extreme card), it likely does not support AES at all
and cannot be upgraded without replacing the card. In general, 802.11b
cards do not support AES, while most 802.11g cards do.
Without AES support, an older laptop will not be able to connect to the
staff "CNE" wireless network.
- For longer-term visitors who cannot get a VPN account, we provide a more
convenient environment for accessing local resources (e.g., SSH). (Otherwise,
they would need RSA Secure ID tokens for B2 SSH access.)
- AirEUD has "punched holes" in our firewall to allow services such as
license managers (e.g., for IDL), printers, and more. (Some of these will
be available through the "CNE" SSID.) A summer student providing their own
laptop, for example, would be able to install and run the graphics
language IDL when they could not do it from the Guest network and would
not be permitted on the CNE network.
- AirEUD permits privately-owned machines on the network. The formal
policy of the CNE staff wireless network is that machines should also have
a wired IP address so that they can be scanned once per quarter. (The CNE
admits this will be very difficult to enforce.) Privately-owned computers
are difficult, at best, to place on the CNE.
- The Guest-CNE will be less convenient for on-site staff, since it will require
the extra step of starting up the VPN software. AirEUD (and "CNE") should connect
immediately.
- AirEUD certificates are good for a year, with a straightforward renewal process.
The Guest-CNE access codes are normally good for five days, although it is
possible to get longer-term access codes (90 days).
- Local system administration support, with a far wider than 8x5 support model
(ASD/660 Help Desk).
Overall, you, the user now have new choices. Try out the different networks
and see what works for you. You may even find a combination works best (e.g., AirEUD
when you are in B2, B21, or B26 but, say, the staff CNE wireless SSID when you
are elsewhere). Or you find that using the "CNE" SSID everywhere serves your needs
just fine.
David Friedlander
21 Nov 2006
|