Need an 802.11 b/g/n WAP in a corporate environment

troidus · 01-30-2013, 12:12 PM

Have two Cisco 4410Ns that are utter crap. There is a Cisco WAP121 that's not much better. Looking for something good that doesn't cost a fortune. Need N support, but not necessarily 5GHz. Any suggestions? Been looking at the HP M220, but can't find any reviews and don't know if the boss will balk at the $300 price tag.

a1fa · 01-30-2013, 03:01 PM

What kind of back-end security are you doing? WPA2 is not enough for corporate enviroments, especially if you are getting audited against it. Are you doing any Cisco proprietary agents and certificate first layer authentication? If not, look into ubnt.com, very well designed equipment by ex Motorola engineers.

a1fa · 01-30-2013, 03:03 PM

PS: and if you are doing any of the Cisco proprietary stuff, ditch it, and run SSL VPN (OpenVPN, or such) for your authentication on top of the WPA2... save you a pretty penny.

troidus · 01-30-2013, 03:07 PM

NOTA, unfortunately. I only recently (last summer) talked them in to letting me switch to WPA2 from WAP. There are other problems that need to be addressed, but I can't do anything about that at the moment.

troidus · 01-30-2013, 03:43 PM

Quote:

Originally Posted by a1fa

If not, look into ubnt.com, very well designed equipment by ex Motorola engineers.

Thanks for that suggestion. Their gear sounds really good, and for what we're looking for, not expensive.

Dismount · 01-31-2013, 05:31 AM

We're using the ubnt stuff. Good gear.

I think I have about 20 of their access points up.

snarf · 01-31-2013, 07:05 AM

We run Pepwaves for the rest of our clients that arent on cisco gear. They run great, have very strong signal quality, and have lasted a good long while.

If your boss is balking at $300.. well.. lol.. you can't get a baller, business class unit for $59.95 at office depot.. just saying..

a1fa · 01-31-2013, 08:10 AM

but you can get even better quality gear for under $100 from ubnt.com..

cisco fan boys cry morah..

Attico · 01-31-2013, 07:11 PM

Take a look at asus routers like the rt n66u. Enable mac address filtering as an extra layer to the wpa2. You should be below 200. Its consumer gear, but you can crank the power up and cover a decent building. For 300, your options are limited.

troidus · 01-31-2013, 10:53 PM

Quote:

Originally Posted by Attico

Enable mac address filtering as an extra layer to the wpa2.

Not happening. I'm not chasing down every laptop and mobile phone that needs access. Besides, MAC addresses can be spoofed.

KSJEEPER · 02-01-2013, 02:14 PM

We went Aruba, have over 1k of them up and relatively problem free.

SimpleSimon · 02-01-2013, 03:35 PM

I'd look at something inexpensive like a combination of dd-wrt and freeradius with 802.1x and an EAP-TLS method. Freeradius seems well supported, as does dd-wrt. DD-wrt affords you the ability to re-use off-the-shelf hardware.

a1fa · 02-01-2013, 05:07 PM

dd-wrt == overhead and support costs not included..

ubnt is probably the industry best when it comes to price, performance and support. everything else is headache.

01-30-2013, 12:12 PM	#1
troidus ^OP Beastly Adventurer Joined: Sep 2010 Oddometer: 6,924	Need an 802.11 b/g/n WAP in a corporate environment Have two Cisco 4410Ns that are utter crap. There is a Cisco WAP121 that's not much better. Looking for something good that doesn't cost a fortune. Need N support, but not necessarily 5GHz. Any suggestions? Been looking at the HP M220, but can't find any reviews and don't know if the boss will balk at the $300 price tag.

01-30-2013, 03:01 PM	#2
a1fa Riding Nomad™ Joined: Nov 2006 Location: Arkansas Oddometer: 12,722	What kind of back-end security are you doing? WPA2 is not enough for corporate enviroments, especially if you are getting audited against it. Are you doing any Cisco proprietary agents and certificate first layer authentication? If not, look into ubnt.com, very well designed equipment by ex Motorola engineers. __________________ Learn to ride. Ride to learn. FS: 1993 Suzuki DR350S (wide ratio 6 speed - street legal kickstart)

01-30-2013, 03:03 PM	#3
a1fa Riding Nomad™ Joined: Nov 2006 Location: Arkansas Oddometer: 12,722	PS: and if you are doing any of the Cisco proprietary stuff, ditch it, and run SSL VPN (OpenVPN, or such) for your authentication on top of the WPA2... save you a pretty penny. __________________ Learn to ride. Ride to learn. FS: 1993 Suzuki DR350S (wide ratio 6 speed - street legal kickstart)

01-31-2013, 05:31 AM	#6
Dismount Boring bastard Joined: Feb 2007 Location: Beckley wv Oddometer: 7,906	We're using the ubnt stuff. Good gear. I think I have about 20 of their access points up. __________________ I like cold wet doggy nose in my crack.

01-31-2013, 07:05 AM	#7
snarf WFO and clueless Joined: Aug 2007 Location: Wichita, KS Oddometer: 645	We run Pepwaves for the rest of our clients that arent on cisco gear. They run great, have very strong signal quality, and have lasted a good long while. If your boss is balking at $300.. well.. lol.. you can't get a baller, business class unit for $59.95 at office depot.. just saying.. __________________ -Derek 'If you wanna play tough, you had better be stupid!' 8 bikes and counting.. www.kyriders.net

01-30-2013, 03:07 PM	#4
troidus ^OP Beastly Adventurer Joined: Sep 2010 Oddometer: 6,924	NOTA, unfortunately. I only recently (last summer) talked them in to letting me switch to WPA2 from WAP. There are other problems that need to be addressed, but I can't do anything about that at the moment.

01-31-2013, 08:10 AM	#8
a1fa Riding Nomad™ Joined: Nov 2006 Location: Arkansas Oddometer: 12,722	but you can get even better quality gear for under $100 from ubnt.com.. cisco fan boys cry morah.. __________________ Learn to ride. Ride to learn. FS: 1993 Suzuki DR350S (wide ratio 6 speed - street legal kickstart)

01-31-2013, 07:11 PM	#9
Attico Wrong way 'round Joined: Sep 2006 Location: Ottawa, Ontario Oddometer: 1,463	Take a look at asus routers like the rt n66u. Enable mac address filtering as an extra layer to the wpa2. You should be below 200. Its consumer gear, but you can crank the power up and cover a decent building. For 300, your options are limited. __________________ "Build a man a fire and he will be warm for the night, set a man on fire and he will be warm for the rest of his life."

02-01-2013, 02:14 PM	#11
KSJEEPER Beastly Adventurer Joined: May 2005 Location: Kansas City area Oddometer: 4,020	We went Aruba, have over 1k of them up and relatively problem free. __________________ 2002 KLR650 - 2007 HD Electra Glide 'It doesn't matter how big a ranch ya' own, or how many cows ya' brand,the size of your funeral is still gonna depend on the weather.' Harry Truman "Death smiles upon us all, a U.S. Marine smiles back"

02-01-2013, 03:35 PM	#12
SimpleSimon Aspiring advrider Joined: Feb 2007 Location: Lake Stevens, WA Oddometer: 3,345	I'd look at something inexpensive like a combination of dd-wrt and freeradius with 802.1x and an EAP-TLS method. Freeradius seems well supported, as does dd-wrt. DD-wrt affords you the ability to re-use off-the-shelf hardware. __________________ 5f? Is that like riding down a 90 degree cliff face into a lake of fire? I thought 4f was bad. Abdelhub "Assembled Spectator Scoring With Incriminating Photographic Evidence" or A.S.S.W.I.P.E. - Granparacer

02-01-2013, 05:07 PM	#13
a1fa Riding Nomad™ Joined: Nov 2006 Location: Arkansas Oddometer: 12,722	dd-wrt == overhead and support costs not included.. ubnt is probably the industry best when it comes to price, performance and support. everything else is headache. __________________ Learn to ride. Ride to learn. FS: 1993 Suzuki DR350S (wide ratio 6 speed - street legal kickstart)

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread: