Showing posts with label BlueSocket. Show all posts
Showing posts with label BlueSocket. Show all posts

Tuesday, September 17, 2013

SMS Authentication- A Nice, Easy Way To Do WLAN Guest Auth

For wireless guest access, there are all kinds of ways to skin the cat. In a perfect world, Hotspot 2.0 will take care of authentication and encryption, and all would be sunny to everyone's satisfaction. But, that ain't happening for a while (if ever). It's becoming more popular to tie guest access to social media "credentials" (a bit of a joke to call 'em that), as there's usually some marketing hook behind that, and some networks really don't care WHO you are, like really.

But when you need to have some level of accountability on your guest network for whatever reason, using SMS-based authentication is not a bad option. You can front it with a WPA2 PSK or leave it open (everyone has different use cases, business drivers, and policy), but for answering the challenge of "make it easy on 'em but still let us have some bit of real, verifiable information to tie to a person", SMS-based auth is hard to beat. 

Years ago, I set off on a quest to find a wireless guest solution that was easy to support, easy for users to self-provision through, and that met our organizational requirement that guest sessions not just be tied to some bogus email account (the joey@asscrack.com thing is funny only so many times in a row) but to use 10-digit cell number as the "User ID". Though we were a Cisco WLAN back then, Cisco couldn't come close to fulfilling our simple requirements. Rumor was that Coloubris had a gateway that might work, but this was around when HP bought them and we literally couldn't find a human being walking the earth that could tell us anything meaningful about that gateway. Then there was Bluesocket (now ADTRAN). When I first approached them with my needs, they- like Cisco- couldn't do the self-provision SMS based thing. And like Cisco, they tried telling me that if I was willing to change my requirements, they could provide a solution. But when I pushed back, Bluesocket was willing to do a little bit of development and was able to provide something that really was ahead of it's time (we're talking like 2006 here):

Image

 

Sure, it's not so impressive today given that there are now lots of other guest portals that do SMS, but it still works very well, and is what we continue to use at my University because it does work well. Unfortunately, you have to invest in a full-blown Bluesocket appliance to get the functionality, but even that's not all bad.  The appliance works well as DHCP, firewalling, NAT, rate limiting, quarantine, MAC exception home for odd stuff that fits nowhere else and a handful of other guest-relevant functions, but also has (and is over-priced based on) lots of Bluesocket-specific WLAN stuff you'll never use if you don't have Bluesocket APs. And the appliance hardware is pretty dated. But... on balance, this has been dynamite- and is the only off-the-shelf 3rd party gateway kind of thing  that I'm aware of that you could bolt on to anyone's WLAN and make work if you didn't like what your native solution does for guest access (Sorry Cisco, you still don't get it as far as I can tell).

Then there's Meraki's version. The SMS auth groove is new to Meraki, and they still have some development to do on it before I'll sing it's praises too loudly, but it works well. I'm about to deploy it in a unique situation, and am pretty pleased with it's slick integration to Twilio as the SMS provider, and that I pay nothing extra to Meraki for exactly the SMS auth feature I want:

Image

 

No extra appliance needed, no additional fees, and it works so, so nicely with the rest of the magic in the Meraki cloud-managed wireless solution.  Where it is feature-thin, I can work around until they tighten it up (and I did make my wish last week, so I'm assuming the elves on Mount Meraki are almost done already). It only works with Twilio as the SMS service, but that's OK as Twilio is cheaper than cheap, and each texted password costs you a penny. (We use Message Media for the Bluesocket, is more expensive and less snappy in my experience).

Anyhow- If you've never gone the SMS path for guest access, I can vouch for it's effectiveness. Though I personally have no use for social media logins, I understand the appeal in certain markets (but would never use my own accounts for guest access- I'd rather go without). SMS is just another option to consider. Combine it with Personal PSK, and I think users and admins would both win, at least in my wireless world.

Pssst- If you have a Dashboard, Meraki is easy to try- and you get 25 free Twiio interactions so you can feel what the experience is like for texting the auto-generated password from your own easy-to-customize splash page before signing up for a Twilio account.

(I find Twilio almost as much fun to say as LaserFiche, by the way)

Wednesday, June 26, 2013

Bluesocket Lives, Evolves Into Managed WLAN Services Offering Under ADTRAN

Back in the day, Bluesocket was THE commercial captive portal for wireless networks. As WLAN in general gained broader acceptance and the market widened, Bluesocket also started providing access points and morphed their captive portal appliance into a controller (like the WLAN big guns were starting to use with thin APs.) As this was playing out, Cisco, Aruba, and at the time Meru, were largely dominating the market and Bluesocket  didn't generate a lot of buzz anymore. But- nor were they "over".

My Own Bluesocket History

I have covered Bluesocket through the years for my column in Network Computing, like when the company introduced their initial controller offering, and then their virtual controller option. Network Computing also covered ADTRAN's acquisition of Bluesocket in a piece done by colleague Steve Wexler.

On the personal front, I helped pre-ADTRAN Bluesocket develop a new guest access feature set that perfectly fit the needs of my University when our native Cisco wireless guest option was anemic by comparison. To this day we still  use the Bluesocket portal for guests, and though it may be a bit dated, it still has amazing administrative flexibility and works great for letting guests self-sponsor or be sponsored based on cell phone number as user name. (I made more than one plea for both Bluesocket and ADTRAN to spin this off as a separate product but they didn't bite.)

Bluesocket also donated controllers that I took to Haiti on a humanitarian IT visit  that serve as the functional heart of two networks on University of Haiti campuses that me and my fellow volunteers created.

You could say I have a bit of a soft spot for Bluesocket given my history with the company and their products.  But after the ADTRAN acquisition, the already small player in the WLAN space seemed to get even quieter. But wait...

With their latest announcement, ADTRAN's Bluesocket may be on to bigger things.

Following similar recent announcements by Meraki and PowerCloud, Bluesocket is throwing their hat into into the cloud-managed hosted WLAN ring.

ADTRAN calls their new offering ProCloud, and it hopes to empower channel partners, integrators, and service providers with the ability to provide hosted enterprise-grade WLAN offerings to customers built on established the Bluesocket vWLAN magic-in-the middle.

Also announced are ProStart (installation, service, and training for customers that can't do their own wireless for whatever reason)  and ProCare (customer-selectable maintenance support options.)

See ADTRAN's page on ProCloud,     and Business Wire press release.

Wireless is certainly a competitive landscape to begin with, and the expanding managed WLAN pot is starting to simmer with interesting players jumping in.  Though I get that ADTRAN and competitors see the hosted WLAN thing as an easy service-add for partners that don't yet really offer wireless, I hope those who follow this path all don't lose site of the fact that "easy wireless" doesn't  automatically equal "good wireless" and that proper design and policy are still the cornerstones of successful WLAN.

I wish ADTRAN and my old Bluesocket friends best of luck in their new venture, and I'm sure I'm not the only one who will be following how managed wireless services will impact our industry.

Wednesday, March 13, 2013

The FCC's Equipment Authorization Search is Captivating (If You're Into That Sort Of Thing)

Being an amateur radio operator and paperwork originator for a few licensed point-to-point network links, I occasionally find myself in the FCC's Universal Licensing System (ULS). Trolling around in the ULS can be kinda fun (when you're really, really bored) if you want to get information on different kinds of valid and expired licenses for everything from public safety to TV stations to IT-related transmitters.

For those of us in the Wi-Fi world, there is another FCC resource that holds a treasure trove of information on every piece of gear ever certified for use in the US. The EAS (Equipment Authorization Search) is your gateway to RF testing reports, internal and external photos of a particular access point, wireless router, etc, and basically the whole "how it came to be" story for each device.

An example- the BlueSocket model 1800v2  access point.

1. Go to the EAS front door.

2. In "Applicant Name" field, enter BlueSocket. (I've not had much luck with any of the other fields, even when I have the absolute specific information that should go in them.) You may want to adjust the "show ___ records at a time" field from the default of 10, to something like 50 or 100.

3. Click "Start Search" at bottom of page.

4. You'll be presented with a table of fairly obvious values- some will be one page, and some will span dozens of pages depending on manufacturer. For BlueSocket, there are only 32 entries and finding my 1800v2 in FCC ID column is pretty easy.

NOTE- Each piece of equipment has Summary or Detail available. Being geeky, we want Detail, as that is where the good stuff is. If multiple entries for same device, pick most current date.

5. You'll be rewarded with a table of contents like this:






OET Exhibits List

14 Matches found for FCC ID TIH-BSAP1800V2






























































































































View AttachmentExhibit TypeDate Submitted to FCCDisplay TypeDate Available
Ad Hoc letterCover Letter(s)03/17/2010pdf03/17/2010
Request for ConfidentialityCover Letter(s)03/17/2010pdf03/17/2010
PoACover Letter(s)03/17/2010pdf03/17/2010
External PhotosExternal Photos03/17/2010pdf03/17/2010
Label Location InfoID Label/Location Info03/17/2010pdf03/17/2010
Internal PhotosInternal Photos03/17/2010pdf03/17/2010
Monopole MPE 11anRF Exposure Info03/17/2010pdf03/17/2010
MPE PIFA 11anRF Exposure Info03/17/2010pdf03/17/2010
Monopole Test ReportTest Report03/17/2010pdf03/17/2010
Monopole Test Report 11anTest Report03/17/2010pdf03/17/2010
PIFA Test ReportTest Report03/17/2010pdf03/17/2010
Monopole Test Setup PhotosTest Setup Photos03/17/2010pdf03/17/2010
PIFA TEst Setup PhotosTest Setup Photos03/17/2010pdf03/17/2010
USer ManualUsers Manual03/17/2010pdf03/17/2010

And from there, you can see more than you ever imagined you could care about a wireless device. The Internal Photos and Test Setup Photos tend to be the most interesting, at least to me. Enjoy!