Client Management

Because of the straightforward yet secure architecture that Griffith adopted, client management has been greatly simplified. By avoiding the use of specific Extensible Authentication Protocol (EAP) mechanisms or encryption standards and adopting a secure VPN overlay, the WLAN can support many different client types. No particular configuration is necessary. Each device must be capable of running the university's Vlink VPN software client, which is available for Windows, Macintosh (Mac OS X), and Linux operating systems. Limited support is also provided for PalmOS and Windows Mobile devices through a third-party client utility. Because the university does not provide this software to users, it must be purchased by those who want to use their PDAs wirelessly.

Additionally, the network and communications services team provides support for several particular wireless cards and drivers, including those produced by Linksys, Apple, and Dell. Other nonsupported clients can just as easily connect, as long as they can successfully use the Vlink VPN software, but the university limits its official support to these clients. University computer stores sell Linksys wireless cards to students who want to wirelessly enable their laptops.

The need for extensive client management is therefore avoided. User support and management are handled through the solution's service portal, Wireless@Griffith, an internally developed intranet web portal that provides extensive instructions, training material, and links to the various software clients.

Furthermore, the use of a "walled garden" ensures that users are automatically provided with access to the VPN software clients. This setup avoids unnecessary support calls and helps reduce the operational overhead borne by the network and communications services team. Any client who associates to the WLAN and launches a browser is automatically redirected to the service portal, where he download the VPN client. No further connectivity is possible, and the user must install and use the client for further access.