paulfinlay

You need to read the physical errors in conjunction with the total frames received. Is it possible the AP with higher physical errors is also processing more traffic?

three amber lights mean the AP hasn't got a connection to the controller. Watch the AP and if the lights flash off and back on every 30 secs it hasn't got an IP addresses, if they flash every 60 secs it's got an address but can't contact the controller. Try patching a laptop into an APs switchport and see if you get an IP and if you can ping the controller.

You'll need to implement either 802.1X authentication or a web portal and move away from have a generic passphrase for wireless access. You can then authenticate users based on unique credentials and either permit or deny network access.

I think ours have all had line of sight using Radwin 2000s, so I don't know about NLOS.

Radwin is good kit, we've used it on a number of projects without any issues.

The longer, and more random, the key the better, but generally 20 ascii characters is enough to make it very difficult to crack. If you really need security you want to look at using 802.1x which ultimately gives each wireless client a dynamic unique encryption key per session.

The APs act as RADIUS clients directly so continue to function. But the following services are lost Network configuration changes will not take effect Usage statistics will become out of date Channel spreading and other optimizations will not run The Rogue AP list will not update If you are using Meraki-hosted RADIUS for authentication and Controller Disconnection Behavior is set to "Retricted", new clients will not be able to authenticate. By default, all new clients are denied. You can also select for all new clients to be allowed (Open). Clients who have already authenticated continue to function normally. Newly associated clients will not see Meraki-hosted splash pages. Clients will be given access without seeing the splash page. (depends on settings on Configure -> Access Control -> Controller Disconnection Behavior) If you have Meraki Billing enabled, new clients will not be able to purchase network access.

try wifigear.co.uk

It'll also prompt again if the AD password changes.

There's a bug in the XP that stops it from updating the machine password over wifi, it needs to be plugged into a wired connection. This was fixed in Win7. KB article below http://support.microsoft.com/kb/904943?wa=wsignin1.0

Not familiar with Meru, but with other vendors you would need to tell the APs across the routed link what the IP of the controller is, either statically, via a DHCP option or with DNS.

Aerohive partner with AirWatch to provide MDM/NAC

Just for your information. Those Cisco APs are dual band (they provide support for both 802.11b/g and 802.11a) but because only one antenna has been installed you will only get coverage on the 2.4Ghz band, you are also loosing out on the benefits of antenna diversity (the AP is meant to have two antennas per band to provide better error correction and therefore throughput). With the likely wireless utilisation in a primary school these things probably don't really matter, but it's a bit of a waste of some very expensive enterprise grade access points.

Find out what kind of survey they are going to do. A full survey with professional surveying tools, i.e. Airmagnet/Ekahau alongside spectrum analysis could well take 1-2 days per primary school plus report writing. That's the sort of survey worth paying for as it will pretty much guarantee how your final wireless deployment will look RF wise. You can also use the data in future to run "what if" scenarios of planned AP location/power/channel changes. If it's just somebody walking around taking power readings on a laptop, you'll get that for free.

+1 for ubiquiti nanostation. 300m will be no problem providing you have line of sight. You should get somewhere in the region of 100Mbps of actual data throughput.