paulfinlay

You need to read the physical errors in conjunction with the total frames received. Is it possible the AP with higher physical errors is also processing more traffic?

three amber lights mean the AP hasn't got a connection to the controller. Watch the AP and if the lights flash off and back on every 30 secs it hasn't got an IP addresses, if they flash every 60 secs it's got an address but can't contact the controller. Try patching a laptop into an APs switchport and see if you get an IP and if you can ping the controller.

You'll need to implement either 802.1X authentication or a web portal and move away from have a generic passphrase for wireless access. You can then authenticate users based on unique credentials and either permit or deny network access.

I think ours have all had line of sight using Radwin 2000s, so I don't know about NLOS.

Radwin is good kit, we've used it on a number of projects without any issues.

The longer, and more random, the key the better, but generally 20 ascii characters is enough to make it very difficult to crack. If you really need security you want to look at using 802.1x which ultimately gives each wireless client a dynamic unique encryption key per session.

The APs act as RADIUS clients directly so continue to function. But the following services are lost Network configuration changes will not take effect Usage statistics will become out of date Channel spreading and other optimizations will not run The Rogue AP list will not update If you are using Meraki-hosted RADIUS for authentication and Controller Disconnection Behavior is set to "Retricted", new clients will not be able to authenticate. By default, all new clients are denied. You can also select for all new clients to be allowed (Open). Clients who have already authenticated continue to function normally. Newly associated clients will not see Meraki-hosted splash pages. Clients will be given access without seeing the splash page. (depends on settings on Configure -> Access Control -> Controller Disconnection Behavior) If you have Meraki Billing enabled, new clients will not be able to purchase network access.

try wifigear.co.uk

It'll also prompt again if the AD password changes.

There's a bug in the XP that stops it from updating the machine password over wifi, it needs to be plugged into a wired connection. This was fixed in Win7. KB article below http://support.microsoft.com/kb/904943?wa=wsignin1.0

Not familiar with Meru, but with other vendors you would need to tell the APs across the routed link what the IP of the controller is, either statically, via a DHCP option or with DNS.

Aerohive partner with AirWatch to provide MDM/NAC

Just for your information. Those Cisco APs are dual band (they provide support for both 802.11b/g and 802.11a) but because only one antenna has been installed you will only get coverage on the 2.4Ghz band, you are also loosing out on the benefits of antenna diversity (the AP is meant to have two antennas per band to provide better error correction and therefore throughput). With the likely wireless utilisation in a primary school these things probably don't really matter, but it's a bit of a waste of some very expensive enterprise grade access points.

Find out what kind of survey they are going to do. A full survey with professional surveying tools, i.e. Airmagnet/Ekahau alongside spectrum analysis could well take 1-2 days per primary school plus report writing. That's the sort of survey worth paying for as it will pretty much guarantee how your final wireless deployment will look RF wise. You can also use the data in future to run "what if" scenarios of planned AP location/power/channel changes. If it's just somebody walking around taking power readings on a laptop, you'll get that for free.

+1 for ubiquiti nanostation. 300m will be no problem providing you have line of sight. You should get somewhere in the region of 100Mbps of actual data throughput.

The setting that controls wireless authentication before the ctrl-alt-del screen is "Authenticate as computer when computer information is available" - make sure that's checked. If you are doing 802.1x authentication you need to ensure the RADIUS server is authenticating Domain Computers (or a subset of this group)

strange, i'd cable into the homehub and test with and without the MR12. You'll then know if it's a network issue or an RF issue.

is there a chance your wireless device is roaming between the two access points?

you may have an IP conflict, check that the meraki's default IP address isn't the same as the homehub.

do you know if the video was being multicasted? in which case there's only a single stream of traffic coming from the AP and all devices receive this single stream only requires about 3-5Mbps. I'd be very surprised if a standard unifi AP was capable of 30 HD unicast streams.

I have to disagree, it's a wire speed non-blocking switch. It has 104Gbps switching capacity on the 48 port model and 56Gbps on the 24 port - so no load issue there. It supports static routing at 13.3Mpps, VLANs, Jumbo Frames,QoS, IPv6, SNMP, STP amongst others, it's a fine fit for a simple network. Agreed it's not a core switch, but the OP is looking for edge switches to provide PoE to access points.

An HP 1910G will be fine. The reason it's cheaper is that it is only web GUI managed and, as stated, has no 10Gb option. A 2910al would give you the option to add a 10Gb module at a later date so is a little more future proofed.

second vote for jperf

Your observation is correct, it only works in the downstream direction. The argument being that 80% of your traffic is going to be to the client. When designing wireless network it's important to realise that you have to consider the client's transmit power not just the access point.

What OS do your "dumb" terminals run? Do they support 802.1x authentication? The only ways to secure a 802.1x for corporate assets only is to deploy PEAP with Machine Authentication (requires everything to be in the domain) - otherwise anyone with a valid AD account will be able to connect (server certificate validation is an optional component) Or deploy a full EAP-TLS mutual authentication with certificates