Secure Wireless Overview

An authenticated, encrypted wireless network (SSID:  WSU-Secure) is being made available across campus. To access this network, a device must support WPA2 Enterprise encryption.  This encryption uses the WSU Campus username and password in place of a pre-shared key (PSK), which is seen in many home networks.

There are several components to the secure, authenticated wireless system:

  • The user device, along with a software agent known as the “supplicant”.
  • The access point.  No user traffic passes the AP until authentication is successful.
  • The authenticator. This device compares information gathered by the supplicant with a RADIUS server.
  • The RADIUS server.  In our implementation, the RADIUS server is joined to our production AD directory for authentication, and our production LDAP server for provisioning (i.e. is the user Staff | Faculty | Student | Other).

Please note: the software used on the client’s device is part of the operating system.  We do not install it.  We do configure the supplicant to provide access to WSU-Secure.

Over 30,000 unique devices currently connect to the campus wireless network.  The breakdown among operating systems is approximately:  50% Apple IOS, 30% Android, 10% Windows 7/8, 7% Mac OS.