Recommendations for BYOD Wireless

Hey Everyone,I am looking for the best/easiest way to incorporate a BYOD wireless network.This wireless network is solely for student and teacher home/non domain devices. A separate network will be setup for outside guest users. We run Active Directory here so I am thinking radius is the way to go. We have a Cisco WLC 5508 Controller with 3602 APs.I setup a network based on the directions in this link:https://networklessons.com/wireless/peap-and-eap-tls-on-server-2008-and-cisco-wlc/but found it somewhat cumbersome to use when connecting with an iOS device or Android device because of the certificates. What are my other options that might make the process easier? Is there a way to securly set this up without certificates?If certificates are needed will a certificate from a public CA make thejoin process easier for iOS users (we have a...
This topic first appeared in the Spiceworks Community

Hard to say, we all like different flavors.
If you have had a good experence with say your old Epson like I have, then that's the flavor that I will most likely stick with.

Similar Messages

  • Recommendations for best wireless multifunction printer for Macs $100?

    Anyone with recommendations for best wireless MFP for Macs <$100.  Would like to be able to print photos too.  Need EASY set up.  Prefer two paper cartridges.  Would like to be able to print from iPad, iPhone, Laptop and Mac.  Also need to fax.  
    Oh...and need to buy it tomorrow.  Help appreciated.

    Hard to say, we all like different flavors.
    If you have had a good experence with say your old Epson like I have, then that's the flavor that I will most likely stick with.

  • Recommendations for a wireless setup

    I have a Mac Pro, but it doesn't have any Bluetooth or wireless access. I've been thinking about remedying this so I can use the laptop in the other room or on the couch or... well, y'know. Freedom.
    The Mac Pro is attached to the internet via cable-modem setup.
    What would folks recommend to make the Mac Pro a wireless server for the laptop?
    Tony

    After the keynote today, I would recommend purchasing the new Time Capsule which is also an Airport Base station as well as a 500 GB or 1 TB NAS and wireless networking router and storage. That Time Capsule and its wireless networking and storage is so much more necessary than a cute MBA.!
    With that, you would hook it up to your cable modem and then ethernet to your MAC PRO that does not have its own wireless. Then you would have a new wireless and wired network which would allow your computers to talk to each other and the internet.
    Message was edited by: Rhyd

  • Your best recommend for a wireless headset/bluetooth for Skype

    Anyone found something that delivers?
    Thanks

    The Motorola HT820 works great. It is one of my all-time best purchases. http://direct.motorola.com/ens/BTStereoHSWebProductHome.asp?country=USA&language=ENS
    It works with my MB Pro, in Skype. It works with my iPod, using the iMuffs Bluetooth transceiver, from Wi-Gear. Naturally, it works with my Motorola phone. It also comes with a cable for use as a wired headset, so it works on the airplane, in place of the cheesy headphones that the airlines provide. That cable also allows you to use the headset as a wired headset for the Mac, while on the airplane. However, the cable option is only for headphones, so the mic does not work with the wired connection.
    You start by setting up a new Bluetooth headset, from your Bluetooth preferences panel and add it to your favorites. You only have to do this once. Note: You do NOT have to select the HT820 as your system sound device. You only need to do that in Skype.
    To use it in Skype, you make sure that the headset is off. Then, hold the power button (left side) down for about 8 seconds (till the blue light starts pulsing) to put it into "find-me" mode. Then, in the Skype preferences panel, select the HT820 for both the input and output. In a moment, you will be prompted for the security code. Type "0000" and hit "Return". You will hear a tone in the headset and the blue light stops pulsing. You are connected.
    To save battery on the headset, it is a good idea to go back and select the default input and output, when you are through using the headset.
    When you want to go back to using the HT820 on your cell phone, you will probably have to tell your cell phone to re-connect to the HT820. For me, this step requires only that the HT820 is turned on.
    Motorola now makes a much smaller version of this headset, as well. I have seen it, but I have not tried it out. The model is MOTOROKR S9. I have seen it at the Cingular/AT&T store and at Radio Shack. As I understand, the only difference is that it uses "bud" style speakers on the headset, instead of over-the-ear speakers and the Bluetooth electronics and battery are integrated in the headband, behind the neck, instead of in the speaker housings.
    I highly recommend the Motorola HT820. If you have an iPod with a dock connector, then I also recommend the iMuffs Bluetooth transceiver (MA110 - http://www.wi-gear.com/products/imuffs/ma110.php), to pair with the HT820, so you can go totally wireless. It is much smaller than the transceiver from Ten Technology. However, the Wi-Gear headset had problems and I had to return them.
    Good luck.
    17" MacBook Pro   Mac OS X (10.4.10)  

  • Recommendation for home wireless service in So Cal?

    I need to purchase wireless internet service for new home in Southern California.  I currently use ATT DSL.  After briefly switching to ATT Uverse on advice of ATT customer service when I wanted to upgrade to faster service and old airport apparently stopped working correctly, it was a disaster. (There is a separate conversation on the Apple Forum about the experience.) After much hassle I switched back to ATT DSL and bought a new airport.  Things have worked fine since, although my son still thinks it takes too long to download movies. We are a Big Mac household - iPad, iPad Mini, iPhone 5, two MacBook Airs, iTouch - and an oddball Droid phone. New home currently uses Verizon phone and internet service through Time Warner (I'm choosing to go with Direct TV). 
    So my questions - Does Verizon wireless internet service work well with a household full of Macs? I prefer to use an Airport. Is there a modem and/or router that Verizon uses that is good or bad? Fios or DSL? (I had a horrible experience with the modem/router with the Uverse disaster.) Has the modem/router/Mac connection improved with Uverse? Or should I just stick with what I know works for me - ATT DSL even though its not the fastest speed?
    I'm not technologically sophisticated (this is probably obvious), so would appreciate replies in plain English.  Thanks!

    DSL is yesterday's technology:
    BEST is Verizon FIOS (or ATT Uverse) depending if either has fiberoptic cable to your door (call each to find out; they will know from your address).  Be careful, ATT is now calling their non-fiberoptic service Uverse; so ask about fiberoptic!
    I use Time-Warner Internet at its fastest consumer speed.  I am currently uploading a 16GB file to an associate in UK and it will take 18 hours (remember upload is always much slower than download).  I think my service is 20 or 30 down and 1 up; at about $40/month.  I have multiple routers to connect it to many Macs, iPhones, AppleTVs, home entertainment systems, etc.
    Stay away from satellite; it is ONLY for internet service to the boonies...
    FYI: I use DirecTV (and a roof-top antenna) for TV and T-Mobile for both VoIP at home and iPhone 5. Everyone HATES the Time-Warner cable service due to their monopoly in So. Cal.
    T-Mobile has best monthly rates in So. Cal for iPhone 5 AND you can purchase additional data for tethering (using your iPhone as a WiFi HotSpot or with BlueTooth, as I use it at an off-line office that has no internet service).  AND you can talk and internet at the SAME TIME, unlike Verizon which on the iPhone is one or the other.
    Soon T-Mobile will implement their UMA/WiFi Calling feature for the iPhone; already implemented on Blackberry, Android and other phones.  This allows FULL T-Mobile talk and text coverage ANYWHERE in the world where you have access to WiFi.  I use it with my Blackberry on every trip to London or at my girlfriend's house in the hills above Santa Cruz by swapping the SIMM card, now with micro-SIMM adapter.

  • Recommendations for good wireless repeaters

    I have a Linksys WRT610N router.  It works fine.  However, I have it at one end of my house, because that's where the phone line comes into the house and I've got DSL.  Therefore, the wireless signal gets weak towards the other end of the house, especially for 802.11g.  Today I learned that there's a thing called wireless repeaters.  This sounds like a great idea, and may help me with being able to get the G band to the rest of the house.  What makes/models of wireless repeaters would work best with my WRT610N router, especially for 802.11g?

    Check this article. HTH

  • Seeking advice/recommendations on a wireless networked camera for personal home security

    Greetings forum! I am in need of advice/recommendations for a medium quality (less than $200) camera that I can set to record via my Airport Extreme network. This is mainly for home security, to watch the main entry point of the domicile. Alerts and/or viewing live stream remotely needed; I am considering the following model and welcome any feedback from those with knowledge/experience. Has anyone used the following and if so, how would you rate such things as ease of use, compatibility, ease of set-up, etc.
    Linksys - Wireless-N Internet Home Monitoring Camera
    Model: WVC80N   |   SKU: 9506652
    Thanks in advance.

    I answered the questions that were asked. "What will be, will be"
    If you want to talk about security in relation to malware in general:
    While there are no known viruses that attack Mac OS X at the present time, it is possible for spyware to get onto your Mac.
    So I go to lenghts to protect my user. A hosed system can be replaced but a compromised user folder is compromised forever. Along with all your important data like bank records, credit cards, ... I.e. your "identity" stolen.
    The best way to avoid that is by using your built-in firewall which is industrial strength and/or a hard wired router, downloading only from "trusted" sites, installing all security updates and being careful about what you give administrative power to. It is also recommended to run day to day tasks from a non-admin account.
    Don't use Limewire or any other P2P service to download your software, get it from reputable sources. In addition, always keep at least your users backed up, preferably a clone of your entire system on a separate disk. And put your sensitive passwords, bank accounts, credit card numbers in a "secure note" in a new keychain or in an encrypted folder.
    If and when a Mac virus does appear it will be headline news and you can download the AV software then. If you feel you have to run an AV program I'd suggest ClamXav a mac friendly freeware app that is very stable with OS X. It will check for known virus signatures at any rate.
    Hope this helps.
    -mj
    Message was edited by: macjack

  • Recommendations for Wireless Card?

    I am thinking of getting a new wireless card for my laptop because my wireless connection is very weak at home. We all use a router, however my sister in the room next to me has flawless connection on her Windows laptop. It was suggested to me to look into getting a networking card that matches my Linksys router for stronger wireless connection, but I was hoping for some more advice. I do not know where to look first or how to start searching.

    Some WiFi issues are known to be fixed simply by upgrading to 10.4.11. To upgrade to 10.4.11, follow my FAQ*:
    http://www.macmaps.com/upgradefaq.html
    Others may be fixed by following my FAQ*:
    http://www.macmaps.com/WIFI1048.html
    - * Links to my pages may give me compensation.

  • Recommendations for wireless mono laser printer compatible with OS 10.6.7?

    I am looking for a wireless mono laser printer compatible with Snow Leopard OS10.6.7. This is to be shared by 4 Macs in a small office. We are connected to the internet via DSL modem (2 wired, 2 wireless), and communicate with the Bonjour network. We have a Time Capsule, but are not using that for a server at this time. Any suggestions would be much appreciated.

    How long is a piece of string?
    There's a myriad of compatible printers that meet your given criteria, but that's mostly because you haven't been very specific about your needs... 'compatible with 10.6.7' is just one of many considerations.
    For a start, what's your budget? That may narrow the field considerably.
    Then what's your expected print run? If you're printing tens of thousands of pages per month your needs are way different from someone printing one or two pages a day (or week!). There's a reason why printer manufacturers list a 'duty cycle' on their spec sheets - it tells you what they think it's capable of handling so that you don't under or over-spec your printer.
    And 'duty cycle' is way more than just the speed per page - it's how quickly the components wear out and need replacing. If you print 10,000 pages per month then the manufacturer has to build using higher-grade components that can run for hundreds of thousands of pages before servicing/replacing (and I'm talking here of things like fusers, belts, and the like, not consumables like ink and toner).
    On the other hand there's no point in the manufacturer using high-grade components that can handle 1,000,000 cycles in a printer that's printing 100 pages a month - the printer, your computer and probably even you would be obsolete way before those components wore out.
    Then you need to consider input capacity. If you're printing a lot you'd probably appreciate high-capacity input bins (so you don't have to walk over to the printer every hour to refill the tray).
    What about duplex? Do you want to be able to print double-sided (either now or in the future)?
    Since this is a small office, do you want other multi-function features such as fax/scan/copier?
    These questions (and probably more) will go a long way to identifying the 'right' printer for your needs. As it stands, though, there really isn't enough data to offer any advice.

  • Looking for a wireless A4, edge to edge mac compatible printer

    Looking for a wireless A4, edge to edge mac compatible printer? can anyone reccomend something which really works well with Mac?
    I would get an A3 but I am guessing that A4 edge to edge would be better?
    I need edge to edge as I design A4 brochures and I need to make 100% size mock ups.
    thanks in advance

    Hello gumbsali,
    Most or our current model printers are compatible with the Mac OS X Mountain Lion operating system; so we can provide you with the best recommendation, please reply with the following information:
      1.  Will you need to have faxing ability?
      2.  What is the largest size paper you will need to print?
      3.  Will you need the ability to scan 35 mm slides or film?
      4.  Will you need the ability to scan?
      5.  Is there a specific price range you are looking to stay within?
      6.  Will you need the option of using the printer wirelessly?
      7.  How many pages a month do you estimate you will be printing?
      8.  What is the heaviest weight (in lbs) of paper (or cardstock) that you plan on using in the printer?
      9.  Will you need the ability to have the printer interface with an iPad, iPhone or Android phone?
    10.  Will you need the ability to print photos and images directly from a memory card?
    If this is a time-sensitive matter, additional support options are available at Contact Us.
    Did this answer your question? Please click the Accept as Solution button so that others may find the answer as well.

  • Need a printer recommendation for a small office

    hey folks, hoping someone might be able to suggest a recommendation for our business. We’ve had an OkiData color laser printer that’s lasted over 6 years but it’s been giving us some trouble over the last year and yesterday it stopped printing with an error we can’t resolve. Would have to bring a tech in to fix and we’d basically already decided that once this thing bit the dust we’d move on to something else. It’s time.
    We are looking for something in the $200-$400 range, would consider going a little higher if it was clearly worth it. We want something that connects wireless, prints quickly and reliably in Snow Leopard over an Airport Extreme network, decent color print quality is important but doesn’t have to be photo quality (we have an HP Photosmart for that kind of stuff), and it needs to have reasonable printing cost per page. We don’t print a tremendous amount of stuff, but we probably go through 100-200 pages a day and it adds up.
    Was looking at the HP OfficeJet Pro 8500 wireless and that looks like a nice unit except half the people who buy one hate it. Looks like HP quality control is lacking and if you get a good unit, great, but the odds are good you’ll get a lousy one.
    Also looking at the Brother HL-3070CW, but reviews say it has a high consumable cost.
    Basically, the more I look into this the more I head spins and now I've got myself wrapped around the axle and don’t know what to do.
    Any suggestions would be GREATLY appreciated.

    I would steer clear of the 500 express. Since you seem to be new to cisco products, I would use the opportunity and buy what most of your potential customers already have. Get yourself a pix/asa and a 2900 series switch as first poster suggested. If you are interested in certifications, you will need to learn the command line interface. The 500 express will do you no good as it is all gui. This is only my opinion of course. Oh, and did I see not expensive and cisco in the same sentence. :)

  • Ask the Expert: Integrating Cisco Identity Service Engine (ISE) 1.2 for BYOD

    With Eric Yu and Todd Pula 
    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions  about integrating Cisco ISE 1.2 for BYOD with experts Eric Yu and Todd Pula.
    Cisco Bring Your Own Device (BYOD) is an end-to-end architecture that orchestrates the integration of Cisco's mobile and security architectures to various third-party components. The session takes a deep dive into the available tools and methodologies for troubleshooting the Cisco BYOD solution to identify root causes for problems that stem from mobile device manager integration, Microsoft Active Directory and certificate authority services, and Cisco Enterprise Mobility integration to the Cisco Identity Services Engine (ISE). 
    Todd and Eric recently delivered a technical workshop that helps network designers and network engineers understand integration of the various Cisco BYOD components by taking a deep dive to analyze best practice configurations and time-saving troubleshooting methodologies. The content consisted of common troubleshooting scenarios in which TAC engineers help customers address operational challenges as seen in real Cisco BYOD deployments.
    Eric Yu is a technical leader at Cisco responsible for supporting our leading-edge borderless network solutions. He has 10 years of experience in the telecommunications industry designing data and voice networks. Previous to his current role, he worked as a network consulting engineer for Cisco Advance Services, responsible for designing and implementing Cisco Unified Communications for Fortune 500 enterprises. Before joining Cisco, he worked at Verizon Business as an integration engineer responsible for developing a managed services solution for Cisco Unified Communications. Eric holds CCIE certification in routing and switching no. 14590 and has two patents pending related to Cisco's medianet.   
    Todd Pula is a member of the TAC Security and NMS Technical Leadership team supporting the ISE and intrusion prevention system (IPS) product lines. Todd has 15 years of experience in the networking and information security industries, with 6 years of experience working in Cisco's TAC organization. Previous to his current role, Todd was a TAC team lead providing focused technical support on Cisco's wide array of VPN products. Before joining Cisco, he worked at Stanley Black & Decker as a network engineer responsible for the design, configuration, and support of an expansive global network infrastructure. Todd holds his CCIE in routing and switching no. 19383 and an MS degree in IT from Capella University.
    Remember to use the rating system to let Eric and Todd know if you have received an adequate response.
    Because of the volume expected during this event, Eric and Todd might not be able to answer every question. Remember that you can continue the conversation in the Security community, subcommunity AAA, Identity and NAC, shortly after the event. This event lasts through November 15, 2013. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

    Hi Antonio,
    Many great questions to start this series.  For the situation that you are observing with your FlexConnect configuration, is the problem 100% reproducible or is it intermittent?  Does the problem happen for one WLAN but not another?  As it stands today, the CoA-Ack needs to be initiated by the management interface.  This limitation is documented in bug CSCuj42870.  I have provided a link for your reference below.  If the problem happens 100% of the time, the two configuration areas that I would check first include:
    On the WLC, navigate to Security > RADIUS > Authentication.  Click on the server index number for the associated ISE node.  On the edit screen, verify that the Support for RFC 3576 option is enabled.
    On the WLC, navigate to the WLANs tab and click on the WLAN ID for the WLAN in question.  On the edit screen, navigate to Security > AAA and make sure the Radius Server Overwrite interface is unchecked.  When this option is checked, the WLC will attemp to send client authentication requests and the CoA-Ack/Nak via the dynamic interface assigned to the WLAN vs. the management interface.  Because of the below referenced bug, all RADIUS packets except the CoA-Ack/Nak will actually be transmitted via the dynamic interface.  As a general rule of thumb, if using the Radius NAC option on a WLAN, you should not configure the Radius Server Overwrite interface feature.
    Bug Info:  https://tools.cisco.com/bugsearch/bug/CSCuj42870
    For your second question, you raise a very valid point which I am going to turn into a documentation enhancement request.  We don't currently have a document that lists the possible supplicant provisioning wizard errors that may be encountered.  Please feel free to post specific errors that you have questions about in this chat and we will try to get you answers.  For most Android devices, the wizard log file can be found at /sdcards/downloads/spw.log.
    As for product roadmap questions, we won't be able to discuss this here due to NDA.  Both are popular asks from the field so it will be interesting to see what the product marketing team comes up with for the next iterration of ISE.
    Related Info:
    Wireless BYOD for FlexConnect Deployment Guide

  • Best Practice for FlexConnect Wireless roaming in MediaNet environment?

    Hello!
    Current Cisco best practice recommendations for enterprise MediaNet design, specify that VLANs be local to a switch / switch stack (i.e., to limit the scope of spanning-tree). 
    In the wireless world, this causes problems if you want users while roaming to keep real-time applications up and running.  Every time they connect to a new AP on a different VLAN, then they will need to get a new IP address, which interrupts real-time apps. 
    So...best practice for LAN users causes real problems for wireless users.
    I thought I'd post here in case there's a best practice for implementing wireless roaming in a routed environment that we might have missed so far!
    We have a failover pair of FlexConnect 7510s, btw, configured for local switching for Internal users, and central switching with an anchor controller on the DMZ for Guest users.
    Thanks,
    Deb

    Thanks for your replies, Stephen and JSnyder.
    The situation here is that the original design engineer is no longer here, and the original design was not MediaNet-friendly, in that it had a very few /20 subnets bridged over entire large sites. 
    These several large sites (with a few hundred wireless users per site), are connected to an HQ location (where the 7510s in failover mode are installed) via 1G ethernet hand-offs (MPLS at the WAN provider).  The 7510s are new, and are replacing older contollers at the HQ location. 
    The internal employee wireless users use resources both local to their site, as well as centralized resources.  There are at least as many Guest wireless users per site as there are internal employee users, and the service to them consists of Internet traffic only.  (When moved to the 7510s, their traffic will continue to be centrally switched and carried to an anchor controller in the DMZ.) 
    (1) So, going local mode seems impractical due to the sheer number of users whose traffic bound for their local site would be traversing the WAN twice.  Too much bandwidth would be used.  So, that implies the need to use Flex / HREAP mode instead.
    (2) However, re-designing each site's IP environment for MediaNet would suggest to go routed to the closet.  However, this breaks seamless roaming for users....
    So, this conundrum is why I thought I'd post here, and see if there was some other cool / nifty solution I wasn't yet aware of. 
    The only other (possibly friendly to both needs) solution I'd thought of was to GRE tunnel a subnet from each closet to the collapsed Core / Disti switch at each site.  Unfortunately, GRE tunnels are not supported in the rev of IOS on the present equipment, and so it isn't possible to try this idea.
    Another "blue sky" idea I had (not for this customer, but possibly elsewhere in the future), is to use LAN switches such as 3850s that have WLC functionality built-in.  I haven't yet worked with the WLC s/w available on those, but I was thinking it looks like they could be put into a mobility group, and L3 user roaming between them might then work.  Do you happen to know if this might be a workable solution to the overall big-picture problem? 
    Thanks again for taking the time and trouble to reply!
    Deb

  • May a recent i Mac be installed as the host computer for a wireless community

    May a recent iMac be installed as the Host Computer for a wireless community. The present situation is; the iMac is subservient to the e Mac. I do not want to have two computers. I have one guest on the wireless.

    There are some wireless external hard drives that can be used with the iPad.
    The Kingston Wi-Drive, which costs $50 for the 16 Gigabyte, and then $30 more for every 16 gigs more. It works by you turning it on and then accessing the files on it from an app that you download on your iDevice. You can access music, movies, and other stuff. No connections or anything, it works like a WiFi connection, you connect to it from the setting on the iPad under wireless networks.
    Then there is the Seagate GoFlex, which some would recommend over the Wi-Drive. But this one costs $199 and had 500 Gigabytes of storage. It works the sameway as the Kingston: no wires, runs over its wireless connection. You can actually fit up to 300 HD movies on it.
    Another option:
    Expand your iPad's storage capacity with HyperDrive
    http://www.macworld.com/article/1153935/hyperdrive.html
    On the road with a camera, an iPad, and a Hyperdrive
    http://www.macworld.com/article/1160231/ipadhyperdrive.html
    Mac - How to Move the iPhone & iPad iTunes Backup folder to an External Hard Drive
    http://osxdaily.com/2011/03/05/how-to-move-the-iphoneipad-itunes-backup-folder-t o-an-external-hard-drive/
    Windows - Change iPad default backup location
    http://apple-ipad-tablet-help.blogspot.com/2010/07/change-ipad-default-backup-lo cation.html
    Windows - Changing IPhone and iPad backup location
    http://goodstuff2share.wordpress.com/2011/05/22/changing-iphone-and-ipad-backup- location/
     Cheers, Tom

  • Recommendations for a SILENT laptop?

    Hi,
    I don't know if I'm in the right place to ask something like that, but I'm planing to buy a new laptop.  The actual one's is in a bad state: hardware problems, overheating (even with frequency scaling), ultra-noisy fan, etc.  This is specially that noisy fan than that makes me crazy.
    I'm not looking for high performance: I'm just using it for web-browsing, listening music, watching movies, etc.
    Here are some criteria:
    - It has to be SILENT & robust !!!
    - Linux (and specially arch) hardware compatibility
    - Wireless would be a plus
    - Consequent autonomy & battery life
    - Dvd reader
    - Not so small screen
    - And finally, an affordable price!
    So, did you have some solid recommendations for me?
    Thanks in advance,
    Vomix.
    Last edited by vomix (2007-12-09 08:58:01)

    - It has to be SILENT & robust !!!
    Every new laptop with core 2 duo, and a decent GPU should meet that criteria. Gone are the times of P4 burning holes in the chassis. Of course, there are exceptions, but those laptops are generally running high end GPUs, like the "Asus G1s" do.
    - Linux (and specially arch) hardware compatibility
    Arch has the best chance of working, out of *any* distro if you ask me. That's has been my experience any way.
    - Wireless would be a plus
    99.9 of all have wlan built in nowadays.
    - Consequent autonomy & battery life
    Again, core 2 duo are really efficient. Just avoid 7200 rpm drives and hungry GPUs. Most laptops already have 5200 rpm drives unless it'a a gaming laptop anyway.
    - Dvd reader
    You have a really funny idea of what a brand new 2007 laptop might have If you manage to find one without a DVD reader, then congratulations, you might just as well have won the lottery.
    - Not so small screen
    I recently bought a 14.1" laptop, and the screen size was too small for many hours in front of it. Belive it or not, a 15.4" was way more comfortable, even though in reality the difference shouldn't be that large. What you should worry about, is the screen quality. Really. Some laptops have really *crappy* viewing angles, spread of brightness and light leakage. Be careful, and read reviews first.
    This is a good site where you can sort by rating in different criterias;
    http://www.notebookcheck.net/
    Good luck.

Maybe you are looking for