Re: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Kevin Miller
Mearl Danner wrote: Samford is in the process of establishing policies for wireless access on campus. We have Airespace/Cisco 4100 controllers and are in the process of deploying model 1100 APs in various areas around campus. Using this hardware we are able to establish different default ACL'

Re: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Philippe Hanset
I forgot: In our still gigantic layer2 domain (about 1000 AP in one subnet with most of the users in it...up to 1600 concurrents these days) we have isolated the management of the AP to another subnet. This reduces a lot of the broadcasting from IAPP. By implementing multiple SSIDs, it helps folks

Re: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Philippe Hanset
Mearl, The stage: #regular open Wireless #Netreg (web based), #automatic patching and distribution of antivirus (22 minutes to register!) #802.1x for WLAN #University people, visitors Problems: #How to distribute material on a closed network? (first time join...need an open network) #how to all

Re: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Lee Badman
Well put, Dave. The big news right now for Syracuse, as Dave mentioned, is the ability to easily sponsor guests and allow Jane Q. Public to access our growing wireless network. It will be interesting to see how our traffic patterns change with wireless being opened up to a larger population, and w

RE: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Zeller, Tom S
are. Tom Zeller Indiana University [EMAIL PROTECTED] -Original Message- From: Dave Molta [mailto:[EMAIL PROTECTED] Sent: Thursday, September 15, 2005 10:45 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Guest access strategy At Syracuse, we are close to going

RE: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread King, Michael
I don't support this, and don't use it. But you should know that it exists WPS Wireless Provisioning Services http://www.microsoft.com/whdc/device/network/wireless/wps.mspx Wireless Provisioning Services (WPS) enable the discovery of and connection to wireless networks. WPS enhancements are i

RE: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Dave Molta
At Syracuse, we are close to going live with a new web-based wireless access portal that provides three levels of access: 1. Normal University users authenticate with their campus NetID and have full access. 2. Anyone having a valid NetID can also provision a time-limited sponsored guest accoun

RE: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Robinson, Ronald
Mearl, At Bradley University we are doing something very similar to what you are looking at. We have configured four different VLANs/SSIDs on our Cisco access points for Guest, Unsecure, Student Secure and Staff Secure. On the Guest VLAN we only allow DNS, DHCP, HTTP and HTTPS On the Unsecure

RE: [WIRELESS-LAN] Guest access strategy

2005-09-15 Thread Zeller, Tom S
At Indiana University we allow any faculty or staff to authenticate to a web page to generate a guest account. The accounts are ADS accounts. They accounts are not actually created by this process. We have a large pool of accounts that are initially disabled. When a user "generates" an account,