RE: [WIRELESS-LAN] Servers on Guest Networks

2016-06-09 Thread Thomas Carter
s Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hunter Fuller Sent: Wednesday, June 8, 2016 4:46 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Servers on Guest Networks We are looking at giving users the option to use a wide-open ESSID for thei

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Curtis K. Larsen
Interesting Hunter, Are the Xboxes the only use case causing you to look at this? I'm trying to identify as many use cases as possible before we apply the inbound deny. Let me know. Thanks, Curtis On Wed, June 8, 2016 3:45 pm, Hunter Fuller wrote: > We are looking at giving users the option

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Hunter Fuller
We are looking at giving users the option to use a wide-open ESSID for their Xboxes. The user would register the MAC, and we would put them into a wide-open-inbound area with public addresses, for the best experience. But we would limit some outgoing stuff (Google, our LMS, etc.) to try to nudge pe

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Curtis K. Larsen
Very good point Jeff. I may be worrying for nothing. Thanks, Curtis On Wed, June 8, 2016 11:22 am, Jeffrey D. Sessler wrote: > Most of the IoT devices use external cloud services, where the device > establishes a connection > outbound with the external service. As such, your typical “establis

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Jeffrey D. Sessler
Most of the IoT devices use external cloud services, where the device establishes a connection outbound with the external service. As such, your typical “established” rules take care of the rest. For something like the XBOX, the games tend to pick the best host for multiplayer (if it’s doing xbo

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Curtis K. Larsen
So today we have the 1x student, faculty, staff network, and the open guest network only. So essentially the "guest" network doubles as the non-1x option. We are contemplating a PSK network that could accommodate registered non-1x devices for students in student housing areas for example and t

RE: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Danny Eaton
We do not allow servers on the wireless network, guest or the 802.1X SSID's. Our wireless is all IPv4 private addressing, with NAT, and our Juniper SRX firewall does not allow inbound connections. -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WI