RE: [WIRELESS-LAN] Visitor access
We have an open captive portal SSID where users are required to enter an email address after reading our AUP. They then have HTTP and HTTPS internet access. We do not allow any other services over the guestnet. We also limit the guest network to about 1mbit in each direction for all users to share. This allows enough bandwidth for guests, but is slow enough to deter faculty, staff and students from using it. Tim Cappalli, CCNA | Sr. Enterprise Support Technician | (802) 626-6456 tim.cappa...@lyndonstate.edumailto:tim.cappa...@lyndonstate.edu | Service Requests helpdesk.vsc.edu [cid:image001.jpg@01CC8C2E.28112BE0] From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Craig Eyre Sent: Friday, October 14, 2011 4:02 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Visitor access Hi All, What type of access are you allowing for your visitors? Just Internet? I'm just trying to figure out what applications you are granting access to, that couldn't just be accessed via their 3/4G cellular connection? Sorry to modify the subject, just curious from an educational perspective. Regards, Craig Eyre Network Analyst IT Services Department Mount Royal University 4825 Mount Royal Gate SW Calgary AB T2P 3T5 P. 403.440.5199 E. ce...@mtroyal.camailto:ce...@mtroyal.ca The difference between a successful person and others is not a lack of strength, not a lack of knowledge, but rather in a lack of will. Vincent T. Lombardi From:Jack Vizelter j...@mail.rockefeller.edumailto:j...@mail.rockefeller.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Date:10/14/2011 01:46 PM Subject:Re: [WIRELESS-LAN] Visitor access Sent by:The EDUCAUSE Wireless Issues Constituent Group Listserv WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU We have a similar set-up. We have 2 SSID's being broadcasted. One is for guests - treated as if they're coming from an off-campus connection and one that is secure using WPA2 Enterprise which authenticates against our LDAP giving campus access. -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Matthew Gracie Sent: Friday, October 14, 2011 3:42 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDUmailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: Visitor access On 10/14/2011 11:39 AM, Entwistle, Bruce wrote: We are having a increasing number of parents and prospective students who are visiting to tour the campus requesting access to our wireless network. I was wondering what other schools are doing to accommodate these requests. We use Wifidog on a guest-only SSID; it allows for self-registration, and all connections coming from the guest VLAN are treated as untrusted, as if they were coming in from the Internet at large. -- Matt Gracie (716) 888-8378 Information Security Administrator grac...@canisius.edumailto:grac...@canisius.edu Canisius College ITS Buffalo, NY http://www2.canisius.edu/~graciem/graciem_public_key.gpg ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. inline: image001.jpg
Re: [WIRELESS-LAN] Visitor access
We have a list of Guest Access user ids and password that are good from Monday through Sunday. We can then track their usage and limit their access to the overall network. Harry Rauch Sr. Network Analyst Eckerd College 4200 - 54th Ave S St. Petersburg, FL 33711 On 10/14/11 11:39 AM, Entwistle, Bruce wrote: We are having a increasing number of parents and prospective students who are visiting to tour the campus requesting access to our wireless network. I was wondering what other schools are doing to accommodate these requests. Thank you Bruce Entwistle Network Manager University of Redlands ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] Visitor access
We have a web page that students and faculty can use that allows them to create a limited number of IDs that are valid for up to 7 days. The IDs are then associated with their account and they agree to be held personally responsible for how their guests behave. -- Daniel Eklund Director, Network Engineering and Security 313.577.5558 - Original Message - We are having a increasing number of parents and prospective students who are visiting to tour the campus requesting access to our wireless network. I was wondering what other schools are doing to accommodate these requests. Thank you Bruce Entwistle Network Manager University of Redlands ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Re: [WIRELESS-LAN] Visitor access
Hi All, What type of access are you allowing for your visitors? Just Internet? I'm just trying to figure out what applications you are granting access to, that couldn't just be accessed via their 3/4G cellular connection? Sorry to modify the subject, just curious from an educational perspective. Regards, Craig Eyre Network Analyst IT Services Department Mount Royal University 4825 Mount Royal Gate SW Calgary AB T2P 3T5 P. 403.440.5199 E. ce...@mtroyal.ca The difference between a successful person and others is not a lack of strength, not a lack of knowledge, but rather in a lack of will. Vincent T. Lombardi From: Jack Vizelter j...@mail.rockefeller.edu To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Date: 10/14/2011 01:46 PM Subject:Re: [WIRELESS-LAN] Visitor access Sent by:The EDUCAUSE Wireless Issues Constituent Group Listserv WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU We have a similar set-up. We have 2 SSID's being broadcasted. One is for guests - treated as if they're coming from an off-campus connection and one that is secure using WPA2 Enterprise which authenticates against our LDAP giving campus access. -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [ mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Matthew Gracie Sent: Friday, October 14, 2011 3:42 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: Visitor access On 10/14/2011 11:39 AM, Entwistle, Bruce wrote: We are having a increasing number of parents and prospective students who are visiting to tour the campus requesting access to our wireless network. I was wondering what other schools are doing to accommodate these requests. We use Wifidog on a guest-only SSID; it allows for self-registration, and all connections coming from the guest VLAN are treated as untrusted, as if they were coming in from the Internet at large. -- Matt Gracie (716) 888-8378 Information Security Administrator grac...@canisius.edu Canisius College ITS Buffalo, NY http://www2.canisius.edu/~graciem/graciem_public_key.gpg ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
