Bruce,
At Emory, our guest access is limited to web, secure web, and VPN
access. We also bandwidth limit guests to 500kbps. Guests have to open
a browser and re redirected to our captive portal where we display our
AUP & TOS to which they must agree. We then collect their email address
and "authenticate" them to Internet access - web and VPN only.
To date, this has worked very well. I've only had one complaint - a
user wanted secure POP3/SMTP access. My answer was that if the guests
want more access, then they should establish a VPN to their home
organization.
We are using hardware from Aruba Networks for wireless. It gives us the
captive portal, firewalling and bandwidth limiting functionality that
we use for guest access, as well as authenticated access for our
student/faculty/staff.
>>-> Stan Brooks - CWNA/CWSP
Emory University
Network Communications Division
404.727.0226
[EMAIL PROTECTED]
AIM: WLANstan Yahoo!: WLANstan MSN: [EMAIL PROTECTED]
-------- Original Message --------
From: Entwistle, Bruce
Date: 3/30/2006 7:32 PM
We have recently installed a wireless network on a portion of the
campus. The student and administrators are all authenticated through a
front end device which validates user accounts against an LDAP server
running on a domain controller. However we now have the requirement
for guests of the campus to connect to the wireless network. We have
some ideas how we would like to handle this issue but are curious as to
what others have done to accommodate these guest connections. Please
let me know.
Thank you
Bruce Entwistle
Network Manager
University of Redlands
********** Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/groups/.
**********
Participation and subscription information for this EDUCAUSE Constituent Group
discussion list can be found at http://www.educause.edu/groups/.