We have everything segmented by vlan as well. However I never considered segmenting the wireless students from the wired students. Any complaints about not being able to 'see' another student machine or printer, access their iTunes store or any other of that genre? We don't route any UDP traffic between vlans.
Jacob Barros Network Administrator Grace College -----Original Message----- From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Rigdon, Dennis Sent: Friday, July 17, 2009 10:21 AM To: [email protected] Subject: Re: [WIRELESS-LAN] blocking specific ports or protocols We use an Aruba system as well. Our configuration destributes student users into separate VLANS based upon their field of study. They can access the server farm where needed and the Internet, but they cannot access other wired subnets (faculty, staff or student). Their bandwidth has limitations set on the Aruba. A traffic shaper takes care of other concerns such as P2P. Dennis Rigdon Okla. City Univ. Sent from my Windows Mobile(r) phone. -----Original Message----- From: Barros, Jacob <[email protected]> Sent: Friday, July 17, 2009 8:41 AM To: [email protected] <[email protected]> Subject: [WIRELESS-LAN] blocking specific ports or protocols We were recently reviewing our policies on our Aruba wireless controller and I am curious what ports or protocols others are blocking for student wireless connections. For example, guest wireless connections are straightforward: HTTP, SSL, DNS. Student connections are much more complicated in my mind. Can anyone share an overall philosophy and some specifics on how you manage student wireless connections? Jacob Barros Network Administrator Grace College and Seminary ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
