Also forgot to mention that you can look at TTL in the IP packets as an indicator of a NAT router. Routers are required to decrement the TTL so that's another possible method of detection.

On 10/16/2014 11:40 AM, Hunter Fuller wrote:

If the user connects a home gateway box (or anything else doing PAT) then the university equipment will only see one MAC and one IP, unfortunately :(

On Oct 16, 2014 10:36 AM, "Justin Pederson" <justinpeder...@caspercollege.edu <mailto:justinpeder...@caspercollege.edu>> wrote:

    From a technical standpoint, why not just use port security on you
    wired networks to only allow 1 MAC address at a time. There should
    be no rouge APs and the students could still use the wireless and
    wired networks. I have been rolling this around in my head for a
    little while now. The only thing you should have to cover is
    cellular tethering, but from my experience, most of these devices
    don't have much power behind the radio.

    On Thu, Oct 16, 2014 at 9:13 AM, Ian McDonald
    <i...@st-andrews.ac.uk <mailto:i...@st-andrews.ac.uk>> wrote:

        Breach of your written policy prohibiting such things isn’t a
        disciplinary matter? And can’t be fixed with your disciplinary
        system?

        *From:*The EDUCAUSE Wireless Issues Constituent Group Listserv
        [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
        <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *T.
        Shayne Ghere
        *Sent:* 16 October 2014 16:11
        *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
        <mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>
        *Subject:* [WIRELESS-LAN] Wireless in Dorms

        Good morning.

        Let me say first off, we’re nearly a complete Cisco shop other
        than our Firewalls right now.  We are running 3 – Cisco 5508
        Wireless Lan Controllers and Cisco WCS.

        The AP’s in the Dorm’s and Greek houses are all 1142N AP’s and
        have been spaced accordingly by Cisco and by us during the
        introduction of wireless in the Dorms, Greeks and Single housing.

        We are having a heck of a time with all the interference that
        the students bring with them making our wireless nearly
        unusable.  I know this topic has come up in the past, but this
        year is one of the worst we’ve seen, and the students are
        getting restless.

        We have the ability to quarantine rogue Wireless clients,
        however according to a recent Court case against a large Hotel
        Chain, it was decided that on an open free wireless spectrum,
        we would be breaking the law in jamming it.

        How have you addressed this issue?  I’m about ready to ask
        upper management to remove the AP’s in all the Dorm buildings
        and let the students bring their own AP’s if they want
        wireless.   Has anyone resorted to this?

        Thanks for your input

        Shayne

        ********** Participation and subscription information for this
        EDUCAUSE Constituent Group discussion list can be found at
        http://www.educause.edu/groups/.




-- Thanks,
    Justin Pederson
    IT Network Coordinator
    Casper College
    (307)268-2481 <tel:%28307%29268-2481>

    ********** Participation and subscription information for this
    EDUCAUSE Constituent Group discussion list can be found at
    http://www.educause.edu/groups/.

********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.



**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to