We are NATing, but were running out of addresses in our internal DHCP pools.
Bruce Osborne Wireless Engineer IT Network Services - Wireless (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Lee H Badman [mailto:lhbad...@syr.edu] Sent: Friday, March 4, 2016 7:31 AM Subject: Re: Open Networks in Resnet No NAT, all public addresses? -Lee -----Original Message----- From: Osborne, Bruce W (Network Services) [bosbo...@liberty.edu] Received: Friday, 04 Mar 2016, 7:21 To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> [WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] Subject: Re: [WIRELESS-LAN] Open Networks in Resnet You would think so, but our experience here at Liberty University has proved differently. When we got rid of our guest portal, we suffered from ip exhaustion due to probing mobile clients. Restoring the portal removed the issue. OI believe that if a client cannot reach the Internet on a particular SSID, it stops trying that network for a period of time. If it can reach the Internet, it keeps trying periodically to see if it can still access the Internet. One reason we reinstated our guest portal was to avoid the excess dhcp usasge. Our campus is quite spread out, so we may have a more mobile client population than some other areas. Our main wireless system is divided into 4 separate subnet areas which may have enhanced the effect too. Bruce Osborne Wireless Engineer IT Network Services - Wireless (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 -----Original Message----- From: Chuck Anderson [mailto:c...@wpi.edu] Sent: Thursday, March 3, 2016 8:38 AM Subject: Re: Open Networks in Resnet If the captive portal is DHCP/IP-based, doesn't that just move the problem to a different DHCP scope? We had to make our scope large enough to handle drive/walk-bys. We have: WPI-Wireless - EAP-TLS eduroam - EAP-TLS WPI-Wireless-Setup - Open, Portal for onboarding the two above, with limited Internet access to allow Apple & Google devices to do their initial setup with the cloud. WPI-Guest - Open, Portal for guest access, full Internet access, subject to the same restrictions accessing on-campus resources as traffic coming from the Internet. On Thu, Mar 03, 2016 at 12:59:37PM +0000, Osborne, Bruce W (Network Services) wrote: > Interesting… > > Without a captive portal, how do you stop “drive-by” devices that probe all > open networks for Internet access, consuming ip addresses needlessly? > > We found we needed a captive portal to discourage those, mainly mobile, > devices from exhausting our Guest DHCP scopes. > > > Bruce Osborne > Wireless Engineer > IT Network Services - Wireless > > (434) 592-4229 > > LIBERTY UNIVERSITY > Training Champions for Christ since 1971 > > From: Paul Miklas [mailto:pmik...@stedwards.edu] > Sent: Wednesday, March 2, 2016 6:38 PM > Subject: Re: Open Networks in Resnet > > At St. Edward's we are running 4 SSIDs and sometimes a 5th for special events. > > SEU for the majority on 802.1x > SEU-Guest as an open network with port / subnet restrictions, also the > first semester of not using a captive portal with our guest network > SEU-Help for our on boarding eduroam > > ________________________________ > From: "Lee H Badman" > <lhbad...@syr.edu<mailto:lhbad...@syr.edu<mailto:lhbad...@syr.edu%3cmailto:lhbad...@syr.edu>>> > To: > WIRELESS-LAN@listserv.educause.edu<mailto:WIRELESS-LAN@listserv.educau<mailto:WIRELESS-LAN@listserv.educause.edu%3cmailto:WIRELESS-LAN@listserv.educau> > se.edu> > Sent: Wednesday, March 2, 2016 2:35:00 PM > Subject: [WIRELESS-LAN] Open Networks in Resnet > > <Spin off from conversation on MAC device self-registration> > > Other than Jeff Sessler at Scripps, who else is running an open network in > their resnet environment? Off-list answer is fine, if you prefer. I’d like to > bounce a few questions off of those doing this, off-list. > > Kind regards, > > Lee Badman ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
