We are doing the same as Tim using ISE except we give the user five days of access. We also have a sponsor portal that some of our trusted LAN Managers can access to give certain guest users access for up to 45 days. This covers large camps and conferences.
We treat all wireless as outside entities and block all peer-to-peer. We are also very happy with the solution. / Stephen Belcher Assistant Director of Network Operations WVU Information Technology Services One Waterfront Place / PO Box 6500 Morgantown, WV 26506 (304) 293-8440 office (681) 214-3389 mobile [email protected]<mailto:[email protected]> From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]] On Behalf Of Tim Tyler Sent: Thursday, September 08, 2016 2:19 PM To: [email protected] Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account We wanted to eliminate the administrative hassle of guests so we followed a model which I think many instructions are following to some degree. We created a self-registration portal that is on an open SSID. They register and are sent an sms and email message which contains a password code to get on for 24 hours. It has worked very well and I now have minimal involvement. We think it is reasonable in terms of CALEA in case anyone really cares about that. We pretty much just ask for full name, cell number, and personal email address. We block our domain addresses from using it. We do restrict it to certain protocols and a bandwidth limit. In over a year, I only had one protocol complaint which I simply added to the capabilities since I agreed it was a reasonable one to allow. Given how few complaints I have had and how many connect to it, I am happy with it as a solution. Tim From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Linchuan Yang Sent: Thursday, September 08, 2016 1:02 PM To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] About the Guest wireless network and account Dear All We are doing research for the wireless Guest network. Currently, we create temp employee account for the Guests in our AD and using a separate captive portal for the Guest login. For the group Guests (e.g. external event), we allow them to share the same guest account. However, we found that it’s not easy to manage and track the temp wireless guest accounts. Could you please share how your institute setup and manage the wireless guest network and the accounts? Thank you, and have a good afternoon. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.educause.edu%2fgroups%2f&data=01%7c01%7csteve.belcher%40MAIL.WVU.EDU%7c939723117cc440eb6ced08d3d814b869%7ca7531e183e5d4145ae4c336d320ca7e4%7c0&sdata=ond7PrHON6dqCmjS3wtVHXLDg3hJy8DAwxjhp1u34%2fY%3d>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/<https://na01.safelinks.protection.outlook.com/?url=http%3a%2f%2fwww.educause.edu%2fgroups%2f&data=01%7c01%7csteve.belcher%40MAIL.WVU.EDU%7c939723117cc440eb6ced08d3d814b869%7ca7531e183e5d4145ae4c336d320ca7e4%7c0&sdata=ond7PrHON6dqCmjS3wtVHXLDg3hJy8DAwxjhp1u34%2fY%3d>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
