We kept the captive portal, but we also create “special” guest accounts for longer term needs. For example, we recently held a weekend volleyball tournament and the athletic department had a guest account for visiting coaches that was valid for the duration of the tournament. The guest network is essentially outside our firewall as well – it goes through the firewall, but is blocked from everything but the internet.
Thomas Carter Network & Operations Manager Austin College From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Tony Skalski Sent: Thursday, September 8, 2016 2:18 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account Prior to this year, we had open guest SSID with a captive portal where users had to accept an AUP every 8 hours. This year we removed the captive portal and merged it with another SSID that was used for consoles and other devices that do not support 802.1x. The new guest SSID is open and effectively outside our firewall. ajs On Thu, Sep 8, 2016 at 1:59 PM, Thomas Carter <tcar...@austincollege.edu<mailto:tcar...@austincollege.edu>> wrote: We use PacketFence as well; while faculty, staff, and student accounts are tied to AD, guest accounts reside only in packetfence. What is nice for us is accounts can have limited time frames and limited expirations to help prevent abuse. Thomas Carter Network & Operations Manager Austin College From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Max McGrath Sent: Thursday, September 8, 2016 1:09 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] About the Guest wireless network and account We use PacketFence (https://packetfence.org/) as our NAC. It has built-in guest functionality and works fairly well. Guests can register either via SMS or email. Max -- Max McGrath [https://static.licdn.com/scds/common/u/img/webpromo/btn_profile_greytxt_80x15.png] <https://www.linkedin.com/pub/max-mcgrath/1b/3a6/a21> Network Administrator Carthage College 262-552-5512<tel:262-552-5512> mmcgr...@carthage.edu<mailto:mmcgr...@carthage.edu> On Thu, Sep 8, 2016 at 1:01 PM, Linchuan Yang <linchuan.y...@concordia.ca<mailto:linchuan.y...@concordia.ca>> wrote: Dear All We are doing research for the wireless Guest network. Currently, we create temp employee account for the Guests in our AD and using a separate captive portal for the Guest login. For the group Guests (e.g. external event), we allow them to share the same guest account. However, we found that it’s not easy to manage and track the temp wireless guest accounts. Could you please share how your institute setup and manage the wireless guest network and the accounts? Thank you, and have a good afternoon. Yours, Linchuan Yang (Antony) Wireless Networking Analyst Network Assessment and Integration, IITS-Concordia University Tel: (514)848-2424 ext. 7664<tel:%28514%29848-2424%20ext.%207664> ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. -- Tony Skalski Systems Administrator a...@stolaf.edu<mailto:a...@stolaf.edu> 507-786-3227 St. Olaf College Information Technology 1510 St. Olaf Avenue Northfield, MN 55057-1097 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
