a little late but +1 to Felix's point. We came to the same conclusion roughly 2 year ago. We decided on a guest experience where general users have to confirm their registered identity on an open SSID. Bandwidth and services are restricted for guests so we built a portal for students to self register devices and receive improved services. This is clearpass over aruba wireless and works very well.
Nayef Z. Smith | Emory LITS Network Monitoring and Tools | Suite 1495 | 1762 Clifton Road | Atlanta GA 30322 | Voice: 404-727-6019 ________________________________ From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> on behalf of Felix Windt <[email protected]> Sent: Monday, February 24, 2020 4:47 PM To: [email protected] <[email protected]> Subject: [External] Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi Just for argument’s sake: why? Your users do not care about their WiFi access being authenticated. They don’t care about it being encrypted. From your user’s perspective, you’re about to make the wireless system behave worse. Do you have an underlying reason that makes driving traffic towards the authenticated, encrypted wireless network a requirement, or is it for its own sake? If it’s the latter, you’ll have a lot of unhappy users on your hand, without a good reason to explain to them why that change was made. thx, felix From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> on behalf of Mangaiah Chowdary Garikapati <[email protected]> Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> Date: Monday, February 24, 2020 at 4:40 PM To: "[email protected]" <[email protected]> Subject: Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi Main goal is to put registration in front of unsecured Guest Wireless to help drive more traffic towards an authenticated secured campus wireless but students bring personal devices which may not be compatible with the registration / authentication process which is why we are enabling MAC bypass process on Guest wireless through Mydevices portal but encountering issues to make them work like before with casting / mirroring working. Thank you, Mangaiah Chowdary Garikapati Project Manager PMO | Division of Information Technology 3100 Sycamore Road | DeKalb, IL 60115 [email protected]<mailto:[email protected]> [125-signature] From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]> On Behalf Of Rob Harris Sent: Monday, February 24, 2020 11:32 AM To: [email protected] Subject: Re: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi May I ask what your goals are in this change? (to echo the other responses, Aruba Clearpass is a great choice for this, we use it and it does everything we need it to). [The Culinary Institute of America] Robert Harris Manager – Telecom, Networks, & AV Services Culinary Institute of America 1946 Campus Drive Hyde Park, NY 845-451-1681 www.ciachef.edu<https://nam12.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.ciachef.edu%2F&data=02%7C01%7Cfelix.windt%40DARTMOUTH.EDU%7Ccd0827d46bdb465890e008d7b97228b4%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C637181772284481517&sdata=oTVeti4avHXb%2BqrZa%2Fasj%2F9VgI5w1FZ6HdRIlhj2h80%3D&reserved=0> Food is Life Create and Savor Yours.™ Please consider the environment before printing this e-mail. From: The EDUCAUSE Wireless Issues Community Group Listserv <[email protected]<mailto:[email protected]>> On Behalf Of Mangaiah Chowdary Garikapati Sent: Monday, February 24, 2020 11:32 AM To: [email protected]<mailto:[email protected]> Subject: [WIRELESS-LAN] Implementing registration based Guest Wi-Fi Hello, At NIU, we are currently undergoing a project to move away from open access Guest Wireless to a registration based Guest Wireless using Cisco ISE and we are having following issues and any help or suggestions on these are much appreciated. 1. In the new system, devices are not able to see each other for casting purposes, is there any option we need to select to enable various casting and mirroring capabilities in the new registration based Guest Wireless? 2. We are also using ‘Mydevices’ portal to add devices which doesn’t have capabilities to register / authenticate (e.g. Chromecast, Roku etc.) but this is looking like a hit and miss where some devices connect immediately and some take at least an hour to two to be recognized and allowed to connect to the AP. Any suggestions why this could be happening? Thank you, Mangaiah Chowdary Garikapati Project Manager PMO | Division of Information Technology 3100 Sycamore Road | DeKalb, IL 60115 [email protected]<mailto:[email protected]> [125-signature] ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cfelix.windt%40DARTMOUTH.EDU%7Ccd0827d46bdb465890e008d7b97228b4%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C637181772284491509&sdata=aEEPECKulbP5qcUa5nZa9rT63kvqs8laveIZRWC67cI%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cfelix.windt%40DARTMOUTH.EDU%7Ccd0827d46bdb465890e008d7b97228b4%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C637181772284491509&sdata=aEEPECKulbP5qcUa5nZa9rT63kvqs8laveIZRWC67cI%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cfelix.windt%40DARTMOUTH.EDU%7Ccd0827d46bdb465890e008d7b97228b4%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C637181772284501509&sdata=eWNyPpvCr25%2Bo3y%2F5Wxt7Sq53aQ6VAzFugPl3ecQOGc%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ________________________________ This e-mail message (including any attachments) is for the sole use of the intended recipient(s) and may contain confidential and privileged information. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message (including any attachments) is strictly prohibited. If you have received this message in error, please contact the sender by reply e-mail message and destroy all copies of the original message (including attachments). ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
