I took over from our previous wireless admin a few years ago and went through an extensive project to consolidate and clean up our SSIDs. Every use case seemed to have their own SSID multiplied by each site - it was a confusing mess for everyone. After lots of research and consultation with our clients, and a mindset of keeping things simple yet accommodating policy/requirements, it came down to the following configuration:
FanshaweCollege 802.1x staff/students via domain accounts, IoT/non-domain (e.g. shared iPads) items via ISE accounts FanshaweGuest Mac auth click-through portal allows 24hrs access, then the portal comes up again eduroam 802.1x staff/students via domain accounts, remote eduroam accounts FanshaweDevices iPSK IoT devices that don't support 802.1x The top 2 SSIDs are broadcast at all our sites. Eduroam is broadcast at all our educational based sites. We tried to have eduroam and FanshaweCollege combined, but senior management didn't want to lose the branded SSID. As for the FanshaweDevices, to keep airspace clean, we only broadcast this where we need it. We are a Cisco shop and almost exclusively on the WLC9800 now. We make use of the AP Join profiles and an AP naming standard to accomplish this. By changing a character in the AP name, I can have it pickup different policies for RF, SSID, etc. Currently we have the iPSK network only broadcast in 2 locations to support athletic equipment and Nintendo switches. The iPSK auth method allows us have a single SSID, yet provide back-end control depending on the device that is connecting, or better, the PSK they use. Our Residence networking is provided by a 3rd party. So far this has worked really well, and I received compliments the September following the changes as helpdesk lineups/queues were significantly shorter. All SSIDs run on both 5 and 2.4GHz, so if we do decide to split up SSIDs based on frequency, I could see some changes here, otherwise it's ticking all our boxes. -- Regards, Bryan Shoebottom Network & Systems Specialist Network Services & Computer Operations 1001 Fanshawe College Blvd. London, ON N5Y 5R6 T 519.452.4430 x4904 | F 519.453.3231 bshoebot...@fanshawec.ca<mailto:bshoebot...@fanshawec.ca> [cid:582C4514-D41F-48FA-94E1-89D38DB527CB] From: Patrick McEvilly <patrick_mcevi...@harvard.edu> Sent: June 8, 2021 4:37 PM Subject: Re: MPSK SSID Names Hi Brian We are struggling with a name that would work for this. We have "Harvard Secure" as our 802.1x SSID, "Harvard University" as our legacy MAC registered SSID and eduroam. We want to use the MPSK SSID to solve for all things - IoT, gaming consoles, Alexa, Smart*, AV gear, for both BYOD and for infrastructure devices. We are also interested in hearing what others have named their SSIDs or suggestions that would represent the general-purpose use of such an SSID. Patrick From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Brian Helman <bhel...@salemstate.edu<mailto:bhel...@salemstate.edu>> Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Tuesday, June 8, 2021 at 3:04 PM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [WIRELESS-LAN] MPSK SSID Names Anyone using Aruba's (or if other manufacturers have a similar feature) MPSK service? What did you use for an SSID - looking for naming ideas. -Brian ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.educause.edu_community&d=DwMFAg&c=WO-RGvefibhHBZq3fL85hQ&r=NEt1bAdOCtalVd4Ws0dvlC8LeF95Hl1p6yYgtTh8luM&m=Z-onTTxjdDKc-k4dEj-RPbI-ZUeZ3eRy2SdcUDLls8A&s=AusECaOfdS2huItcu_TWBvzKklJAFyzPUrXjb_-wzvU&e=> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
