RE: [WIRELESS-LAN] Servers on Guest Networks

2016-06-09 Thread Thomas Carter
roup Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Hunter Fuller Sent: Wednesday, June 8, 2016 4:46 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Servers on Guest Networks We are looking at giving users the option to use a wide-open ESSID for their Xboxes. The

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Curtis K. Larsen
Interesting Hunter, Are the Xboxes the only use case causing you to look at this? I'm trying to identify as many use cases as possible before we apply the inbound deny. Let me know. Thanks, Curtis On Wed, June 8, 2016 3:45 pm, Hunter Fuller wrote: > We are looking at giving users the

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Hunter Fuller
We are looking at giving users the option to use a wide-open ESSID for their Xboxes. The user would register the MAC, and we would put them into a wide-open-inbound area with public addresses, for the best experience. But we would limit some outgoing stuff (Google, our LMS, etc.) to try to nudge

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Curtis K. Larsen
Very good point Jeff. I may be worrying for nothing. Thanks, Curtis On Wed, June 8, 2016 11:22 am, Jeffrey D. Sessler wrote: > Most of the IoT devices use external cloud services, where the device > establishes a connection > outbound with the external service. As such, your typical

Re: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Curtis K. Larsen
So today we have the 1x student, faculty, staff network, and the open guest network only. So essentially the "guest" network doubles as the non-1x option. We are contemplating a PSK network that could accommodate registered non-1x devices for students in student housing areas for example and

RE: [WIRELESS-LAN] Servers on Guest Networks

2016-06-08 Thread Danny Eaton
We do not allow servers on the wireless network, guest or the 802.1X SSID's. Our wireless is all IPv4 private addressing, with NAT, and our Juniper SRX firewall does not allow inbound connections. -Original Message- From: The EDUCAUSE Wireless Issues Constituent Group Listserv