Faye, Here at Liberty University, our main SSID is WAP2-Enterprise (PEAP-MSCHAPv2) We have an open SSID that serves several functions. It allows 802.1X capable devices such as computers, tablets, and smart phones to get provisioned for the secure network We are currently using Cloudpath XpressConnect to provision this. Our portal also allows the user to register the mac address of a non802.1X capable device such as a game console, Blu-Ray player, or TV. These devices are then allowed access on this SSID without any portal page. We block access to our website & Blackboard system to encourage students to use our secure network. We also have a Guest SSID is bandwidth limited in a DMZ for external access. We are currently not using any NAC capabilities except some one-time checks in Cloudpath XpressConnect.
We generally detect any issues on our network, lock the account, and kick the offending devices off the network. The user comes in to the Help Desk for assistance and the machine is cleaned down. We use username to IP address mapping from our RADIUS servers to perform Internet bandwidth management. Currently, our users are allowed 40Gb per calendar month before their speed is throttled. Bruce Osborne Network Engineer IT Network Services (434) 592-4229 LIBERTY UNIVERSITY Training Champions for Christ since 1971 From: Faye Snowden [mailto:fsnow...@pacific.edu] Sent: Wednesday, December 5, 2012 7:02 PM Subject: Question on Wireless Infrastructure Design for BYOD Hello Everyone, The University of the Pacific is exploring ways to simply its wireless infrastructure design, especially for BYOD. We were curious to learn how many universities actually have an open unencrypted space to connect mobile phones, e-readers, etc. If so, how do you handle devices connected to the 'unsecure' side if resources are needed on the secured network? Right now, we have the devices behind NAC which is creating a bit of a headache for us. I would appreciate any feedback. Thanks, Faye Faye Snowden, PMP OIT-Director of Communications Infrastructure University of the Pacific Stockton, CA 95211 Office: 209 946-3968 Fax: 209 932-4003 ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
