Here at Emory, we have an open SSID for guest access as well as "legacy" VPN Student/Faculty/Staff access. We use a captive portal to present guests with 4 screens worth of our AUP, TOS, rules and regulations before requesting their email address for guest access "authentication".

Guest access is limited to Web (80), Secure Web (443), DNS (53), and VPN - IPsec or PPTP. We also limit their bandwidth to 500kbps. If the guest wants to do anything besides web, like POP3 or IMAP email, FTP, IM, etc, they need to VPN to their home company or institution.

We also have an 802.1X/WPA/WPA2 SSID for authenticated Student/Faculty/Staff access.

Our wireless hardware from Aruba allows us to do all of this - captive portal, firewall/bandwidth limiting, and legacy VPN concentration - easily without any additional boxes.

>>-> Stan Brooks - CWNA/CWSP
     Emory University
     Network Communications Division

-------- Original Message --------
From: Bennefield, Cully A.
Date: 3/22/2006 3:02 PM

We are exploring the possibility of offering guest wireless access and I
would like to get a feel for how others might be handling it.  Any and
all information and opinions will be greatly appreciated.

Thanks,
Cully

Cully Bennefield
Baylor University

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/groups/.

Reply via email to