We are running both an 802.1x network and an open one side by side, ubiquitously, on all of our campuses, using Cisco WLCs. We are using Cisco ISE, which we employ to profile devices and put the lot of XBoxes, Playstations, Rokus, AppleTVs, etc, which are (historically) almost never compatible with 802.1x, automatically onto the open network. Devices which are not automatically put on the open network, can still join by a click-to-continue AUP prompt--these devices are kicked off every morning at 2AM. This one click-to-continue has the affect of keeping random devices that are driving by on the street from casually using bandwidth, etc., but otherwise there is nothing to prevent you from using the open network, except the annoyance factor of having to do it every day. You can also self register a device, which is then tied to your AD username. That and the rate-limiting we put on the open network: Override Per-User Bandwidth Contracts (kbps) Average Data Rate: DownStream 5000 UpStream 3000 Burst Data Rate: DownStream 7500 UpStream 5000 Average Real-Time Rate: DownStream 5000 UpStream 3000 Burst Real-Time Rate: DownStream 7500 UpStream 5000
The average usage rate is about 4:1 of users on the secure network versus the open network. We have about 7500 unique wireless devices each day during the normal semester. We are in the process of also bringing up the Eduroam SSID this spring as well. Jess Walczak Senior Network Analyst Information Technology Services jwwalc...@stthomas.edu University of St. Thomas | stthomas.edu On Wed, Mar 2, 2016 at 3:07 PM, Danny Eaton <dannyea...@rice.edu> wrote: > We run an “Open” SSID across the entire campus (Rice Visitor) – it’s a > captive portal, in a visitor VRF that has access to only on campus > resources accessible from AT&T, Comcast, Roadrunner, etc. It’s wired or > wireless, but wireless does NOT have a MAC address registration component > at this time. > > > > We have eduroam, and then our “branded” 802.1X SSID, Rice Owls for > wireless. > > > > For wired, in the residential colleges, we use ISE – and have a > self-registration portal for game consoles that put them into visitor as > well. This works for the PS3’s, Xbox’s, etc. of the world. At this time, > there’s no real way to get a Roku on the wireless (Apple TV we want to push > them to wired – because it’s not going to tie up the RF for streaming TV in > everyone’s dorm room then, among other reasons – if it requires a power > outlet, plug it into the Ethernet too). > > > > > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Tom Klimek > *Sent:* Wednesday, March 02, 2016 2:48 PM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Open Networks in Resnet > > > > We have essentially three SSID's campus wide.. > > ND-Guest (open) > > ND-Secure (.1x, student and staff vlans) > > Eduroam > > > > On Wed, Mar 2, 2016 at 3:35 PM, Lee H Badman <lhbad...@syr.edu> wrote: > > <Spin off from conversation on MAC device self-registration> > > > > Other than Jeff Sessler at Scripps, who else is running an open network in > their resnet environment? Off-list answer is fine, if you prefer. I’d like > to bounce a few questions off of those doing this, off-list. > > > > Kind regards, > > > > Lee Badman > > > > > > *Lee Badman* | Network Architect (CWNA, CWSP, Mobility+) > > Information Technology Services > 206 Machinery Hall > 120 Smith Drive > Syracuse, New York 13244 > > *t* 315.443.3003 * f* 315.443.4325 *e* lhbad...@syr.edu *w* its.syr.edu > > > *SYRACUSE UNIVERSITY*syr.edu > > > > > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > !DSPAM:911,56d7517b10141643960313! > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/groups/. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
