Your replies have addressed what I was asking wrt security concerns. Thanks for the detail.
On Tue, Mar 28, 2017 at 9:34 AM Lee H Badman <lhbad...@syr.edu> wrote: > We don’t see a lot of bad coming out of the gadgets. If a laptop lands on > that network- which is still security monitored- and does something bad, > odds are extremely high that the device has also been used on the secure > network because that’s where anything to do with campus is done. Our logs > are rich, so it’s easy to correlate same device on multiple networks. If > “bad” happens and we truly can’t find them period in logs for identity, > the degree of “bad” drives what happens next. But we have worked through > every scenario we could think of and derived procedural answers that work > for us. > > > > -Lee > > > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Bucklaew, Jerry > *Sent:* Tuesday, March 28, 2017 10:22 AM > > > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Dorm Wireless Authentication > > > > How do you track them down when they do something bad? > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [ > mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Lee H Badman > *Sent:* Tuesday, March 28, 2017 10:18 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Dorm Wireless Authentication > > > > Absolutely no device restrictions. No preshare. Get on and go. But zero > campus access, that requires using the authenticated network. > > > > *Lee Badman* | Network Architect > > Adjunct Instructor | CWNE #200 > Information Technology Services > 206 Machinery Hall > 120 Smith Drive > Syracuse, New York 13244 > > *t* 315.443.3003 <(315)%20443-3003> * f* 315.443.4325 <(315)%20443-4325> > *e* lhbad...@syr.edu *w* its.syr.edu > > *SYRACUSE UNIVERSITY* > syr.edu > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [ > mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Thomas Carter > *Sent:* Tuesday, March 28, 2017 10:04 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Dorm Wireless Authentication > > > > Is it restricted to only “gadgets and games”, or is it used for laptops as > well? A majority of the services our students use are Internet facing also, > so Internet-only access would still give them access to the services they > need. > > > > I assume there is an authenticated SSID also? > > *Thomas Carter* > Network & Operations Manager / IT > > *Austin College* > 900 North Grand Avenue > Sherman, TX 75090 > > Phone: 903-813-2564 <(903)%20813-2564> > www.austincollege.edu > > [image: image001.gif] > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [ > mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] *On Behalf Of *Lee H Badman > *Sent:* Tuesday, March 28, 2017 8:23 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Dorm Wireless Authentication > > > > After kicking tires on leading classification engines and weighing > solution dollars and support costs, we opted to pilot a wide open "gadget > and games" SSID in the dorms that only have Internet access for all the > oddballs. With almost a full year in, it's been very well used and received > and we've been able to answer all of our own security questions that anyone > would be contemplating. I think we'll be moving forward with this model. > > Lee Badman (mobile) > > > On Mar 28, 2017, at 7:48 AM, Osborne, Bruce W (Network Operations) < > bosbo...@liberty.edu> wrote: > > Here is another vote for ClearPass with Aruba wireless. > > > > When an Apple TV is registered, it is also registered as an AirGroup > personal device so the owner’s 802.1X Apple device can use AirPlay to > display content on the device. We also use Aruba’s Dynamic Multicast > Optimization to provide multicast IPTV over wireless. > > > > > > *Bruce Osborne* > > *Senior Network Engineer* > > *Network Operations - Wireless* > > *(434) 592-4229 <(434)%20592-4229>* > > *LIBERTY UNIVERSITY* > > *Training Champions for Christ since 1971* > > > > *From:* Robert Spellman [mailto:rsp...@bates.edu <rsp...@bates.edu>] > *Sent:* Monday, March 27, 2017 9:33 AM > *Subject:* Re: Dorm Wireless Authentication > > > > We use Aruba Clearpass, and have two SSID's on campus, one which is > 802.1X, and the other open, doing MAC based authentication. Clearpass > allows users to register their own devices for MAC authentication by > logging into the Clearpass guest portal. Students can register devices for > a year, while guests can register devices for 2 days. > > > > Rob > > > > Robert Spellman > > Bates College > > Information and Library Services > > > > On Mon, Mar 27, 2017 at 9:16 AM, Chris Brezil <brez...@newschool.edu> > wrote: > > Good morning everyone, > > We are planning a larger scale roll out of wireless in our dorms. > Currently we mainly just cover some of the common areas and students for > the most part bring in their own routers. As most folks can appreciate, > this has caused years of technical problems and is also not seen as great > customer service. > > On our main campus wifi, we have people authenticate using 802.1x radius > authentication using their university username and password. We have some > concerns about doing this in the dormitories however. We know that students > bring all sorts of consumer grade devices that require network access into > their rooms, such as Apple TV, Amazon Echos, etc. Many of these devices > will not work with username and password authentication and we are not > looking to Mac exclude these devices on the network, given the overhead of > setting this up. So we are looking possibly at doing WPA Personal with a > passphrase that would be given to students. > > What are others doing? Has this come up as an issue for any of you? > > Best, > > Chris > > > -- > > CHRIS BREZIL > *ASSISTANT VICE PRESIDENT, ENTERPRISE OPERATIONS* > INFORMATION TECHNOLOGY <http://www.newschool.edu/information-technology> > > 71 FIFTH AVENUE, 9th FLOOR, NEW YORK, NY 10003 > brez...@newschool.edu > <http://www.newschool.edu/marketing-communication/email-signature.html> > | 212.229.5300 x4512 <(212)%20229-5300> > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > ********** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
