Chris, We are doing the same as most other universities. 802.1x for staff and student access (dynamic vlan assignment via radius) and Open/Mac Auth for non802.1x devices using Cisco ISE self-registration portal. We allow them to register up to 5 devices. The devices are automatically purged from the mac auth group after 30+ days of inactivity. This helps maintain the current information.
As for WPA Personal where everyone knows the passphrase, in my opinion, I don’t recommend. You would be better off having a completely open SSID. At least with an open SSID, your users will know that the SSID is open and they are not protected verses, giving them “encrypted” SSID with a known passphrase and they “think” they are protect but really not. Kanan Simpson Network Services Engineer Valdosta State University From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Chris Brezil Sent: Monday, March 27, 2017 9:17 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] Dorm Wireless Authentication Good morning everyone, We are planning a larger scale roll out of wireless in our dorms. Currently we mainly just cover some of the common areas and students for the most part bring in their own routers. As most folks can appreciate, this has caused years of technical problems and is also not seen as great customer service. On our main campus wifi, we have people authenticate using 802.1x radius authentication using their university username and password. We have some concerns about doing this in the dormitories however. We know that students bring all sorts of consumer grade devices that require network access into their rooms, such as Apple TV, Amazon Echos, etc. Many of these devices will not work with username and password authentication and we are not looking to Mac exclude these devices on the network, given the overhead of setting this up. So we are looking possibly at doing WPA Personal with a passphrase that would be given to students. What are others doing? Has this come up as an issue for any of you? Best, Chris -- CHRIS BREZIL ASSISTANT VICE PRESIDENT, ENTERPRISE OPERATIONS INFORMATION TECHNOLOGY<http://www.newschool.edu/information-technology> 71 FIFTH AVENUE, 9th FLOOR, NEW YORK, NY 10003 brez...@newschool.edu<http://www.newschool.edu/marketing-communication/email-signature.html> | 212.229.5300 x4512 [https://docs.google.com/uc?export=download&id=0Bz9BzY1rvKW_bDQ4SU1RUmpfMTQ&revid=0Bz9BzY1rvKW_cWtOekJTQ2RIdFFhQ3h1T0h3a3p3Vk9KT2pVPQ] ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
