+ Post New Thread
Results 1 to 10 of 10
Internet Related/Filtering/Firewall Thread, Wireless Guest Access in Technical; Ok, Quick question, I work in a High School and ive been asked to research into setting up Guest Access ...
  1. #1

    Join Date
    Jan 2009
    Location
    Leicester
    Posts
    49
    Thank Post
    18
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Wireless Guest Access

    Ok,

    Quick question, I work in a High School and ive been asked to research into setting up Guest Access on are wireless for users that don't work in are school and things like Iphones etc without having to give out the WEP Key to teachers and such like. All I want them to have is Internet Access nothing more like file sharing etc.

    I've noticed the new Apple Access points can do this,

    AirPort Extreme Base Station - Apple Store (U.K.)

    (See guest access)

    we have Cisco Aironet 1230AG points all over the school and i was wondering if anyones had any experience in configuring them?? We are a brand new school (well 2 years old) so are tech department has pretty new equipment and i hope are points can do this.

    Thanks

    Steve

  2. #2

    Join Date
    Feb 2008
    Posts
    270
    Thank Post
    14
    Thanked 44 Times in 35 Posts
    Rep Power
    22
    do you have a cisco controller for your aps or are they autonomous? I know the controller has a facility to create guest access. I have aironet aps at work (no controller) and what i did for this was create a new ssid in a different vlan and then used a acl on our core switch to only permit dhcp, dns and tcp 8080 to our smoothwall.

  3. #3

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    738
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    37
    Quote Originally Posted by ssiruuk2 View Post
    do you have a cisco controller for your aps or are they autonomous? I know the controller has a facility to create guest access. I have aironet aps at work (no controller) and what i did for this was create a new ssid in a different vlan and then used a acl on our core switch to only permit dhcp, dns and tcp 8080 to our smoothwall.
    This is how we have done with our sixthform users who bring in their own laptops. A seperate vlan and an ACL on the firewall or core will do the trick.

    Ash.

  4. #4

    Join Date
    Feb 2008
    Posts
    270
    Thank Post
    14
    Thanked 44 Times in 35 Posts
    Rep Power
    22
    thats what we wanted to do and then someone started making noises that we cant have chargers that havent been electrically tested used in the school so had to scrap the idea.

    How did you get around that ash?

  5. #5


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,650
    Thank Post
    275
    Thanked 780 Times in 607 Posts
    Rep Power
    224
    Quote Originally Posted by ssiruuk2 View Post
    thats what we wanted to do and then someone started making noises that we cant have chargers that havent been electrically tested used in the school so had to scrap the idea.

    How did you get around that ash?
    I may be mis-remembering, but don't they only have to be tested if they're older than "X" years?

  6. #6
    mb2k01's Avatar
    Join Date
    Jan 2007
    Posts
    1,138
    Thank Post
    189
    Thanked 230 Times in 195 Posts
    Rep Power
    92
    Most places will have a policy of not allowing anything untested (by their PAT tester / outsource company) at all. Others will say it's ok for items up to 12months old (....and then theres others that will just turn a blind eye alltogether!)

  7. #7

    Join Date
    Feb 2008
    Posts
    270
    Thank Post
    14
    Thanked 44 Times in 35 Posts
    Rep Power
    22
    deleted
    Last edited by ssiruuk2; 18th March 2009 at 09:04 PM. Reason: very random double post from 3 hours ago!?!

  8. #8

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,171
    Thank Post
    667
    Thanked 1,638 Times in 1,463 Posts
    Rep Power
    423
    our lea sends a contractor in once a year. Anything bought in the meantime is done by me or the site manager.

  9. #9
    White_Fi's Avatar
    Join Date
    Sep 2008
    Location
    Ipswich
    Posts
    185
    Thank Post
    7
    Thanked 34 Times in 32 Posts
    Rep Power
    33
    Hi steveo2000,

    Ruckus Wireless specialized in Smart Wi-Fi.

    With Ruckus, educational institutions gain:

    * Consistent, reliable connectivity no other Wi-Fi system can touch
    * Two to four times the coverage using fewer APs
    * Low packet loss and high performance
    * A safer environment with less interference, through "eco-friendly" adaptive signal technology
    * System self-healing capabilities
    * The lowest cost of ownership
    * Support for standard 802.1x, WPA (PSK) and WPA-2 (AES) security, plus automatic wireless setting and encryption key security

    Guest Access is also a feature out of the box with Ruckus.
    Please see the link below to discover more about easy guest access.

    Thanks
    Stu

    http://tools.net-ctrl.com/ruckus/GuestPass-FS-1108.pdf

  10. Thanks to White_Fi from:

    stariq (24th August 2009)

  11. #10

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    738
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    37
    Quote Originally Posted by ssiruuk2 View Post
    thats what we wanted to do and then someone started making noises that we cant have chargers that havent been electrically tested used in the school so had to scrap the idea.

    How did you get around that ash?
    Hiya,

    We just stated that only the software side of things will be supported and limited supported at that as well. The students are responsible for their own equipement and there are not many places where they can charge the laptops anyway so we just state that they need to have it charged from home (this does seem to be silly but it works for us).

    The parents seems to understand this and we have been approached by a number of parents requesting some help and guidance on which laptop they should buy for their child. The idea here is that they get a decent spec laptop or PC for that matter and use it in school on this restricted wireless network and also use it for university if they go into higher education.

    We're testing the Iphone with 802.1x authentication at the moment and early signs look promising so that might be a service we may offer. At the moment only windows xp and windows vista are supported. Macs are also under investigation as well but we stated that it must support 802.1x supplicant as without this security could be comprimised. We also install our CA's Root Cert into the device as well to cut out Man-in-the-middle attach with 802.1x.

    HTH,

    Ash.

SHARE:
+ Post New Thread

Similar Threads

  1. Belkin Wireless Access Point
    By Pyroman in forum Wireless Networks
    Replies: 2
    Last Post: 15th October 2008, 02:46 PM
  2. best wireless access point
    By Uraken in forum Hardware
    Replies: 10
    Last Post: 7th October 2008, 07:49 AM
  3. wireless access points
    By chrbb in forum Network and Classroom Management
    Replies: 14
    Last Post: 1st May 2008, 07:48 PM
  4. VLAN for guest internet access
    By plexer in forum How do you do....it?
    Replies: 3
    Last Post: 17th December 2007, 12:50 PM
  5. Wireless Access Points
    By kiran in forum Hardware
    Replies: 17
    Last Post: 22nd October 2006, 09:42 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •