+ Post New Thread
Page 1 of 4 1234 LastLast
Results 1 to 15 of 46
Netbooks, PDA and Phones Thread, BYOD and wifi network conundrum in Technical; Not sure with forum to stick this in as it has a bit of everything, not even sure how I'll ...
  1. #1

    Join Date
    May 2010
    Posts
    1,029
    Thank Post
    105
    Thanked 87 Times in 64 Posts
    Rep Power
    49

    BYOD and wifi network conundrum

    Not sure with forum to stick this in as it has a bit of everything, not even sure how I'll write it up but here goes.

    Current situation is this :-

    Wifi is split into two vlans, one domain and one guest. The guest is transparent with no authentication, the domain has authentication via two smoothwalls.

    Everything works great except I've now got two problems, well three if you count I've got no budget ;p

    We have 45 staff Ipads, which connect to the guest wifi without a problem, they are managed via a mac mini server with profile manager.

    So far so good.

    Except I've been asked if I can get them on the same IP Range as the domain so they can start using applications like airserver / displaynote etc.

    Okay I can do this, I can set up IDs / passwords for each Ipad and join them to the domain via a profile manager payload (PITA but doable).

    Now this is the kicker, SLT have authorised students to bring their own I devices to lessons to participate in group application activities, however they will of course be on the wrong IP range.

    How can I fix this without any cost or routing (I'd like to keep the vlans separate - they are vlans for a reason!)? can I send a payload to a guest device without end user interaction?

  2. #2

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,665
    Thank Post
    850
    Thanked 893 Times in 738 Posts
    Blog Entries
    9
    Rep Power
    328
    This suggestion depends a lot on how your vlans are set up and what version of Windows (I sure Windows 7 can do this) you are running, and there may be other security implications (local firewall on the Windows PC's), but here's one possible solution:

    On the PC's running AirServer/Displaynote set up a virtual NIC, give it an IP or dhcp on your guest VLAN.

    Now the iDevices should see those AirServers as being on the same network without having to join your domain VLAN.

  3. Thanks to tmcd35 from:

    caffrey (12th February 2013)

  4. #3

    Join Date
    May 2010
    Posts
    1,029
    Thank Post
    105
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    That would mean tagging every port, its a possibility, plus forgot to mention all the machines are still on XP... (so airserver is moot afaik) I am going to recommend all the machines are upgraded to 7 during the summer.

  5. #4

    Danp's Avatar
    Join Date
    Jul 2011
    Posts
    1,446
    Thank Post
    78
    Thanked 168 Times in 148 Posts
    Rep Power
    147
    How many student devices are you expecting to have? We manually set proxy on all of our student devices, works out about 250'odd a year between the two of us.

  6. #5

    Join Date
    May 2010
    Posts
    1,029
    Thank Post
    105
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    On BYOD ? I've no idea of numbers yet - won't be a whole heap - seems a lot of work doing it that way, though I suppose once they are done they are done (although entering the network key would be interesting (how do you do that?)). The other issue with this would be lack of authentication on their devices - not a huge problem they would just have to be told to enter their domain username and password. Just trying to make this as transparent as possible!

  7. #6

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,665
    Thank Post
    850
    Thanked 893 Times in 738 Posts
    Blog Entries
    9
    Rep Power
    328
    What about suggesting SLT buy some AppleTV's for the guest lan rather than allowing unsecure devices on to the domain lan?

  8. #7

    Join Date
    May 2010
    Posts
    1,029
    Thank Post
    105
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    We have some appletvs on the guest network at present, but if they were on domain they'd be a bit more flexible with displaynote / airserver (cheaper too) and similar apps, plus I'm not a huge fan of them (dropouts, picture size etc.)

  9. #8

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,665
    Thank Post
    850
    Thanked 893 Times in 738 Posts
    Blog Entries
    9
    Rep Power
    328
    Damn you! I'm going to come with a creative solution that'll work even if it's the last thing I ever do...

    How about...

    Putting the PC's running airserver/displaynote on the guest network then setting up VPN's to your domain vlan for access to the secure stuff?

  10. #9

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,170
    Thank Post
    868
    Thanked 2,698 Times in 2,288 Posts
    Blog Entries
    11
    Rep Power
    772
    Quote Originally Posted by tmcd35 View Post
    Damn you! I'm going to come with a creative solution that'll work even if it's the last thing I ever do...

    How about...

    Putting the PC's running airserver/displaynote on the guest network then setting up VPN's to your domain vlan for access to the secure stuff?
    Domain trusted computers on an untrusted networks, ummmmmm, eeep.

  11. #10

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,665
    Thank Post
    850
    Thanked 893 Times in 738 Posts
    Blog Entries
    9
    Rep Power
    328
    Quote Originally Posted by SYNACK View Post
    Domain trusted computers on an untrusted networks, ummmmmm, eeep.
    Surely the devil is in the detail (aka, I can't come up with any better - can you?). I'm sure you can say the same about just about any VPN connection. The questions would be who as physical access/uses the machine(s) with the VPN connection(s), how does the VPN initiate and what does it have access to once it's connected.

    The other answer so far is to put BYOD devices on the domain...

  12. #11

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,611
    Thank Post
    647
    Thanked 1,616 Times in 1,446 Posts
    Rep Power
    421
    Surely the answer is.......Rasberry Pi????

    No?

    Ok then.

    Ben

  13. #12

    Join Date
    May 2010
    Posts
    1,029
    Thank Post
    105
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    You can see the conundrum I'm having, I don't think there is a single answer to it. It has to be one thing or another, can't think of one easy free solution

    I'm thinking raspberry pi, but rather not have a full distro of xbmc on there (plus I think it only mirrors video and audio correct me if I'm wrong)
    I looked around to see if some bright spark came up with just an airplay mirroring distro - not sure if one's been done yet.

    Got the raspberry pi working on lan via vlan no problem, but this still isn't going to help with PC apps (which is moot until they decide I can upgrade everything to windows 7)

    Hating apple one day at a time.....

  14. #13

    Join Date
    May 2010
    Posts
    1,029
    Thank Post
    105
    Thanked 87 Times in 64 Posts
    Rep Power
    49
    And now I've just had a brand new (cr)appletv taken fresh out of the box that will not connect to the wifi, no signal strength, nothing GRRRRRRRRRRRRRRRRRR

  15. #14

    Join Date
    Sep 2010
    Posts
    558
    Thank Post
    26
    Thanked 62 Times in 58 Posts
    Rep Power
    19
    with apple TV's found it easier to activate them at home.......... (i didnt thank god)

  16. #15

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224
    Staff IPads on the Domain IP range. Fine they are under your control so you can trust them. BYOD, no way even with NAC, accidents or maliciousness could turn your network to Swiss cheese before you knew what was going on.

SHARE:
+ Post New Thread
Page 1 of 4 1234 LastLast

Similar Threads

  1. 2 wireless networks and wired network
    By in forum Network and Classroom Management
    Replies: 9
    Last Post: 23rd November 2007, 01:12 PM
  2. SIMS and admin network support - Buckinghamshire
    By SpecialAgent in forum Educational IT Jobs
    Replies: 0
    Last Post: 13th July 2007, 10:12 AM
  3. Replies: 1
    Last Post: 30th April 2007, 06:10 PM
  4. *CRYING* Help with a BroadBand Router and our Network
    By ninjabeaver in forum Wireless Networks
    Replies: 25
    Last Post: 2nd December 2005, 10:50 AM
  5. Admin and Curriculum networks seperate?
    By woody in forum Wireless Networks
    Replies: 49
    Last Post: 2nd December 2005, 10:43 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •