Printable View
/shrug
I let our kids access Twitter on our main computers. On the guest wireless I allow pretty much everything, with the exception of porn.
My logic is that if the kids have 3g access, they'll access it anyway. If they access it via our wifi, we can at least track it.
Guys,
What about following on from Ashm post. Could I VLAN tag the ports on the 4208 that the smoothwall vm and zonedirector and the connecting trunk together. Then vlan the ap port and uplinks on the edge switch. Exclude the bank of addresses from my 2k8 r2 DHCP server and setup the Zonedirector to act as a DHCP. Then use a WPAD.dat held on the zonedirector to point at the smoothwall, setup to identify by location (groups of IP). We already ident by ip for our Android tablet deployment.
Would that work?
Why not use the Smoothwall server to do DHCP + DNS on the guest VLAN, it would probably keep things simpler. There would be no need for WPAD.dat if you use set up transparent proxy on the guest VLAN interface on the smoothwall server. This would be best for visitors as it's more likely to work without any extra configuration on the different types of devices they may bring in.
There would be no need to exclude any addresses from the 2k8 r2 SHCP server in this case as everything is kept separate which is cleaner in my opinion. You can use whatever IP range you like for the guest VLAN.
I am only running network guardian. Don't think it has DHCP. But will check tomorrow. I may have to use the DHCP of the zonedirector.
How can you track it on the guest network without auth?Quote:
Originally Posted by DrCheese
You can see the logs of whats been accessed, not necessarily trace that back to a specific user though.Quote:
Originally Posted by Ephelyon
I'd want to know. Accountability is paramount and the Network Manager's ability to secure that for the school is key.Quote:
Originally Posted by RTFM
Our guest network is setup with NTLM auth, they hit smoothwalls SSL login page when they try to access the Internet.
They can't get on without entering their school username/password.
How does a guest user do this? Or is your guest actually your BYOD solution so its only used by internal members of the school?Quote:
Originally Posted by DrCheese
I assume guest to be, external to school / visitor so has no AD credentials:)
ah, Guest users can get a temporary AD account from Reception, the person that books out our public resources, or IT Support.
These staff can write down the users name & how long they'll need it for on a PHP page, when that expires we reset the password ready for the next time it's issued.
Ahhh ok, makes sense :)Quote:
Originally Posted by DrCheese
Similar here.