+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Wireless Networks Thread, Dirty internet access line in Technical; I'm getting asked increasingly whether a student can attach their laptop to our network for internet access only. I don't ...
  1. #1
    randle's Avatar
    Join Date
    Dec 2006
    Location
    Chelmsford, Essex
    Posts
    597
    Thank Post
    66
    Thanked 16 Times in 15 Posts
    Rep Power
    19

    Dirty internet access line

    I'm getting asked increasingly whether a student can attach their laptop to our network for internet access only. I don't like this idea at all really due to not knowing what's on their laptops but i know at some point in the future this will be a request from the headteacher. A previous company i worked at had a seperate "Dirty line" (I'm sure it was called that) that was used by customers for internet access only without giving them any access to the network. Can this be configured? Over wireless?

  2. #2
    SteveD's Avatar
    Join Date
    Jun 2006
    Location
    North West
    Posts
    17
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Dirty internet access line

    We have a dedicated wireless Vlan & filter through SchoolGuardian. We also enforce MAC authentication so the students have to bring their laptops to us before they can get on the network. We also stipulate that they must have our AV software installed which reports back to us any problems (F-Secure, not brill but free via our LEA!). As the student laptops are 'unauthenticated' they drop into the default group on Guardian which is heavily filtered. This makes the monitoring easy. There are duty of care issues which need the logging so be careful if you just tip them out through another connection.

    Steve

  3. #3
    SteveD's Avatar
    Join Date
    Jun 2006
    Location
    North West
    Posts
    17
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Dirty internet access line

    forgot to mention...

    don't rely on the wireless key for security - there are plenty of ways to lift it from one laptop and move to wherever!

  4. #4

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    740
    Thank Post
    17
    Thanked 106 Times in 66 Posts
    Rep Power
    37

    Re: Dirty internet access line

    Hi,

    We are looking at this kind of setup as well where the 6th Form students buy their own laptop and when they are in school they will be able to access the internet, their my document and our VLE.

    We are proposing to use a completely seperate VLAN for this and use 802.1x authentication against a RADIUS server (IAS connected to the CC3) that will then allow them to use their normal network logon to login to the wireless network. What i mean by logging on to connect to the wireless network not logging on the OS as these will be configured by them we don't want that hassle.

    The unmanaged wireless vlan will be connected to our firewall and web filter and will filter out web access appropriately.

    For us its pretty easy or easier to setup because we are already utilising the vlans in our school.

    HTH,

    Ash.

  5. #5

    GrumbleDook's Avatar
    Join Date
    Jul 2005
    Location
    Gosport, Hampshire
    Posts
    9,967
    Thank Post
    1,352
    Thanked 1,814 Times in 1,126 Posts
    Blog Entries
    19
    Rep Power
    600

    Re: Dirty internet access line

    We do not want to give them unfiltered access. We are going to be setting up a separate WLAN that only allows traffic on :443 to a single box ... the students use that to access Secure Global Desktop and then onto a TS box where they log on with their school account.

    It keeps everyone happy.

    Our system is setup by The Cutter Project and they will be explaining more at the conference

  6. #6
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    945
    Thank Post
    98
    Thanked 128 Times in 102 Posts
    Rep Power
    48

    Re: Dirty internet access line

    In Kent we use the KCN so if they do connect with no proxy settings it goes through the Primary School Filter.

    Makes things a lot easier, but Students are not allowed their own laptops in due to the Electrical Testing Hazard.

  7. #7

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426

    Re: Dirty internet access line

    but Students are not allowed their own laptops in due to the Electrical Testing Hazard.
    What's that then?

    Ben

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,807
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Dirty internet access line

    Using PacketFence in anger.

  9. #9
    BKGarry's Avatar
    Join Date
    Mar 2006
    Location
    Kent
    Posts
    945
    Thank Post
    98
    Thanked 128 Times in 102 Posts
    Rep Power
    48

    Re: Dirty internet access line

    Well Every item that is plugged into the School Electrical System should be electrically tested atleast once Per Annum for damaged and H&S risks. If a student it using their own one, any damage to power is not likely to be reported at all. Therefor a frayed cable that isn't reported is a fire risk etc etc

  10. #10

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,966
    Thank Post
    519
    Thanked 2,502 Times in 1,942 Posts
    Blog Entries
    24
    Rep Power
    841

    Re: Dirty internet access line

    All personal equipment (which is only allowed in for things like school fair's) has to be PAT tested by our site manager before it can be used. Otherwise it is a liability.

  11. #11

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426

    Re: Dirty internet access line

    hmm yes I know what PAT is but the timescales as talked about in another thread seem to be personal preference.

    Using packetfence you'd only allow them to connect once it had been tested and presumably expire it after the year so it has to be retested?

    Ben

  12. #12

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,807
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Dirty internet access line

    Quote Originally Posted by plexer
    Using packetfence you'd only allow them to connect once it had been tested and presumably expire it after the year so it has to be retested?
    I suggest you skim read the FAQ

    http://www.packetfence.org/dokuwiki/doku.php?id=faq

  13. #13

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,320
    Thank Post
    681
    Thanked 1,651 Times in 1,472 Posts
    Rep Power
    426

    Re: Dirty internet access line

    Why?

    Ben

  14. #14

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,807
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Dirty internet access line

    Because the answer to your question is 'it depends'.

  15. #15
    Samson's Avatar
    Join Date
    Mar 2007
    Location
    Wales
    Posts
    201
    Thank Post
    7
    Thanked 1 Time in 1 Post
    Rep Power
    17

    Re: Dirty internet access line

    Over here its a big fat no to kids wanting to use personal equipment. A few use laptops on battery power, but no internet, and any caught trying to connect to the network are dealt with seriously for breaching security.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Blocking Internet Access
    By jcollings in forum How do you do....it?
    Replies: 29
    Last Post: 24th January 2008, 09:24 AM
  2. dirty little secrets
    By mattx in forum General Chat
    Replies: 1
    Last Post: 29th October 2007, 10:27 AM
  3. Restricted Internet Access
    By deepusurana in forum Windows
    Replies: 3
    Last Post: 23rd October 2007, 04:51 PM
  4. disabling Internet Access help!
    By Gardinho in forum Windows
    Replies: 3
    Last Post: 5th July 2007, 02:17 PM
  5. Internet Access Captchas
    By pete in forum Jokes/Interweb Things
    Replies: 0
    Last Post: 5th April 2007, 07:02 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •