vlans for ipads and chromebooks

[ADMaster]

Hello folks,

I will have some chromebooks and ipads on the network this year and need to add / expand my dhcp scopes and vlans to accommodate them.

I have dynamic vlans setup with the radius server, so depending on your username / group membership you get a different vlan.

Currently that is staff, student, ipad for school owned devices.

The ipads currently connect with one generic username. I am considering splitting this into three user accounts, and doing the same for the chrome books. This would potentially allow each device group to get its own subnet, allowing me to apply content filtering at the building level.

 

I am considering 9 smaller vlans , or 3 larger ones.

ES chrome, ES Ipad, ES Students (Domain laptops / netbooks); none at this time.

 

MS chrome, MS Ipad, MS Students (Domain laptops / netbooks)

 

HS chrome, HS Ipad, HS Students (Domain laptops / netbooks)

OR

ES students, MS Students, HS Students

 

What are the pros and cons for either of these scenarios?

Thanks,

[iom100]

It's your network - do what you like.

 

We also do dynamic VLAN stuff, but each of our iPads has it's own AD account, allowing us to trace abuse/oddness quite quickly. We've chosen to push all iPads onto the same VLAN and subnet (/24 I think) as it makes multicast stuff like Bonjour for printing and Airplay to Apple TV much simpler. It rather depends on what sort of numbers you need. At the moment we have less than 100 iPads so it's not a problem.

[ADMaster]

Thanks Ian,

The ipads in each building will be on the same subnet, so the multicast etc should work fine.

I’m just wondering for each building do I combine the devices into a single /22 or /23 OR have 3 /24s?

Is it just a matter of personal preference, or are there any technical / security / ease of use reasons to go one scenario over the other.

Are broadcast domains an issue?

Will the bonjour traffic be a hindrance to the rest of the network? If I recall the old apple talk protocol was very talkative.

A reason to separate them would be reporting, I could tell by the IP weather it was IPad and what building it should be in.

I understand it is ultimately my decision, but I’m looking for advice in which direction to go and why.

 

Thank you,