CESIL Posted November 18, 2013 Posted November 18, 2013 Hi All, I have just started installing UniFi APs and would like some advice I have set up an internal and guest SSID and the Android tablets we have here are working fine with the internal one as the management software allows me to configure the proxy settings for all devices. But guest devices are another matter...I have to manually enter the proxy settings to get internet access. So obviously I would like to have the proxy settings supplied automatically. My question is what is the best way to do this...we connect to t'internet through our LEA via their Squid server(s) and filtering is done by them. Would I be able to run a transparent proxy here that would forward guests to the LEA internet access and if so what would be the best way to do this? Ta muchly for any help
soveryapt Posted November 18, 2013 Posted November 18, 2013 Assuming you're running your own DHCP server, you could put an auto configuration link in WPAD so that as long as the client has the auto detect settings turned on for their device, that should setup the proxy settings for them. It's what I do here and seems to work well for the few people who use it. 1
IrritableTech Posted November 18, 2013 Posted November 18, 2013 (edited) As @soveryapt suggests a WPAD file via DHCP is the most seem less route (there are issues with devices seeing a transparent proxy as a man-in-the-middle attack). Unfortunately, WPAD support is limited. I wrote a couple of blog posts on my findings around this subject which may be of some help? Try this one for starters... http://irritabletech.co.uk/2012/06/byod-infrastructure/#more-549 You need to offer the full suite of options to cover the most devices. We ended up with WPAD, hosted pac files and manual proxies. Ended up creating handouts for the different devices. We've ended up now removing the proxy altogether. Previously only the more IT savvy users were managing to get online, now it regularly hits the 100 mark. Edited November 18, 2013 by IrritableTech
twin--turbo Posted November 18, 2013 Posted November 18, 2013 Quick Q... Are you seperating off the guest clients from your main lan with a vlan? Rob
IrritableTech Posted November 18, 2013 Posted November 18, 2013 Quick Q... Are you seperating off the guest clients from your main lan with a vlan? Rob Me? Yes, and access lists.
CESIL Posted November 18, 2013 Author Posted November 18, 2013 Quick Q... Are you seperating off the guest clients from your main lan with a vlan? Rob Not yet, but I was going to do that once I got the proxy issues sorted. Would setting up the vlan first make the proxy thing easier?
IrritableTech Posted November 18, 2013 Posted November 18, 2013 You can set up different WPAD files per vlan which can be handy, but the vlans don't make it any easier.
twin--turbo Posted November 18, 2013 Posted November 18, 2013 You can set up different WPAD files per vlan which can be handy, but the vlans don't make it any easier. But do you want guest on the same physical network as your students and servers? Rob
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now