Guest network

[Shadow_Walker]

At the moment we are setting up a transparent proxy to be used in the school. When it is up and running the students in theory will be able to connect to the student network and just enter there ad username and password and be allowed onto the internet. We would like also to have a guest network. The idea at the moment is to print off new visitor badges with a username and password on the back of each one. So once they are signed into school, reception will give them the visitor badge and then that is it. The only worry at the moment is if the kids somehow manage to get hold or see a username on a badge they could just log into the guest network instead.

 

Just wondering how other people have a guest network set up.

 

Thanks

[fairm010]

Our guest wireless network has voucher based Auth. The receptionist signing in the visitor will ask if they need wireless access and provide them with a voucher. This voucher expires after a defined period (Hour, Day, Week)

 

Wireless is UniFi

[robjduk]

we tried the guest auth thing and it just fell on its arse. Our reception forgot how to issue badges most days and the process required installing a profile which some devices didn't like (kindles and windows phones were a no and macbooks were a little funny)...

 

In the end we just gave a site wide key to all which was locked down to basic student access as we figured there was nothing anyone can get to which will cause them problems (confident in Lightspeed filtering).

[Shadow_Walker]

Any more ideas?

 

We though about just changing the password each week and giving the new password to the office every monday morning.

[robjduk]

I was going to do that but my headmaster asked why the need to change it and you know.... I didn't have a response. Long as its safe and secure, I wouldn't worry about changing the password to often as it will just create confusion among the muggles.

[Shadow_Walker]

I was going to do that but my headmaster asked why the need to change it and you know.... I didn't have a response. Long as its safe and secure, I wouldn't worry about changing the password to often as it will just create confusion among the muggles.

 

Should have been more clear we will change the password of guest username e.g. guest 01 guest 02. The guest and student wireless will have no password on it but will need to be authenticated via AD to get access. They will all have the same password but we can still pull up reports if something strange has been searched on the network. We are not worried about the fact of a kid getting there hands on the guest pass and seeing the ad username and password. What we have concerns about is if then kids use that ad username and password on the guest network instead of the student one they will still have filtered access but we won't know which kid has searched for what.

[Edu-IT]

How will they get hold of the details, unless a visitor gives them away which is unlikely?

[Shadow_Walker]

How will they get hold of the details, unless a visitor gives them away which is unlikely?

 

If a student is working with a visitor then sometimes visitor badges are taken off and left on the desk. The student could look at the details which are on the card.

[Edu-IT]

If a student is working with a visitor then sometimes visitor badges are taken off and left on the desk. The student could look at the details which are on the card.

I see.

 

If you just put random details on the back, will it be obvious what they are?

 

Such as just printing this on the reverse as an example username and password:

 

1a346zf / 2a3gzyt

 

Reception can just explain that network details are printed on reverse.