[ipad] Class sets and radius

[caffrey]

How do you all manage your class iPad sets in a radius wifi environment ? We also have a set that we loan out if they haven't got their own or haven't got one - having to sign in on the wifi for updates etc. and signing them out after they come back is tedious

[Blue_Cookeh]

We just use machine authentication on the iPads. It works quite well because we can match up the times certain pupils use certain iPads (they're assigned on a 1 to 1 or 1 to 2 basis generally) with our filtering logs if anything goes wrong.

 

User authentication was just too clunky :/

 

We do have some that require authentication via a captive portal on Lightspeed instead on another SSID, in this case we just whitelist all Apple and Meraki domains so the iPads can still update and contact our MDM whilst signed out.

Edited September 6, 2016 by Blue_Cookeh

[caffrey]

I would use machine authentication but I'm using Smoothwalls BYOD solution, I could just use the Guest network and Authorise them on the Unifi interface for permanent access and we do keep records for bookings but this would interfere with the new safeguarding reports and regulations.

 

I moved away from open wifi this summer because of the new safeguarding regulations, so I guess there is no real easy way now and you're certainly not wrong about clunky!

[Arreks]

We use a single service account that's rolled out to all the iPads, the user then authenticates with their AD login through Sophos web portal.

[caffrey]

I was considering using the Smoothwall portal too but was unsure what issues that would bring up (Cookie session / tab / SSL logins or not) so stuck with radius as for the most part it seems to work well