BYOD scope

[mrbios]

Seems our /23 BYOD scope has filled up.

 

What's the best solution to this? I obviously don't want to make the scope bigger as that goes against recommended maximum broadcast sizes. I guess i could have multiple BYOD vlans and have each building have its own? Seems a bit convoluted and a lot of work though. Suggestions?

 

Thanks

[DavePa]

Reduce lease time?

[win]

Shorten the dhcp lease time and see if it still fills up

[mrbios]

I've got it set at 8 hours at the moment, what would you recommend?

[win]

You can halve it to 4 hours for now and then take it from there

[DavePa]

Ours is set to 8hrs but we obviously don't have the number of users you do. You could try it at 4hrs but is people tend to be there for the day all that will happen is you'll generate extra traffic. If on the other hand people are only there for a few hours it might make a difference.

[mjk]

What's the best solution to this? I obviously don't want to make the scope bigger as that goes against recommended maximum broadcast sizes. I guess i could have multiple BYOD vlans and have each building have its own? Seems a bit convoluted and a lot of work though. Suggestions?

With 802.1x you can have a scope for each year group.

[mrbios]

With 802.1x you can have a scope for each year group.

 

Oh interesting, do you have any information on how to set that up?

[mjk]

Oh interesting, do you have any information on how to set that up?

Sure - so create a vlan for each yeargroup, then setup radius or NPS server to put the students into their yeargroup vlan when they authenticate.

https://technet.microsoft.com/en-us/library/dd283091(v=ws.10).aspx

[FN-GM]

Our lease time is 30 mins. Works ok

[mrbios]

I've set mine to an hour now. I'll see how that goes and if i need to create more space i'll create a second scope and split the school into KS3 and KS4/5, hopefully that would be enough. We've only had a handful of sixth formers complain that they can't connect so far (2-3 at best) so it's not an urgent problem yet but one i definitely need to keep an eye on.

[FN-GM]

I've set mine to an hour now. I'll see how that goes and if i need to create more space i'll create a second scope and split the school into KS3 and KS4/5, hopefully that would be enough. We've only had a handful of sixth formers complain that they can't connect so far (2-3 at best) so it's not an urgent problem yet but one i definitely need to keep an eye on.

 

What wireless do you use? Ruckus for example will let you pool multiple VLANS on one SSID and load balance them.

[mrbios]

What wireless do you use? Ruckus for example will let you pool multiple VLANS on one SSID and load balance them.

 

Aerohive, only installed it this summer, so I'm still getting to grips with things at the moment.

 

Prior to that we had a really half assed ancient Aruba setup.

[foofighterjim]

Aerohive, only installed it this summer, so I'm still getting to grips with things at the moment.

 

Yup, you can do this in Aerohive.

 

1. Go to Configuration> Advanced Configuration> Authentication> User Attribute Groups and create groups with attribute values that distinguish your groups (the values that get reported from the radius server).

2. Go to Configuration> Advanced Configuration> Common Objects> VLANs and create the necessary VLANs.

3. Go to Configuration> User Profiles and create new groups e.g. Students - KS3 & Students - KS5 and give them non conflicting Attribute Numbers* (possibly representative of step 1 if not already in use elsewhere in Aerohive) & VLAN from step 2. Expand advanced and select the appropriate Attribute Number Group* from step 1.

 

*Attribute Numbers & Attribute Number Group can't be changed after the profile is created but VLAN can.

 

HTH

[AlanD]

...if your BYOD network is /23 .... that would mean 8 million addresses are being used up.

 

I'm thinking something is not correct with your Aerohive units if you keep eating up this number of addresses.

[snagrat]

...if your BYOD network is /23 .... that would mean 8 million addresses are being used up.

 

I'm thinking something is not correct with your Aerohive units if you keep eating up this number of addresses.

 

/23 would be 512 addresses (technically less when taking the gateway etc into account)

 

Where you get 8 million from?

[FN-GM]

...if your BYOD network is /23 .... that would mean 8 million addresses are being used up.

 

I'm thinking something is not correct with your Aerohive units if you keep eating up this number of addresses.

 

/23 is 512 addresses? :confused:

 

/24 - 256

/23 - 512

/22 - 1024

[AlanD]

Whoops - sorry consfused network addressing .../23 is only 512 addresses....which would seem to be too small for most schools - as I guess students have at least a mobile phone in addition to any BYOD tablet. I think I would want a lease time of at least a working day - 8 hours, because of a change of IP address (if a renew resulted in one) would force a re-authentication.