Radius server that can authenticate a user through WiFi

[genesis]

Hi

 

We are a secondary school and have implemented Ruckus wireless and we have 1000 students and the management have asked to provide Wi-Fi access to the students.

We are also using NetSweeper as our internet filtering system. The domain joined laptops and PCs gets the NetSweeper’s WA agent and SSL installed and appropriate filtering policy are applied as per the logged in user.

 

Now the management have asked to provide internet access to the students. The students may use their smart phones, iPad’s, etc….

 

I am planning to install a radius server on our network and please let me know the best way to move forward on this.

 

Please let me know if you have experience using any software, which can provide Wi-Fi authentication on user basis.

Any help would be great.

Thanks

[3s-gtech]

We use NPS Server, built into Windows Server. That manages the policies and connections, and it works pretty well for us. Users just use their domain\username and password on their devices to connect (though Android can be a bit fiddly).

[DalekSec]

We also have Netsweeper and Ruckus and have a RADIUS controlled SSID, like gtech said best way to go is NPS Server in Windows Server.

[genesis]

For staff, we don't give any WiFi passwords to them , rather we connect their laptops to WiFi network.

To connect their smartphone and other devises, we ask them to come to IT and we key in the password(Passphrase) on their devises.

 

Have you done the NPS for both staff and students ?

If the user needs to authenticate through NPS-

Will they need connect to their SSID first ?

and will it prompt for domain user name and password?

[3s-gtech]

NPS for students and staff. They connect to the SSID and it asks for the username and password in the join dialog - just like entering a WPA2 key.

[DalekSec]

NPS for students and staff. They connect to the SSID and it asks for the username and password in the join dialog - just like entering a WPA2 key.

Same as this, any BYOD device connects to the RADIUS controlled SSID and asks for their AD creds.

 

The school owned staff devices are done on the machine being a member of an AD group