WiFi access

[tony85wild]

Hi,

 

How do you manage WiFi access at your school/business? I currently have 3: Staff, Student and Guest.

 

We don't really use the guest network as most people prefer to use their own 4G connection.

 

I don't think we need 1 for staff and 1 for students.

 

Any advice would be great.

 

Thanks

[mavhc]

domain joined machines I control fully, then staff byod, student byod and guest byod. Guest doesn't filter ssl because they're adults. Staff and Student have mac authentication so I can easily disable a computer from wifi. They all have different ACLs too

[FN-GM]

I would have a single WIFI for your owned devices and BYOD. You can control what devices are in what VLAN via radius. For example you could set computers in the Domain Computers group in VLAN 10. People in the Students Group in VLAN 20 and Staff in VLAN 30.

 

For guest WIFI have a separate SSD with a captive portal.

[6Foot2]

We have 4 Wi-Fi networks:

 

• School owned devices
  
• Staff
  
• Students
  
• Guests
  

[Sibrows]

We have three generally available across the site:

- Staff (domain connected devices, school owned etc...)

- Students (1:1 iPads no personal devices)

- Guest (Guests and staff personal devices, no student devices)

 

Then in our training suite we have an additional Wi-Fi network with SSL filtering turned off. Captive portal enabled and a specific password for each event. As we can have 100+ people in of an evening installing SSL certificates isn't practical so we filter the domains. Students don't have access to the floor with our training suite on it and it isn't broadcast anywhere else in the school so the impact risk is reduced but still there.