Guest WiFi for temporary visitors

[robk]

For the last 10 years we have been using Ruckus Wireless with Smoothwall. So we use the Ruckus guest pass system for visitors and one SSID uses the Ruckus self service guest pass system for visitors to that area of the school.

 

We are going to slowly change the wireless network (likely to be Cambium, but that isnt fixed as yet).

 

What I am looking for is a guest pass system that will work with both wifi systems. Are there any good suggestions?

 

I would use the Smoothwall captive portal, but I can't make this do guest passes as far as I know.

Edited May 30, 2021 by robk

[Rob_D]

Could you use NPS and just have guest AD accounts?

[mdrabble]

Use to use a generic AD user with no home drive or any other kind of access except for internet access.

 

It used a script which ran at night to generate a random password and then email it to reception and us.

 

Worked well before we moved to UniFi and used their guest system.

[Katy]

We have a single SSID used for everything, 8021X to NPS where there are multiple connection request policies. One of them is for guest access, based on "if the user is a member of "GuestWifi" group" and puts them on the appropriate VLAN. We then have a program which receptionists use, linked to receipt printers, to create "guest wifi tickets" with unique login, time restricted from 1 day up to "never expire". This creates an account in AD which doesn't have access to anything (and we use the "restrict logon to these workstations" option to limit it to a single machine name which doesn't exist, to prevent attempted local network logins). There's then a script which deletes the expired accounts daily.

[smithson83]

@Katy Sounds like a great way of doing it. Is it a custom app/script or a paid for solution? Would be interested in doing something similar.

[IrritableTech]

@Katy Sounds like a great way of doing it. Is it a custom app/script or a paid for solution? Would be interested in doing something similar.

@Katy has a super blog. Some useful information here I think... https://katystech.blog/2020/08/wireless-guest-account-management/#more-380

[Katy]

@Katy Sounds like a great way of doing it. Is it a custom app/script or a paid for solution? Would be interested in doing something similar.

 

Yes as mentioned already, there's some info on my blog and the code on my GitHub. It's hard coded for Epson T88 printers at the mo (we have one of these with the ethernet card at each reception plus one in our office. You install the Epson port mapper to map e.g. COM7 to the printer's IP and then you just send data at it).