Staff Wi-Fi Best Practice

[sarahstacey]

Hi,

 

We have Meraki WI-Fi network. I am reviewing our set up and I would like to ask how other schools manage their staff Wi-Fi connections.

 

We currently use a PSK, is there a better way?

 

Thanks for any help

[FN-GM]

Radius authentication all the way. Much better than a key that can be exposed and a pain to change without interruption to service.

 

Just out of curiosity what do you mean staff WIFI? Is this BYOD or school devices?

 

If it’s domain devices you can configure it to allow domain computers to join without having to touch the WIFI settings.

[TechMonkey]

We are moving to Dynamic PSK, via an onboarding system that ties to RADIUS. This means we will be able to control access based on logins but also that we will be identify what devices are attached and limit how many, but not have to worry about certificates.

[sarahstacey]

Thank you FN-GM

 

This is for Staff BYOD. We use radius for school owned pupil devices.

So yes, that is a good way to go. I don't why I hadn't considered that. Too much sun!

[Davit2005]

I would not use a pre-shared key (key shared between multiple devices) on its own. Back in 2010 it was to easy for students to get hold of that, somehow, that DSPK looks very interesting. Edited August 3, 2022 by Davit2005

[FN-GM]

Thank you FN-GM

 

This is for Staff BYOD. We use radius for school owned pupil devices.

So yes, that is a good way to go. I don't why I hadn't considered that. Too much sun!

 

The good think about Radius for BYOD is you can link it to their AD login. As soon as they leave they are also booted off the WIFI.