Additional SSID

[sarahstacey]

Hello,

 

Please could I have some advice.

 

We have 3 SSID's Student, Staff and Guest.

 

I would like to change our Staff SSID to radius but we have some NEST controllers and other things on this SSID.

 

I can't add them to pupil as it's already radius. If I add them to Guest I would have to keep changing the passwords on these devices.

 

So, I am thinking of adding another SSID just for these devices.

 

Would this be a good idea? Am I missing something?

 

Many thanks

[ZeroHour]

I would have an IoT type SSID which is vlan'ed off the main network myself.

[Davit2005]

I'd defo keep IoT on it's own network and allow minimum traffic to your main network only if necessary i.e. DHCP/DNS/NTP etc. via ACL or network firewall. Suggest at the firewall because it is generally easier to manage the ACL on a firewall rather than a switch and the rules can be on one device with the possibility of better more in depth logging, troubleshooting etc. :-) Edited September 1, 2023 by Davit2005

[FN-GM]

Personally I would merge Staff and Students into 1 SSID and have a seperate IOT SSID.

 

Although anything BMS related on our system is hard wired due to being classed a critical to the functioning of the faculties.

[Davit2005]

Generally the less SSIDs the better. You should be able to use radius on the same SSID for the Staff and Students then you could designate different vlans for each based on AD groups if need be.

 

I have that at home, some devices IoT devices of mine don't support 5Ghz so I have a IoT SSID that only supports 2.4Ghz but another SSID that uses MSPK via Radius. I can then put any device that supports both 2.4Ghz and 5Ghz on the same more RADIUS SSID and designate it's vlan to be the same as the IoT network via radius keeping SSIDs down to 2.

 

Both my wired IoT and wireless IoT can use the same vlan.

Edited September 1, 2023 by Davit2005

[sarahstacey]

Thank you all for your replies.

They are really helpful.

Start of term is proving mad as usual, so I will investigate when I can!