Caretakers wlan

[sparkeh]

I'm assuming it's at the caretaker's house - they're often right next to the school.

 

Yes I was assuming that, if its his own house then thats a different matter

[jcollings]

I'm assuming it's at the caretaker's house - they're often right next to the school.

 

As I see this it doesn't matter if it's his house or school's house. If it's his personal home broadband that is unsecured it's his business (like it would be if the students were connecting to one anywhere with the vicinity). The fact he is an employee of the school is irrelevant - it's not a problem with his professional duties or his performance.

 

If you were to connect to it and interfere with his computers/setup torrent downloads etc you would be the one breaking the law.

 

It's not very smart for him having an unsecured network but I don't see as there is a lot you can do about it.

[K.C.Leblanc]

It's not very smart for him having an unsecured network but I don't see as there is a lot you can do about it.

 

Although it might be a good idea to point out who's door the Police will come knocking if his internet connection is used for something illegal.

[Ric_]

That was one of my worries however you cannot connect the laptop to 2 networks at the same time, and you cannot setup a dedicated bridge without knowing my network details.

 

You could connect two laptops together with cable and put one on my network and the other on his but I dont think that is likely to happen.

 

I cannot think of any other ways that someone can get access to the internal network (unless I missed anything, I am all ears on this )via his AP because I would only have to make a quick call to the LEA and they'd go mental and that would do the trick with clueless management.

 

I didn't mean that they would use your laptops to gain access - what's stopping them popping a Linux-based laptop in a hidden corner? The caretaker is then providing the last 'hop' from the 'net to your network.

[featured_spectre]

his house or not, after school hours, he cant use the school internet, as it is deemed business use only. He probably got his own so that he doesnt need to muck around using the schools internet. Our caretaker did the same thing and as we get on well and do each other favours all the time, I set it up in around 10 minutes (includes 3 laptops and 2 desktops). He got me a bottle of scotch in return!

[jdh201]

You should use AD to lock down you own wireless settings. You can't attack someone else's network to get them to change something. If it wasn't your caretaker it could just as easily be another neighbor or even a students cell phone that has tethering enabled on it. Point being you need to do the right thing and that is protect your students using your technology in a legal way.

[Guest blacksheep]

The caretakers house is on school ground, making his house a council owned house.

 

IMO I do think he has to abide to the school network policy and he has been offered technical help too.

I can see how he would take it as an insult. I havent told him to do anything as I am quite aware (from other staff!) that it could turn into a war and as management here are rather good at the art of delegating things they should be doing, I wasnt going to get into that

I have just been transparent about the implications and shown him a few laptops. It has taken a few weeks but last night he has switched to WPA Hopefully nothing will change as he has yet to setup all the clients as he said he hasnt got access to them all (his kids have!) (Hopefully wpa capable nics)

 

So how do you guys deal with pupils bringing laptops in or IPhones etc... ? Know here is something I have had to lock down my wlan settings for, although nobody has setup a dhcp server on a peer to peer network here yet Not as worrying as external internet access though. I spoke to the old head who left a while ago, he said they were banned.. I thought ffs open your eyes

Edited May 1, 2009 by blacksheep

[SteveBentley]

IMO I do think he has to abide to the school network policy and he has been offered technical help too.

 

But if it's his own private broadband connection it's nothing to do with the school network and thus nothing to do with its policy.

 

Treat it as if it were any other property which neighbours the school, over which you have no influence.

[localzuk]

So how do you guys deal with pupils bringing laptops in or IPhones etc... ? Know here is something I have had to lock down my wlan settings for, although nobody has setup a dhcp server on a peer to peer network here yet Not as worrying as external internet access though. I spoke to the old head who left a while ago, he said they were banned.. I thought ffs open your eyes

 

We have an authenticated network - devices only work if they are on our allow list (their MAC address), which then adds them to the appropriate VLAN.

 

The thing is, you're not going to be able to stop rogue devices allowing bridges to be formed unless you implement some form of Network Access Protection, and possibly something like Aruba's rogue device blocking system. And these can cost a fair amount of money.

[Guest blacksheep]

We have an authenticated network - devices only work if they are on our allow list (their MAC address), which then adds them to the appropriate VLAN.

 

Have 2 Vlans here but they are linked to SSIDs. All protected by WPA with a large random key so not worried about that (havent setup mac lists as I am confident nobody will break the WPA code, and yes mac lists help but I dont see the need yet plus that can be sniffed if they were to go as far as hacking WPA although admittedly is extra cover).

What I saying was the same problem of the pupils figuring out how to alter wlan settings on laptops leaves me with no choice to lock em down! ie. They could then try to connect to any wlan device like their pda, laptop etc.. (and usually bugger up the school wlan settings doing it)

rogue devices allowing bridges to be formed

 

How? Theyd need authentication with the main network

[p858snake]

But if it's his own private broadband connection it's nothing to do with the school network and thus nothing to do with its policy.

 

Treat it as if it were any other property which neighbours the school, over which you have no influence.

 

If it's school property, it might (not from UK so not a expert on the law) matter actually. I would see it no differnt than a teacher getting a internet service installed directly into their classroom and using that (and yes i know that should never be able to happen... but you will be surpised what can happen).

[Guest blacksheep]

manglement said, "yes it is school property" not that they done much but that was mentioned.