Wireless networks in the school

[kamikaze]

We are trying to find a solution that we can install in the school whihc allows self registration but limits any single person to 3 wireless devices. We have been in talks with Ruckus whose kit is excellent but their only solution at the moment for this requirement is to issue each user with 3 pre-shared keys. The idea of this system is to reduce our admin overhead not increase it.

 

Is anyone out there using this kind of system and if so are there any recommendations?

 

Thanks

Mike Taylor

[plexer]

Why the restrictions?

 

Could you use dhcp in allow mode?

 

Ben

[paulfinlay]

Have a look at http://www.aerohive.com, they can do self registration as well as concurrent connection limiting.

[jamesfed]

We use aerohive here as well but take it one step further - we've intergrated it with our AD so no need for keys users just login using their normal username/password.

We get users to register using a paper form which parents have to sign (unless in 6th form) and once returned we add them to a WiFi users group and they are allowed to join.

[cpjitservices]

You could take a look at PFsense firewall, it can limit certain MAC addresses from logging into certain parts of networks, or you can specify the only parts of the network it can connect to (hardware), but also I dont think it's self-registration I suppose it could be.

 

On another note though best thing about pfsesne is that if you have visitors to the school and they want to check email or something on th internet they dont need an account, pfsesne gives them a temporary voucher number which they can use for a limited time, in places where you specify.

 

http://www.pfsense.org/

 

Hope this helps

[kamikaze]

Have a look at http://www.aerohive.com, they can do self registration as well as concurrent connection limiting.

 

Thanks Paul,

This looks like the kind of thing we are after - will calll them today.

Mike

[kamikaze]

We use aerohive here as well but take it one step further - we've intergrated it with our AD so no need for keys users just login using their normal username/password.

We get users to register using a paper form which parents have to sign (unless in 6th form) and once returned we add them to a WiFi users group and they are allowed to join.

 

That's perfect James - will call them today. Really appreciate your help here.

Mike

[RTFM]

Think we use Netgear radius and that links back to AD. Sixth Form connect to the wireless with a key, but can't do anything until they login via a web page which auth's them against AD.

 

Would something like that do the job?

[fr4j0]

Have a look at http://www.aerohive.com, they can do self registration as well as concurrent connection limiting.

 

Does it do this with AD server authentication with regards to self-registration , or does the aerohive do this stand-alone?. Is this limited to single user device with regards to concurrent connection (MAC spoofing more than one device) - or account based/password?

[psillars]

Hi,

 

It may be worth chatting to Meru networks as I think this is something they may offer in their range of wireless products.

 

Paul

[paulfinlay]

Does it do this with AD server authentication with regards to self-registration , or does the aerohive do this stand-alone?. Is this limited to single user device with regards to concurrent connection (MAC spoofing more than one device) - or account based/password?

 

The web self registration is a standalone feature that lets a guest user create a temporary account. it's also possible to integrate the web portal login to a AD backend for authentication if you wanted staff or students to log in for internet access for example.

 

Concurrent connection filtering is done per user, so a user can have x number of mac addresses connected at the same time. MAC spoofing is therefore pointless.

[MarkPower]

We are trying to find a solution that we can install in the school whihc allows self registration but limits any single person to 3 wireless devices. We have been in talks with Ruckus whose kit is excellent but their only solution at the moment for this requirement is to issue each user with 3 pre-shared keys. The idea of this system is to reduce our admin overhead not increase it.

 

Is anyone out there using this kind of system and if so are there any recommendations?

 

 

 

Thanks

Mike Taylor

 

 

I can confirm that this is a feature request that has been passed to Ruckus to cap the number of devices and is in disucussions but with no definative answer as of yet.

[RabbieBurns]

We have Enterasys wireleass gear, and with the NAC addon we have self-service wireless registration and can specify the number of devices per user.

 

Its not cheap though