Username101

Love the sound of this! Thank you @Rob_D

Firstly, I apologise for my lack of expertise in this field. This isnt something I have had to implement before. Here is my scenario: So like most schools we have the following devices that require wireless access: Domain joined PC's Domain joined Laptops iPads Interactive screens Around 20 non domain joined PC's (acts as a kiosk for youtube access only) Guest devices Staff personal devices I am aware that many SSID's cause a world of pain, but with my limited knowledge this is the best way I can describe what our desired outcome would be. What we need: A main SSID for domain joined devices only, with access to multiple vlans for resources etc. An SSID servicing pupil iPads and interactive screens An SSID servicing staff iPads An SSID for the non domain joined PC's where it can be secured off our main network through a VLAN A Guest SSID where staff and guests can get 'unrestricted' (to a certain degree) access. The idea of the mutiple SSID's is so that a certain IP scope can be defined and then filtered at the firewall, and/or can be secured through VLANs. I have setup 802.1x as a 'main' SSID and connected all domain joined devices through gpo. This works perfectly, as no user input is required, and is filtered based on what user is logged in. Also stops unwanted devices joining the network. But I am now stuck on how to manage our other devices. We do have a captive portal which could be implemented somewhere, but it is not the best. We are also an SEN school, so many of the students will be unable to log into a captive portal easily, at least not without staff help. Something else to note is, we currently have Aruba and Ruckus servicing the same SSID's across two schools on the same site. We are upgrading the ruckus to Aruba later in the year so it'll all be the same. TLDR;I need to seperate wireless devices so they can be filtered seperately without causing a busy airspace with multiple SSIDs. Also needs to be easy for students as its in an SEN school. If you were in my shoes, what would you implement? Open to all suggestions. Thank you for reading!