We currently have two SSID's broadcast throughout campus, our corporate dot1x SSID which does role assignments based on RADUIS attributes, and our guest wpa2-psk SSID which gets routed out our guest network. I'd prefer not to put students on the guest network for their non-dot1x capable devices, so I wanted to see how other schools are handling this.
We are seeing more and more non-dot1x capable devices that students are bringing on to campus, from portable (and fixed) gaming devices to video playback (Roku for now, but I'm assuming that Chromecast is also not capable of dot1x authentication).
Those fixed devices with USB ports, we had an unpopular, but easy answer for, purchase a USB dongle. However, devices like Roku set top boxes aren't quite as easy, there's no ethernet port, no usb port. At this point I also don't want to broadcast another SSID and do MAC authentication, so I'm wondering - is there a better free option?
Are there any other schools who have struggled, or are struggling with this issue?