Security

Hi there,

we are interested in a Aruba wifi solution.

We want the teachers to connect to the wifi with a radius.

but some teachers have sons and daughters on the same school.

So in theory the teacher can give his/here username and password to there child and the child can go on the wifi network.

How can make it more secure ?
I think it is possible to do Mac filtering and radius, but then it is more work for me.

Is there a build in solution ?
Or do we need to look for an app/program ?

Thanks

gr kloenie

Its always god policy to give everyone their own username and likely to give teachers and students different roles.

You can also use machine authentication. So if the student has the teachers laptop, username, and password there isn't much you can do... except discipline the teacher for giving out their password.

Machine authentication is one option, allowing you to set differing roles depending on whether the machine successfully authenticated as well as the user (easier for Windows domain joined machines; but you can trick the system by adding the MAC of other devices to the controller's database)........... but if you are truly worried about credential sharing, then I suggest you look at implementing a solution based upon unique device credentials; whether it is EAP-TLS (certificates) or ClearPass Onboard; with its certificate and unique device credential support.

okey that is what i understand.

they also want a wifi spot for the teachers... and BYOD...

we want to give them easy access and save for us the IT department.

what if they first use a smartphone, and then later a laptop.

what is the best possible setup for that.

also in mind that we not only want radius ( username/password ) but 1 step more authentication.

What are you using for students? or this is just for teachers?

this is our first WIFI implementation.

First teachers and maybee later students.

We have 180 teachers and 1500 students.

So first we want the teachers, and maybee later the students, with BYOD, radius and mac filtering...

Dont use mac adddress filtering....

Aruba recomends agains the use of it... Its really weak, mac is not encrypted in the air...  plus you get 4000 limit on mac address on the internal database... which mean you will get in the point you will be not able to add more mac addresess, you will not likely get control which mac address of who so then you will have trouble deleting old entries.. and also you need one mac address per device....

Just stay with the BYOD

okey...

No MAC Filtering...
How is BYOD configured then ?
Radius with a certificated ?

Hello

If you don tknow how to configure BYOD i recommend you to attend to a BYOD(clear pass) Course... you can get more info on the training forum

will do thanxs.

I just know where is it but on the partner site and it seems you are not a partner...

Ask on the Forum section  of traniing... there is a section in which you can ask that kind of thing

You can use the search engine to find courses in your area:

http://inter.viewcentral.com/events/cust/default.aspx?cid=aruba&pid=1

ClearPass Bootcamp:

http://inter.viewcentral.com/events/cust/search_results.aspx?cid=aruba&pid=1&lid=1&tstamp=1357738972404&event_id=85&postingForm=catalog.aspx

ClearPass Policy Manager:

http://inter.viewcentral.com/events/cust/search_results.aspx?cid=aruba&pid=1&lid=1&tstamp=1357738972404&event_id=79&postingForm=catalog.aspx

ClearPass Guest:

http://inter.viewcentral.com/events/cust/search_results.aspx?cid=aruba&pid=1&lid=1&tstamp=1357738972404&event_id=7&postingForm=catalog.aspx