[26520] in resnet
Re: Enforcing Rogue AP policies in dorms
daemon@ATHENA.MIT.EDU (Chris Webster)
Fri Jun 17 10:49:44 2011
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=000e0cd306a8efd2a704a5e97da1
Message-ID: <BANLkTikSaOTYwFO1=Wg07qYv+K23+YqsxQ@mail.gmail.com>
Date: Fri, 17 Jun 2011 10:49:25 -0400
Reply-To: Resnet Forum <RESNET-L@listserv.nd.edu>
From: Chris Webster <chris.webster@NCSU.EDU>
To: RESNET-L@listserv.nd.edu
In-Reply-To: <4DFB64DB.3020708@calfrye.com>
--000e0cd306a8efd2a704a5e97da1
Content-Type: text/plain; charset=ISO-8859-1
We let people connect whatever types of devices they want as long as it
doesn't disrupt the network or mess with other residents' machines. If we do
find a misbehaving device, we track it down, kill the port, and send an
email to the people living in that room. It stays disabled until they either
respond by e-mail or coming in to our walk-in help center.
IMO, going out to the rooms is a waste of resources unless you aren't able
to disable ports remotely. Half the time the people aren't going to be there
and it just seems like an e-mail can accomplish the same thing with less
time investment.
As far as preventing them from connecting it in the first place... not
really sure how you'd do that from a technology standpoint. Manufacturers
are always using new MAC prefixes and I know that Cisco/Linksys often uses
the same manufacturer prefix for their access points, wired routers, and USB
network cards (wired and wireless).
-Chris
On Fri, Jun 17, 2011 at 10:29 AM, Cal Frye <cjf@calfrye.com> wrote:
> On 6/17/11 10:21 AM, Johnson, Neil M wrote:
> > How do you go about preventing residents from installing their own AP's
> in
> > dorms where you have wireless already installed ?
> >
> > What do you do when you find an AP ? Knock on doors ? Disable ports ?
> >
> We disable the port. "Extending the network" is against our AUP,
> removing network access is the common response, and practically
> speaking, it accomplishes the desired goal most of the time without
> knocking on doors.
>
> --
> Best regards
> -- Cal Frye, Network Administrator, Oberlin College
> Mudd Library, x.56930 -- CIT will NEVER ask you for your password!
>
> www.calfrye.com, www.oberlin.edu/cit/
>
> "A greater inducement to folly is excess of power. --Barbara Tuchman.
>
> ___________________________________________________
> You are subscribed to the ResNet-L mailing list.
>
> To subscribe, unsubscribe or search the archives,
> go to http://LISTSERV.ND.EDU/archives/resnet-l.html
> ___________________________________________________
>
--
Chris Webster
Senior Technician
OIT Walk-in Center
North Carolina State University
Ph: 919.513.2676
Fax: 919.513.2945
Email: chris.webster@ncsu.edu
Web: http://go.ncsu.edu/wic/
___________________________________________________
You are subscribed to the ResNet-L mailing list.
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--000e0cd306a8efd2a704a5e97da1
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
We let people connect whatever types of devices they want as long as it doe=
sn't disrupt the network or mess with other residents' machines. If=
we do find a misbehaving device, we track it down, kill the port, and send=
an email to the people living in that room. It stays disabled until they e=
ither respond by e-mail or coming in to our walk-in help center. <br>
<br>IMO, going out to the rooms is a waste of resources unless you aren'=
;t able to disable ports remotely. Half the time the people aren't goin=
g to be there and it just seems like an e-mail can accomplish the same thin=
g with less time investment.<br>
<br>As far as preventing them from connecting it in the first place... not =
really sure how you'd do that from a technology standpoint. Manufacture=
rs are always using new MAC prefixes and I know that Cisco/Linksys often us=
es the same manufacturer prefix for their access points, wired routers, and=
USB network cards (wired and wireless).<br>
<br>-Chris<br><br><div class=3D"gmail_quote">On Fri, Jun 17, 2011 at 10:29 =
AM, Cal Frye <span dir=3D"ltr"><<a href=3D"mailto:cjf@calfrye.com">cjf@c=
alfrye.com</a>></span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class=3D"im">On 6/17/11 10:21 AM, Johnson, Neil M wrote:<br>
> How do you go about preventing residents from installing their own AP&=
#39;s in<br>
> dorms where you have wireless already installed ?<br>
><br>
> What do you do when you find an AP ? Knock on doors ? Disable ports ?<=
br>
><br>
</div>We disable the port. "Extending the network" is against our=
AUP,<br>
removing network access is the common response, and practically<br>
speaking, it accomplishes the desired goal most of the time without<br>
knocking on doors.<br>
<font color=3D"#888888"><br>
--<br>
Best regards<br>
-- Cal Frye, Network Administrator, Oberlin College<br>
=A0 Mudd Library, x.56930 -- CIT will NEVER ask you for your password!<br>
<br>
=A0 <a href=3D"http://www.calfrye.com" target=3D"_blank">www.calfrye.com</=
a>, =A0<a href=3D"http://www.oberlin.edu/cit/" target=3D"_blank">www.oberli=
n.edu/cit/</a><br>
<br>
"A greater inducement to folly is excess of power. --Barbara Tuchman.<=
br>
</font><div><div></div><div class=3D"h5"><br>
___________________________________________________<br>
You are subscribed to the ResNet-L mailing list.<br>
<br>
To subscribe, unsubscribe or search the archives,<br>
go to <a href=3D"http://LISTSERV.ND.EDU/archives/resnet-l.html" target=3D"_=
blank">http://LISTSERV.ND.EDU/archives/resnet-l.html</a><br>
___________________________________________________<br>
</div></div></blockquote></div><br><br clear=3D"all"><br>-- <br>Chris Webst=
er<br>Senior Technician<br>OIT Walk-in Center<br>North Carolina State Unive=
rsity<br><br>Ph: 919.513.2676<br>Fax: 919.513.2945<br>Email: <a href=3D"mai=
lto:chris.webster@ncsu.edu" target=3D"_blank">chris.webster@ncsu.edu</a><br=
>
Web: <a href=3D"http://go.ncsu.edu/wic/" target=3D"_blank">http://go.ncsu.e=
du/wic/</a><br><br>
___________________________________________________
You are subscribed to the ResNet-L mailing list.
<p>
To subscribe, unsubscribe or search the archives,
go to http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________
--000e0cd306a8efd2a704a5e97da1--
