staff-only WiFi & infodesk LAN

[RichiH]

• Hidden ESSID
• Dual-stacked
  • IPv4 from permanent PA space so it can stay up before/after
• Same as front desk LAN
• Privileged to access NOC/VOC stuff
• Incoming ACL to filter out shit (we had someone print garbage on infodesk printers)

[SuperQ]

What about going the CCC route and using a self-registration WPA-EAP setup? This way we can trigger vlans by username. Is this something the Cisco WLC can do?

[RichiH]

Most likely yes, and I would also like encrypted links per person etc. But I would plan without that for now as it's invasive and not the highest priority. Choose your battles. Sent by mobile; please excuse my brevity.

…

On Wed, Feb 6, 2019, 14:03 Ben Kochie ***@***.*** wrote: What about going the CCC route and using a self-registration WPA-EAP setup? This way we can trigger vlans by username. Is this something the Cisco WLC can do? — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#199 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAuEI8_ElTMIn01oy6Epn52OhIlDuU0Uks5vKtKYgaJpZM4ak9sq> .

[SuperQ]

If we're going to add a third SSID, we could set it up as an experimental FOSDEM-wpa