We use Aerohive's ppsk feature.  With this, it advertises as one ssid, but
you can tie multiple profiles.  We have a staff profile which allows users
access to file directory and printing, then we have student and guest
profiles which don't.    Every user gets their own account, so this also
allows us to disable one person without disrupting the rest.

We do still use a second SSID which we put all school owned devices on at
this point.

This is on the older Aerohive Hivemanager. We have not upgraded to their
newer product (as everything has to be rebuilt, no migration tool).  So I
don't know if this feature still exists in the newer product.

On Fri, Oct 26, 2018 at 7:45 AM Craig Donnan <[log in to unmask]> wrote:

> Meraki, evaluating Ubiquiti due to cost/performance.  Burlington went with
> them and likes them.
> We are in the process of implementing an onboarding product that
> authenticates on google SecureW2 and directs all users to one of the SSIDs.
> Transitioning to 2 SSIDS but not there yet, used overall generally with
> some exceptions for pop up events or library.
> Personal devices (limited access), and then the devices we manage.
> Devices we manage get the SSID applied through policy/managment tool.
> Part of the reason for onboarding is so that there's no SSID key or key
> sharing.  SecureW2 handles that.
> Also - we know who is what device.  And then so do the Feds for
> investigation if that's needed.  We can tie a user to a device if there's a
> threat.
> Craig
> Craig Donnan, MA, CETL
> Network Administrator
> Essex Westford School District
> 2 Educational Drive | Essex Jct, VT 05452
> [log in to unmask]
> Office: 802-857-7130
> ___________________________________
> *For immediate assistance call:*
> *Helpdesk Office Hours 7:30 AM to 3:30 PM*
> *EWSD Technology Department*
> *Internally: 1234*
> *Externally: 802-857-7777*
> *[log in to unmask]*
> <[log in to unmask]>
> On Thu, Oct 25, 2018 at 4:00 PM Will Hatch <[log in to unmask]> wrote:
>> Hi All,
>> We're moving in the direction of one brand of AP in our district. Along
>> with this we've created two universal SSIDs (ACSD-Secure, and ACSD-Guest).
>> I've also been forcing personal devices off the secure network, which
>> doesn't allow for file browsing or printing. As you can expect, this has
>> been unpopular with people who have been connected with their personal
>> devices to the secure. To me its a security issue.
>> Anyone care to weigh in on how this topic is handled in your district,
>> and why? Thanks.
>> --
>> Will Hatch
>> Director Of Technology
>> Addison Central School District
>> -----------------------------------------------------------------------
>> Search <> the SCHOOL-IT
>> Archive
>> Manage <> your
>> Subscription to SCHOOL-IT
> The information contained in this communication, including any attachments, is confidential,constitutes privileged communication, and is intended only for the use of the addressee. This message may not be forwarded without prior consent from  the sender. The information in this e-mail is also protected by the rights afforded under Family Educational Rights and Privacy Act (FERPA) and school district policies.  Any unauthorized use, forwarding, distribution,disclosure, printing or copying is strictly prohibited and may be unlawful.  If you have received this communication in error, please notify us immediately at 802-857-7777 or return e-mail,and delete any copies of this message immediately. Any inadvertent disclosure of this communication shall not compromise the confidential nature of the communication.
> -----------------------------------------------------------------------
> Search <> the SCHOOL-IT Archive
> Manage <> your
> Subscription to SCHOOL-IT

Sylvia Gagne
IT Support
Missisquoi Valley Union Middle and High School
175 Thunderbird Drive
Swanton, VT 05488