Restricting Wireless Access on Campus?

Diety_in_A_Minor asks: "How would one set up a wireless network on a campus such that restrictions can occur by classroom? My back of the napkin solution would be to relate MAC addresses to class schedules, and have the DHCP server allow access to student-registered MAC addresses only during specific times. Although possible, this solution requires tremendous maintenance. What other solutions are there? One class in a building will require restrictions, while both classrooms adjacent to it need open access."

Comments

Old Tech

[Muggins the Mad]

Change the student password every hour. Have the teacher easily able to see what the password is.

Write the password on the blackboard at the start of the class. Possibly have several different passwords with different levels of access.

- Muggins the Mad

Weaken signal strength

[SpaFF]

Asside from changing the password (or WEP key) constantly and having the professor tell the students what it is each class, you could shield the classroom so that the signal doesn't travel outside of it. This of course assumes that the access point is in the classroom and that the room is small enough to electromagnetically shield economically. Depending on the size of the room (big lecture halls) you might be able to just turn the signal strength of the AP down low enough so that it can't be reached outside of the room.

MAC addresses?

[Nasarius]

Why not associate usernames with schedules and save yourself the hassle? Require a VPN logon for the wireless network, and deny access to specific users at the right times.

Two words

[deanpole]

Faraday Cage

... is room with metal walls, and screens (like you see on the front of a microwave) to pass air.

Old fashioned

[aridhol]

Why is it required that this one room not have any network connectivity? Why not do it the old-fashioned way: tell the students that network access is prohibited.

What kind of school is this? Is it a college or university? The students are paying their way, let them waste their money by ignoring the class. Is it a K-12 school? Send a note home to the parents or disable the account of those caught using the 'net when they shouldn't.

Re:Old fashioned

[kalidasa]

You really don't want students to have WiFi capaibilities in an examination environment. Remember, there are two kinds of WiFi network: infrastructure, and peer-to-peer.

802.1x + RADIUS

[Russ Steffen]

What about using 802.1x with a RADIUS server that has time based access controls (like Radiator) ?

Why?

[SecretFire]

I think we need a lot more information about the circumstances here. Is there some sort of test that requires students to have a laptop but not access the internet?

Or is it some old teacher that thinks that it'll somehow force people listen to their boring, pointless lectures, when the students will likely just find something else to entertain themselves with.

Seconded...

[Gordonjcp]

I mean, ffs, presumably these are University students we're talking about here? Are you deliberately treating them like naughty children as part of some kind of weird-ass psychological experiment?

Mind you, what do you expect from a country where you can buy a gun when you're 12 but you can't drink anywhere until you're 21?

Impossible

[photon317]

Even if you do acces control by MAC address or VPN login as others have stated, students will just swap wireless cards or vpn logins with someone on a different schedule when they need to.

Don't do it at all.

[Charles Dart]

It's a bad idea, students will either hack it or switch to cellular modems. Just let the tight-assed professors deal with it and tell them to join us in the twenty-first century.

What you are doing shows a lack of respect to the students. If a student wants to waste their opportunity to be educated let em. The good students will voluntaraly go by the rules.

Belive me if you try to implement this system you are in for a world of hurt.