Simple: 1. Isolate Student machines by moving to their own VLAN 2. Have Student VLAN pass through firewall that limits access to specific traffic and limits total bandwidth for that network 3. Clean up machines on faculty and staff network 4. Sit back and totally do not care how screwed student machines get
Less Simple: 1. Isolate student machines by moving to their own VLAN 5. Have Student VLAN pass through something like these devices http://www.bluesocket.com/solutions/family.html (or build your own http://www.packetfence.org/). Make yourself popular by setting scans to require machines be clean and have up-to-date Virus and Firewall protection before assigning IP address to client (block access to manually assigned IP addresses). 6. Clean up machines on faculty and staff network 7. Lock your doors
Slashdot Mirror
Simple:
1. Isolate Student machines by moving to their own VLAN
2. Have Student VLAN pass through firewall that limits access to specific traffic and limits total bandwidth for that network
3. Clean up machines on faculty and staff network
4. Sit back and totally do not care how screwed student machines get
Less Simple:
1. Isolate student machines by moving to their own VLAN
5. Have Student VLAN pass through something like these devices http://www.bluesocket.com/solutions/family.html (or build your own http://www.packetfence.org/). Make yourself popular by setting scans to require machines be clean and have up-to-date Virus and Firewall protection before assigning IP address to client (block access to manually assigned IP addresses).
6. Clean up machines on faculty and staff network
7. Lock your doors