Cisco WCS Iphones taking all IP's!

Our guest wireless (public broadcast) is leasing all 510 IP's to Iphones, Itouches, etc.. Lease time is set to 1 hr which is bad for the network and isn't working at this point.

Mac filtering isn't really an option. Unless its by denying the vendors MAC.. Is that possible?

What are common practices for guest wireless DHCP issues?
Thanks!
PapaSmurffAsked:
Who is Participating?
 
rog2054Connect With a Mentor Commented:
Hi.

We had the same problem.

At first we increased the size of the DHCP pool - obviously this was only a temporary fix!

After that, as a slightly more effective solution (but still temporary), we have added a WEP key onto the guest wireless. As this is in a corpoarte environment, the WEP key is given freely to visitors upon their arrival to reception.
Once connected to the guest network, visitors then have to authenticate via a web page (Cisco WebAuth) before they actually get internet access. User logons for this are created on-demand by our internal IT Service Desk, and auto-expire after 24 hours. This gives us some idea who is using the guest network, as well as reassurance that they can only use it for a set period before it needs re-requesting (which keeps our Security guys happy).

As a more long-term solution, we're investigating/testing if Windows 2008 NPS can be used, as that can grant/deny based on OS etc - ie only allow Windows 7 and XP in this scenario. Our wireless controller can query the NPS Server (it currently does so to authenticate staff to our Staff Wifi using AD accounts, so should be an option.)

Another idea is to create a mac-blacklist, thereby allowing all except xxx yyy mac addresses. Over a relatively short period of time this could be created by collecting the MACs of all iphones etc which connect. (chances are the majority will be the same iphones every day). Obviously there is a manual element to this approach, so it may not be ideal depending on the scale of your wireless.

Hope this helps. I too would be interested to hear what other people are doing to combat this issue.
0
 
PapaSmurffAuthor Commented:
I've requested that this question be deleted for the following reason:

No answer given.
0
 
rog2054Commented:
I gave several suggestions as to what we do, and other avenues we are looking into.
- Doesn't this count as an answer (or at least a partial one)?
0
 
PapaSmurffAuthor Commented:
can only blacklist unique MAC's.
Thanks for answering.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.