Public Wireless access (ticket / token / schedule based)

Robert E. Seastrom rs at
Mon Dec 27 22:50:50 CST 2010

"Bill Lewis" <blewis at> writes:

> What is everyone using for enterprise grade wireless authentication for
> simple public access (i.e. users that are non-employee that need
> internet access (non-PCI) while in your building). Obviously I will hang
> this off a DMZ switch outside of my private LAN. Looking for something
> vendor driven, don't have time for anything home grown or unsupported /
> community based.

Assuming that this is for your offices not your retail outlets...

Is there some reason you can't run it wide open without even so much
as a captive-portal-check-the-box thing?  All of the commercial boxes
I've seen for doing what you say you want to do have been Deeply
Unsatisfactory in some way (Nomadix is at the top of the list here).

If you lose the authentication altogether and just make sure that
there is a bandwidth lid on per host overall usage plus more
conservative limits for things like the usual torrent ports and of
course blocking certain other ports entirely...  you've just
eliminated the administrative overhead of issuing credentials to your
visitors and streamlined your entire process.



More information about the NANOG mailing list