Keyboard shortcuts

Press or to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

VT_TIX

This network exists to get the wireless ticket scanners online for athletics. Because we do not have the proper RF coverage in and around the stadium, these devices cannot use the standard networks, as thousands of other clients would also try to associate, choking out the scanners.

Network

Currently, this uses vlan-authenticated. Ideally, this would use vlan-unauthenticated. Athletics is going to verify if the scanners work on the unauthenticated network by connecting them to VT Open WiFi.

An alternative would be to register the MAC addresses of the ticket scanners and have VT_TIX use the same aaa profile as VT Open WiFi.

Special considerations

  • APs with the VT_TIX network on them have only the VT_TIX network on them. This limits the use of the airspace.
  • The network is hidden to prevent devices from automatically associating.

Long term plan

We need a full deployment of APs in and around the stadium (and other athletic areas) that will support the 65,000+ people who are there for game day. Once we have this, the scanners can use the registered device service.

Authentication

None.

Remediation

  • Block the client MAC on the controllers
  • If the problematic device continues to reassociate with new randomized MAC addresses, shut down this network (disable the virtual-ap profile).