VTAthletics

Like VT_TIX, VTAthletics exists to connect support staff in a crowded space. However, it is more general purpose, allowing connectivity even for non VT personnel.

Network

All clients connect to vlan-authenticated. Although a PSK perhaps better thought of as an authorization mechanism, necessity demands on campus access (see below).

Special considerations

• The network is not hidden, to allow for ease of use.
• Users need to be able to print, and thus need to “on campus” access.
• APs with the VTAthletics network on them must not have general access networks on them (e.g., eduroam, VT Open WiFi, etc). This helps to protect the airspace.
• Ugh, PSK:
  • As of 2026-01-30, this is our only PSK network.
  • The key needs rotated on a regular basis.
  • PSK isn’t really authentication, but we pretend like it is.
  • All the concerns of a shared credential.

Long term plan

Like VT_TIX, the first hurdle is RF. To solve this, we need a full deployment for the stands and other crowded areas.

The second hurdle is network access. The most likely solution here is for guest accounts on eduroam.

Authentication

A regularly rotated PSK.

Remediation

• Block the client MAC on the controllers
• If the problematic device continues to reassociate with new randomized MAC addresses, change the PSK or shutdown the network (disable the virtual-ap profile).