Wireless Network Overview and Policies

Background:

Use of SVSU’s wireless network is subject to the policy restrictions laid out in the University’s Internet, and Network Resoruces  Acceptable Use Policy (Operations Manual 4.6-1).

Support:

Service on the wireless network is not considered mission critical due to the number of wired ports and open lab computers available on campus. Any problems on the wireless network will be dealt with on a “time available” basis.

Service Areas:

Campus

The following map illustrates where wireless hot-spots are available in the campus administration and classroom buildings.

Residential

As of January 12th, 2009, SVSU's wireless data network is available in all residential living facilities.  Use of wireless devices in ResNet is subject to the ResNet Wireless Policy.

Technical & Security Notes:

You will have to login every time you use the wireless network (authentication).

The wireless network requires WPA2-Enterprise security on all antennas. The intent is to provide complete security for your ID and password. Instructions on how to implement the required security on your laptop.

Note that this is not a perfect solution. Once CISCO solves some software bugs on its antennas, we will begin broadcasting two SSIDs. One will simply inform you of the security requirement and provides access to just the security documentation URL. The second will be the secure access to the campus network.

All wireless devices will register to Campus Manager just as if they were on the ResNet (SVSU's data network for the Residence Halls ).  Note that there are additional polices and procedural issues when using wireless in ResNet particularly when using gaming devices.

All wireless service areas are 802.11a, b, and g  ( up to 54Mbps).

Hand Held Devices:

 All hand held devices such as smart phones, etc. may use the SVSU wireless network so long as they meet the same WPA2 security and authentication standards as laptops.

Need Help?

If you need help setting up your laptop to connect to the wireless hot-spots, ITS has two locations where you can get walk in help: Support Locatons.

Vista Setup Instructions

To access SVSU's wireless network with a laptop running the Vista operating system, click on: Vista Setup Instructions .

Personal Antennas in Offices:

Background:

In an effort to ensure the integrity of the SVSU Network and the security of the data that traverses the network, it is important that the SVSU campus wireless network is as secure as the wired network. We have two main mechanisms to secure the network:

1. We have to know and control what is attached to the network. On the wired network this is accomplished by a periodic computer registration and network logins for fixed (office) connections plus an authentication/registration each time a connection is initiated to a walk-up port (Brown Hall Concourse, Library).  We also validate that operating systems and anti-virus systems are up to date.
   
   
2. The data security is achieved by the fact that the wired network is difficult to eavesdrop on or tap. One computer can not see the data that other computers on the network are generating.

A wireless network by default has none of these security features.

1. We do not know what devices are plugged into the network nor who is using them.
   
   
2. The data generated – email, passwords, Colleague access – is  transmitted through the air and anyone with a wireless card in their computer, in the office next door, down the hall, on the floor above or below, can see and capture those transactions.  Examples: Home Depot was hacked by someone sitting in the parking lot with a laptop and a Pringle's can antenna.  Autos with keyless entry systems are being opened by car thieves using laptops.

To secure the integrity of the network, any device that connects to the wireless network must pass a registration/authentication test each time it connects. At that point we will check to make sure the laptop is not infected with some virus and we will insure that the user has a valid SVSU ID and is therefore authorized to access SVSU's network.  Not doing so would risk knocking out our campus network during teaching and business hours (for example: during registration).

To secure the data itself we have to ensure that all connections to the wireless network are encrypted with a modern / high quality encryption and only permit connections to the network that are so encrypted.

Approved Access Points (Antennas):

In order to meet the above security requirements in a way that leverages the infrastructure we already have, we have standardized on centrally managed Access Points (APs). These APs can be configured to work with our network resources to meet the security requirements outlined above.

Currently SVSU approves the use of CISCO 1200 and 1100 series APs.

Examples of wireless access points not allowed on the campus network are all home units such as Linksys and Netgear.

Exception:   This limitation on access points does not apply to wireless access points attached to ResNet, the campus residential network. Wireless access points may not be installed in or attached to ResNet.

If you have general comments regarding the wireless network or its policies, Please e-mail them to jrl@svsu.edu .