Here's a quick rundown of how I'm set up, before I get to my question:
12 sites
2 4404 WLC's
2 WLAN's - 1 private, 1 public
Active Directory domain
The private network is for domain devices only. It authenticates using 802.1x and client certificates pushed through group policy. The public network is for staff and student owned devices (I work for a public school division), visitors, contractors, temporary employees, etc. Guest access is using web-auth - local for guest accounts, and then radius for users with domain credentials.
The public wlan is on it's own subnet at each site and is ACL'd off from the private network. It is basically internet-only, and is thoughrougly scrutinized by our content filter.
More and more staff are bringing in their own laptops and we have had requests to allow printing from these devices. We currently control printing through AD permissions on our wired network - preventing students from printing to say the high volume color printer in the office, etc.
My question is - what suggestions can anyone offer on how to set up a printer for the guest WLAN, and is there any way to control or regulate access to it?
My initial thought was to provide a printer that was connected to an access port for the guest WLAN's vlan. Guest users should be able to browse to it or add it in the printer control panel. Because it wouldn't be tied to a print server, it wouldn't be served up in a directory. We'd have to provide instruction on how to add it manually. I believe this would work, but would negate any ability to control access to it.
Has anyone set up something similar to this?
Cheers,
Rob
