As someone who has administered networks and written policies like this the concern here is that you will run an open network that may be used for piracy, hacking, DDOS or to send bomb threats. Tracing down this type of behavior is required by law and allowing students to run open networks makes this near impossible.
Technology
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
Not only that, but managing wifi channel congestion in a dorm is a pita.
It's tough enough when you fully control the airspace, to have nice clean coverage and overlapping cells.
But then add dozens or hundreds of individually managed APs in a tiny space...with DFS and/or 160MHz channel widths?
Ops best bet is to get their own 5g home internet and plug in.
You'll be hard pressed to get a router to talk to a captive portal sign in...but if OP wants to get creative, this can easily be fixed with a dumb switch and a Linux PC with two NICs. You could use windows for this, but why would you?
As someone whose job it is to deploy and manage wifi at a small university-adjacent student accommodation, these are similar to my rules. There are enough students that know enough to cause a problem, but not enough to know the pitfalls. It's best to just blanket cut this off for everyone's best experience.
Can you give some examples of issues you mention?
A few stories:
I've had a student install a super cheap (g only) repeater to provide wifi to their car in the car park, due to its location a number of students ended up using that rather than our APs. This slowed access for them dramatically.
I've had a student physically remove an AP to get to the 2.5 gigabit port they connect to, they somehow thought that would be better than the 1G they have in their rooms, despite it all being the same link out.
An overseas student cloned a MAC of their device to a travel router and effectively ran a VPN server for their family to try and give them an IP in our country.
The accommodation only has an hour of my time per week or so, they're not paying a lot so issues only get dealt with when I have the time for them, this leads to an extended period of bad access for folks and my complaints to the staff.
The main point of the story is that not all students take the experience of their neighbors into account. Hence the restrictions.
The difference here is that the ISP is up charging for multiple devices, meaning this isn't all being done for benevolent reasons.
The way many apartments work for non-students is each has its own WiFi. Honestly compared to how bad some Hall's WiFi is this is a better option, but it's not without problems. A lot of ISP routers either don't support or don't turn on by default DFS channels, 5.8GHz channels, 6 GHz band, or have WiFi 6 for BSS colouring. This means there will be loads of interference between adjacent WiFi networks.
It's really frustrating especially when you have ISPs like Virgin whose kit has DFS support, but despite touting smart wifi they just never enable it, and most people don't know to enable it either.
Yea that is true, there's definitely either a profit motive or they don't think they have the bandwidth for everyone to have multiple devices and are this introducing an up charge/scarcity to cover up that.
The site I look after we have a restriction on device numbers, 5 per room. Even that is flexible and not really enforced as in reality the network will be fine with thousands even. The main restrictions are about device behavior and preventing causing interference or outages.
There's only 120 rooms in the site I look after so it's not massive.
We're running W-Fi 6 with all channels enabled including DFS channels. We've great coverage (roughly one access point per 4 -6 rooms in a 90s building).
Not OP, but I'll add on some more complications.
Your network is designed with the minimum number of access points you need to have really good coverage. Adding more access points to the rooms increases interference and takes up usable frequencies. Rogue access points are hard to find and university IT has very limited resources.
That enterprise gear of the colleges using it's part of a bigger picture system with alerts and alarms and the ability to see an address problems and locate issues effectively.
I can't comment on the 'device limit' as I don't remember being a thing, but I was at an ASK4 affiliated living quarter 5 years ago or so.
Back then I was able to plug in my router just fine. I disabled WiFi on it since I didn't need it and used it as a regular switch just fine.
Shit, ask4? I think they were the isp when I was at uni about a decade ago. I'm sorry to hear they're still kicking.
If it's still the same as back then, all the dorms are essentially on the same lan and they're using Mac filtering at the gateway. Since this was before Https became ubiquitous this meant you could sniff other people's http requests.
What you do (what we did) was sign up with one device and setup a proxy on it. I think we used squid-cache. But anything that will masquerade the traffic as coming from that one device should do the trick.
Yes, i think squid proxy would do the trick too. It even has installers for windows.
pretend you didn't read it and press the button
None of that is binding because you have no real alternative to accepting those terms. Just click agree then freely ignore everything it said. If they don't like it, that's their problem.
I work in university IT so I have some experience here. Some schools are better than others but in general providing IT services for students is like trying to wrangle a herd of starving feral cats who are all in heat.
First of all I have never seen 802.1x implemented (Ethernet authentication) in the wild that wasn’t almost immediately removed. It’s a shitty protocol that’s terrible to debug. I totally get why they restrict APs … my god if every student had one it would be a pain. It would be like standing in a crowded room with everyone shouting and you’re trying to pick out one conversation 20 ft away.
My guess is you’re basically in a situation like my son was at ECU. It’s likely not really a university dorm but closely affiliated hence the reason of a third party. Or the central university IT is abysmal and can’t be bothered. Either way the only reason to use 802.1X is because they think it’s more secure, when in fact it’s way more trouble than it’s worth. You can do the same thing by controlling downstream routing or MAC filtering. The ECU “dorm” did that and it wasn’t much better honestly. You had to go into a website to add your MAC address to get access to the WiFi. Firstly how do you do that when your computer can’t talk to anything. Chicken and egg problem. Secondly for the ones who figured out how to do that using your phone, good luck getting a history major to figure what even what a MAC address was.
My suggestion is don’t bother. If they’ve implemented 802.1x they’re a micromanaged IT and will catch you eventually. I’d also guess they have completely overtaxed their egress traffic and your speeds are abysmal.
On a related note, when you graduate never ever rent from an apt complex that generously process WiFi or Ethernet. It will almost always suck, they will have no one to provide adequate tech support, and they are just using it as another revenue stream.
Sorry I don’t have better advice but if they control the network there isn’t really much you can do.
Man, things sure have changed since I was in college. The university had one /15 and three /16s so every single ethernet port everywhere on campus had a publicly routable IP.
Napster was so goddamn fast...
Honestly this sounds like a bit of a pickle. If I were in your situation I would just use one of the cellular carriers 5g internets. I personally use a T-Mobile 5g internet hotspot with a fresh tomato flashed nether 6700 plugged into it. Then I basically do all of my networking from that. Latency is a fair bit higher (usually about 30-50ms) but upload is significantly better than spectrum.
Assuming they have their own wifi, they just don't want you using wifi off of your own router. A wired connection should be fine.