G+_Robert Hafer Posted March 26, 2017 Share Posted March 26, 2017 Watching the Networking episodes, I'm starting to wonder if I need some special settings for my guest network at work. I have a restaurant and I've set the guest network up without a password for our customers (and unexpectedly local Pokémon Go players) to use. Should I set DCHP to a short time to flush Lunch customers before Dinner, or other such. Any KITAs have any experience with a similar setup? Link to comment Share on other sites More sharing options...
G+_Travis Hershberger Posted March 26, 2017 Share Posted March 26, 2017 Depends on the router. Most routers do not haven't a rational/secure guest network by default. At the least you should have the network password protected, leaving the password in the SSID is actually acceptable as the idea is to keep traffic from being visible to others on the network. Ubiquity's APs guest network have every device on separate VLANs by default, just by clicking the config button to enable the guest network. Just one reason I like their equipment so much. Link to comment Share on other sites More sharing options...
G+_Akira Yamanita Posted March 26, 2017 Share Posted March 26, 2017 It should be set for as long as the expected connection time plus a little longer so 2 hours should be reasonable for your environment. Link to comment Share on other sites More sharing options...
G+_Golden Retriever Posted March 27, 2017 Share Posted March 27, 2017 I wonder if there is a port you can block to keep out the Pokemon traffic without stopping many other applications from functioning on the network that your guests may use Link to comment Share on other sites More sharing options...
G+_John Saunders Posted March 27, 2017 Share Posted March 27, 2017 I use Mikrotik hardware, and separate out guest traffic from everything else with VLAN segmentation and ACLs. As for blocking Pokemon Go players, you can inspect a current player of the game over your wifi to find what servers they are connecting to, and if there are any FQDNs that are common to other players, and block those. Not as easy as Ubiquity, like Travis Hershberger pointed out. Link to comment Share on other sites More sharing options...
G+_Benjamin Webb Posted March 27, 2017 Share Posted March 27, 2017 Honestly, I would just set up a password for your network and place a card for it on each table. Then rotate it once a month. Could get creative and make it the name of one of your specials. Not a fan of wiresharking people's data without their permission and that would be one creepy sign if you asked for it. Games do typically use UDP and are typically directed to a fixed site. Could always install an Android emulator like bluestack on a notebook then wireshark what the game does. I know they block clash of clans at my work but they might be using deep packet inspection etc. Link to comment Share on other sites More sharing options...
G+_Jason Marsh Posted March 29, 2017 Share Posted March 29, 2017 There is no prohibition of capturing broadcast radio traffic, whether terrestrial radio, satellite traffic, or wifi. Then again, I don't see the need to inspect what the pokemon app is doing over your net. Just secure the guestnet with a password and make it freely available at each table. ---- OR - This may seem a bit risky, but you could also try to encourage your guests to enjoy the dining experience and the fellowship of their company by NOT providing wifi. Place a small basket on each table and clearly label it for cellphones. I hate seeing families/friends get together only to sit around with heads down, looking at their phones, not paying attention to each other. Link to comment Share on other sites More sharing options...
Recommended Posts