C2k Guest Wireless Set-up and connecting€¦ · You may need to attempt to browse to a website first in order to be prompted. 7. You should now be connected to the C2k guest wireless

Information Sheet EN021

September 2014 1 of 28 http://www.c2kexchange.net

C2k Guest Wireless – Set-up and connecting

Overview

This information sheet outlines the operation of the Guest Wireless solution that is provided to schools as part of the new C2k Education Network service. This solution allows wireless-enabled devices to connect securely to the Internet based on effective filtered web access controlled by the school. {Click here to view Video Nugget on Learning Exchange}

The Wireless Solution

The wireless solution is based around the provision of a number of “Meru” wireless access points (WAPs). To ensure the best coverage, please make sure that all the Meru WAPs in school are connected to a live network point and powered on. PWR, LAN, RF1 & RF2 lights should be green and the STAT light blue on the WAP.

The C2k Guest Wireless solution enables the connection of both school-owned and personal

wireless-enabled devices.

Managed C2k laptops

Managed C2k laptops do not need to be set up to use the guest wireless network.

They will connect automatically through the new Meru wireless access points and

require no configuration changes. Managed C2k laptops will connect and function in

exactly the same way as with the previous wireless solution.

School-owned and personal wireless-enabled devices

Schools have control over who can access the Guest Wireless network, and over the Internet filtering that users receive when connected to the network. There are two options for enabling users to access Guest Wireless:

For school-owned/shared devices, schools should use one of the two generic accounts provided to each school for that purpose. (please refer to Appendix A on page 8 for more information)

For personal devices and one-to-one devices (i.e. school devices that are used by just one person), schools should add the required individuals to the Meru Guest Wireless group. Only individuals in this group will be able to access the wireless network on a personal device.

This Information Sheet provides guidance on:

enabling access to school users

managing filtering for users

connecting to the guest wireless network

Please note: Devices need to be within range of a WAP in order to pick up a wireless

signal.

https://lx.c2kschools.net/topic-areas/system-administration/enabling-guest-wireless-access.aspx

Information Sheet No EN021 Guest Wireless

March 2015 2 of 20 http://www.c2kexchange.net

Contents

C2k Guest Wireless – Set-up and connecting .................................................................... 1

Enabling Access for school users ...................................................................................... 3

Internet Filtering for Guest Wireless users ......................................................................... 6

Connecting to the wireless network ................................................................................... 7

Appendix A: Connecting School-owned/Shared Devices ................................................... 8

Appendix B – Connecting Guest Devices .......................................................................... 9

Connecting a Windows device ..........................................................................................11

Connecting a MacBook ....................................................................................................13

Connecting Android devices .............................................................................................17

Appendix D - Advice/Guidance .........................................................................................18

Appendix E - Connecting a personal device to the C2k Guest Wireless network ..............19

Appendix F: Troubleshooting ............................................................................................20



Enabling Access for school users

In Identity Manager the required user needs to be made a member of the Meru Guest

Wireless group.

Remember, this process is only necessary for personal devices or one-to-one devices (i.e.

school devices that are used by just one person). Shared devices use the generic accounts

provided to all schools. The generic accounts are already members of the Meru Guest

Wireless group

Log in to MY-SCHOOL as C2k Manager

If the Identity Manager icon is visible in the Launch Pad, click Identity Manager.

Otherwise, click View All | User Management | Identity Manager

In Identity Manager,

1. Click on the tab Identity Self Service.

2. From the GENERAL menu, select the Group Management option.

3. The Group Management form is displayed.

4. At Group Action click 2 Edit.

5. Click on the magnifying glass beside Group Name to search for the group you want to

edit. Type Meru into the search box and click on the magnifying glass to search for the

group. The Meru Guest Wireless group will then be displayed in the search results.



Under Group Name, click Meru Guest Wireless and this will be displayed in the Group Name

box. You can now add (or remove) individual users to the Members (User) list and/or groups

of users to the Members (Group) list.

6. To add an entry to the Members(User) list, click on the magnifying glass beside the list to

search for the users.

If you know the new member’s username, type it into the search box and click

on the magnifying glass to conduct the search.

The search results are displayed. Click on the row containing the details of the

user you want to add to the group.

If you do not know the username, you can still search if you know any of the

following details: First Name, Last Name, Year Group, or User Type. Click on

the dropdown menu to select the user detail and then enter the detail into the

Search box. Click on the magnifying glass to conduct the search.

The search results are displayed. Click to place a tick in the row containing

the details of the user you want to add to the group. You can select more than

one user from the search results.

Click Select when you have finished selecting from the search results.

The user(s) you selected are added to the Members list.



7. To add an entry to the Members(Group) list, click on the magnifying glass beside the list

to search for the group whose members you want to add.

If you know the name of the group, type it into the search box and click on the

magnifying glass to search for the group.

Common groups would include: Teaching Staff; Non-Teaching Staff; Student.

If you do not know the group name, you can still search if you know any of the

following details: Description, Destination, Type, or Scope. You can also enter an

asterisk (*) to search for all groups available. To do this, click on the dropdown menu

to select the group detail and then enter the detail into the Search box. Click on the

magnifying glass to conduct the search.

The search results are displayed. Click to place a tick in the row containing the details

of the group whose members you want to add to your new group. You can select

more than one group from the search results.

Click Select to add the group to your new group.

8. Click Submit when you have finished editing.

Please note:

Existing Groups can be nested inside the Meru Guest Wireless group. Note that when adding

users to the Meru Guest Wireless group, add either groups or individual users, not both in

the same request.

It may take several hours for changes made via Identity Manager (or UMTS) to take effect.

As such it is recommended that schools make changes the day before access is required.

Once this has been carried out, users will be able to connect to the wireless network using

the steps in Section 3 below.



Internet Filtering for Guest Wireless users

Guest Wireless provides secure filtered Internet access with a new filtering solution. This is

based around membership of four groups. By default, all users given access to Meru Guest

Wireless will be members of the default Internet filtering group providing access to all sites

categorised as green.

Should users require access to sites that are not available via the default policy, access can

be provided to school-managed Internet groups. Membership of these groups is also

controlled through Identity Manager (or UMTS), accessed as above. To search for the

groups in Identity Manager (or UMTS), type “Internet” into the search box.

When required, schools can make users members of the groups outlined below depending

on the website access required:

Internet Advanced: This group contains sites that were previously categorised in post-

primary schools as Amber (ie school-managed). These include categories such as Sex

Education, Internet-based Email (e.g. Hotmail), Message Boards, Shopping and Online

Storage.

Internet Streaming: This group contains sites that would deliver media and online video.

For example, this group includes YouTube and Vimeo.

Internet Social Networking: Membership of this group provides access to a number of

social networking sites, for example Facebook, LinkedIn and Twitter.

Further information on the Internet Filtering solution, including a comprehensive overview of

website categorisation, can be found in the EN Information Sheet EN039 - Managing

Internet Filtering.



Connecting to the wireless network

There are two parts to connecting to the wireless network. Authenticating the device and

then authenticating the session. The first part is only required on first connection and

involves authenticating and then downloading a small software applet called Smart Connect,

which configures the connection to the C2k network.

For shared devices: If you wish to connect a school-owned device that will be shared by

multiple users, authenticating the device should be done with the school Shared Device

account. All schools have two school guest accounts in the format <DE Number>SD1 and

<DE Number>SD1. One account can be used across multiple devices. The passwords for

these accounts can be found in C2k Exchange in My School | Guest Wireless.

Further information on the School Shared Device Account can be found in Appendix A.

For personal devices, or one-to-one devices (i.e. school devices that are used by just one

person), a user should authenticate using their own C2k username and password.

1. On your device, locate and connect to the C2kGuest wireless network

2. Launch the browser

3. Read and Accept the Terms and Conditions set out in the Acceptable Use Policy

4. For personal devices, when prompted, enter your C2k username and password

(or, before Transformation, your MY-SCHOOL password if this is different) .

For shared devices, when prompted, enter your school’s Shared Device account

username and password.

5. Download and install SmartConnect: Instructions for download and install may vary

by device/browser. Some examples are provided in Appendix C

6. Return to your browser and enter your C2k username and password when prompted

(with your username prefixed by “c2ken\”, e.g. c2ken\jbloggs123). You may need to

attempt to browse to a website first in order to be prompted.

7. You should now be connected to the C2k guest wireless network and able to access

the Internet.

Note: Steps 3 to 5 are only required the first time a device is connected to the C2k

Guest Wireless Network.

The process may vary slightly by device type. See Appendix B for specific guidance

for connecting an iOS device (e.g. iPad), Windows device, Surface RT and Macbook.



Appendix A: Connecting School-owned/Shared Devices

Special arrangements have been made to accommodate school-owned/shared devices (eg

school iPads which will be used by a number of users). For these devices, it is

recommended that the generic school shared device account credentials are used.

There are a number of benefits to these accounts:

They help to simplify the initial set-up and also avoid future difficulties associated with

an individual account password expiring on a shared device.

The generic accounts mean that it is possible to allow Guest Wireless access for

school devices without enabling individual users to connect to the Guest Wireless

network with personal devices.

Using Generic Accounts

Two accounts have been created per school. These are in the format:

<DE number>SD1 and <DE number>SD2 (eg. 1234567SD1 and 1234567SD2).

The passwords for these accounts are available in a Guest Wireless folder in the My

School area of C2k Exchange.

The same account can be used for multiple devices. Unlike personal accounts, the

password for these accounts will never expire.

Once the school shared device account is used to authenticate the connection to the

wireless network, a personal account will be required for every web-browsing session.



Appendix B – Connecting Guest Devices

Connecting an iOS device (e.g. iPad)

1. Locate and connect to the C2kGuest wireless network. (other C2k networks may be

listed).

2. When presented with the Log In screen below, click “Accept” to accept the terms and

conditions

3. On the following screen, click the button “Click here to install the iOS Network Profile” [NOTE: If you are not prompted to Accept a network configuration profile after tapping the install button, please tap the cancel button at the top right of the screen and then click the install button]

4. Select the “Install” button to install the configuration:



5. Click “Done”

6. On the following screen, enter your C2K account username and password, and click “OK”. (Use your MY-SCHOOL password if this is different).

7. Internet access should now be enabled.



Connecting a Windows device

1. Locate and connect to the C2kGuest wireless network

2. Launch the browser and attempt to access the web. The following will appear:

When Accept is selected you will be prompted to login with your C2k Username and

Password:

For personal devices or one-to-one devices (i.e. school devices that are used by just one person), the user should enter their C2k username and password. For shared devices, the generic School Device username should be entered.

3. You will then be prompted to download Smart Connect:



When prompted, select Run to start installation and then Run at the subsequent Unknown Publisher warning.

4. On the following screen, your username and password should be automatically completed – click the “Start” button

5. On the confirmation screen click “Connect” and then “Close”.

6. Upon opening your browser, the pop-up below will be presented. Enter your C2K account username and password. [NOTE: Your user name must be preceded with “c2ken\”]

7. You will now be connected to the Internet and able to browse.



Connecting a MacBook

It is recommended that you restart your MacBook before starting to connect to C2k Guest Wireless

1. On the top right of your screen, select the WiFi icon as indicated, and from the drop-down menu, select the “C2kGuest” network:

An Acceptable Use Policy screen may appear at this point – close this screen – DO NOT click Accept or Reject at this point.

2. Open your Safari browser

3. When the Join “C2kGuest” screen appears, click the “Accept” button to agree to the terms and conditions of the Acceptable Usage Policy:

4. At the Login prompt:

- enter your own details if the laptop is for individual use and you are a member of the wireless group; or

- enter your school generic account details on the login screen if this is a shared school device.



5. On the next screen, select “Click here to install the OS X configuration profile”. A SmartConnect file should be downloaded.

6. Select the “Downloads” icon, and select “Smart Connect” from the drop down list



7. Click the “SmartConnect” icon to run the download

8. At the Security Warning, click “Open”

9. At the Meru Networks screen below, your login details should be pre-populated. Click the “Start” button

10. You will be prompted to enter your MacBook Administrator Password (not your C2k Username and password) to authorise changes to your System – enter these and select “Update Settings”:

Please note, you may be prompted to enter your password 8 or more times.



11. On the next screen, click the “Connect” button

12. At the confirmation screen below, click the “Close” button

13. Finally, open your Safari browser and browse to any website. When prompted enter your C2K username and password. If you wish, tick Remember this password in my key chain.



Connecting Android devices

A solution for the connection of Android devices is currently in test.

Connecting a Microsoft Surface RT

In order to connect a Surface RT device to the Guest Wireless network, Capita need to

undertake some specific set-up for a school.

Please contact the C2k Service Desk to request the connection for Surface RTs.



Appendix D - Advice/Guidance

Optimising the wireless network:

Schools may find that it takes some time and experimentation to achieve the optimum

wireless coverage using the Meru wireless access points. The wireless access points may

be moved as required and consideration should be given to wall-mounting the wireless points

once their final location has been decided upon. Further information on managing the

wireless access points can be found in information sheet EN008 available on C2k Exchange.

Services available through Guest Wireless

At this stage, the Guest Wireless service enables access to the Internet and associated

online services only. There will be no access to C2k-provided curriculum/productivity

software.

Filtering

As this is a secure filtered network, it is very likely that some apps on various devices may

not always work or display correctly. In the same way as some websites are blocked by

filtering, some apps may be similarly affected.

Apple TV/Screen Mirroring

At present, Apple TV cannot be used with the C2k system but a solution is due soon.

Capita MITS will be offering options through the managed service catalogue enabling

schools to manage mobile devices.

Android devices

Please note, Android devices have not yet been certified for Guest Wireless use. Further

updates will be provided in due course.



Appendix E - Connecting a personal device to the C2k Guest Wireless network

General Instruction sheet for users with guest devices

Overview

The C2k Guest Wireless network allows users with their own devices, who have been given

permission by the school, to connect to the Internet.

There are two steps to connecting to the wireless network: Authenticating the device and

then authenticating the Internet session. The first step is only required on first connection

and involves authenticating and then downloading a small software applet called Smart

Connect, which configures the connection to the C2k network.

To connect to the C2k Guest Wireless Network and enable Internet access:

1. On your device, locate and connect to the C2kGuest wireless network.

2. Launch the browser

On first connection only:

3. Read and Accept the Terms and Conditions set out in the Acceptable Use Policy

4. When prompted, enter your C2k username and password.

5. Download and install SmartConnect: Instructions for download and install may vary

by device/browser.

6. Return to your browser and enter your C2k username and password when prompted.

You may need to attempt to browse to a website first in order to be prompted.

7. You should now be connected to the C2k guest wireless network

Should you have any difficulties connecting to the C2k Guest Network, please contact

your C2k Manager in school in the first instance.



Appendix F: Troubleshooting

Ensure your users have been added to the “Meru Guest Wireless” security group

o Refer to Pages 2-4 for more information

o Please allow 24 hours after adding users to the group to allow for replication

to occur.

Ensure your users are connected to the correct network SSID “C2KGuest” from the

available wireless networks

o Refer to Page 6 for more information

Ensure the Time and Date on your wireless device is up to date and current.

Ensure your Wireless Device is set to receive IP addresses via DHCP.

o Consider if the device has a static IP address. It may be for a valid reason to

access another type of resource such as a home network.

Consider any security applications installed on your wireless device such as McAfee,

Symantec or AVG that may be restricting access to unknown networks.

o Ensure solutions such as Parental Controls are not restricting access.

Consider any firewall applications installed on the Wireless device to ensure they are

not restricting access.

Documents

C2k Guest Wireless Set-up and connecting€¦ · You may need to attempt to browse to a website first in order to be prompted. 7. You should now be connected to the C2k guest wireless