I know this might be a
bit of a different situation, but at my old high school: secured wifi using server/client authentication (student/faculty login) and you had to go and manually "talk" to the authentication server (this is a high school
network and has both authentication and handshaking protocols in place as i've toured the It Areas before as a student) in the IT Closet via opening Port 80 manually, and then doing an open proxy and then re-authenticate to keep the server happy otherwise it'd kick you if you didn't login and stop "talking" to you until you said "hey im trying to talk to you" again XD after you got through that server, it passed you over to the wireless
VLAN Switch and you're in, then after a while, authentication server would come a knocking and say "who are you" again by requesting user credentials again and it would redo your connection (do a handshake) to make sure your not spoofing your
MAC Address, otherwise it'd auto-ban you and never speak to that
MAC again and the IT Staff and school admins would become very unhappy because the
system would then auto-alert. haha
College Campus: unsecured wifi but login through a splash
screen, though they have a secured one, but they don't let students use it (I
call BS on that piece of **** grrr hah) I run a VPN and a software client that hides me from the rest of the
network so my IP/
Mac/
network awareness is changed/blocked upon successful connection and all incoming connections are ran by the client first before they hit my laptops OS so Windows cant say "I'm here" so in case a virus or something is on a Machine in the
network (scanned the
network and about 190+ devices at any given time usually) so I do that to keep me protected because I'm an IT
Nut lol so I appreciate my privacy and don't want the campus to see my emails and logins for websites, which is nice because even college IT cant access my history as its under 256
AES encryption and a random key gen every time I hit refresh on a webpage.
Church: two Linksys routers (one downstairs one upstairs) connected to wireless gateway via 2 cables (1 for up 1 for down), connected to
VLAN Switch, connected to
TWC modem. under Class A internal for wifi use. Secured connections on both (different passwords using WPA2-AES) but password can be found if asked through church office or staff member, passwords changes every few months or so depending. Internal staff
network access restricted outside of wired
network. wireless accesses internet only. Gets good reception in general area of main building of church and front of sanctuary, but beyond that it drops out.