WiFi Use Policy for Resnet

As you are aware CC has recently implemented a policy of registering and binding your residential computer's network hardware address to the IP number that your computer uses. We emphasize that this measure is to ensure that no one abuses your residential network resources.

In this connection, it is seen that many residents are using mis-configured Wireless Access Points/Wireless Routers at home. Wireless Access Points have to be configured very carefully in order to prevent people in your neighborhood and possible rogue users from using the network addresses and resources alloted to you.

Hence, the following policy must be adhered to in order to prevent misuse and implement proper network security:

1. DHCP servers have to be disabled on all Residential machines and Wireless Access Points/Wireless Routers. This means that you will have to provide static IPs to every computer at home, and not let the DHCP server provide the IP automatically. If a DHCP server is running, it generates broadcast over the entire network, announcing to other users its presence and allocates your range of IP addresses to potential trespassers. Such users will be able to use your wireless equipment to connect to the institute network and any possible misuse will be attributed to you.

2. Access control lists have to be configured on the Wireless Access Points/Wireless Routers to allow only specific set of mac addresses to be able to use your wireless equipment. This will allow only your own machines to use the WiFi equipment. Wireless access points have a access range of 100 m, and anybody in that range will be able to connect via your access point. Hence, it is essential to configure Access Control (User mac address filters) on the wireless devices.

PLEASE ASK THE APPROPRIATE VENDOR TO CONFIGURE YOUR Wireless Access Points/Wireless Routers AT THE TIME OF INSTALLATION. THE ABOVE FEATURES MAY ALSO BE IMPLEMENTED ON WiFi EQUIPMENT ALREADY DEPLOYED IN THE RESIDENTIAL NETWORK.

WiFi hardware of various makes/brands has been deployed in resnet. It is not feasible for CC to provide any hardware assistance in this matter.

Access points not configured properly will not be able to connect to the Institute network.

In view of the IT laws in force, that require users to take responsibility for their own network use, we are constrained to implement these features on the IITB network.