this post was submitted on 07 Sep 2024
467 points (92.5% liked)

Technology

60070 readers
3364 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS
 

I just moved into a student dorm for a semester abroad, and beforehand I emailed them asking whether they had ethernet ports to plug my router into (I use it to connect all my devices, and for WiVRn VR streaming). They confirmed that I could, but now that I'm here the wifi login portal is asking me to accept these terms from the ISP, which forbid plugging in a router. There's another clause that forbids "Disruptive Devices" entirely, defined as:

“Disruptive Device” means any device that prevents or interferes with our provision of the 4Wireless to other customers (such as a wireless access point such as wireless routers) or any other device used by you in breach of the Acceptable Use Policy;

So what are my options? I don't think I can use this service without accepting the terms, but also I was told by the student dorm support that I could bring a router, which contradicts this.

EDIT: some additional context:

  • dorm provider is a company separate from my uni (they have an agreement but that's it)
  • ISP (ask4) is totally separate from dorm provider, and have installed a mesh network that requires an account. On account creation, there are many upsells including one for connecting more than one device. The "free" plan only allows me to sign in on a single device, and I can upgrade to two devices for 15 pounds.
  • ethernet requires login too
  • VR streaming requires a high performance wifi 6 network, which is why I bought this router (Archer C6 from tp-link)
you are viewing a single comment's thread
view the rest of the comments
[–] Lojcs@lemm.ee 8 points 3 months ago* (last edited 3 months ago) (2 children)

Why does the dhcp on the router affect the main network? I'd think if it has its own network the main network would only need to deal with the router, as opposed to all the devices connected to the router if it was passthrough?

[–] Confused_Emus@lemmy.dbzer0.com 2 points 3 months ago (2 children)

Ah! I just saw you specified if it’s configured for pass through. If it is configured for pass through, then yeah it likely won’t cause issues on the network. The DHCP server is the critical bit.

From a network management perspective, though, they still won’t want these because you have to trust all these college students are going to properly configure their devices - most of them won’t know how and won’t bother figuring it out. And then you still have the issue of a bunch of unmanaged access points to your network, which is just poor security.

[–] nomous@lemmy.world 3 points 3 months ago (1 children)

Yeah a simple little unmanaged switch would solve all these issues for about $20 and probably wouldn't break the ToS.

[–] Confused_Emus@lemmy.dbzer0.com 3 points 3 months ago (1 children)

Yeah. I think OP’s issue is they may have a few devices that are wireless only. Not sure of the best way to handle those.

[–] nomous@lemmy.world 3 points 3 months ago

Ah yeah just saw they specifically want to connect a VR headset wirelessly. I'm not real sure how to approach that either, if there's any kind of port on the headset at all they could potentially adapt it to RJ45 but that defeats the whole point.

If a wireless connection is a must OP is just going to have to disable SSID broadcast, restrict it to certain MACs, and try to lock it down as much as possible and hope for the best. If they do it right it'll won't interfere with other devices and no one will ever know.

[–] Lojcs@lemm.ee 2 points 3 months ago

I just saw you specified if it’s configured for pass through.

I didn't, that's just bad grammar. Edited the comment

[–] Confused_Emus@lemmy.dbzer0.com -5 points 3 months ago* (last edited 2 months ago) (2 children)

Because that router will be broadcasting DHCP signals and offering IPs, conflicting with the authorized DHCP servers on the network. This wiki article will probably explain it better. I’m not so good with the words a such.

Here’s hoping these downvoters aren’t in charge of any networks. Not really sure what part of “a router is a DHCP server” you geniuses don’t understand.

[–] bamboo@lemm.ee 4 points 3 months ago (1 children)

A consumer router only operates DHCP on the LAN side. Presumably one would plug the WAN side into the university network, making this a non-issue.

[–] Confused_Emus@lemmy.dbzer0.com 3 points 3 months ago (1 children)

Some of my other replies address that. Worked in IT on a college campus, and every class will have at least a few clueless users who just plug the cables into the LAN ports.

[–] bamboo@lemm.ee 2 points 3 months ago (1 children)

Makes sense. Would that not be trivially mitigated by just blocking dhcp responses from unapproved servers on the switch though?

[–] Confused_Emus@lemmy.dbzer0.com 2 points 3 months ago* (last edited 3 months ago) (1 children)

Should be, yes. At that point it’s a question of how well the network was configured. I’d hope this wouldn’t be much of an issue these days - I did graduate from college in 2011, and I’m sure (hopeful) campus networks have improved since my student IT job days. These days my router config experience is from the ISP side. The only private network I’m responsible for is my own, thankfully!

[–] bamboo@lemm.ee 3 points 3 months ago (1 children)

I went to college in the mid-late 2010s and I recall they specifically banned WiFi routers, but when I checked what they meant specifically all they cared was that it didn’t broadcast on the 2.4 or 5 ghz spectrum and if it was all wired I was fine.

[–] Confused_Emus@lemmy.dbzer0.com 3 points 3 months ago

Definitely makes sense - security concerns aside, the less crowded the broadcast space, the happier all the APs are.

[–] Lojcs@lemm.ee 2 points 3 months ago* (last edited 3 months ago) (1 children)

I don't know much about networking but that page seems to be about someone else setting up a dhcp server without the knowledge of the administrators or the users. In op's case the concerns about mitm attacks don't apply and the other concerns sound like problems that could arise in cases of misconfiguration or if the users aren't aware they're connected to a different network. I also couldn't see anything about it affecting the main network's performance

[–] Confused_Emus@lemmy.dbzer0.com 3 points 3 months ago (1 children)

I mean, it’s all right there in the first two paragraphs. Keep in mind that by DHCP server we aren’t talking about something specifically set up by people with malicious intent. A home router is a DHCP server when not configured for pass through. Students who don’t know how routers actually work (we can’t all be IT nerds, lol) plug them into their dorm Ethernet jack, and now you’ve got an unauthorized device offering IP addresses that conflict with the authorized DHCP servers, which can quickly start causing issues with any new devices trying to connect to the network, and existing devices as their DHCP leases expire. Also keep in mind that we’re talking about a college network that will likely have local network resources for students like shared drives that would not be accessible to anyone connecting through the rogue device. Your IT department will quickly start getting complaints about the network that are caused by an access point you have no control over.

[–] Lojcs@lemm.ee 4 points 3 months ago (2 children)

I see, I thought routers knew not to do dhcp on the Wan port

[–] Confused_Emus@lemmy.dbzer0.com 4 points 3 months ago* (last edited 3 months ago)

Typically they do. Which is great until you get a student who doesn’t understand WAN vs LAN and plugs both connections into the LAN ports. Never underestimate the power of a Stupid User.

[–] AbidanYre@lemmy.world 2 points 3 months ago* (last edited 3 months ago) (2 children)

They do know enough to not send DHCP leases upstream..

[–] flappy@lemm.ee 4 points 3 months ago* (last edited 3 months ago) (1 children)

If you plug the dorm ethernet jack into the LAN side of a consumer router, there's a chance they don't.

Sure, you can catch this if you watch the dhcp leases your router is handing out, but..

[–] AbidanYre@lemmy.world 2 points 3 months ago (1 children)

I'm assuming OP is at least smart enough to know that the port that's on its own/a different color/somehow different from the others is the one that goes into the wall. It sounds like they have at least that level of competence.

[–] Confused_Emus@lemmy.dbzer0.com 3 points 3 months ago* (last edited 3 months ago)

I’m sure OP is given the more technical nature of Lemmy users. But this thread is about the average college student with no networking knowledge.

ETA: Sorry that I specified you weren’t talking about the same thing the rest of us were in this thread.

[–] Confused_Emus@lemmy.dbzer0.com 1 points 3 months ago* (last edited 3 months ago) (1 children)

Which is all well and good until you get someone who plugs both connections into the LAN ports.

Downvoting just because I pointed out a scenario you didn’t think of isn’t so classy.

[–] AbidanYre@lemmy.world 3 points 3 months ago (1 children)

No. I'm downvoting because your first comments stated it will happen if the router is set up to offer leases. Not that it could happen if a user ignores the quick start guide that says "plug this port into the wall." Then got all pissy with that other guy who pointed out that your article was about DHCP servers, not routers.

[–] Confused_Emus@lemmy.dbzer0.com 3 points 3 months ago

I’m not getting pissy about anything. That’s projection on your part, reading a tone that wasn’t there. Just because you’re in a bad mood today doesn’t mean the rest of the internet is.