District Internet

Written by Christopher Lee

Last published at: April 17th, 2024

Overview


Shakopee Schools currently has a 10GB connection to the Internet.  This is broken down into two main connection types: hardline and WiFi.

Hardline:

  • Only district approved systems (printers, phones, approved Point of Sale (POS) systems, HVAC, cameras, desktop systems/etc).

WiFi:

  • Two wireless frequencies used: 2.4GHs and 5GHZ
    • 5GHz is currently reserved for "SabersWireless" production WiFi
      • Used for District devices (iPads/MacBooks/Windows Laptops/ChromeBooks/AppleTVs/etc)
      • Secured via various security measures
      • As of start Aug 26, 2022 Video Streaming is blocked for student devices when on District Internet.
      • Refined Traffic Shaping to prevent impact on production network during school day (7AM - 3PM)

        Delete
        • Priority:
          •  Collaborative services (Google Meet, Facetime, Cisco WebEx, etc)
        • Default
          • Anything not classed
        Delete


    • 2.4GHz is used for "SabersPublic" guest/courtesy WiFi  
      • Is best effort and could be disabled/throttled/limited if performance impacts production WiFi
      • Will be disabled from 8AM to 4PM on days standardized testing is occurring
      • *M-F, 7am to 3pm max bandwidth is limited to 2GB. After 3pm SabersPublic is shared 10GB.
      • Has been removed from classroom Access Points to reduce device congestion.
      • SabersPublic Usage/Agreement/Disclaimer

        Shakopee Public Schools provide Internet access points at no charge in selected areas for guests with portable computers or devices capable of receiving wireless signals. You will be able to access the Internet from your wireless device when sitting within range of an access point. Guests are expected to use the wireless access in a legal and responsible manner. By using this wireless access network, the user acknowledges that he/she is subject to, and agrees to abide by all laws, and all state and federal rules and regulations applicable to Internet use.

        Terms and Conditions of Use

        Guests will need a notebook/laptop computer or other device equipped with a wireless card that supports the WiFi standard.

        Shakopee Public Schools assumes no responsibility for the safety of equipment.

        Security Considerations

        Wireless access is by nature an insecure medium. As with most guest wireless networks, any information being sent or received over the Company wireless network could potentially be intercepted by another wireless user. Cautious and informed wireless users should not transmit their credit card information, passwords and any other sensitive personal information while using a wireless "hot spot".

        Anyone using the SabersPublic network is forewarned that there can be no expectation of privacy when using the wireless network. Users assume all associated risks and agree to hold harmless the Company and its employees for any personal information (e.g. credit card) that is compromised, or for any damage caused to users' hardware or software due to electric surges, security issues or consequences caused by viruses or hacking. All wireless access users should have up-to-date virus protection on their personal laptop computers or wireless devices, as well as staying up-to-date with applicable OS security patches.

        Disclaimer

        Shakopee Public Schools is providing wireless connectivity in this facility as a guest service and offers no guarantees that any use of the wireless connection is in any way secure, or that any privacy can be protected when using this wireless connection. Use of this wireless connection is entirely at the risk of the user, and the Company is not responsible for any loss of any information that may arise from the use of the wireless connection, or for any loss, injury, or damages resulting from the use of the wireless connection

        Delete
      • Refined Traffic Shaping to prevent impact on production network during school day (7AM - 3PM)

        • Priority:
          •  Collaborative services (Google Meet, Facetime, Cisco WebEx, etc)
        • Default
          • Anything not classed

        Delete
 Delete 

Specialty networks

  • To support various events and special needs Technology may create additional network


  • SabersEvent access 
    • Status: Implemented
    • Intent: Support either hardline or WiFi requests for events/special systems that need reliable Internet connection without touching any internal district systems.
    • Available by request through rental coordinator.
      • It is highly recommended to request hardline if event to have many guests as Access Points can become over populated and provide poor experience.
 Delete 

Staff Cellphones (Personal / District)

Delete

Alert

Never share your credentials for others to connect under your account.

  1. Could lead to data breach as credentials are linked to other services
  2. Almost impossible to resolve without creating new user account as other's devices will continue to connect with credentials until network is removed from their device(s)


  • Status: Implemented/Under Review
  • Intent is to support staff mobile phones connection within brick buildings for safety and security concerns.
  • Staff can connect personal devices under SabersEvent access by selecting SabersWireless and using staff credentials.
    • Best effort and could be disabled/throttled/limited if performance impacts production WiFi
Decision Tree

Select Device Type (Only Active District Staff)
  • Android
  • iPhone
  • Add Button
Delete

Info

Due to variations in Android versions following steps may vary.



Navigate to:

Settings > Security or Settings > Security & Location > Encryption and Credentials > Certificate 

  • Install a certificate 
  • 'Open from' 
  • Device 
  • Downloads and install newly named CA cert (from previous step)

Navigate to:

 Available wireless network > SabersWireless > Complete with following:

  • EAP Method: PEAP
  • Phase 2 authentication: MSchapv2
  • CA Certificate: Select Certificate from previous step
  • Online Certificate Status: Do not validate
  • Domain: ISD720.COM
  • Identity: District username (email address without @shakopee.k12.mn.us)
  • Anonymous identity: leave blank
  • Password: District password


Now connected to SabersWireless

Delete

Warning

Warning

Will need to update password if you change it anywhere.


Navigate to Settings


Wi-Fi


Select SabersWireless


Enter your District username (email address without @shakopee.k12.mn.us) and password 


Trust Certificate


Now connected to SabersWireless.

Delete

Warning

Warning

Will need to update password if you change it anywhere.


 Delete 

Student Exceptions

Medical Devices

Students that need devices connected to reliable internet to report medical data need to meet with Health Services Staff to have request put in for access.


IEP/504

Students that need personal devices connected to reliable internet for accommodations need to have it built into IEP/504.


Student Connection to SabersWireless on personal device request form:

Student Saberswireless access agreement.pdf

 Delete 

Security

Shakopee School district implements many tools to secure network to include but not limited:

  • Content Filtering all Internet connections
  • Restricting unsupported Operating Systems (ie: Windows 7 or older) from accessing Internet 
  • Restricted compromised systems from accessing Internet
    • Systems that have been detected trying to access known virus/malware domains/systems
 Delete