District Internet

Written by Christopher Lee

Last published at: October 19th, 2021

Overview


Shakopee Schools currently has a 4GB connection to the Internet.  This is broken down into two main connection types: hardline and WiFi.

Hardline:

  • Only district approved systems (printers, phones, approved Point of Sale (POS) systems, HVAC, cameras, desktop systems/etc).

WiFi:

  • Two wireless frequencies used: 2.4GHs and 5GHZ
    • 5GHz is currently reserved for "SabersWireless" production WiFi
      • Used for District devices (iPads/MacBooks/Windows Laptops/ChromeBooks/AppleTVs/etc)
      • Secured via various security measures
    • 2.4GHz is used for "SabersPublic" guest WiFi (Max Bandwidth: 500MB)  
      • Guest WiFi is best effort and could be disabled/throttled/limited if performance impacts production WiFi
      • Refined Traffic Shaping to prevent impact on production network during school day (7AM - 3PM)

        Delete
        • Priority:
          •  Collaborative services (Google Meet, Facetime, Cisco WebEx, etc)
        • High: 
          • Email \ Messsager apps \ General Web Traffic (80 / 443)
        • Default
          • Anything not classed
        • Low
          • High Data Usage Game sites(Nvidia/Stream/etc)

Delete

Specialty networks

  • To support various events and special needs Technology may create additional network


  • SabersEvent access 
    • Status: Implemented
    • Intent: Support either hardline or WiFi requests for events/special systems that need reliable Internet connection without touching any internal district systems.
    • Available by request through Helpdesk.
    • Ensure provide following:
Delete

Staff Cellphones (Personal / District)

Delete

Alert

Never share your credentials for others to connect under your account.

  1. Could lead to data breach as credentials are linked to other services
  2. Almost impossible to resolve without creating new user account as other's devices will continue to connect with credentials until network is removed from their device(s)


  • Status: Implemented/Under Review
  • Intent is to support staff mobile phones connection within brick buildings for safety and security concerns.
  • Staff can connect personal devices under SabersEvent access by selecting SabersWireless and using staff credentials.
    • Best effort and could be disabled/throttled/limited if performance impacts production WiFi
Decision Tree
Select Device Type (Only Active District Staff)
  • Android
  • iPhone
  • Add Button
Delete

Info

Due to variations in Android versions following steps may vary.

Download District Certificate from District Google Shared Drive (must be logged in):
https://drive.google.com/file/d/1uDfq_8Lj0rxhybptrR8OjDC62kphr46P/view?usp=sharing

Navigate to:

Settings > Security or Settings > Security & Location > Encryption and Credentials > Certificate 

  • Install a certificate 
  • 'Open from' 
  • Device 
  • Downloads and install newly named CA cert (from previous step)

Navigate to:

 Available wireless network > SabersWireless > Complete with following:

  • EAP Method: PEAP
  • Phase 2 authentication: MSchapv2
  • CA Certificate: Select Certificate from previous step
  • Online Certificate Status: Do not validate
  • Domain: ISD270.COM
  • Identity: District username (email address without @shakopee.k12.mn.us)
  • Anonymous identity: leave blank
  • Password: District password


Now connected to SabersWireless

Delete

Warning

Will need to update password if you change it anywhere.


Navigate to Settings


Wi-Fi


Select SabersWireless


Enter your District username (email address without @shakopee.k12.mn.us) and password 


Trust Certificate


Now connected to SabersWireless.

Delete

Warning

Will need to update password if you change it anywhere.


Delete

Student Exceptions

Medical Devices

Students that need devices connected to reliable internet to report medical data need to meet with Health Services Staff to have request put in for access.


IEP/504

Students that need personal devices connected to reliable internet for accommodations need to have it built into IEP/504.

Delete