District Internet

Written by Christopher Lee

Last published at: December 6th, 2022

Overview


Shakopee Schools currently has a 10GB connection to the Internet.  This is broken down into two main connection types: hardline and WiFi.

Hardline:

  • Only district approved systems (printers, phones, approved Point of Sale (POS) systems, HVAC, cameras, desktop systems/etc).

WiFi:

  • Two wireless frequencies used: 2.4GHs and 5GHZ
    • 5GHz is currently reserved for "SabersWireless" production WiFi
      • Used for District devices (iPads/MacBooks/Windows Laptops/ChromeBooks/AppleTVs/etc)
      • Secured via various security measures
      • As of start Aug 26, 2022 Video Streaming is blocked for student devices when on District Internet.

      • Refined Traffic Shaping to prevent impact on production network during school day (7AM - 3PM)

        Delete
        • Priority:
          •  Collaborative services (Google Meet, Facetime, Cisco WebEx, etc)
        • Default
          • Anything not classed
        Delete


    • 2.4GHz is used for "SabersPublic" guest/courtesy WiFi  
      • Is best effort and could be disabled/throttled/limited if performance impacts production WiFi
      • *M-F, 7am to 3pm max bandwidth is limited to 2GB. After 3pm SabersPublic is shared 10GB.
      • Has been removed from classroom Access Points to reduce device congestion.

      • Refined Traffic Shaping to prevent impact on production network during school day (7AM - 3PM)

        Delete
        • Priority:
          •  Collaborative services (Google Meet, Facetime, Cisco WebEx, etc)
        • Default
          • Anything not classed

Delete

Specialty networks

  • To support various events and special needs Technology may create additional network


  • SabersEvent access 
    • Status: Implemented
    • Intent: Support either hardline or WiFi requests for events/special systems that need reliable Internet connection without touching any internal district systems.
    • Available by request through rental coordinator.
      • It is highly recommended to request hardline if event to have many guests as Access Points can become over populated and provide poor experience.
Delete

Staff Cellphones (Personal / District)

Delete

Alert

Never share your credentials for others to connect under your account.

  1. Could lead to data breach as credentials are linked to other services
  2. Almost impossible to resolve without creating new user account as other's devices will continue to connect with credentials until network is removed from their device(s)


  • Status: Implemented/Under Review
  • Intent is to support staff mobile phones connection within brick buildings for safety and security concerns.
  • Staff can connect personal devices under SabersEvent access by selecting SabersWireless and using staff credentials.
    • Best effort and could be disabled/throttled/limited if performance impacts production WiFi
Decision Tree
Select Device Type (Only Active District Staff)
  • Android
  • iPhone
  • Add Button
Delete

Info

Due to variations in Android versions following steps may vary.

Download District Certificate from District Google Shared Drive (must be logged in):
https://drive.google.com/file/d/1uDfq_8Lj0rxhybptrR8OjDC62kphr46P/view?usp=sharing

Navigate to:

Settings > Security or Settings > Security & Location > Encryption and Credentials > Certificate 

  • Install a certificate 
  • 'Open from' 
  • Device 
  • Downloads and install newly named CA cert (from previous step)

Navigate to:

 Available wireless network > SabersWireless > Complete with following:

  • EAP Method: PEAP
  • Phase 2 authentication: MSchapv2
  • CA Certificate: Select Certificate from previous step
  • Online Certificate Status: Do not validate
  • Domain: ISD720.COM
  • Identity: District username (email address without @shakopee.k12.mn.us)
  • Anonymous identity: leave blank
  • Password: District password

Now connected to SabersWireless

Delete

Warning

Will need to update password if you change it anywhere.


Navigate to Settings

Wi-Fi

Select SabersWireless

Enter your District username (email address without @shakopee.k12.mn.us) and password 

Trust Certificate

Now connected to SabersWireless.

Delete

Warning

Will need to update password if you change it anywhere.


Delete

Student Exceptions

Medical Devices

Students that need devices connected to reliable internet to report medical data need to meet with Health Services Staff to have request put in for access.


IEP/504

Students that need personal devices connected to reliable internet for accommodations need to have it built into IEP/504.


Student Connection to SabersWireless on personal device request form:

Student Saberswireless access agreement.pdf

Delete

Security

Shakopee School district implements many tools to secure network to include but not limited:

  • Content Filtering all Internet connections
  • Restricting unsupported Operating Systems (ie: Windows 7 or older) from accessing Internet 
  • Restricted compromised systems from accessing Internet
    • Systems that have been detected trying to access known virus/malware domains/systems
Delete