Hello,
I'm a tech for a school district and recently I've been looking for ways to improve our guest network implementation. Currently it is just a psk SSID. It used to have the password manually updated every couple weeks and put into a document that all staff had access to, but that hasn't been done in a while. With it being the same for so long students have started getting in to it. Student Chromebooks automatically connect to our network, but the district doesn't want them connecting personal devices. While looking at better ways to set it up I found a few potential options like ppsk user group expiration and Guest Essentials, but I don't think either of these will work.
For PPSK User Group Account Expiration my thought was that I could set a user group to expire weekly and enable the "Renew User Credentials" option to have a rotating password on a ppsk user. It looks like that still requires manual intervention when the time period is up since the credentials have to be renewed, so unless I'm not understanding something I don't think that will work.
For Guest Essentials the social media registration isn't possible since students could use personal accounts, and the sponsor registration seems like it goes by the email domain, which is the same for our staff and students. I did see an article that mentions being able to restrict the sponsor approvers to only specific individuals with some supplemental CLI additions, so that is still a possibility, but the whole process still seems a little clunky.
Does it seem like I'm missing a way to do this kind of automatic credential renewal, or does anyone have any suggestions on a better way to go about this? Right now it seems like my best option might just be to go back to manually updating the SSID password.
