internet control per click for teachers in a classroom

Solved
Holli69
Building a reputation

internet control per click for teachers in a classroom

Hi ,

we have a customer, a K12 school with full Meraki Stack (MX,MS,MR). Our MDM is Intune. All devices (teacher and students) are Apple  iPads.

The teachers want to control the internet via click on a button or via an APP or via a (captive) portal, so the students are still connected to WiFi Access Points, but without Internet access.

Is this possible, maybe with JAMF or Apple Classroom or any 3rd Party Hardware (Time for Kids, Endoospot...) or an Meraki APP in the marketplace ?

Has anyone the same situation or experience  ?

It's difficult to find a solution in Google !

1 Accepted Solution
PhilipDAth
Kind of a big deal
Kind of a big deal

I believe you can turn switch ports off and on.

View solution in original post

10 Replies 10
LG
Getting noticed

I'm thinking a firewall rule on the AP that the teacher is connected could block everybody's internet access, but, what about the teacher itself or other APs nearby?

 

You can use chatGPT, Gemini, Copilot, to ask for the code and create something like a webapp to achieve what you want, i faced something similar (another use case) and worked..

 

The challenge here is to determine who and how you block...

 

If students have one SSID and teacher another, you could ask for a code to change the availability of the students SSID. The teacher would have a screen to select wich classroom their are (and as such, the AP there) and for how long they want the student SSID disabled.
But this does not achieve the wifi connectivity you want to keep. Any requirements for such connectivity (local, to the classroom it self? airplay?)

 

Hope that helps with a direction... I don't think there's an app ready for that..

Pavithran_Che
Here to help

You can give create a SSID Manager - one of the admin role, so they can enable and disable the SSID. 

But they will get access on configuration part of SSID as well. 

cmr
Kind of a big deal
Kind of a big deal

Assuming that you want local network access for the students all the time and they are on a separate SSID/VLAN/subnet then you would control this with an access control list.  If all student devices are wireless then this could be on the MRs, otherwise it could be on the MX or possibly MSs.  They can be changed using the APIs so that would be the route I would look at.

If my answer solves your problem please click Accept as Solution so others can benefit from it.
Holli69
Building a reputation

students and teachers have same SSID, but different VLANs via a RADIUS Server (EAP-TLS/Certificates).

Teachers should be able to reach the Internet,students sometimes, depends on the teacher who permit or deny the Internet access for the students via a click on a botton. The idea with a SSID per classroom is good, but Meraki offer only 16 SSID's and the school is huge with approx. 60 classrooms.

Maybe a Meraki Engineer can help me, maybe it's possible with SM instead of Intune.

alemabrahao
Kind of a big deal
Kind of a big deal

Intune supports Apple Classroom and can configure shared devices, so, you can push network restrictions, but not toggle them live from a teacher’s device.

Apple Shared Device Mode and Guest Temporary Sessions - Cisco Meraki Documentation

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
PhilipDAth
Kind of a big deal
Kind of a big deal

Holli69
Building a reputation

Hi, sounds good. Do you know, If it's possible with the MT30 to disable only the AP in the classroom,while other AP's are working, so that every teacher can control the AP in his classroom. SSID disable ist nit a good Idea,because of 60 classrooms,but only 16 SSIDs possible. Not possible to get all classrooms with different SSIDs

PhilipDAth
Kind of a big deal
Kind of a big deal

I believe you can turn switch ports off and on.

cmr
Kind of a big deal
Kind of a big deal

@Holli69, you can definitely do that.  I have used that feature for years, mainly to disconnect my daughter's computer from the internet when she was a student and up late!

 

cmr_0-1751574337185.png

 

If my answer solves your problem please click Accept as Solution so others can benefit from it.
cmr
Kind of a big deal
Kind of a big deal

That will disable whatever (the AP in your case) that is connected to the switchport.  you can also send a webhook command to do pretty much anything you like.  You could use this to add or remove a tag from an AP and have the student SSID only active on APs with the tag.

 

cmr_1-1751574503885.png

 

If my answer solves your problem please click Accept as Solution so others can benefit from it.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.
Labels