UF Guest Wireless
The new UF Guest network is designed to provide guests to the university a basic but reliable wireless network experience. When the user joins the network, an Acceptable Use Policy (AUP) screen will pop up. On accepting the AUP via a button click, the guest will have access to the Internet.
All UF Guest wireless users are subject to a 10Mbps rate limit. This applies to traffic going to the Internet or the UF network. Guest users do not have access to hosts on UF Private IP addresses (10.0.0.0/8, 172.16.0.0/12), nor may they VPN into the campus network.
Content filters are in use to block generally objectionable web content or content which may pose a danger to the guest's device (such as malware). UFIT also filters general groups of applications that may be harmful to the university network or the broader Internet. These blocked applications generally fall into the following categories:
- Peer to Peer (file sharing)
- Botnet Command and Control (security)
- VPN to the UF Campus Network
- Unauthenticated Email Applications
Other applications should work on the UF Guest Network. UFIT constantly monitors the network and may decide in the future to add additional application categories to this list for security or stability purposes. This page will be updated whenever application categories or other issues mandate changes.
- Who can use this network?
- Any guest to the university may use this network. UF Faculty/Staff/Students must use the "UF" or "Eduroam" wireless networks. The use of this network by Faculty/Staff/Students for brief periods of time in the case of a device level issue that prevents access to "UF" or "Eduroam" is permitted, however once that issue is resolved, the user must switch back to the "UF" or "Eduroam" networks.
- How does this process work?
- First, join the "ufguest" wireless network from your mobile device. When your attempt to browse to the Internet, your browser will be redirected to a portal web page. This web page presents an Acceptable Use Policy (AUP) with a button at the bottom to indicate you accept the policy. Once the policy is read and accepted, you will be permitted to access the Internet.
- I can't reach the Internet, how can I verify I am being intercepted?
- Until a user accepts the AUP, all traffic is redirected to a server which presents this AUP webpage. The easiest way to tell if you are being intercepted is to ping "10.10.10.10". If this address works, you are being intercepted.
- Will I be intercepted if I browse to a secure website? The old Visitor system didn't do this.
- Yes, the new system will intercept all HTTP and HTTPS (secure) web traffic to present the AUP. On some browsers, you will get a security warning. This is normal as the AUP portal is "pretending" to be the site you were attempting to reach. If you are using Firefox, the browser will not allow some secure sites to be intercepted. We recommend you browse to www.ufl.edu to assure the intercept works properly, or use a different browser.
- Do any browsers not work well with UF Guest:
- Current versions of Firefox do not implement any kind of guest wifi portal detection. They also do not permit some secure sites to be intercepted (such as Google, Facebook, etc). As a result, you will see a security warning that the page cannot be displayed, but you will not given an option to display the page. This is not an issue with UF Guest, but rather a lack of portal detection support in Firefox. Future Firefox versions may implement this detection. Chrome, Safari, and Internet Explorer seem to work fine. For Firefox, we recommend you first browse to a non-secure website such as www.ufl.edu to be allowed access to the AUP screen.
- I joined the UF Guest network and accepted the AUP, however later in the day I was intercepted again.
- The UF Guest network has a 1 hour idle timer and a 12 hour absolute timer. This means that if you don't use the network for 1 hour, or you use of the network exceeds 12 hours, you will be re-intercepted and asked to accept the AUP again
- I can't send email from my email client on the UF Guest network. Why not?
- We filter TCP Port 25 to prevent the UF Guest network from being used to send spam. Please use authenticated email which typically uses TCP port 465 or 587. Your email provider should have documentation on how to do this with their system. If you use a webmail type system (such as Gmail), you will not be not impacted by this restriction.
- How is this different than Eduroam?
- Eduroam is our recommended for all guests to the university who are affiliated with another Eduroam institution. Eduroam users are not intercepted, are not subject to many of the above restrictions, and have more streamlined access to the Internet. The UF Guest system allows other guests to connect to the Internet.