Network Access Control - Hostel Wired Network

Started from 1 July 2021, NAC will be enforced on the Hostel Wired Network. Two new controls will be applied to the devices connecting to the Hostel Wired Network.

 

 

Control 1: Personal Network Equipment cannot be connected to the Hostel Wired Network

Personal network equipment such as routers, switches, etc. is owned and operated by users themselves; the University network can be easily shared with the public. The equipment might not be set up correctly and securely, ultimately creating a loophole in the network to provide an easy way for intrusion. The NAC policy will block all personal owned network equipment. All hostel residents are advised not to bring and use any personal network equipment in hostels.

Not Allowed

 

Control 2: Login is required when initiating access to the Hostel Wired Network

Other devices for connecting to the hostel wired network must come with a web browser for login so that only authorized persons and devices can access the network. Hostel users are required to log in with your Lingnan credentials when initializing the connection of your devices to the Hostel Wired Network. Devices without a built-in or installed browser are not compatible with the new control and will be blocked from accessing Hostel wired network. These devices can be connected to the Internet through University Wi-Fi, mobile hotspot, pocket Wi-Fi, or other public Wi-Fi services.

Supported

 

Summary of supported devices:

Devices Hostel Wired Network Connection Alternative Connections
PC and Notebook (Windows, Mac, Linux) Yes YES
(Login from Browser)
University Wi-Fi, other Wi-Fi services, Hotspot or mobile networks.
Portable Device (Wired Connection)
(Android, IOS)
Yes YES
(Login from Browser)
University Wi-Fi, other Wi-Fi services, Hotspot or mobile networks.
Network Devices (Shared Network)
(Firewall, Switch, Router, Access Point, NAS, Repeater, Powerline Network Adapter, etc.)
No NO (Blocked) -
Other Devices with built-in Browser
(e.g. Game devices, Smart TV, etc.)
Yes YES
(Login from Browser)
University Wi-Fi, other Wi-Fi services, Hotspot or mobile networks.
Devices without built-in Browser
(e.g. Game devices, TV box, Personal Printers, etc.)
No No
(Cannot login from Browser)
University Wi-Fi, other Wi-Fi services, Hotspot or mobile networks.

 

Frequently Asked Questions

 

Q. Why Network Access Control (NAC) is needed?

A. The NAC policy has been published in Section 20 of the Information Security Policy since Feb 2017. NAC helps protect the network from access by hackers and to make sure only authorized users and devices can get access to the University network.

 

Q. What kind of controls are applied for the enforcement of NAC policy?

A. Two new controls will be applied in the enforcement of NAC policy to protect the users and devices on the Hostel wired network.

  1. Personal Network Equipment cannot be connected to the Hostel Wired Network to prevent sharing of the University network and protect from the attack of hackers.
  2. Login is required when initiating access to the Hostel Wired network to make sure only authorized persons can access the network.

 

Q. What kind of device cannot be used in the hostel wired network?

A. All personal owned network equipment including Firewall, Switch, Router, Access Point, NAS, Repeater, Powerline Network Adapter, etc., is NOT allowed and will not be able to be connected to the Hostel Wired Network.

Generally, there is no restriction on what kind of devices can be connected to the Hostel Wired Network, except the personal owned network equipment. But to connect to the hostel wired network you are required to authenticate by login from a browser. Devices without a built-in browser are not allowed to log in and cannot be connected to the network.

 

Q. What can I do if my device cannot be connected to the Hostel Wired Network?

A. If your device is not able to connect to the Hostel Wired Network, as an alternative, you can connect your device through the University Wi-Fi network. Users can also opt to connect their devices to the Internet by using mobile hotspot, pocket Wi-Fi, or other public Wi-Fi services.

 

Q. I use router or network equipment because of the instability or slowness of the network. What should I do if the network is slow or unstable?

A. There are many reasons attributing to the poor performance of the network, but it is a great misconception that using a router will increase its speed and stability. If you encounter any network problem, please contact ITSC immediately.

 

Q. If I have questions where can I get help?

A. If you get any question, you can contact ITSC help desk: https://www.ln.edu.hk/itsc/services/help/itsc-helpdesk.