Skip to main content

UCSFguest - Open Wireless

Overview

The UCSFguest wireless network is available where the protected UCSFwpa network can be found enabling people without UCSF network accounts to access basic Campus, Medical Center, and Internet resources.

Available To

Anyone visiting UCSF related to UCSF business or services (including patients and patient families).

UCSF faculty, staff, students, and affiliates should use the protected UCSFwpa network for all communications - the UCSFguest network is reserved for visitors.

Restrictions

As an open network, the UCSFguest wireless network has no encryption to protect users from eavesdropping. It is just like using the wireless network at a coffee shop or library and is accessible to anyone within range of the signal.

UCSF limits what can be done on the UCSFguest network to protect university resources from unwanted issues and protect the university against the use of the network for malicious activities.

All attempts to connect to sites or protocols not open through the guest system will receive an immediate connection rejection.

Access to UCSF

Clients are limited to a specific list of UCSF web sites, accessing systems with SSH, and connecting to the Campus and Medical Center VPN services.

The mail@UCSF system restricts users to web or ActiveSync for mail.

Access to the Internet

UCSFGuest supports common communication protocols like web browsing but blocks services known to cause problems to organizations. The following communications will work:

  • Web: HTTP, HTTPS
  • Protected Mail: POPS, IMAPS, SMTP-SSL
  • Remote Connectivity: SSH, Windows Remote Desktop (RDP)
  • VPN: PPTP, L2TP, IPSEC
  • General Network: PING, DNS, NTP

Connecting to UCSFguest

Connecting to the UCSFguest network can be as easy as selecting it from the list of available wireless networks on your device.  There may be minimal set up depending on your operation system software. No authentication is required.

We recommend Windows 7 users configure a network profile as directed in UCSFguest network profile configuration.

Technical Notes

The specific ports allowed through the UCSFguest network to the general Internet are as follows: tcp/22, udp/53, tcp/80, udp/123, tcp/443, tcp/465, udp/500, tcp/993, tcp/995, tcp/1723, tcp/3389, udp/4500, udp/10000, icmp types 0 and 8, and protocols 47, 50, and 51. Use of these ports is unrestricted and will not result in a rejected connection by the wireless service.