topic SSID to allow BYOD's and not allow Company PC's accee in Wireless

SSID to allow BYOD's and not allow Company PC's accee

jimmyfoddrell — Mon, 05 Jul 2021 07:47:26 GMT

I have a WLC 2504 with (2) 3702 AP's. I have successfully set up a SSID (Internal Laptops) for the internal users to connect to the local LAN. I am now trying to create a SSID (Public) for the employees and guest to use their BYOD's. The issue I am having is attempting to block the company laptops from the Public SSID. I have attempted using my W2K3 server IAS and setting up the radius info in the WLAN I created for this SSID. I just cant seem to get anything to work. I have searched everywhere for answers but not had any luck. Has anyone ever done this? Thanks in Advance.

What you need is a mechanism

ericgarnel — Thu, 08 May 2014 13:43:16 GMT

What you need is a mechanism to deal with "client missassocation"

A WiPS engine can identify clients by MAC address and de-auth them based on the SSID policy.

If the client joins "Guest" they are knocked off. They are not knocked if they join "corp"

Motorola AirDefense and AirTight WiPS both provide such functionality. One of my customers used it very effectively in conjunction with a CUWN infrastructure.

Eric

Please rate if this was helpful

Thanks Eric for your reply. I

jimmyfoddrell — Thu, 08 May 2014 14:04:45 GMT

Thanks Eric for your reply. I was able to get it working via IAS. It is a little more administration involved, but it does what I needed. Thanks/

Jim,Excellent! And thank you

ericgarnel — Tue, 20 May 2014 13:27:12 GMT

Jim,

Excellent! And thank you for the rating!

By Chance, would you be able to share your steps? I have a few customers who could use the same functionality with their IAS

Eric

I thought it was working, but

jimmyfoddrell — Tue, 20 May 2014 15:29:22 GMT

I thought it was working, but it was very inconsistent. I ended up using the DHCP DENY rules on the Windows 2008 DHCP server.

Hi Jimmy, If you are running

Matthew Knott — Thu, 29 May 2014 00:28:18 GMT

Hi Jimmy, If you are running Windows based laptops in an Active Directory environment, I added the Guest SSID to the Group policy as a "Disabled" SSID. Then none of our corporate Windows laptops can access the Guest SSID. Works a Treat!

Matthew