topic stop QR code user passowrd sharing Embedded wireless controller in Wireless

stop QR code user passowrd sharing Embedded wireless controller

adeebtaqui — Mon, 30 Jan 2023 09:50:15 GMT

Greetings to everyone

How to stop QR code user passowrd sharing for wlan wifi users on GUI of Embedded wireless controller?

Re: stop QR code user passowrd sharing Embedded wireless controller

Mark Elsen — Mon, 30 Jan 2023 09:57:32 GMT

- A broad topic : you will need additional authentication schemes and or factors , check this thread for a discussion on that : https://community.ui.com/questions/Need-to-stop-users-sharing-WiFi-password-using-qr-code-from-mobile/cc10f026-40d5-4ed9-85d1-6af8253c2d2a

Re: stop QR code user passowrd sharing Embedded wireless controller

Rich R — Mon, 30 Jan 2023 17:33:58 GMT

If you use a pre-shared key you cannot stop people sharing it - that's an inherent risk with PSK.

You will need to use 802.1x with unique user IDs and 2FA to ensure that access can't be shared or certificate based authentication but that's more difficult to do on BYOD devices.

Re: stop QR code user passowrd sharing Embedded wireless controller

Arshad Safrulla — Mon, 30 Jan 2023 21:41:48 GMT

On top of what others recommended you can also disable Layer 2 authentication and rely on Layer 3 authentication using a captive portal with local authentication on the EWC. This is the easiest way to solve the problem without adding much complexity, however I would still prefer what @Rich R has suggested as those methods are considered gold standard when it comes to wireless security.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/17-6/config-guide/ewc_cg_17_6/wireless_web_authentication.html#ID114

Re: stop QR code user passowrd sharing Embedded wireless controller

Zahid MEHMOOD — Wed, 11 Oct 2023 06:42:43 GMT

Turn on MAC filtering Access it will surely stop Wifi password from being shared.

Re: stop QR code user passowrd sharing Embedded wireless controller

JPavonM — Wed, 11 Oct 2023 08:41:36 GMT

MAC filtering only increment the Administrative tasks, and do not add real security (for advanced users).

Re: stop QR code user passowrd sharing Embedded wireless controller

Rich R — Wed, 11 Oct 2023 08:59:36 GMT

Exactly!
Even before private MAC address anybody with the technical knowledge could change their client MAC.
Since Private MAC address, frequently changing random MAC addresses, is now a standard feature in almost all OS.
And MAC filtering is not "secure" for the same reason - any user can fake an allowed MAC address. Obviously it will cause a problem if 2 users try to use the same MAC at the same time but the point is that it is not secure and it will not stop people sharing the key.