Allow single WIFI device for each person for School.

[MUHAMMED SHAFI]

Dear All,

One of my customer using Wireless Lan Controller 7.5 and 3 SSID (Staff, Student and Teacher) they are using all Mac device & they don't have any active directory all staff are using open directory except student . Student they don't have any domain id or password if they want to access internet  they can connect through student SSID and all student has common password. 

But our customer wants new requirement

1.Customer doesn't want to allow  android devices in their network. only allow Mac devices.

2. Most of the users are using 2/3 wireless devices (Like iPad , Laptop and iPhone). Customer doesn't want to allow more then one device for each person. How administrator can assign only one wireless device for each student/stuff using WLC.

Kindly advice me the possibilities in multiple point of views.

Regards

Muhammed

[Leo Laohoo]

Customer doesn't want to allow  android devices in their network. only allow Mac devices.

This is possible by using but upgrade to 7.6.110.0 for more stability.  

The WLC can now distinguish type of clients via OUI MAC address.  You go to Security > Local Policies  and create a local policy.  You assign this Local Policy per SSID.  

2. Most of the users are using 2/3 wireless devices (Like iPad , Laptop and iPhone). Customer doesn't want to allow more then one device for each person. How administrator can assign only one wireless device for each student/stuff using WLC.

This is not going to be easy.  WLC client will not be able to distinguish how many clients per username.  So you'll need Microsoft AD (or something in that category) or Cisco ISE to ensure there's only one client per username.  

[kaaftab]

yes leo is right using cisco ISE and devices registration you can control this.Also ISE is a radius server you can maintain the database in it.