Web auth AP based restriction

[annen]

Hello team

We have a hotel customer and they want to install 1815W APs in every room (WLC will be 5520). In addition to this, they want the guests to be able to connect to their own AP in their own room only, using web auth. So the guests in room 101 will connect to AP101, guests in room 102 will connect to AP102 and so on. How can this be accomplished?

Thanks

[hslai · Accepted solution]

One possibility is to set Called Station ID Type to "AP Name:SSID".

Then, set either an existing attribute or a custom attribute to AP Name. For example,

If Radius:Called-Station-ID Starts With Guest:OptionalData1 ...

[Jason Kunst]

I believe there might be a bug associating optional data in an authorization rule match

[Craig Hyps]

May be related to

CSCuv42389

New custom fields not showing up under authz policy attributes

If not working, I recall one SE handled via workaround:  "I could still use ‘OptionalData1’ which is visible in the Guest attribute list, by creating a custom Guest field with the same name, which allows me to work around the problem."

[annen]

Thanks. But all the APs will be broadcasting the sames SSID. Will it work in that case too?

Regards

[hslai]

That would not be an issue.

However, care needs to be taken to tune the wireless radios, shielding, and interferences so that the room would receive considerably weak signals from the APs from other rooms. Please consult the wireless team for such support, if needed.