Security concerns on the AP's web access

[kimpin]

Hi,

anyone can suggest how to secure the web access? Can we control the web access by ip addresses instead of just username/password configured in the AP itself? I have thought of using ACLs to control but how about users from the same subnet as the AP?

Your response is much appreciated. Thanks!!

[s-doyle]

I would setup AAA on the gateway router to make the user authenticate again for web access.