wireless network access

[ahmedyassin8002]

Hi,

I have an autonoumus APs installed inside my LAN (4 APs just plugged to the switch broadcasting three available VLANs from the switch with three SSIDs), i configured 3 diiferent WPA2 keys for them.

So any user when access any of them, i just type the key and the key kept stored on the user labtop forever, and in new windows OS, user can uncheck the wireless key and can see it and give it to other unkown users who can access my LAN without being known.

So, can any one inform me what is the best scenario to overcome this issue?

[Scott Fella]

If you are trying to prevent users from adding their own device, why not lock down the wireless profile so they can't check that. Hopefully these are part of your domain computers. You can also do Mac filtering if you don't have many devices to manage (easy to spoof a Mac address though). Users will have to k ow how to spoof a Mac to bypass that. If you have AD, you can bring up a radius server and do 802.1x authentication using machine authentication. But again, these have to be domain computers.

Sent from Cisco Technical Support iPhone App

[Ven Taylor]

I agree with Scott.  You really want to use 802.1x authentication via RADIUS.

However, they don't necessarily need to be domain computers if you don't use machine authentication.

You can set up just AD login if you want to use non-domain machines (like Macs) too.

Ven