Controllerless Networks

last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Expand all | Collapse all

Mix of IAP92 and IAP103 with MAC Auth

This thread has been viewed 0 times
  • 1.  Mix of IAP92 and IAP103 with MAC Auth

    Posted Mar 31, 2015 03:54 AM

    Hi,

    I have an Instant cluster with a mix of IAP92 and IAP103. The customer wants to activate the MAC Authentication, but it can't work fine because the IAP92 with firware version 6.4.x lose the Internal RADIUS function.

    Is there a way to do anyway the MAC Auth without create 2 separate IAP cluster?

     

    Thanks,

    Massimo



  • 2.  RE: Mix of IAP92 and IAP103 with MAC Auth
    Best Answer

    Posted Apr 10, 2015 06:55 PM

    You could downgrade code to a version which still supports internal RADIUS.

    You could set up an external RADIUS server.

     

    Have you tried forcing a 103 to be VC and using internal? I don't know whether the internal RADIUS is done be each iAP or the VC.



  • 3.  RE: Mix of IAP92 and IAP103 with MAC Auth

    Posted Apr 10, 2015 07:00 PM

    You do know that MAC authentication is almost as easy to bypass than WEP?

     

    Meaning that it would take me longer to think of trying it than to hijack a MAC address once I did.



  • 4.  RE: Mix of IAP92 and IAP103 with MAC Auth

    Posted Apr 13, 2015 02:42 AM

    Hi Matthew,

    I can't downgrade the firmware because otherwise the IAP103 are not supported.

    I could try to use an external RADIUS Server but I can't add other services to the customer.

     

    Your third suggestion sounds interesting. I will try it in the next days.

     

    P.S: Matthew, I know well that MAC AUTH is easy to bypass, but the customer has requested it, even if I have explain to him all the cons.

     

    Thanks,

    Massimo