Security

Reply
Occasional Contributor II
Posts: 11
Registered: ‎10-18-2012

Interested in Aruba wifi.. How about radius username/password on multiple devices ?

Hi there,

 

we are interested in a Aruba wifi solution.

We want the teachers to connect to the wifi with a radius.

but some teachers have sons and daughters on the same school.

 

So in theory the teacher can give his/here username and password to there child and the child can go on the wifi network.

How can make it more secure ?
I think it is possible to do Mac filtering and radius, but then it is more work for me.

 

Is there a build in solution ?
Or do we need to look for an app/program ?

 

Thanks

 

gr kloenie

Contributor II
Posts: 40
Registered: ‎12-16-2011

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

[ Edited ]

Its always god policy to give everyone their own username and likely to give teachers and students different roles.

 

You can also use machine authentication. So if the student has the teachers laptop, username, and password there isn't much you can do... except discipline the teacher for giving out their password.

Aruba
Posts: 1,642
Registered: ‎04-13-2009

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

Machine authentication is one option, allowing you to set differing roles depending on whether the machine successfully authenticated as well as the user (easier for Windows domain joined machines; but you can trick the system by adding the MAC of other devices to the controller's database)........... but if you are truly worried about credential sharing, then I suggest you look at implementing a solution based upon unique device credentials; whether it is EAP-TLS (certificates) or ClearPass Onboard; with its certificate and unique device credential support.

 

 

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Occasional Contributor II
Posts: 11
Registered: ‎10-18-2012

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

okey that is what i understand.

they also want a wifi spot for the teachers... and BYOD...

we want to give them easy access and save for us the IT department.

 

what if they first use a smartphone, and then later a laptop.

what is the best possible setup for that.

also in mind that we not only want radius ( username/password ) but 1 step more authentication.

 

 

MVP
Posts: 2,925
Registered: ‎10-25-2011

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

What are you using for students? or this is just for teachers?

 

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Occasional Contributor II
Posts: 11
Registered: ‎10-18-2012

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

this is our first WIFI implementation.

First teachers and maybee later students.

We have 180 teachers and 1500 students.

So first we want the teachers, and maybee later the students, with BYOD, radius and mac filtering...


MVP
Posts: 2,925
Registered: ‎10-25-2011

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

Dont use mac adddress filtering....

Aruba recomends agains the use of it... Its really weak, mac is not encrypted in the air...  plus you get 4000 limit on mac address on the internal database... which mean you will get in the point you will be not able to add more mac addresess, you will not likely get control which mac address of who so then you will have trouble deleting old entries.. and also you need one mac address per device....

 

Just stay with the BYOD

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Occasional Contributor II
Posts: 11
Registered: ‎10-18-2012

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

okey...

No MAC Filtering...
How is BYOD configured then ?
Radius with a certificated ?

MVP
Posts: 2,925
Registered: ‎10-25-2011

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

[ Edited ]

Hello

If you don tknow how to configure BYOD i recommend you to attend to a BYOD(clear pass) Course... you can get more info on the training forum

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Occasional Contributor II
Posts: 11
Registered: ‎10-18-2012

Re: Interested in Aruba wifi.. How about radius username/password on multiple devices ?

will do thanxs.

Search Airheads
Showing results for 
Search instead for 
Did you mean: