Wireless Access

Reply
Occasional Contributor II

How to Classify devices type per SSID

Hi everyone,

 

I have SSID1: Employee

SSID2:Guest

 

I use aruba AOS6.5 model 7030

 

I want to make only Laptop connect to Employee.

And i want to make only mobile connect to guest.

 

I thing it's using DHCP-fingerptint right?

but i don't know how to configuration

 

can eveyone explain to me....

 

Best Regards,

BABABA

Re: How to Classify devices type per SSID

There is multiple ways to achieve this and it depends on how your environment is set up. In the first case, how are these devices managed? Can you apply a device policy on the device which will only allow access to a specific SSID?

 

Failing this, how do you clients authenticate to each SSID? If you are using an authentication such as ClearPass or RADIUS you can return attributes and assigned different VLAN's,  User Roles and so on?

 

If you are looking at using device finger printing, then take a look at the below:

 

http://www.arubanetworks.com/assets/vrd/AOS-DHCP-FingerPrint-AppNote.pdf

 


ACMP, ACSA, ACDX #985
If my post addresses your query, give kudos:)
Guru Elite

Re: How to Classify devices type per SSID


@ wrote:

Hi everyone,

 

I have SSID1: Employee

SSID2:Guest

 

I use aruba AOS6.5 model 7030

 

I want to make only Laptop connect to Employee.

And i want to make only mobile connect to guest.

 

I thing it's using DHCP-fingerptint right?

but i don't know how to configuration

 

can eveyone explain to me....

 

Best Regards,

BABABA


You should not use DHCP fingerprinting, because there are non-domain Windows machines that you don't want on your network.  In addition, DHCP fingerprinting requires that a client get an ip address to do the fingerprinting; in 802.1x the ip address is obtained after authentication which means you would have to find out how to kick deny clients after they authenticate successfully.

 

For a 802.1x SSID, you should consider using Enforce Machine authentication, which will ensure that a client has machine authenticated before giving them full access to the SSID.  http://www.arubanetworks.com/techdocs/Instant_423_WebHelp/InstantWebHelp.htm#UG_files/Roles_and_policies/ConfUserRole.htm#Configur2

******************
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
******************
Occasional Contributor II

Re: How to Classify devices type per SSID

Thank you sir.

i'll try to do it.

Re: How to Classify devices type per SSID

Are you planning to use 802.1X with RADIUS server ?

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II

Re: How to Classify devices type per SSID

Yes, I use 802.1X Authentication on Microsoft IAS.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: