03-20-2012 06:17 PM
I've got a customer who wants to create guest user accounts just for a specific floor (their lobby that isn't in first floor of the building as weird as it sounds), but they don't want to create a SSID just for that floor too. Those "special guest user" accounts shouldn't have access in any other location than the lobby.
Is it possible to do that?, Aruba used to have a "location restriction" for firewall policies, but it appears that this has been depreciated.
Thank you so much.
03-20-2012 09:48 PM - edited 03-20-2012 09:54 PM
1.create seperate AP group for those area.
2.create a seperate virtual AP profile for those AP.
3.Create a role where the net-destination network is pointing to coporate network so that corporate users will be denied.
4.Limit the Max Txn EIRP in between 15 - 20 so that the RF signal travels within that lobby.
03-23-2012 12:43 PM - edited 03-23-2012 01:38 PM
Thanks for your reply, I guess by doing this the guest role for all the other floors can only access the network if they associate in another AP.