Controllerless Networks

Hi,

 

I have Aruba IAP-225, and i configure Guest SSID and tick on "Hide" on the advance option.

 

The problem is, i found "Other Networks" show on the wireless network connection.

 

Question: Can i hide also "Other Networks" option? how?

Hi,

 

clicking the "hide" button you only configure the AP not to populate the SSID name in the management beacon packet. It does not add additional security. 

 

So you can only hide the SSID name.

HI,

 

I know it is only hide SSID name, but in windows platform can i hide also "other network" option?

Hiding of SSID will only stop beacons from being broadcasted, if you require a limited WIFI connection, you may require whitelisting of devices or MAC authenication (Mobility controller) or something even along the lines of a NAC ( Clearpass )

Hi all, I’m looking for clarification on this statement - “Hiding of SSID will only stop beacons from being broadcasted” - everything I have studied/researched seems to claim the AP still beacons but the ssid field in the frame is null or 0.

Can anyone explain this clearly? I’ve had some folks tell me the air is cleaner if they hide the SSID, which I’m not completely sold on.

Thanks

Yes, exactly. Hiding the SSID just removes the SSID field in the beacon frames.

But that information is still sent by the clients that know about the hidden SSID in the "Probe Request" frame (the SSID is specified in that frame)

 I dont know if the air is cleaner just by using a hidden SSID. I havent checked that

 

---

@mhenshaw25 wrote:
Hi all, I’m looking for clarification on this statement - “Hiding of SSID will only stop beacons from being broadcasted” - everything I have studied/researched seems to claim the AP still beacons but the ssid field in the frame is null or 0.

Can anyone explain this clearly? I’ve had some folks tell me the air is cleaner if they hide the SSID, which I’m not completely sold on.

Thanks

---

The "hide ssid" parameter in the SSID profile makes the SSID field in the beacons have a null, which is correct.  Clients can still do a probe request, which will prompt the AP to do a probe response with the SSID.  Enabling the "Deny Broadcast Probe Request" parameter in the SSID will stop the AP from responding.  Combining the two parameters above will make the SSID truly "hidden" in the traditional sense from most clients.  Numerically denying broadcast probe requests will eliminate responses and make the WLAN "cleaner", but not by much.  There are quite a few things you can do to clean up the WLAN that have a larger and more sustainable impact than denying broadcast probe requests.

Hi Colin, One question:

 

When you talk about the "Deny Broadcast Probe Request", you mean that the AP will not answer to a wildcard probe request from clients, right?

 

Kevin

For every SSID that has that enabled, yes.

Guys, thanks for the quick responses!  This really helps clear it up for me, as well as solidifying what I kind of thought originally.

 

Thanks.