Wireless Access

last person joined: 14 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

How to Classify devices type per SSID

This thread has been viewed 0 times

  • 1.  How to Classify devices type per SSID

    Posted Jan 30, 2018 12:27 AM

    Hi everyone,

     

    I have SSID1: Employee

    SSID2:Guest

     

    I use aruba AOS6.5 model 7030

     

    I want to make only Laptop connect to Employee.

    And i want to make only mobile connect to guest.

     

    I thing it's using DHCP-fingerptint right?

    but i don't know how to configuration

     

    can eveyone explain to me....

     

    Best Regards,

    BABABA



  • 2.  RE: How to Classify devices type per SSID

    MVP EXPERT
    Posted Jan 30, 2018 06:07 AM

    There is multiple ways to achieve this and it depends on how your environment is set up. In the first case, how are these devices managed? Can you apply a device policy on the device which will only allow access to a specific SSID?

     

    Failing this, how do you clients authenticate to each SSID? If you are using an authentication such as ClearPass or RADIUS you can return attributes and assigned different VLAN's,  User Roles and so on?

     

    If you are looking at using device finger printing, then take a look at the below:

     

    http://www.arubanetworks.com/assets/vrd/AOS-DHCP-FingerPrint-AppNote.pdf

     



  • 3.  RE: How to Classify devices type per SSID

    Posted Jan 31, 2018 05:36 AM

    Thank you sir.

    i'll try to do it.



  • 4.  RE: How to Classify devices type per SSID

    EMPLOYEE
    Posted Jan 30, 2018 06:58 AM
    wrote:

    Hi everyone,

     

    I have SSID1: Employee

    SSID2:Guest

     

    I use aruba AOS6.5 model 7030

     

    I want to make only Laptop connect to Employee.

    And i want to make only mobile connect to guest.

     

    I thing it's using DHCP-fingerptint right?

    but i don't know how to configuration

     

    can eveyone explain to me....

     

    Best Regards,

    BABABA

    You should not use DHCP fingerprinting, because there are non-domain Windows machines that you don't want on your network.  In addition, DHCP fingerprinting requires that a client get an ip address to do the fingerprinting; in 802.1x the ip address is obtained after authentication which means you would have to find out how to kick deny clients after they authenticate successfully.

     

    For a 802.1x SSID, you should consider using Enforce Machine authentication, which will ensure that a client has machine authenticated before giving them full access to the SSID.  http://www.arubanetworks.com/techdocs/Instant_423_WebHelp/InstantWebHelp.htm#UG_files/Roles_and_policies/ConfUserRole.htm#Configur2



  • 5.  RE: How to Classify devices type per SSID

    Posted Jan 31, 2018 06:22 AM
    Are you planning to use 802.1X with RADIUS server ?

    Get Outlook for iOS


  • 6.  RE: How to Classify devices type per SSID

    Posted Feb 02, 2018 01:07 AM

    Yes, I use 802.1X Authentication on Microsoft IAS.