WPA2 Enterprise/RADUIS questions [message #119130] |
Thu, 05 February 2015 18:40  |
chrwei
Messages: 186 Registered: October 2009
|
|
|
|
Before I go spending time reconfig'ing everything with the new EAP/raduis auth features, is there a way to restrict that to only trusted devices somehow? I don't want users logging in with their personal devices on the private network, and that's managed somewhat effectively with WPA2 pre-shared, but only because users tend to be too lazy to extract the key from the device config. a better way to manage this would be awesome.
if it matters, I have UniFi APs.
|
|
|
|
Re: WPA2 Enterprise/RADUIS questions [message #119211 is a reply to message #119155] |
Mon, 09 February 2015 16:47  |
chrwei
Messages: 186 Registered: October 2009
|
|
|
|
correct, the approved devices are company owned and users do not have local admin. I'm currently using 2 vlans, using UBNT's captive portal for the guest wifi and a basic linux router, so seems like best plan is to go in stages: first keep current wifi layout but use Control's guest lan features, then move to MAC filtering and EAP.
|
|
|