ExtremeWireless (WiNG)

Expand all | Collapse all

Wifi Devices filtering

  • 1.  Wifi Devices filtering

    Posted 03-16-2018 10:07
    Hi. I'm a french wifi network administrator and I'm using VX900 and NX7510. I need to block iOS et Android device from my GUEST Wifi (this network should be used only for LAPTOP). I tried to configure fingerprint filtering but for every new devices model, there is new fingerprint. So the filtering need to be permanently updated/managed. Is there a filtering system a little more evolved?


  • 2.  RE: Wifi Devices filtering

    Posted 03-16-2018 10:19
    Hi,

    you can do it the vice versa, only allow Windows. Or block iOS and Android. That are the only two options.


  • 3.  RE: Wifi Devices filtering

    Posted 03-16-2018 12:05
    Hi and thank you for your answer.
    In my policies, I have not "windows" listed in client identity. Where do you find it?
    Wich kind of parameters do you use to do this?


  • 4.  RE: Wifi Devices filtering

    Posted 03-16-2018 12:25
    Configuration -> Security -> Device Fingerprinting -> Client Identity

    If you create add a new, you can select "Predefined". Under this settings I can add Windows, Android, iOS...

    Example:
    client-identity Windows-10 dhcp 1 message-type request option 55 exact hexstring 01002710792c78
    dhcp 5 message-type request option 60 exact ascii "MSFT 5.0"
    dhcp-match-message-type request
    !
    client-identity Windows-7
    dhcp 2 message-type request option 55 exact hexstring 010f03062c2e2f1f2179f92b
    dhcp 9 message-type request option 60 exact ascii "MSFT 5.0"
    dhcp-match-message-type request
    !
    client-identity Windows-8
    dhcp 1 message-type request option 55 exact hexstring 010f03062c2e2f1f2179f9fc2b
    dhcp 5 message-type request option 60 exact ascii "MSFT 5.0"
    dhcp-match-message-type request
    !
    client-identity-group Group-ok client-identity Windows-8 precedence 1
    client-identity Windows-7 precedence 2
    client-identity Windows-10 precedence 3
    load default-fingerprints

    To this "Group" ok you can add a allow all firewall and default is deny all. Or you test it the other way, create a rule for android and iOS with the deny rule and default is allow all.


  • 5.  RE: Wifi Devices filtering

    Posted 03-16-2018 12:28
    ho yes! I will try this!!

    many thanks!


  • 6.  RE: Wifi Devices filtering

    Posted 03-16-2018 12:56
    I can apply Wireless Client Role Policy only on the profile (so on all SSID). I want to apply this rule on GUEST only.