IdentiFi location based roles

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Hello, all!

Is there possibility to do location based roles with open SSID?
For, example - clients which in building/room have full access, clients which out of building/room have no access to Inet (if connect to SSID).

Do I need only IdentiFi+NetSight, or NAC too?

Is there Guide examples?

Thank you!
Photo of Alexandr P

Alexandr P, Embassador

  • 12,040 Points 10k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Andre Brits Kannemeyer

Andre Brits Kannemeyer

  • 5,010 Points 5k badge 2x thumb
Hi Alexandr

Yes, utilizing the NAC you can change the policies applying the the users based on loaction, time, device type ect...

So in your case you would create two locations, a "In building" and "out building" location.
You would add the appropriate AP's to each group.
So if the clients connects to SSID on the AP's that is part of the "In building" the NAC would return the appropriate internet access policy. If the client connects to SSID on the AP that is part of the "out building" another policy would apply that would limit internet access.

Hope this helps
Photo of Alexandr P

Alexandr P, Embassador

  • 12,040 Points 10k badge 2x thumb
Hello, Andre!

Can we do location based rules based on 1 ap?

Thank you!
Photo of Andre Brits Kannemeyer

Andre Brits Kannemeyer

  • 5,010 Points 5k badge 2x thumb
Hi Alexandr

This will not be possible.
a locations consists of a AP - the NAC can not apply policies based on signal strength.
You can how ever configure the output power/ Probe suppression to disconnect the user when they move to a specific signal strength. 

Photo of Alexandr P

Alexandr P, Embassador

  • 12,040 Points 10k badge 2x thumb
Can I do this per AP configuration?
Not per VNS.

Can you give me some example - where I can find this?

Thank you!