topic Re: Limit Guest to a single Hive in Aerohive Migrated Content

Limit Guest to a single Hive

itmanager2 — Mon, 02 Sep 2019 14:34:13 GMT

Hi,

We have a client at one site and I have been asked to give them permanent Guest access for the duration of our project.

I want to give them access - with the credentials only being valid to a specific set (ideally) or only that site's APs.

I am running HM VA (previously know as NG) ON PREMISE with a single Policy company wide. I don't want to have to touch all the other APs to disable access / SSIDs etc.

Any ideas on how I can achieve this ?

Cheers

Ian

Re: Limit Guest to a single Hive

samantha_lynn — Mon, 02 Sep 2019 19:46:44 GMT

You could set up a user profile firewall rule to deny their mac address on the main user profile, create a client classification policy to give users at the site he should be connecting to a different user profile where he isn't denied, and use a location rule to classify them to the right user profile (this requires a map set up for the location with the APs assigned to the correct map, at least for the location he will be connecting to). This guide reviews how to set up a client classification policy: https://thehivecommunity.aerohive.com/s/article/Client-Classification-in-HiveManager

Re: Limit Guest to a single Hive

itmanager2 — Tue, 03 Sep 2019 06:45:12 GMT

Hi Sam,

Sorry, I should have been clearer - "Client" is a plural (Company). We expect 6 people normally on site so allow 12 devices. They may have their own visiting staff, so MAC address isn't a good option.

They won't want to be micro-managed which is how they will see per person PPSK keys. Our contract to them says we will supply "Internet connection". I'm the one who wants it manageable, not them (until there are issues - then they just want it fixed).

I looked at Private Client Groups but they still span they entire network from what I see - even the "AP based" ones.

Any other thoughts ?

Cheers

Ian

Re: Limit Guest to a single Hive

samantha_lynn — Thu, 05 Sep 2019 01:50:08 GMT

You could try setting up cloud configuration groups, and assigning the APs you want the guests on to a specific group? That should like you assign an SSID to the group of APs without needing to go in to each one to do so. This guide reviews how to set up cloud config groups for reference: https://thehivecommunity.aerohive.com/s/article/Cloud-Configuration-Groups

Re: Limit Guest to a single Hive

itmanager2 — Thu, 05 Sep 2019 07:40:49 GMT

Hi Sam,

That looks promising. I have created a CCG and added the APs - just need to figure out how to use it.

That Powerpoint requires a login though and my community credentials don't work. I can't see a way to request a login.

Any chance of getting it another way ?

Cheers

Ian

Re: Limit Guest to a single Hive

samantha_lynn — Thu, 05 Sep 2019 19:26:16 GMT

I've emailed that to you directly, my apologies for the trouble getting to that resource.

Re: Limit Guest to a single Hive

itmanager2 — Tue, 10 Sep 2019 08:24:56 GMT

Thanks Sam - got it.

Cheers

Ian