topic Disable Guest SSID based on set schedule. in ExtremeWireless (General)

Disable Guest SSID based on set schedule.

Jim_Seaman — Thu, 17 Oct 2013 19:33:00 GMT

Disabling open/guest SSID networks in the middle of the night would be neat for a level of security for an SSID with hardly any security.

RE: Disable Guest SSID based on set schedule.

Branden_Henner1 — Fri, 18 Oct 2013 01:34:00 GMT

Unfortunately, this functionality is not available without purchasing Enterasys NAC. Here is a work around. Create an internal captive portal that authenticates to Active Directory via radius. Create a group in Active Directory with only one account which would be a generic guest account. Use the captive portal editor to explain in the login process to use the generic user name and password. In radius or in NPS you can define a time of day in which that one user is allowed to authenticate. At that point you would need to create a short session timeout so that the user can't stay on all night. It is not pretty but unfortunately it is the only way I've found.

RE: Disable Guest SSID based on set schedule.

Ferguson__Scott — Fri, 18 Oct 2013 01:41:00 GMT

Thanks you for your input. This is also on our product roadmap and is currently targeted for mid - late summer of 2014.

RE: Disable Guest SSID based on set schedule.

Jim_Seaman — Fri, 18 Oct 2013 01:41:00 GMT

Currently, we aren't running radius. I would have to enable radius and eapol (as far as switch commands) on all the switches and force muliauth to the APs and build policies on Network Policy on Windows as far as first steps to possibly getting this feature going? I'll be going to enterasys training soon. Maybe I should wait after completing the training.

RE: Disable Guest SSID based on set schedule.

Branden_Henner1 — Fri, 18 Oct 2013 01:53:00 GMT

Woah. Over thinking it buddy. Just fire up the NPS role on your AD server and point auth on the controller to it. Pretty simple. Don't do anything on the switches. Edit: create the appropriate policies in NPS of course.

RE: Disable Guest SSID based on set schedule.

Jim_Seaman — Fri, 18 Oct 2013 01:56:00 GMT

Phew. Okay cool. Thanks, Branden!

RE: Disable Guest SSID based on set schedule.

Gareth_Mitchell — Fri, 16 May 2014 11:20:00 GMT

Hi James

I just tested this on 10.11.05 seems to work ok for me

Which version 10.11 are you running?

-Gareth

RE: Disable Guest SSID based on set schedule.

Gareth_Mitchell — Fri, 16 May 2014 11:20:00 GMT

Hi James

I think the case route is the best way, I saw the same as you in the lab after changing my community names.

-Gareth

RE: Disable Guest SSID based on set schedule.

Gareth_Mitchell — Fri, 16 May 2014 11:20:00 GMT

The fixes are in 10.11.06.

-Gareth