topic Can I limit the amount of clients a user can connect with using peap-mschapv2 and WPA2-AES? in ExtremeWireless (Identifi)

Can I limit the amount of clients a user can connect with using peap-mschapv2 and WPA2-AES?

jellevandewalle — Thu, 02 Nov 2023 13:49:22 GMT

Some users share their credentials when trying to connect devices to the network.

We are a school. We want (our teachers) and students to learn not to share credentials with each other.

Therefore I want to limit the amount of clients per user.

Also...

Client devices use "random mac addresses" when connecting to our network resulting in a lot of known endsystems in our log.

Therefore I want to force clients to use the "mac address of their device" by "again" limiting the amount of registered devices per user.

Can this be done?

Re: Can I limit the amount of clients a user can connect with using peap-mschapv2 and WPA2-AES?

Miguel-Angel_RO — Wed, 29 Nov 2023 09:54:02 GMT

Try this:

https://github.com/extremenetworks/ExtremeScripting/blob/master/XMC_XIQ-SE/oneview_workflows/xwf/Limit_ES_with_same_Username-8.4.2.38v2.xwf

from https://github.com/extremenetworks/ExtremeScripting/tree/master/XMC_XIQ-SE/oneview_workflows

Re: Can I limit the amount of clients a user can connect with using peap-mschapv2 and WPA2-AES?

jellevandewalle — Mon, 04 Dec 2023 13:56:26 GMT

Hey Miguel,
Thanks for your response. I really appreciate it.
I've looked into your workflow. It gives the admin the option to block more than 2 devices per user. That's great.
But it only works after the authentication. It should check this while authentication and give an appropriate response to the user if needed. Something like; "You have authenticated with more than 2 devices. If you connect this device the oldest of your known devices will disconnect. Will you proceed?".
Also, In my opinion, this script will push users into using random mac addresses even more.