topic RE: Wifi Devices filtering in ExtremeWireless (WiNG)

Wifi Devices filtering

Cedrik76 — Fri, 16 Mar 2018 17:07:00 GMT

Hi. I'm a french wifi network administrator and I'm using VX900 and NX7510. I need to block iOS et Android device from my GUEST Wifi (this network should be used only for LAPTOP). I tried to configure fingerprint filtering but for every new devices model, there is new fingerprint. So the filtering need to be permanently updated/managed. Is there a filtering system a little more evolved?

RE: Wifi Devices filtering

Timo1 — Fri, 16 Mar 2018 17:19:00 GMT

Hi,

you can do it the vice versa, only allow Windows. Or block iOS and Android. That are the only two options.

RE: Wifi Devices filtering

Cedrik76 — Fri, 16 Mar 2018 19:05:00 GMT

Hi and thank you for your answer.
In my policies, I have not "windows" listed in client identity. Where do you find it?
Wich kind of parameters do you use to do this?

RE: Wifi Devices filtering

Timo1 — Fri, 16 Mar 2018 19:25:00 GMT

Configuration -> Security -> Device Fingerprinting -> Client Identity

If you create add a new, you can select "Predefined". Under this settings I can add Windows, Android, iOS...

Example:
client-identity Windows-10 dhcp 1 message-type request option 55 exact hexstring 01002710792c78
dhcp 5 message-type request option 60 exact ascii "MSFT 5.0"
dhcp-match-message-type request
!
client-identity Windows-7
dhcp 2 message-type request option 55 exact hexstring 010f03062c2e2f1f2179f92b
dhcp 9 message-type request option 60 exact ascii "MSFT 5.0"
dhcp-match-message-type request
!
client-identity Windows-8
dhcp 1 message-type request option 55 exact hexstring 010f03062c2e2f1f2179f9fc2b
dhcp 5 message-type request option 60 exact ascii "MSFT 5.0"
dhcp-match-message-type request
!
client-identity-group Group-ok client-identity Windows-8 precedence 1
client-identity Windows-7 precedence 2
client-identity Windows-10 precedence 3
load default-fingerprints

To this "Group" ok you can add a allow all firewall and default is deny all. Or you test it the other way, create a rule for android and iOS with the deny rule and default is allow all.

RE: Wifi Devices filtering

Cedrik76 — Fri, 16 Mar 2018 19:28:00 GMT

ho yes! I will try this!!

many thanks!

RE: Wifi Devices filtering

Cedrik76 — Fri, 16 Mar 2018 19:56:00 GMT

I can apply Wireless Client Role Policy only on the profile (so on all SSID). I want to apply this rule on GUEST only.