This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Extreme Networks
- Community List
- Legacy
- Aerohive Migrated Content
- BLOCK mobile phones on corporate SSID but ALLOW th...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
BLOCK mobile phones on corporate SSID but ALLOW them on guest SSID
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
07-23-2018 02:25 PM
We have two (2) wireless networks (SSID) that are on different subnets (192.168.x.x/24 - corporate) and (172.16.x.x/24 - guest). I need to BLOCK all mobile phones from the corporate network (192.168.x.x/24) and only allow them on the guest network (172.16.x.x/24). I haven't found an effective way to do this other than blocking MAC addresses one-by-one. I simply need a policy that does not allow Android or IOS operating systems on the corporate network. Any assistance would be appreciated.
Solved! Go to Solution.
1 ACCEPTED SOLUTION
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
07-24-2018 01:30 PM
Great, I see you've tagged this as HiveManager (formerly NG), so the instructions that follow would be for that platform.
You would want to open the SSID and go down to the user profile section. Check the box next to "Apply a different user profile to various clients and user groups", then add a user profile to the new section you have (the one we want to direct the mobile devices to). Once you've added the new user profile, click on the small plus icon next to Assignment Rules. You can name the rule whatever you'd like, then click on the plus icon and select Client OS type. Next select the OS types you would like to block and save.
This will direct the OS types you specified to the secondary user profile, which can be on a dead VLAN to drop the traffic all together, or have different rules and restrictions applied to it, whatever works for you.
Please let me know if I can clarify anything. I'll work on getting a how-to guide made for this process for the HiveManager (formerly NG) platform.
9 REPLIES 9
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
05-18-2022 11:11 PM
Hi there,
I'm interrested in the HOWTO guide on this too. Are you able to share?
Thank you.
I'm interrested in the HOWTO guide on this too. Are you able to share?
Thank you.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
08-03-2018 11:23 AM
Thank you for your input - much appreciated!! We are doing a complete network refresh and have lots of moving parts.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
07-26-2018 03:22 PM
You'd want to put the users in different user profiles, so you can assign different VLANs, so they can reach their respective subnets. This is very similar to what we did above, using rules to assign different users to different user profiles, only this time it won't be for dead VLANs. You'd have to find a way to classify the users, to tell them apart for the sorting in to the different user profiles. You're options for classifying users are: User group, OS type, MAC address, Client location, and Schedule. For your use case, if you have Maps set up for your different locations with the APs placed on the maps, I would say sorting by Client location would be easiest, unless you are already separating them in to different PPSK user groups.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Get Direct Link
- Report Inappropriate Content
07-26-2018 11:44 AM
One last thing outside of this QUESTION - we are new to Aerohive and want to roll it out to our other eight (8) locations. If you can point to a HOWTO guide to implement a single policy for multiple sites when each site is it's own subnet. For example:
Site A: 192.168.1.x
Site B: 192.168.2.x
Site C: 192.168.3.x
you get the idea.
Thanx in advance.
