topic Re: How to prohibited user (using AAA Server (AD)) whom try to connect from broadcast SSID? in Wireless Questions and Best Practices

How to prohibited user (using AAA Server (AD)) whom try to connect from broadcast SSID?

perdianto_halim — Mon, 23 Feb 2015 08:22:09 GMT

Hi All,

I've a problem to prohibited the user that try to connect SSID in ZD 1100.
i was made 3 SSID (BOD, Corporate and Guest), and all is visible.
I'm using AAA Server (Active Directory) to authentication.
the Question is :
"How to prohibited the user (Guest, Corporate) whom try to connect to SSID BOD even though they have authentication in AD?"

All, Thanks for your help.
(Sorry for Bad English ";)

Perdianto

Re: How to prohibited user (using AAA Server (AD)) whom try to connect from broadcast SSID?

primoz_marinsek — Mon, 23 Feb 2015 09:52:28 GMT

ZD employs role based access (RBA) which means you generate groups

You'll need to define 2 groups under the Config :: Roles. You'll enable the SSIDs each group can connect to. You'll need to configure the Group attributes to match those in the AD so a user will be applied to the right group.

As best practice I would suggest that you leave the default group as is, just disable ALL SSID there in the group.

Re: How to prohibited user (using AAA Server (AD)) whom try to connect from broadcast SSID?

perdianto_halim — Tue, 24 Feb 2015 01:14:29 GMT

Hi Primoz,

Thanks for your opinion.

I'll try to configure Group Attributes in AD and reply back soon 🙂

Many Thanks