Zero-IT Configuration and Default Role

marco_eichstet1 — Tue, 12 Aug 2014 21:05:30 GMT

Hi,

i need some help please.
I configured an AAA-Server for my ActiveDirectory and set this AAA-Server for Zero-IT Activation.

After that i created three WLANs (WLAN-A, WLAN-B and WLAN-C) with Zero-IT and DPSK.
In my ActiveDirectory Domain i have also three Groups with the same Name as my WLANs have.
On my ZoneDirector i added also three Roles. One Example given:

Role Name: WLAN-A
Group Attributes: WLAN-A
Specify WLAN Access: WLAN-A

Now i am able to add an User to an specific AD-Group and i am able to control in which WLAN a User can register his device.

First Question:
Is this setup ok or is there a better (smarter) way?

Second Question:
If i want to use "Dynamic PSK Batch Generation" i need all my DPSK-WLANs in the default Role. If i do so each AD-User will be able to get a Zero-IT Config because he will be assigned to the Default-Role even if he is not a member of an AD-Group above. How should i solve this? I don't want to give Users Zero-IT Configs if they are not a Member of the AD-Groups and i additionally want to do PSK Batch Generation.

Many Thanks!
Best Regards
Marco

topic Zero-IT Configuration and Default Role in ZoneDirector

Zero-IT Configuration and Default Role