topic Re: AD USER CAN AUTHENTICATE IN RESTRICTED WLAN in ZoneDirector

AD USER CAN AUTHENTICATE IN RESTRICTED WLAN

albert_villamay — Wed, 01 Jul 2015 02:43:25 GMT

The setup is we have 2 WLAN (Student & Employee), the user used web authentication via AD. We create 2 groups in our AD (Student and Employee). Our problem is the student can connect to the Employee WLAN and employee can connect to the Student WLAN. We check the user credential in the ZD and it only belongs to one AD group. What would be the next step to be check in order to fix this issue. thanks!!

Re: AD USER CAN AUTHENTICATE IN RESTRICTED WLAN

michael_brado — Wed, 01 Jul 2015 23:17:02 GMT

A common approach is to use different VLANs for Student/Employees, and you can use Roles that only permit their specific WLAN access, which can be sent back as a VSA from AD/802.1x.

KBA-2109, NPS Radius with AD:

https://support.ruckuswireless.com/answers/000002109

KBA-2946, User Roles on ZoneDirector:

https://support.ruckuswireless.com/answers/000002946

Re: AD USER CAN AUTHENTICATE IN RESTRICTED WLAN

albert_villamay — Thu, 02 Jul 2015 02:10:38 GMT

thanks michael!! student and employee are already in separate vlan. i'll check again the Roles.