topic Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs? in ZoneDirector

How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

francisco_jose1 — Tue, 08 Apr 2014 14:55:22 GMT

I have a ZoneDirector with the following settings: type Standard Usage, Open Authentication and WPA2/AES encriytion options.
How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

keith_redfield — Tue, 08 Apr 2014 18:45:41 GMT

Hi Francisco,

When you initially configured the ZoneDirector, one of the first things it requires is that you set a login password for the admin account. Unless you've given that password to your users, they will not have any access to the ZD administrative functions. The connected AP's inherit the same login credentials and so are similarly protected.

Did I mis-understand your question?

Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

francisco_jose1 — Wed, 09 Apr 2014 07:18:56 GMT

I meant how to make customers can not access the entry screen APs and ZoneDirector so they can not prove passwords. Ie access to the ips of the access points and the zone are refused or manage the configuration part is on another network.

Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

max_o_driscoll — Wed, 09 Apr 2014 11:41:23 GMT

In ZD gui have a look at

configure
system
management access control

You could lock it down very precisely (but be careful you allow yourself access)!

Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

francisco_jose1 — Wed, 09 Apr 2014 12:24:28 GMT

Thanks for the reply
with this configuration block access to the zone director but how blocking access to the access points?

Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

max_o_driscoll — Wed, 09 Apr 2014 13:11:35 GMT

Slightly off the wall suggestion: Using different subnet for APs from rest of your network.
Use ZD DHCP option and specify seperate IP subnet so that the clients get IPs on different address range from APs.

Seems a bit hammer to crack nut plus possible side-effects depending your specific environment. Needs thinking through before doing.

Bigger brains than mine might be able to suggest a neater workaround.

Failing that make sure your ZD password is very secure (which it should be anyway). Reiterating Keiths' first suggestion.

Re: How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

francisco_jose1 — Wed, 09 Apr 2014 14:42:27 GMT

ok thanks