Transient traffic connecting to Guest WiFi

[roviecho]

Hello,

I have an Unleashed R600 AP [200.1.9.12.55], and set a WLAN Guest WiFi. Authentication is set to use guest pass authentication. Subnet restrictions are set to only allow traffic to local DHCP server and the WAN firewall gateway (for internet only access). Wireless client isolation is set to restrict access to other clients on the same AP.

The SSID shows publicly as open, and I am seeing transient devices auto-join/connect. Devices are receiving a DHCP address assignment. I see the devices trying to contact internet resources, such as the public DNS servers DHCP provides with it's lease. The firewall happens to be blocking the traffic, but I would expect the AP to control usage *until* device is properly authenticated.

My question, is this as expected? Can transient devices be prevented from attaching the guest WiFi? Did I miss a setting?  Thank you.

[michael_brado]

A Guest Access WLAN permits client DHCP / DNS / ARP (only), prior to Authenticated state, when network access is permitted.

[john_d]

In my opinion this is the correct behavior too. A lot of clients will cache either bogus DNS responses or negative DNS responses even after you clear the captive portal, which leads to more mysterious network issues for customers.

[roviecho]

Thank you very much for the clarification.