22 Dec
2019
22 Dec
'19
9:47 a.m.
On Dec 22, 2019, at 6:18 AM, uj2.hahn@posteo.de wrote:
In a school all devices (students laptops, mobiles, tablets) have to use username/password via Freeradius to get access to WLAN. But there are some well-defined school-owned devices (laptops, tablets) which should connect to WLAN immediately w/o any credentials. Which options do I have to realize that? MAC checks? Certificates?
If the WiFi is using EAP / 802.1X, then you must use 802.1X for *all* devices. For school-owned devices, the best way to do this is via certificates. It's (somewhat) difficult to copy the certificate to another machine. If the device is stolen, you can just revoke the certificate. Alan DeKok.