How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?

  • 1
  • Question
  • Updated 6 years ago
  • 1
I have a ZoneDirector with the following settings: type Standard Usage, Open Authentication and WPA2/AES encriytion options.
How I can make clients connected to this WLAN can not access the configuration ZoneDirector and APs?
Photo of Francisco Jose Cobacho Urbano

Francisco Jose Cobacho Urbano

  • 5 Posts
  • 0 Reply Likes

Posted 6 years ago

  • 1
6 years ago
Photo of Keith - Pack Leader

Keith - Pack Leader

  • 860 Posts
  • 52 Reply Likes
Hi Francisco,

When you initially configured the ZoneDirector, one of the first things it requires is that you set a login password for the admin account. Unless you've given that password to your users, they will not have any access to the ZD administrative functions. The connected AP's inherit the same login credentials and so are similarly protected.

Did I mis-understand your question?
6 years ago
Photo of Francisco Jose Cobacho Urbano

Francisco Jose Cobacho Urbano

  • 5 Posts
  • 0 Reply Likes
I meant how to make customers can not access the entry screen APs and ZoneDirector so they can not prove passwords. Ie access to the ips of the access points and the zone are refused or manage the configuration part is on another network.
6 years ago
Photo of Max O'Driscoll

Max O'Driscoll, AlphaDog

  • 349 Posts
  • 95 Reply Likes
In ZD gui have a look at

configure
system
management access control



You could lock it down very precisely (but be careful you allow yourself access)!
6 years ago
Photo of Francisco Jose Cobacho Urbano

Francisco Jose Cobacho Urbano

  • 5 Posts
  • 0 Reply Likes
Thanks for the reply
with this configuration block access to the zone director but how blocking access to the access points?
6 years ago
Photo of Max O'Driscoll

Max O'Driscoll, AlphaDog

  • 349 Posts
  • 95 Reply Likes
Slightly off the wall suggestion: Using different subnet for APs from rest of your network.
Use ZD DHCP option and specify seperate IP subnet so that the clients get IPs on different address range from APs.

Seems a bit hammer to crack nut plus possible side-effects depending your specific environment. Needs thinking through before doing.

Bigger brains than mine might be able to suggest a neater workaround.

Failing that make sure your ZD password is very secure (which it should be anyway). Reiterating Keiths' first suggestion.
6 years ago
Photo of Francisco Jose Cobacho Urbano

Francisco Jose Cobacho Urbano

  • 5 Posts
  • 0 Reply Likes
ok thanks
  • 1

Powered by Get Satisfaction