Ruckus - Is it possible to ban devices from just one SSID?

[DJ-1701]

So in the Primary we have some iPads... for some reason I have noticed some of these iPads being added to the Guest Network SSID, rather than the School Network SSID. This causes issues from time to time for when the staff or students want to do some tasks, for example printing.

 

I was wondering if anyone knew if it was possible to ban devices from just one SSID, but allow them to join any other? If not I have a work around in mind, but was curious.

[badders]

You could use an L2/MAC acl to deny the ipads mac addresses on the Guest. We use an acl to only allow certain devices on certain WLAN's but you can also use a deny restriction.

[NicholasEsping]

If you use a MDM to manage the iPads you could set a WiFi profile to automatically connect them to the right SSID and add a profile for the Guest Network with autologon off so they don't automatically connect to the Guest Network.

[DJ-1701]

You could use an L2/MAC acl to deny the ipads mac addresses on the Guest. We use an acl to only allow certain devices on certain WLAN's but you can also use a deny restriction.

 

Many thanks @badders, this worked perfectly and saved me time.

 

If you use a MDM to manage the iPads you could set a WiFi profile to automatically connect them to the right SSID and add a profile for the Guest Network with autologon off so they don't automatically connect to the Guest Network.

 

Thanks for the work around suggestion you made NicholasEsping, but unfortunately this funcationality to log off a SSID does not exist in our MDM.

[Davit2005]

Create a mac reservation on your DHCP server allocating a non appropriate address for your devices that should be connecting to the org wifi instead of the guest network. May work if you cannot set the correct SSID via any other method.

 

On Windows Domain PC's we set the SSID via GPO and then hid the org SSID leaving the guest WiFi for guests to connect to.

Edited July 21, 2017 by Davit2005