Wireless Access for Staff and Visitors - Aruba Central

[TCTC]

Hi,

 

I've recently inherited Aruba Central and we don't have wireless access for staff and visitors. My proposal is to have separate SSIDs and ideally the staff one will authenticate with AD for Staff with student access blocked from AD and Visitor access will have a password given to them by Reception. Ideally the Visitor password will change automatically every week and emailed to Reception so they can hand it out to visitors. If the password doesn't change regularly I'd be concerned with Students getting hold of the password.

 

Has anyone done this before that can offer advise?

 

Thanks

[Rob_D]

For the staff wireless, we created a BYOD SSID with WPA2/AES-Enterprise security and our own Radius/NPS server as the "Auth Server". Then set up access permissions based on AD group membership on the NPS server.

 

For our visitors wifi, we use captive portal. Captive portal accounts can be set with an expiration date and when you create them there's an option put an email address in and have the details sent to that address, but I've not seen a way to automate this. (We generate passwords for specific visitors (ICT and reception teams have access to create logins).

 

Hopefully this gives you somewhere to start from.