WLAN Configuration

Hotspot 2.0

Hotspot 2.0 (or Passpoint) allows automatic secured connections for mobile devices to enable seamless user experience for various use-cases, such as public guest networks, carrier WiFi offload, Eduroam services and many more. Passpoint enables automatic network connection regardless of the SSID name, rather relying on 802.11u information received in the beacon or via ANQP exchange...

Isolation and Filtering

Mist APs supports the below peer to peer (layer 2) isolation options. • Disabled – no peer-to-peer block enabled. Default behavior. • Same AP – This blocks peer to peer traffic on the same AP • Same Subnet – This blocks peer to peer traffic destined for the same subnet (wired and wireless). Please note...

Jumpcloud for Radius

Step #1 Login into your jump server <if not registered, register with your email> Active Directory and LDAP Reimagined   Step #2 Create your Radius client:   Click on Radius tab> click on “+” button to add radius server   We need to make sure, we add the external IP as radius client IP and...

MAC Authentication

Can be enabled with any security RADIUS Server then used to authenticate using MAC address as username and password Change of Authorization(COA) – again an external server can instruct the re-authentication of a client VLAN can also be untagged, tagged or dynamic in the same way as 802.1x wireless can. Optionally, ‘Guest Access with Mac...

Multi PSK

Every PSK (Pre-shared Key) has a Key Name This name is reported in the Mist Management platform Allows user level accountability with PSK simplicity If a PSK is compromised there is no need to change every client. Multiple users allow any number to use the key Single user ties this key to a specific MAC...

Multi PSK – Mist IoT Assurance

The Mist IoT Assurance cloud service streamlines IT operations while securing network connections for headless IoT and BYOD devices. It uses Multi Pre-Shared Key (MPSK) or Private Pre-Shared Key (PPSK) as new types of identity and policy vectors to provide a simple yet comprehensive way to onboard client devices without relying on client MAC addresses....

Personal WLANs

Personal WLANs are secure micro-segmented networks across a single WLAN.  These Personal WLANs are created by generating unique keys to access the SSID.  Each of these keys automatically creates a segment of the WLAN, isolated from the other Personal WLANs on the same network.  This is limited to 5000 PSKs (with suggested/select firmware) To set...

QoS Override

Override the QoS Priority in the WLAN Configurations page by selecting Override QoS and choosing Wireless Access Class from the dropdown menu.   For QoS override, on downstream (AP->Client), traffic gets marked with whatever QoS override Access Class value that is set. For upstream (Client->AP) marking is not supported so packets are marked with CS0.  

RadSec

RadSec is a protocol which allows RADIUS servers to transfer data over TCP and TLS for increased security.  With RadSec capabilities, you can transfer RADIUS packets through public networks while still ensuring end-to-end security through the transport layer.  This feature is configurable through using our Mist API or directly from the UI. UI configuration To...