Securing an outdoor AP
CPF
Posts: 2 Freshman Member
Hi,
I have a USG60W along with a GS1920-24 and some NWA5123-AC (plugged into the switch), now I also got an Outdoor AP Enclosure in order to bring my Wifi into the garden (what works fine using 2 vlan-based SSIDs for internals and guests). But I am a little bit worried about security and tried so setup port auth/security for the outdoor AP. MAC based security does not seem to be adequate as it requires to allow each wifi device. Can I use 802.1x to auth the AP at the switchport or is there any other suggested solution for securing an outdoor ap (besides locking the rj45 jack)?
Thanks for your support!
I have a USG60W along with a GS1920-24 and some NWA5123-AC (plugged into the switch), now I also got an Outdoor AP Enclosure in order to bring my Wifi into the garden (what works fine using 2 vlan-based SSIDs for internals and guests). But I am a little bit worried about security and tried so setup port auth/security for the outdoor AP. MAC based security does not seem to be adequate as it requires to allow each wifi device. Can I use 802.1x to auth the AP at the switchport or is there any other suggested solution for securing an outdoor ap (besides locking the rj45 jack)?
Thanks for your support!
0
All Replies
-
Hi @CPF
Yes, for security concern you can use 802.1x on the switchport to auth all traffic from the AP, and even better, have guest VLAN for unauthorized/malicious users.
For configuration on GS1920, you may refer to
https://businessforum.zyxel.com/discussion/2997/how-to-configure-the-switch-and-radius-server-to-provide-network-access-through-802-1x-port-auth#latest
https://businessforum.zyxel.com/discussion/2998/how-to-configure-the-switch-to-send-unauthorized-users-in-a-guest-vlan#latest
BTW, this forum is for home devices, for our business model devices, you may seek our biz forum.
https://businessforum.zyxel.com/
Hopefully it helps.
Zyxel_Lucious
0 -
Hi,
thank you for the quick response. My actual concern is someone unplugging the AP and directly connecting to the network using cable. But I posted the question in the biz forum so this question can be considered closed here.
Christian0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 115 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 64 Switch Ideas
- 900 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 832 Nebula FAQ
- 402 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight