Is there anyway to view what clients are using a specific SSID, and block a specific client from authenticating to an SSID?

  • 1
  • Question
  • Updated 3 years ago
  • Answered
Is there anyway to view what clients are using a specific SSID, and is their a way to block a specific client from authenticating to an SSID if they somehow got the password?
Photo of Art Long

Art Long

  • 3 Posts
  • 0 Reply Likes

Posted 3 years ago

  • 1
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Not securely. Insecurely, you could block the MAC address but the only correct solution with PSKs is to use more tightly scoped PPSKs, best where it's a PPSK issued on a per-device or per-user basis for the SSID. That way compromised PPSKs can be revoked without impact to others.

Take a look at: http://www.aerohive.com/solutions/technology-behind-solution/simplified-strong-authentication
(Edited)
Photo of Art Long

Art Long

  • 3 Posts
  • 0 Reply Likes
Thanks Nick
There is a handful of students on the secured network, when they should only be on the guest network...I would like to block them..

But I would like to know if there is another way to view all clients connected to a specific SSID with out having to click on individual AP's and going through that process since I have 70+ AP's on my campus
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
You really need to restructure your network to use PPSKs or 802.1X to solve the issue correctly.

Keep in mind that with WPA2-Personal, the PSK is the primitive that allows a client to traverse the security boundary protecting the SSID and associate. The client's MAC address is simply not something that you should be making a security decision on as it isn't a security primitive.

To view the clients connected to a specific SSID in HiveManager, go to Monitor >> Clients >> Active Clients.

Here, you can sort based on the SSID/Security Object column.

If the column is missing, you can click on an icon that looks like a spreadsheet with a green plus to add it.
(Edited)
Photo of Art Long

Art Long

  • 3 Posts
  • 0 Reply Likes
Thanks Nick, I have no control over the security..I know they are working on a radius server setup but there are a lot of steps unrelated to this they have to do to get to that point..

Thanks for the info