Number of Devices per PPSK per PSK User Group

  • 3
  • Question
  • Updated 3 months ago
Is there a way to change the number of devices allowed per PSK based on PSK user group rather than per device? It would be nice to have some user groups only allowed 1 device per PSK and others unlimited.

Thanks!
Photo of Gary Ossewaarde

Gary Ossewaarde

  • 12 Posts
  • 0 Reply Likes

Posted 3 years ago

  • 3
Photo of Tobias Protz

Tobias Protz

  • 61 Posts
  • 11 Reply Likes
This has maybe gone off the radar, but was there any solution to this?
This is exactly what I need right now for the following scenario:

One SSID (internet access only)
Three User groups:
- permanent keys issued to staff for private devices (2 devices per key)
- temporary keys for single visitors, able to self-register via Kiosk (1 device per key)
- temporary keys for large numbers of guests where self-registration is not possible (i.e. groups of visitors that are known beforehand, around 50-60 devices per key or unlimited, short validity timeframe from first login)

I'd like to have every "guest access" on the same SSID and not generate different SSIDs for different numbers of devices per user group, that is just somehow... wrong.
Photo of Tobias Protz

Tobias Protz

  • 61 Posts
  • 11 Reply Likes
Hm, I was just told by mail that there was an answer by an Aerohive Rep to this question, but I can't see anything here ^^
The answer didn't sound like it had anything to do with the question though, so maybe it got moved/deleted.

Still, the question is not changed: can we change the number of allowed devices per PPSK based usergroup, instead of having one universal setting for the whole SSID?
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
Hi,

Tobias, I will forward this on for consideration by the appropriate team. I agree it would be useful.

Thanks,

Nick
Photo of Tobias Protz

Tobias Protz

  • 61 Posts
  • 11 Reply Likes
Thanks a lot! Just to clarify: Ofcouse, I could issue a list of keys for the third case (large group of visitors).
But that would mean that they would have to be sent to someone in charge of distributing them, if a media outlet sends more than one person we would need an extra key at the day of the event and so on. Self registration of a large number of users would take too long. It makes more sense to have one single key with a very short validity timeframe for cases like this, that way we can ensure maximum accessibility with minimum hassle.

Unfortunately we cannot simply switch on an additional SSID with the push of a button, that would be another valid solution (push of a button meaning here literally having a programmable light-up USB button at the reception desk to turn the event SSID on/off. Everything that has to do with creating guest accounts has to be as simple as that too, anything more complex and the receptionists won't bother with it - they have to deal with so much stuff already that we cannot present them with any solution where they'd need a manual).
Photo of Carsten Buchenau

Carsten Buchenau, Champ

  • 356 Posts
  • 117 Reply Likes
Hi,

I have been asking for this feature for quite a while now (to specify the number of concurrent devices per PPSK by PPSK user group, not by SSID), and I have always received the "I agree, this would be useful" answer. So I kept persisting whenever I met someone from Aerohive :-)

The latest feedback I received (last week) is that this functionality should be part of "PPSK Micro-Segmentation", a concept enhancement to PPSK that is on the Roadmap for some time later this year.

Hope this info helps.
Photo of Tobias Protz

Tobias Protz

  • 61 Posts
  • 11 Reply Likes
Thanks a lot Carsten,
it doesn't help in the short term though because I need this (or something similar) implemented until the end of june (deadline for the new wireless system to go live here)
Photo of Jake Herioux

Jake Herioux

  • 1 Post
  • 0 Reply Likes
Has there been any movement on this front?  I have the exact same situation on a brand new network that I just deployed.  I have one SSID for all of our internal users and guests as well as a few other internal groups and all are currently limited to 5 devices.  All of our internal users and guests are issues PPSK's, but we also have a fleet of iPads that often change hands and only come in the office for updates.  I would like to create a user in an iPad user group on the primary SSID with unlimited devices and keep all other users limited to a set number of devices per group.  I currently have a second SSID with PSK to accomplish this functionality, but I would rather use the primary SSID with a PPSK.

Thanks
Photo of Carsten Buchenau

Carsten Buchenau, Champ

  • 356 Posts
  • 117 Reply Likes
Not to my knowledge.

I had a quick look at "Private Client Groups" (NG only), as if I am not mistaken, you can only set this limit per SSID as well.