Shared Chromebooks and a fixed SSID for the chromebooks

  • 1
  • Question
  • Updated 3 years ago
  • (Edited)

Hi all,

Let's say there are 3 SSIDs in the school network and I have 10 shared chromebooks used by students.

VHM is enterprise 6.5r1

AP121 is 6.4r1a 2103 or 2111 practically up to date.


1SSID for staff personal / PPSK
2SSID for students personal  / WPA/WPA2 PSK + CWP(NPS)
3SSID for shared school chromebooks for students / PPSK

I want students can not change the 3SSID to 2SSID on the settings of shared chromebooks or the chromebooks can not see the 1/2SSIDs in the school network but they can see any public network(SSIDs) out of the school network.  

So, it is like the chromebooks only see the 3SSID in the school and connect automatically all the time.

Is there a way to set up in Aerohive?
 Cheers.



Photo of Jamie Cho

Jamie Cho

  • 27 Posts
  • 0 Reply Likes

Posted 3 years ago

  • 1
Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
I don't think that you can do this in Aerohive but you can accomplish it from the Google Apps management console. Set the device network policy so that the Chromebooks can only connect to that one SSID.  



this will t
(Edited)
Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
The setting mentioned above will not allow Chromebooks to connect to any network other than a managed network so it will not accomplish the task of allowing the Chromebooks to connect outside of school.  
Photo of Jamie Cho

Jamie Cho

  • 27 Posts
  • 0 Reply Likes

I understand what you are saying but the students still can see the other ssids and they will try to connect them with the chromebooks even if they can not use the internet.

Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
There's also likely no need to have two PPSK-based SSIDs. Consider using user profiles to apply VLANs/ACLs as appropriate off of one SSID.

That said, you're not going to experience problems with 3 SSIDs.

Incidentally, have you disabled the 802.11b data rates?
(Edited)
Photo of Jamie Cho

Jamie Cho

  • 27 Posts
  • 0 Reply Likes

I haven't done anything yet. There are issues in the wireless network we have to fix and I am going to do it,  once I know what I have to do clearly.

802.11b is enabled for sure at the moment.


Photo of Andrew Garcia

Andrew Garcia, Official Rep

  • 368 Posts
  • 120 Reply Likes
Hmm...

If you only have 10 clients that are in this state, you could do a MAC address based ban on those 10 devices on 2SSID only.

Set up a client classification rule that enumerates your 10 MAC addresses and sends them to a different user profile, and set that user profile up with an availability schedule in the past and with a deny action of "No association."

All the usual caveats about MAC based security being spoofable apply, but it would work in a pinch. 
Photo of Jamie Cho

Jamie Cho

  • 27 Posts
  • 0 Reply Likes
I will try this and let you know. Cheers.