Solved
@ozgurguler wrote:Hi
We are positioning MR30H in every hotel room and we want hotel guest to be able to connect only its room's AP. For now it is ok.
However we also want hotel guests to be able to connect only the Chromecasts in their room, not the other Chromecasts. How can i configure this?
Thanks
This has been my own personal hell for the last six months. What you are asking is not trivial and requires a lot of moving parts.
Given that Chromecasts use mDNS to advertise their services to client devices, and you don't want guests to "see" or cast content to every CC in a hotel you're pretty much forced into a one VLAN per room model. You could stand up one SSID per room, but besides being just plain stupid you can't configure that many SSID's in a single network in the Dashboard. You could go with multiple networks, but that's even stupider 😉
With one VLAN per room, and ideally one SSID, you need a way to get clients authenticated and into their room's VLAN. Welcome to RADIUS authentication with dynamic VLAN assignment. While we're talking about authentication... What are you authenticating? You can't do dynamic VLAN assignment with PSK, so you're doing either MAC based or 802.1x (You need a RADIUS response that contains the VLAN id). Ideally I would think you'd want something like lastname and room number... But how do you get that info to authenticate against? It's all in the PMS for the hotel...
If there's ever a howling pit of despair in the IT world, it's deep inside hotel Property Management Systems. I wish you luck here my friend if you wish to go after pulling info out of this massive black hole of torment.
And there's A LOT more things to consider here as well. I've only just scratched the surface. Perhaps I've given you a couple ideas that you can use to stand up something simple enough to get you going, but more likely I've just complicated things and not helped you in any way. I apologize for that. As I started with, what you're asking isn't easy to do at all. You're better off finding a vendor who does just this as their core business. They exist out there, and getting them to do this for you will make your life a lot easier.
🙂
@ozgurguler wrote:Hi
We are positioning MR30H in every hotel room and we want hotel guest to be able to connect only its room's AP. For now it is ok.
However we also want hotel guests to be able to connect only the Chromecasts in their room, not the other Chromecasts. How can i configure this?
Thanks
This has been my own personal hell for the last six months. What you are asking is not trivial and requires a lot of moving parts.
Given that Chromecasts use mDNS to advertise their services to client devices, and you don't want guests to "see" or cast content to every CC in a hotel you're pretty much forced into a one VLAN per room model. You could stand up one SSID per room, but besides being just plain stupid you can't configure that many SSID's in a single network in the Dashboard. You could go with multiple networks, but that's even stupider 😉
With one VLAN per room, and ideally one SSID, you need a way to get clients authenticated and into their room's VLAN. Welcome to RADIUS authentication with dynamic VLAN assignment. While we're talking about authentication... What are you authenticating? You can't do dynamic VLAN assignment with PSK, so you're doing either MAC based or 802.1x (You need a RADIUS response that contains the VLAN id). Ideally I would think you'd want something like lastname and room number... But how do you get that info to authenticate against? It's all in the PMS for the hotel...
If there's ever a howling pit of despair in the IT world, it's deep inside hotel Property Management Systems. I wish you luck here my friend if you wish to go after pulling info out of this massive black hole of torment.
And there's A LOT more things to consider here as well. I've only just scratched the surface. Perhaps I've given you a couple ideas that you can use to stand up something simple enough to get you going, but more likely I've just complicated things and not helped you in any way. I apologize for that. As I started with, what you're asking isn't easy to do at all. You're better off finding a vendor who does just this as their core business. They exist out there, and getting them to do this for you will make your life a lot easier.
🙂
@jdsilva wrote:Given that Chromecasts use mDNS to advertise their services to client devices, and you don't want guests to "see" or cast content to every CC in a hotel you're pretty much forced into a one VLAN per room model. You could stand up one SSID per room, but besides being just plain stupid you can't configure that many SSID's in a single network in the Dashboard. You could go with multiple networks, but that's even stupider 😉
With one VLAN per room, and ideally one SSID, you need a way to get clients authenticated and into their room's VLAN. Welcome to RADIUS authentication with dynamic VLAN assignment. While we're talking about authentication... What are you authenticating? You can't do dynamic VLAN assignment with PSK, so you're doing either MAC based or 802.1x (You need a RADIUS response that contains the VLAN id). Ideally I would think you'd want something like lastname and room number... But how do you get that info to authenticate against? It's all in the PMS for the hotel...
@jdsilva Out of curiosity, have you had any luck on this front via the following?
I'm assuming their is going to be a limit on this feature no?
@NolanHerring You don't need to configure any of that if you return a VLAN via RADIUS. The AP receives the attribute, assigns the VLAN to the client, and Bob's your uncle.
Or, you can return a GP name, and assign the VLAN through the GP:
