Guest Wifi - Email Verification

[MOTAT]

At present we manually provide a PSK to Guest wifi users.  This is being shared with people that it should not be and I am going to have to change the password now.  But I know the same thing will happen.

So I am wanting a way of managing who has access to Guest Wifi but making it very easy for BYOD staff and Business Guests to get access to Guest wifi.

Is there a mechanism that is easy for business guests and BYOD staff that IT could add an email address that would send a "Guest" an email and automatically provide access on their device to the Guest Wifi?

Or is there another process that provides easy setup access to Guests?

[PhilipDAth]

What about sponsored guest mode?

https://documentation.meraki.com/MR/Encryption_and_Authentication/Sponsored_Guest

Splash Access (a third party solution) also have a cool guesyt access system that changes the PSK every day and you print out a QR code for guest to scan to access WiFi.

https://www.splashaccess.com/portfolio-item/cisco-meraki-nfc-and-qr-code-authentication/

[PhilipDAth]

You could also consider using self-registration.

https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/Self-registration_for_Splash_User...

[kYutobi]

---

@PhilipDAth wrote:

What about sponsored guest mode?

https://documentation.meraki.com/MR/Encryption_and_Authentication/Sponsored_Guest

Splash Access (a third party solution) also have a cool guest access system that changes the PSK every day and you print out a QR code for guest to scan to access WiFi.

https://www.splashaccess.com/portfolio-item/cisco-meraki-nfc-and-qr-code-authentication/

---

I agree with @PhilipDAth I have tested sponsored guest mode and has worked well for what its purpose.

[MOTAT]

Can this be done by locking down to a specific email address instead of a whole domain?

Thanks

[PhilipDAth]

I don't think so.

[SoCalRacer]

---

@MOTAT wrote:

Can this be done by locking down to a specific email address instead of a whole domain?

Thanks

---

Directly I don't think so, but you could allow it for the entire domain. Then on your email side block email that comes from these sponsored guest requests to all email addresses except the one you want to be used.

[SoCalRacer]

Another option I have seen with this is using the API to change the Guest password daily. Then you can send an email or post to a collab tool so the correct people have the password each day.

Also you could restrict access to session time like 1-8hrs. If employees are using the wifi and not supposed to that is an option. Last option is start blocking known mac address that are not supposed to be accessing it. In general with security I feel that making it too time consuming or difficult to access will deter most users/offenders.