Radius Whitelist

[nmemmert]

I am looking for a way to whitelist devices that don't play well with Radius. Like Chromecast's and other IOT devices. Does anyone know of a good way to do this, or some other way to get them to play nice?

[mattia]

I've created a hidden SSID for these devices and Sonos speakers.

you can use a Login splash page as extra security to avoid someone sharing the pw and using this networks. just whitelist the mac addresses of your devices to avoid the login request

[PhilipDAth]

I do the same as @mattia .  These devices generally only need Internet access.

[nmemmert]

I have had issues with Chromecasts and splash pages...you are saying to hide the ssid and use a PSK?

[mattia · Accepted solution]

yes, hide the SSID to avoid user confusion with multiple SSID to choose from.

the SSID must have a protection for standard security, like WPA2 which is compatible with all modern devices.

Setup a splash screen with credentials (like Meraki authentication).

This avoids users with the WPA2 password from using this network without your authorisation, and for extra peace of mind.

The devices that you want to connect to this dedicated SSID should be whitelisted via Network-Wide>Clients>Add Device to avoid the splash screen.

hope this clarifies it better?