Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Stefano1
Stefano1
Comes here often
Member since Mar 27, 2023
Apr 19 2023
Community Record
5
Posts
0
Kudos
0
Solutions
Badges
Apr 4 2023
1:22 AM
Hi Philip, this makes it clearer to me. >What it can do is send a de-authentication messages to the cell phone... Ok, that's the mechanism to block or contain a SSID, it's obvious that you should be sure that this SSID is "rogue" before blocking it. >For this to happen, someone has to have connected up another AP not part of your infrastructure and created a security whole in the network. Could you please elaborate this a bit more? Is it like someone installs an unwanted AP and sends out my own SSID to spoof clients? As far as I can see I could not contain this SSID since it is legitimate, only the AP is "rogue". Thanks a lot for your efforts, Philip... Regards, Stefano
... View more
Mar 29 2023
6:40 AM
> Not quite - everyone - a Meraki user or not - will be blocked from connecting to the SSID. Ok, that does mean, that Meraki is sending a sort of interference signal? > ...you can use an AD group policy to prevent users from connecting to certain SSIDs. I was not aware of any need for this. I always thought you handle this with hiding of SSIDs or with handing out credentials only for the wanted SSIDs. But yes, for mobile computers with Windows this makes sense. > a device can only connect to a single SSID at a time This of course is perfectly right. 🙂 Thanks for your efforts, Stefano
... View more
Mar 29 2023
6:22 AM
Hello, sorry, I still have difficulties in understanding. I still don't know who blocks which device *when* blocking is used. 1. Why would a block list apply to SSID that are seen "on the LAN"? Does that mean you are blocking SSIDs sent from your own APs? 2. How to block SSIDs from neighbors? Is my Meraki AP able to tell a cell phone "If you see the SSID 'Bad_Neighbor_Company', do not connect"? 3. There are no "rogue devices" in our neighborhood. Usually there are legitimate wifi signals from others (parked cars, neighbor wifi, etc.) and our own non-Meraki devices (e.g. soundbars). But our employees can't connect to those SSIDs anyway because they don't know the credentials and because their phones automatically connect to the company SSID they already know. What exactly would be the gain of blocking "rogue" devices/SSIDs? Thank you very much for your efforts! With kind regards Stefano
... View more
Mar 27 2023
8:53 AM
Hi Alemabrahao, thanks for the link, but this document is exactly what causes confusion. Meraki does specify "rogue SSID" as every SSID, that is not being broadcasted by itself. So if I select "Block clients from connecting to rogue SSIDs by default", Meraki clients will not be able to connect to our Conf Room System. Should I then add a whitelisting for this particular SSID? And how can an access point forbid a client to connect to other SSIDs (if that is the purpose of "blocking")? Isn't it an autonomous decision by every client, which SSID to connect to? Thanks again and regards, Stefano
... View more
Mar 27 2023
8:20 AM
Hi, I have difficulties to understand "rogue SSIDs" (not rogue access points). Maybe someone can help. In my company we have two "regular" SSIDs, managed by Meraki, lets say "Company1" and "Company2". At the same time we have some other devices broadcasting SSIDs, for example our cableless conference room systems. This SSID is named "ConfRoom1", and it is detected by Meraki . My questions are: 1. Is this one a "rogue" SSID in terms of Meraki? 2. What happens if I tell meraki to "block" this SSID, will clients connected to Meraki be prevented from connecting to this SSID also? 3. If yes: How could Meraki tell a client "If you are connected to my own SSIDs you are not allowed to connect to another SSID"? 4. Is "blocking" the same as "containing"? Finally my goal is to allow an iPad (e.g.) to connect to a Meraki SSID and to ConfRoom-SSID at the same time. Hope, that someone finds a little time to help. Thanks and regards, Stefano
... View more
Labels:
- Labels:
-
SSID
© 2024 Cisco Systems, Inc.
