Securing an outdoor AP

CPF
CPF Posts: 9
edited April 14 in WirelessLAN
Hi,

I have a USG60W along with a GS1920-24 and some NWA5123-AC (plugged into the switch), now I also got an Outdoor AP Enclosure in order to bring my Wifi into the garden (what works fine using 2 vlan-based SSIDs for internals and guests). But I am a little bit worried about security (someone unplugging the AP and connecting their laptop directly to the network) and tried so setup port auth/security for the outdoor AP (not the users, the AP device itself). MAC based security does not seem to be adequate as it requires to allow each wifi device. Can I use 802.1x to auth the AP at the switchport or is there any other suggested solution for securing an outdoor ap (besides locking the rj45 jack)?

Thanks for your support! 

Best Answers

All Replies

  • CPF
    CPF Posts: 9
    oh sorry wrong language area...
    german responses are also welcome :)
  • Zyxel_Lukas
    Zyxel_Lukas Posts: 213  Zyxel Employee
    Hello @CPF ,

    I have moved your topic to the english language section.

    Best regards
    Lukas
  • Zyxel_Panda
    Zyxel_Panda Posts: 88  Zyxel Employee
    Hi @CPF,

    What's Outdoor AP Enclosure you're using? Is it our outdoor AP enclosure of Zyxel as below link?
    https://www.zyxel.com/tw/zh/products_services/Mounting-Accessories-Accessory/flexible-mounting#OutdoorEnclosure

    Generally outdoor AP would be installed in a high place which is not easily accessible and the enclosure is locked and not easily opened by physical methods as well to truly avoid your actual concern that is someone unplugging the AP and directly connecting to the network using cable.

    Thanks!

    Best regards,
    Zyxel Panda 
  • CPF
    CPF Posts: 9
    Hi,
    yes I use this outdoor AP enclosure (original brand components only :))

    In my case the AP is located at a height of 1.5m (on our garden house) and is therefore easily accessable. I could mount it inside the gardenhouse if there is no technical solution.

    I just wondered if there is any technical functionality to really make sure no one can easily use the cable on other devices (e.g. 802.1x client on the AP so the device could authenticate against the switchport) as this AP is a business device where security functionalities should be present. 

    Christian