Securing an outdoor AP

CPF

Hi,

I have a USG60W along with a GS1920-24 and some NWA5123-AC (plugged into the switch), now I also got an Outdoor AP Enclosure in order to bring my Wifi into the garden (what works fine using 2 vlan-based SSIDs for internals and guests). But I am a little bit worried about security and tried so setup port auth/security for the outdoor AP. MAC based security does not seem to be adequate as it requires to allow each wifi device. Can I use 802.1x to auth the AP at the switchport or is there any other suggested solution for securing an outdoor ap (besides locking the rj45 jack)?

Thanks for your support! 

Zyxel小編 Lucious

Hi @CPF

Yes, for security concern you can use 802.1x on the switchport to auth all traffic from the AP, and even better, have guest VLAN for unauthorized/malicious users.

For configuration on GS1920, you may refer to 
https://businessforum.zyxel.com/discussion/2997/how-to-configure-the-switch-and-radius-server-to-provide-network-access-through-802-1x-port-auth#latest
https://businessforum.zyxel.com/discussion/2998/how-to-configure-the-switch-to-send-unauthorized-users-in-a-guest-vlan#latest

BTW, this forum is for home devices, for our business model devices, you may seek our biz forum.
https://businessforum.zyxel.com/

Hopefully it helps.
Zyxel_Lucious

CPF

Hi,
thank you for the quick response. My actual concern is someone unplugging the AP and directly connecting to the network using cable. But I posted the question in the biz forum so this question can be considered closed here.

Christian