Securing an outdoor AP
Freshman Member
Hi,
I have a USG60W along with a GS1920-24 and some NWA5123-AC (plugged into the switch), now I also got an Outdoor AP Enclosure in order to bring my Wifi into the garden (what works fine using 2 vlan-based SSIDs for internals and guests). But I am a little bit worried about security (someone unplugging the AP and connecting their laptop directly to the network) and tried so setup port auth/security for the outdoor AP (not the users, the AP device itself). MAC based security does not seem to be adequate as it requires to allow each wifi device. Can I use 802.1x to auth the AP at the switchport or is there any other suggested solution for securing an outdoor ap (besides locking the rj45 jack)?
Thanks for your support!
I have a USG60W along with a GS1920-24 and some NWA5123-AC (plugged into the switch), now I also got an Outdoor AP Enclosure in order to bring my Wifi into the garden (what works fine using 2 vlan-based SSIDs for internals and guests). But I am a little bit worried about security (someone unplugging the AP and connecting their laptop directly to the network) and tried so setup port auth/security for the outdoor AP (not the users, the AP device itself). MAC based security does not seem to be adequate as it requires to allow each wifi device. Can I use 802.1x to auth the AP at the switchport or is there any other suggested solution for securing an outdoor ap (besides locking the rj45 jack)?
Thanks for your support!
0
Best Answers
-
It sounds like you're worrying if anyone unplug your AP and directly use existing cable to access your home network?
If so, there is nothing to do with AP(since it has been unplugged.), more related to security settings on connecting switch.
5 -
Hi @CPF,
As @RichardHan mentioned that,so it should be to configure some security settings like to use 802.1x with the switchport to auth all traffic from the AP on the switch(the upper layer of the AP), because the Ethernet cable on the AP is unplugged, the AP is completely isolated.
For AP, the best way is to install outdoor AP in a high place and lock it.
Thanks!5
Zyxel Employee
All Replies
-
oh sorry wrong language area...
german responses are also welcome
0 -
0
-
Hi @CPF,
What's Outdoor AP Enclosure you're using? Is it our outdoor AP enclosure of Zyxel as below link?
https://www.zyxel.com/tw/zh/products_services/Mounting-Accessories-Accessory/flexible-mounting#OutdoorEnclosureGenerally outdoor AP would be installed in a high place which is not easily accessible and the enclosure is locked and not easily opened by physical methods as well to truly avoid your actual concern that is someone unplugging the AP and directly connecting to the network using cable.
Thanks!
Best regards,
Zyxel Panda0 -
Hi,
yes I use this outdoor AP enclosure (original brand components only)
In my case the AP is located at a height of 1.5m (on our garden house) and is therefore easily accessable. I could mount it inside the gardenhouse if there is no technical solution.
I just wondered if there is any technical functionality to really make sure no one can easily use the cable on other devices (e.g. 802.1x client on the AP so the device could authenticate against the switchport) as this AP is a business device where security functionalities should be present.
Christian0 -
It sounds like you're worrying if anyone unplug your AP and directly use existing cable to access your home network?
If so, there is nothing to do with AP(since it has been unplugged.), more related to security settings on connecting switch.
5 -
Hi @CPF,
As @RichardHan mentioned that,so it should be to configure some security settings like to use 802.1x with the switchport to auth all traffic from the AP on the switch(the upper layer of the AP), because the Ethernet cable on the AP is unplugged, the AP is completely isolated.
For AP, the best way is to install outdoor AP in a high place and lock it.
Thanks!5
Categories
- All Categories
- 415 Beta Program
- 2.4K Nebula
- 144 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.6K Security
- 237 USG FLEX H Series
- 267 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1.1K Wireless
- 40 Wireless Ideas
- 6.3K Consumer Product
- 247 Service & License
- 384 News and Release
- 83 Security Advisories
- 29 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.2K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight
