WLAN Profile Config on Endhost

[Prasan Venky]

Hi All,

If we want to use SSID with WPA2 security (802.1x) for example, my understanding is we have to create WLAN profile in each and every user's laptop.

But it is not possible to do in a big organization. So is there any possibility to automate that..? Self provisioning ..?

Thanks in advance

[Victor Vasantha Kumar]

Hi Prasan,

Yes, the wireless settings on every laptop needs to be configured.

To make this easy, from the Active Directory you can push a GP update.

This is used to configure the wireless settings on the laptop.

( Ex : Authntication type, Encryption type , Certificate Validation )

Please refer :

http://technet.microsoft.com/en-us/magazine/gg266419.aspx

Ease of management is one advantage. The main benefit through the Group Policy update, the administrator can have a better control over the wireless network. The options for the end user will be pre-configured and grayed out. The end user cannot edit the settings.

You can alos defive preferred networks and deploy certificates using a Group Policy.

Thanks

Victor

<>>

[vijay kumar]

Hi Victor ,

What you have suggested is only for windows clients . In few case , What if my users bring their own laptops having OS part from windows . Is there an option to push GPO for non windows clients also ? Or Is it possible to do from ISE through self provisiong of WLAN configuation ...

Thanks ,

Vijay

[Sandeep Choudhary]

HI Vijay,

You can only push the WLAN profile to domain PC via GPO.

But via NEtsh tool you can  you can push wlan priofile to non domain....:

Check here:

http://www.commsolutions.com/blog/articles/two-ways-to-push-wlan-profiles-to-your-windows-devices/

Hoipe it helps.

Reagrds

Dont forget to rate helpful posts

[Scott Fella]

Self registration is the way to go with ISE. You need to define your security policies better. You need to have one that profiles your company owned assets and non company owned assets. If users being in their own devices, you really trusting them that they don't have any viruses or malware? Many organizations will have these devices go onto the guest network. You can't push any profile using 802.1x to end devices because they don't have credentials unless your going to allow them to login with their own AD credentials on a non company owned machine. Apple machines it's a manual process, windows you can import but you have to build a profile for xp, win 7 and win 8 and explain how to upload it.

Self registration is your best option here.

Sent from Cisco Technical Support iPhone App