officeextend - AP security

[Network Pro]

hi,

is there any way i can implement security  for officeextend access points. For example if an officeextend AP gets lost, is there a way i can stop just this AP alone from joining onto the network ?

[Network Pro]

any ideas?

[George Stefanick · Accepted solution]

Hey NP,

When you configure OE you should also do a AP policy. Where by the mac of the wireless radio and ethernet of the OE AP is added to the WLC ap policy. Only these allowed APs will be able to join the WLC.

Make sense?

[Network Pro]

is this done through the mac filtering ? or where is the AP policy ?

[Network Pro]

i looked for AP policy but cnat find under mamagement - and can this be done only for officeextend AP's and not for internal AP's

[blakekrone · Accepted solution]

Head over to the top Security option, then you'll see AP Policies under AAA section on the right. You would add your APs to the list then check the checkbox for these:

Authorize MIC APs against auth-list or AAA
Authorize LSC APs against auth-list

If your OEAPs are on the DMZ WLC then this would only affect OEAPs, if you have your OEAPs on an internal WLC with other APs then they need to be added as well.

[George Stefanick]

Yup, if you check your WLC logs you will see traps that your OE ap is trying to join and cant.