How to Set Up Corporate and Guest Wi-Fi with RADIUS Server Authentication
Автор: Mohamed Warssame
Загружено: 2020-10-03
Просмотров: 1199
Fadilatechno.com presents another Sunday LAB on WiFi.
A brief History
It is a home grown product that existed since 1926.
Invented by The Commonwealth Scientific and Industrial Research Organisation (CSIRO).
Patented in 1990. CSIRO started suing Companies using WiFi without license since 2005. CSIRO Settled court cases with many companies and been awarded with millions of Petro-dollars money!
However, this short video, is not a legacy legal tendency , cross examination , or who paid what and how much but how to :
Deploy Corporate and #Guest WiFi.
Select #WPA2-Enterprise or WPA3-Enterprise for Corporate WiFi
set up a #Radius Server for Corporate #WiFi #Authentication
and select #WPA2-Personal for Guest WiFi authentication
Set the encryption to #AES for both Guest and Corporate WiFi
Test the solution and write a runbook for the solution as your Patent!!
The video also touched on the scary part and lack of security that exists in WiFi specially in Conferences , Hotels , shopping centres, coffee shops and many other places.
Using simple tools such as #netsh wlan show wlanreport" and "netsh wlan show network" pinpoints and displays many stuff that does not need #wardriving, #warbiking, #warkcycling or #warwalking tools.
#netsh wlan show is useful and available on your Windows !
Use them and experiment find details on your WiFi
Take advantage of the Following . special netsh wlan show wlanreport.
1. ✅ `netsh wlan show profiles` 📄
2. ✅ `netsh wlan show interfaces` 📡
3. ✅ `netsh wlan show drivers` 🖥️
4. ✅ `netsh wlan show networks` 🌐
5. ✅ `netsh wlan show networks 🏠
#Port Security
HOW PORT SECURITY WORKS
If port security is enabled on switches and the receiving port is not in dynamic mode, switches process the frame. 🛡️
🖥️ Learning MAC Addresses and VLANs:
The switches records the source MAC address and VLAN from the received frame. 📡
🔍 Existing MAC Entry Check:
If a MAC entry with the same source exists:
✅ If the interface and VLAN match: The frame passes. ✅
⚠️ If the interface or VLAN does not match: The dynamic entry is removed, and the frame is either allowed or dropped depending on the secure MAC address limit. 🚫
❗ If it’s a static entry: The switch enters violation mode. 🔒
🚫 No MAC Entry:
If no MAC entry exists:
⚠️ If the secure MAC address limit is reached: The frame is dropped.
✅ Otherwise, the frame passes.
🏷️ Sticky MAC Address:
If sticky MAC addresses are enabled, the switch adds the source MAC to the MAC table as a static entry after the frame passes. 📈
🔄 Port Protocol Change (Down to Up):
When the port’s line protocol changes from down to up, port security checks and adds secure MAC addresses to the MAC table if necessary. 🔄
🗂️ Adding MAC to MAC Table:
If a sticky MAC is detected on the port, it is deleted from the pending list. Otherwise, the switch adds it to the MAC table. ✅
Доступные форматы для скачивания:
Скачать видео mp4
-
Информация по загрузке:
