Was use a separate hidden 1x SSID. Auth is the same as for our main SSID and the username is used to put the client in either the lock role or the deny all role. We could do something similar on our MAIN SSID, but I try to avoid multiple VLANs on an SSID in anticipations of maybe someday dual-stacking.
From: The EDUCAUSE Wireless Issues Community Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Jess Walczak Sent: Tuesday, March 31, 2020 2:47 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] How does your enterprise do your wireless door locks? Sending out a question as to how you do your wifi that serves your wireless door locks. Do you have them on your branded wifi/eduroam, their own SSID, or a shared IoT or infrastructure SSID? Is it a hidden SSID? Do you have them using a simple PSK or do you onboard it with a tool like ISE or Clearpass. Do you install a cert? Our institution has purchased Assa Abloy model IN120 door locks. We are a Cisco shop and we have ISE, so we could easily onboard using their Mac Address Bypass device profiling, but that would consume an expensive license, so perhaps other folks have done something simpler and found it to work well and to be enough security/segmentation. Thanks!--JW Jess Walczak Network Engineer Innovation & Technology Services University of St. Thomas | stthomas.edu<https://nam01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fstthomas.edu%2F&data=02%7C01%7Ccae104%40PSU.EDU%7C15a6d8ed161a4a1f29fa08d7d5a3feba%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637212772650895450&sdata=ka6f04QEJoYkEBk4d7Zb3ogu7Svht%2F%2BKhKd4Rbv5%2BNo%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Ccae104%40PSU.EDU%7C15a6d8ed161a4a1f29fa08d7d5a3feba%7C7cf48d453ddb4389a9c1c115526eb52e%7C0%7C0%7C637212772650895450&sdata=b6TRG09a0gT%2F1kWkmG3wGwMh96mNiUhxWE1h0T4udNQ%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community