Home > Articles > Cisco Network Technology > Wireless/Optical/High Speed > Connecting Non-802.1X Devices to an Enterprise Network

Connecting Non-802.1X Devices to an Enterprise Network

Article Description

Using 802.1X authentication with WPA2-Enterprise offers the greatest Wi-Fi security possible today. Whether you're an administrator or just a user of a Wi-Fi network secured with WPA/WPA2-Enterprise, you can learn from Eric Geier how to get non-802.1X computers and devices onto your network.
Multiple SSIDs and VLANs

Multiple SSIDs and VLANs

Another option for administrators is to configure multiple SSIDs and/or VLANs for non–802.1X clients if the access points and switches support these functionalities. The most basic approach would be to create a separate virtual SSID configured with the Personal (PSK) mode of WPA or WPA2 security. Then to segregate this less-secure wireless network, you could assign this SSID to another VLAN from the main network. Thus if the PSK passphrase is compromised and access is gained by unauthorized users, damage would be minimal.

You should check if your RADIUS server and switches support guest VLANs and/or failed authentication VLANs. These features could be used to automatically allow non–802.1X clients network access, but to a particular VLAN that could be segregated from the main one.

3. Add Additional APs | Next Section Previous Section