Dynamic Personal PSK lets your network benefit from higher security standards since the passwords for WiFi-Users are generated on-demand, dynamically, and tied to a specific user. The main security benefit comes from that you no longer have users sharing the same WiFi password, only allowing the guests you want in your network, without a complicated and tiresome captive portal authentication. The below configuration steps will guide you through a prime-example DPPSK setup. Just like WPA2-Personal, users must input a password/passphrase to access the wireless network. Each wireless client can have a unique password resulting in a unique encryption key. It also supports dynamic VLAN assignment.
Scenario:
4 hotel guests book rooms for 2 nights and purchase Wi-Fi service during their stay. The hotel desk provides unique Wi-Fi codes for each hotel guest to access the network.
Configuration:
Enabled Dynamic personal PSK:
Go to Site-wide -> Configure -> WiFi SSID settings
- Click the "Add SSID Network" button.
- Provide a clear and comprehensible name for the SSID (Network Name).
- Toggle the network switch to "Enabled" the newly created network.
- Click the "Save" button to confirm your settings.
- Access the "SSID Advanced Settings" by clicking on the "Edit" option within that section
- After clicking on "Edit" you will be forwarded to the next page "SSID advanced settings"
Go to Site-wide -> Configure -> Access points -> SSID advanced settings
- Select the desired SSID
- Check the "Dynamic personal psk" box to activate this function.
- "Users can enter this backup key to associate" is an optional function and will allow connection to the WiFi, in case the DPPSK has been lost or forgotten.
- Click "Save"
Batch create DPPSK
Go to Site-wide -> Configure -> Cloud authentication -> DPPSK
- On the right side of the window, click "Add" and select "Batch create DPPSK"
- After pressing "Batch create DPPSK" in the opened window, fill in the required fields and click on the "Create" button.
- The result will be the following
- Choose the "DPPSK" users and click the "Print
Verification:
- Use the DPPSK account to access the Wi-Fi network
Notes: - "Users can enter this backup key to associate": This is an optional setting. The hotel desk can record this password. When the users lose the DPPSKs, the hotel desk can tell the customers to use this password first before they get another DPPSK
- MAC-based Authentication cannot be enabled with DPPSK
- Up to 1 SSID in DPPSK mode per site is allowed.
- Nebula CC also allows single DPPSK account creation:
- Nebula users can create unlimited DPPSK accounts, but only 1024 entries can be authorized at any given time. If an authorized account exceeds 1024, the oldest accounts created sets to unauthorized.
- Non-supported models disable SSID with DPPSK enabled.