Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
technical:ppsk-overview [2022/10/20 21:21] admin [Advantages] |
technical:ppsk-overview [2022/10/21 13:37] (current) admin |
||
|---|---|---|---|
| Line 17: | Line 17: | ||
| * This allows clients to securely authenticate and join the network using a **specific device and PSK combination**. | * This allows clients to securely authenticate and join the network using a **specific device and PSK combination**. | ||
| * This enhances security and deployment flexibility for headless IoT devices. | * This enhances security and deployment flexibility for headless IoT devices. | ||
| - | * RADIUSdesk is used to manage | + | |
| - | * A PSK on the device owner' | + | |
| + | * A PSK on the device owner' | ||
| * A more granular option will be a PSK on the device owner. | * A more granular option will be a PSK on the device owner. | ||
| * Finally there is an option for a PSK on the device itself. | * Finally there is an option for a PSK on the device itself. | ||
| - | * The same SSID supports | + | * Other features included with RADIUSdesk are available also to use: |
| - | * Using a single | + | * Future date activation. |
| + | * Expiry date. | ||
| + | * Time slots when the network can be used by the device. | ||
| + | * One SSID can support | ||
| + | * Using one SSID improves bandwidth utilization and provides a simplified user experience. | ||
| + | * The easy to use on-boarding Captive Portal minimize support calls. | ||
| Line 30: | Line 36: | ||
| ==== Small deployments ==== | ==== Small deployments ==== | ||
| + | {{: | ||
| * In a small deployment you need a minimum of one Access Point. | * In a small deployment you need a minimum of one Access Point. | ||
| + | * Private PSK is also supported in the mesh networks managed by MESHdesk. | ||
| * You don't need any VLAN aware equipment, the VLAN assignment will be internal. | * You don't need any VLAN aware equipment, the VLAN assignment will be internal. | ||
| * You will typically have: | * You will typically have: | ||
| Line 40: | Line 48: | ||
| * Includes small offices or home deployments | * Includes small offices or home deployments | ||
| - | ==== Large deployments ==== | + | ==== Large deployments |
| - | * With large deployments you can potentially have hundreds | + | {{: |
| + | * With large deployments you can potentially have thousands | ||
| * These deployments will include working together with other components to provide an integrated solution. | * These deployments will include working together with other components to provide an integrated solution. | ||
| * You will typically have | * You will typically have | ||
| Line 50: | Line 59: | ||
| * Includes Multiple Dwelling Units (MDU), Schools, hotels and conference facilities and WiFi networks with IOT devices. | * Includes Multiple Dwelling Units (MDU), Schools, hotels and conference facilities and WiFi networks with IOT devices. | ||
| - | ==== Why not 802.1x? ==== | + | <WRAP center round info 100%> |
| + | * You might have noticed that the Access Points in the picture are the Aruba AP105. | ||
| + | * RADIUSdesk provides a solution for networking and does not sell hardware. | ||
| + | * The Aruba AP105 along with many other older and current hardware are supported by OpenWrt and can thus be used in your deployment. | ||
| + | * No vendor lock-in :-) | ||
| + | </ | ||
| + | |||
| + | |||
| + | ===== Why not 802.1x? | ||
| * WPA2 Enterprise are definitely more secure but there are two issues which usually turn people off from implementing it. | * WPA2 Enterprise are definitely more secure but there are two issues which usually turn people off from implementing it. | ||
| * Certificate management. The Certificate Authority (CA)'s certificate needs to be installed on the client connecting. | * Certificate management. The Certificate Authority (CA)'s certificate needs to be installed on the client connecting. | ||
| Line 56: | Line 73: | ||
| * Many IOT devices do not support WPA2-Enterprise | * Many IOT devices do not support WPA2-Enterprise | ||
| * Many printers and WiFi cameras do not support WPA2-Enterprise. | * Many printers and WiFi cameras do not support WPA2-Enterprise. | ||
| + | * RADIUSdesk along with MESHdesk and APdesk however also offer WPA2 Enterprise support should you wish to rather implement it instead of Private PSK. | ||