2020. február 17. 23:28 - Sanyi1978

WAP policy

Archer C6 routeren újraindítás után lehal a Radius szolgáltatás, ki és be kell kapcsolni!

WAP tiltások:

https://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-blackwhite-list-wireless-networks-in-vista-windows-7/

Wireless Radius Authentication with Windows Server 2016:

https://www.youtube.com/watch?v=dB8aH3Kysg0&t=600s

 

Delete blocked wlans

https://superuser.com/questions/1532641/removing-windows-wireless-policy-gpo-settings

We had configured a group policy blocking all except a single Wireless SSID. After Removing a Computer from the AD we were facing the issue that the Computer isn't able to connect to any of the other SSIDs.

Turns out the solution lies in wlan filters, which can be configured via netsh:

List configured filters:

C:\>netsh wlan show filters

Allow list on the system (group policy)
---------------------------------------
    <None>

Allow list on the system (user)
-------------------------------
    SSID: "mygreatssid", Type: Infrastructure

Block list on the system (group policy)
---------------------------------------
    <None>

Block list on the system (user)
-------------------------------
    SSID: "", Type: Infrastructure
    SSID: "", Type: Ad-hoc

(this is what it looked like for us)

To remove the "Allow"-Filter:

C:\>netsh wlan delete filter allow mygreatssid infrastructure

To remove specific "Block"-Filters (not needed in our case):

C:\>netsh wlan delete filter allow mygreatssid infrastructure

To remove the "Deny-All"-Filters (those with empty SSID):

C:\>netsh wlan delete filter denyall infrastructure
C:\>netsh wlan delete filter denyall adhoc

The full help for the delete filter command is available via:

C:\>netsh wlan delete filter help

To add a (new) filter, just replace delete with add

If you configured the policy to not allow users to view denied networks, you can set this via netsh too (default seems to be "hide"):

C:\>netsh wlan set blockednetworks <show|hide>
komment
süti beállítások módosítása