Choose style:

Author Topic: Feature Request: Enterprise Security Support  (Read 6518 times)

0 Members and 1 Guest are viewing this topic.

Offline ptaylor

  • Backer
  • *
  • Posts: 6
  • Thanks: 0
  • Registered : 20/08/2014
    YearsYearsYearsYearsYearsYearsYearsYearsYearsYearsYears
Feature Request: Enterprise Security Support
« on: September 01, 2014, 09:28:02 am »
I'd like to request that you add Enterprise security support.  Generally, this mostly means pointing to a Radius server for authentication.  Most APs have this level of support baked in, but it is missing from the Almond+ at this point...

To take security to the next level, bake in the radius server itself, which is EASY since this is built on OpenWRT.  If you do that, along with making a nice web-gui to manage the username and passwords, that would give home users a way to easily have just about the most secure WiFi available to anyone. 

Why settle for single password security where all users on the WLAN share the same password (and therefore can see each others wireless transmissions), when each user can have their own username & password? 

This would be great for small business environments, where if one person leave the company, you just delete that user, instead of changing the WLAN password, and having to update it for every device on the network. 


LGNilsson

  • Guest
Re: Feature Request: Enterprise Security Support
« Reply #1 on: September 01, 2014, 10:13:56 am »
As the Almond+ isn't a business product, it's most likely not something we'll do.
That said, once we release the source code and SDK later this month, nothing is stopping someone to develop support for this or port over some standards OpenWRT RADIUS server to the Almond+.

Offline j8048188

  • Backer
  • *
  • Posts: 108
  • Thanks: 0
  • Registered : 12/08/2014
    YearsYearsYearsYearsYearsYearsYearsYearsYearsYearsYears
Re: Feature Request: Enterprise Security Support
« Reply #2 on: September 02, 2014, 12:49:25 am »
To take security to the next level, bake in the radius server itself, which is EASY since this is built on OpenWRT.  If you do that, along with making a nice web-gui to manage the username and passwords, that would give home users a way to easily have just about the most secure WiFi available to anyone. 

This would be great for small business environments, where if one person leave the company, you just delete that user, instead of changing the WLAN password, and having to update it for every device on the network.
I prefer to have a dedicated directory server as a radius server, so if someone were to leave the company, disabling their account in one place disables it in everything else. In a small business environment that does not want to use active directory or similar, you can set up a directory server on a Synology NAS and have that be a radius server as well.

 

Page created in 0.065 seconds with 23 queries.