[175182] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: Marriott wifi blocking

daemon@ATHENA.MIT.EDU (Naslund, Steve)
Fri Oct 10 10:03:57 2014

X-Original-To: nanog@nanog.org
From: "Naslund, Steve" <SNaslund@medline.com>
To: "nanog@nanog.org" <nanog@nanog.org>
Date: Fri, 10 Oct 2014 14:03:48 +0000
In-Reply-To: <CAAG5dDBLAG5aYmfKLceJMyj6W7Vt=MFoL=gjkofiJxozKBa3FQ@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org

You have to do both preferrably.  You kill the wired port to get them off y=
our LAN, but if they are also on one of your SSIDs or run an unsecured one =
the AP can bug light your clients.  Given that there is an unauthorized int=
rusion on the wired side, I don't want him talking to my clients at all.

Steven Naslund
Chicago IL


On Oct 9, 2014, at 7:42 PM, "Chris Marget" <chris@marget.com<mailto:chris@m=
arget.com>> wrote:



On Thu, Oct 9, 2014 at 3:41 PM, Naslund, Steve <SNaslund@medline.com<mailto=
:SNaslund@medline.com>> wrote:

If you set up an AP and try to plug it into my wired infrastructure that's =
when the active stuff comes into effect because you have no right to add a =
device to my wired network.

Hi Steve,

You're not the first to express this sentiment. Do you mind if I ask why?

I mean, if you *know* there's an AP on your wired network, wouldn't it be m=
ore effective to kill the wired port?

Just curious...

/chris

home help back first fref pref prev next nref lref last post