Wireless Projectors -WPA/WPA2 and Radius Enabled
-
So looking to set up a few conference rooms with ceiling mounted wireless projectors. In our org we have WPA/WPA2 with RADIUS authentication set up on the back end for the corporate wireless.
I've seen a lot of projectors but none of the projectors list if they support Radius authentication. Has anyone seen this as an option on anything before?
In the worst case I suppose I could run an Ethernet drop to the ceiling location and connect via that, just looking at alternative options.
-
You don't say what's doing your RADIUS, but if it's a Windows server and for that SSID you have a policy that checks for domain membership, a SSL cert, etc, that's obviously not going to work with the projector.
You might need to make a new SSID with a different policy. Unfortunately the projector probably won't let you do anything more than put in a WPA2 password. On the RADIUS side, you could limit the connection by MAC, that's easily spoofed, so I guess it depends on how secure you want your network to be.
If security is a top priority, a cable might be the best way to do it.
-
@Mike-Davis Sounds like it might be the easier approach as well (running a cable), then just install the wireless projection software onto the user workstations.
RADIUS is checking for domain membership, either computer or user membership. Which is where I was hoping I could create a "projector" user and provide the credentials to connect to the corporate wifi.
Doesn't sound reasonable though?
-
@DustinB3403 said in Wireless Projectors -WPA/WPA2 and Radius Enabled:
@Mike-Davis Sounds like it might be the easier approach as well (running a cable), then just install the wireless projection software onto the user workstations.
RADIUS is checking for domain membership, either computer or user membership. Which is where I was hoping I could create a "projector" user and provide the credentials to connect to the corporate wifi.
Doesn't sound reasonable though?
It does to me. But then again I haven't used RADIUS WPA2 yet.
-
If his policy is working off user/computer group membership, the projector would need to be domain joined, or be able to handle logging in to a windows domain. I haven't heard of a projector that can do that...
-
So we're mostly in agreement here to treat any projector like a networked printer.
Hard wire it in, assign an IP address, and then push the software to the user base. Correct?
-
@Mike-Davis said in Wireless Projectors -WPA/WPA2 and Radius Enabled:
If his policy is working off user/computer group membership, the projector would need to be domain joined, or be able to handle logging in to a windows domain. I haven't heard of a projector that can do that...
Interesting - you can't manually add, say an Android/iPhone to a RADIUS enabled SSID (non cert based) connection?
If it's PC based, OK I see what you mean, but if it's user based, I would think (but more than willing to be wrong) that you just enter your domain creds and you're good. no?
-
@Dashrender said in Wireless Projectors -WPA/WPA2 and Radius Enabled:
If it's PC based, OK I see what you mean, but if it's user based, I would think (but more than willing to be wrong) that you just enter your domain creds and you're good. no?
This is correct, for non-domain joined laptops I can still connect to the corporate network by providing a username and password, and then I'd be on the corporate WLAN. Which is what I was hoping I could do with a projector (if one had such capability).
-
@DustinB3403 said in Wireless Projectors -WPA/WPA2 and Radius Enabled:
@Dashrender said in Wireless Projectors -WPA/WPA2 and Radius Enabled:
If it's PC based, OK I see what you mean, but if it's user based, I would think (but more than willing to be wrong) that you just enter your domain creds and you're good. no?
This is correct, for non-domain joined laptops I can still connect to the corporate network by providing a username and password, and then I'd be on the corporate WLAN. Which is what I was hoping I could do with a projector (if one had such capability).
Why wouldn't it? I suppose it's possible - Look for WPA/WPA2 Enterprise support. The Enterprise piece means RADIUS.
