User's Manual

Chapter 8 HiveManager Configuration Examples
118 Aerohive
Employees that belong to the "IT" and "Emp" profiles can use SSIDs "voip" and "corp". The SSID with which they
associate is based on how they are attempting to access the network. If they use a VoIP phone, then they associate
with the voip SSID because that is the SSID configured on their phones. If they use a wireless client on a computer,
then they associate with the corp SSID because that is the SSID configured on the wireless client on their computers.
In contrast, visitors can only associate with the guest SSID. The receptionist provides configuration details and the
preshared key for the guest SSID when visitors arrive. The guest SSID is the only wireless network choice available to
which visitors’ wireless clients can connect. When the captive web portal option is in use, HiveAPs assign visitors
who register successfully to the "Guests" profile and those who do not to the "Unregistered-Guests" profile.
voip SSID
1. Click Configuration > SSIDs > New > General, enter the following, and leave all other values at their default
settings:
• SSID: voip (You cannot include any spaces when defining the name of an SSID.)
•Description: SSID exclusively for VoIP phones
• Key Management: WPA2-PSK
• Encryption Method: TKIP
• Authentication Method: Open
•Key Type: ASCII Key
•Key Value: CmFwbo1121 (The key length can be from 8 to 63 characters.)
2. Click the Advanced tab.
3. In the Available MAC Filters list, click corpVoIPphones >, to move it to the Selected MAC Filters list, set the
Default Action as Deny, and then click Save.
By applying a MAC filter to the voip SSID, you restrict access to VoIP phones matching the specified OUI. The
corpVoIPphones MAC filter is defined in "Creating a MAC Filter" on page 103.
corp SSID
1. Click Configuration > SSIDs > New > General, enter the following, and leave all other values at their default
settings:
• SSID: corp
•Description: SSID for corporate employees
• Key Management: WPA2-EAP (802.1X)
• Encryption Method: CCMP (AES)
• Authentication Method: EAP (802.1X)
Note: You can also use Aerohive GuestManager to provide network access to wireless visitors. For information
about GuestManager, see the Aerohive GuestManager Getting Started Guide.