Hacker News new | ask | show | jobs
by bscphil 897 days ago
> I wish more consumer devices supported multiple PSKs on the same SSID

Could you name any enterprise APs that do this, short of running your own custom AP software? As far as I know (would love to be corrected on this), Unifi APs can't do this, and they're at the very least "prosumer".
3 comments
soraminazuki 897 days ago
It seems that feature has been added in a recent update.

https://community.ui.com/releases/UniFi-Network-Application-...

link
andrewmunsell 897 days ago
I was very excited by this, but I found that some of my dumber IoT devices would refuse to connect to the network if it used PPSK. If I connect them to a separate SSID I use for IoT devices with a basic WPA2 PSK, they work totally fine, but I didn't dig too much so it could also be user error
link
wkat4242 896 days ago
I did not know that. Wow nice. Having so many SSIDs is drawing attention to all the equipment in my flat.

However I guess this feature is WPA3 only which means I'll still need the SSIDs for years to come :'(

link
neilalexander 896 days ago
The opposite in fact. It only works with WPA2 which means that you cannot combine it with Wi-Fi 6E or use it on any WPA3-enabled SSID.
link
wkat4242 896 days ago
Ah ok, strange that the feature is only becoming mainstream now (as in added by Unifi, and I never heard of it before). It's very good to hear actually because most of the devices I want to have on separate VLANs are quite dumb (IoT home automation stuff in particular) and they won't have WPA3 (and often even only have 2.4Ghz).
link
zamadatix 896 days ago
Aruba, Cisco, Extreme, Mist, Ruckus. The first I saw use it was Aerohive (now part of Extreme) and it took the enterprise market by storm about 5 years ago. For most enterprise deployments 802.1x (either username+password or certificate) makes more sense but once you get into BYOD land (say, senior living) not all devices support that (say an Xbox) but you still want to give a user a way to connect anywhere they go not just their main living area. Similar with the BYOD network on schools, give out the PSK to anyone staff and a year later the kids all have it and you have to change every PSK only device to a new PSK manually to fix it. Use multiple PSKs to give different groups of devices different PSKs, and even different staff different keys, and you not only contain the problem but can actually narrow down on the worst leak offenders as well.
link
amluto 897 days ago
Ruckus: https://docs.ruckuswireless.com/unleashed/200.3/c-ZeroITandD...
link