Confuse between user and guest client
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi, just wanna confirm of this two different client user and guest. I'm just worried because user client is connected in my wi-fi without authentication, unlike guest is voucher authenticated. Does this mean this user has a free access on my wi-fi or he hacked it?
Thanks, sorry for my bad english.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hugh22 wrote
Hi, if user is in users station this mean it is not yet authenticated via voucher am i right?
Yes, user and guest are transitional states. Every guest was seen as a user before authorization and will be seen as a user when authorization expires again if still associated to the WLAN.
So why he was able to stay in users within an hour and accumulate data upload/download almost hundred Mb's?
Because nowadays apps are programmed so badly that they send out requests to the Internet every second even if the user has not yet been authorized. If those apps would obey the OS status for the Internet connection, they wouldn't waste this much bandwidth. As if that wasn't enough, some apps even increase the frequency and number of requests when they do not receive the expected answer, but get a redirect to the Portal instead.
If you are worried about traffic from a WiFi device in user state, use tcpdump or wireshark to find out what requests this are and what the Captive Portal replies.
- Copy Link
- Report Inappropriate Content
@Hugh22, all guests are users as long as they did not authorize themself using a voucher code. Users who authorize successfully became guests.
If you don't allow user to use your network without authorization (for example, with Free Authentication Policy in the wireless settings), users do not have any access except to the Portal for entering a voucher code.
- Copy Link
- Report Inappropriate Content
Hi, if user is in users station this mean it is not yet authenticated via voucher am i right? So why he was able to stay in users within an hour and accumulate data upload/download almost hundred Mb's? Note i did not enabled my free authentication policy.
please see photos above for reference.
- Copy Link
- Report Inappropriate Content
Dear Hugh22
For Omada Controller 3.2.X or below, the clients are divided into two types: User and Guest.
Users are the clients connected to the EAP wireless network without the Portal Authentication. Guests are the clients who pass the Portal Authentication.
From your screenshot, the user client is connected to the SSID "Dwain's Voucher Wi-...", you could check whether this SSID is secured with WPA-PSK under Wireless Settings. If the Security of that SSID is None, you can Edit the SSID under Action column, change the Security Mode to WPA-PSK and then set up a Wireless Password for it.
Best Regards.
- Copy Link
- Report Inappropriate Content
Hi, I only use voucher authentication portal so i did not set a password on my dwain's voucher wi-fi ssid. I'm just wondering this is the only user can bypass my voucher authentication portal.
If i enable my wpa on my voucher type authentication it mean's my client will input password+voucher code when accessing my wi-fi?
best regards
- Copy Link
- Report Inappropriate Content
Hugh22 wrote
Hi, if user is in users station this mean it is not yet authenticated via voucher am i right?
Yes, user and guest are transitional states. Every guest was seen as a user before authorization and will be seen as a user when authorization expires again if still associated to the WLAN.
So why he was able to stay in users within an hour and accumulate data upload/download almost hundred Mb's?
Because nowadays apps are programmed so badly that they send out requests to the Internet every second even if the user has not yet been authorized. If those apps would obey the OS status for the Internet connection, they wouldn't waste this much bandwidth. As if that wasn't enough, some apps even increase the frequency and number of requests when they do not receive the expected answer, but get a redirect to the Portal instead.
If you are worried about traffic from a WiFi device in user state, use tcpdump or wireshark to find out what requests this are and what the Captive Portal replies.
- Copy Link
- Report Inappropriate Content
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 1558
Replies: 6
Voters 0
No one has voted for it yet.