Search…
Multi-PSK (MDU Shared Key)
TIP OpenWiFi 2.0
Multiple Pre Shared Key is a popular configuration option in Multi Dwelling Unit, dormitory or similar environment where it is costly to implement complex 802.1x security however that same level of per-client security is highly desired.
A SSID when configured for multi-psk can have multiple PSK/VID mappings. Each one of them can be bound to a specific MAC or be a wildcard.
1
"ssids": [
2
{
3
"name": "MDU Wi-Fi",
4
"wifi-bands": [
5
"5G",
6
"2G"
7
],
8
"bss-mode": "ap",
9
"encryption": {
10
"proto": "psk2",
11
"ieee80211w": "optional",
12
"key": "OpenWifi"
13
},
14
"multi-psk": [
15
{
16
"key": "akey",
17
"vlan-id": 100
18
},
19
{
20
"key": "bkey"
21
"vlan-id": 200
22
}
23
],
24
"roaming": {
25
"message-exchange": "ds",
26
"generate-psk": true
27
}
28
}
29
]
Copied!
Note: M-PSK passwords must be unique per vlan-id as the device will attempt to match security key to assigned virtual lan. In the above example, a password of OpenWifi will match the untagged interface of the SSID and unique password of "akey" will match client(s) to virtual lan 100.
Export as PDF
Copy link